website: the reviewer's findings - consent error, reply time, sitemap, voice, clip

A page-by-page review of the live site (1440px and 390px) found six defects and
two editorial questions. The operator answered three questions; the answers and
the evidence are in REPORT-review-2026-10-12.md.

Fixed:
- The contact form showed its consent error before any submit, on both pages:
  #privacyError sits outside any .form-group and the hide rule was scoped to
  .form-group. Scoped to the page. Checked: load (none) -> submit unticked
  (shown) -> tick (gone), with no message sent.
- The consent checkbox is the site's own control now: 24px box, keyboard focus
  ring, and a second <label for="privacy"> at 44x44 round it for touch.
- The contact page promised a reply within 24 hours while /feltetelek 1.1 §4
  promises no reply time. Now 1-2 days usually, and no promise during the test.
- sitemap.xml was missing /szolgaltatasok and /en/services: 18 -> 20 URLs.
- The pre-shell mobile-menu script still ran on 20 pages and logged
  "[mobile-menu] Missing elements" on every one. Removed.
- The sidebar's tester button was btn-outline while the hero's was btn-primary.
- The home page's "Mit tud a doboz ma?" was three bare links; each card now
  carries 2-3 of the services page's own items, word for word.
- A plain Facebook link in the footer of all 22 pages. No script, widget or
  pixel: the only external hosts any page refers to are still felhom.eu and
  stats.felhom.eu.

Voice (operator ruling: "I" everywhere a person speaks): contact, tester and FAQ
pages in both languages, and the home and services pages that repeat the same
promises. An inclusive "we" (you and I, talking) stays plural, and the legal
texts are untouched. Each FAQ answer exists twice (JSON-LD + visible) and gate 18
holds them equal - it caught the five answers whose markup split the sentence.

Hero clip rebuilt: Immich first, so the poster is a wall of real photographs;
the Jellyfin scene starts after the demo's library wall (eleven pieces of poster
art whose licence cannot be quoted from a first-party source); 1.3s of blank
screen cut from the OnlyOffice scene. The film that plays, Caminandes 3:
Llamigos, is CC BY per Blender's own video platform ("licence": {"id": 1,
"label": "Attribution"}) - NOT public domain as website/CHANGELOG.md said
yesterday. That sentence is corrected in place and the film is credited under
the hero caption.

New gate 24: sitemap.xml lists every public page once, with its twin's hreflang
pair, and lists nothing else. Decoy: site/sitemap-missing-page, the exact shape
the reviewer found by hand.

site.css ?v=30; hero clip and poster ?v=2.

STATUS.md

@@ -14,6 +14,28 @@
 - **The Cloudflare token recipe is in the install runbook** (S31): two permissions, one zone, nothing else.
 - **What remains of the sheet, in order:** the four DooPlex changes (I ask you in chat before each), one hub release (you present for the deploy), one box release, Glance behind the family gate, the capability map, the notification-settings design, and last the six hub readers.
 
+## Monday 2026-10-12 (review round): a page-by-page review, and its findings fixed
+
+- **The contact form showed its red warning before anyone pressed anything** — on both contact
+  pages, from the moment the page opened. Fixed; the warning now waits for a send attempt.
+- **The contact page promised an answer within 24 hours** while the test terms promise no reply
+  time at all. It now says 1–2 days usually, and that no reply time is promised during the test.
+- **You speak in the first person now, everywhere a person speaks** (your answer): the contact,
+  tester and FAQ pages, and the home and services pages that repeat their promises, in both
+  languages. The legal texts are untouched, and „we” stays where it means you and me together.
+- **The home page's „Mit tud a doboz ma?” has its content back**: three cards, each with 2–3 of the
+  services page's own points.
+- **The two services pages were missing from the sitemap** — Google was never told they exist.
+  Added, and a new check now refuses any push that leaves a public page out of it.
+- **The laptop clip was rebuilt**: your photos are the first scene, so the still a visitor sees
+  before it loads is a wall of real photographs. The film inside it is credited (Creative Commons,
+  attribution required — yesterday's note calling it public domain was wrong), and the demo
+  library's poster wall is cut.
+- Also: a dead script that logged a warning on every inner page is gone, the tester button in the
+  menu is the proper blue, and the footer has a plain Facebook link (no script, nothing loaded).
+- **Still waiting on someone else:** the server still sends everything uncompressed (R-931). That is
+  a change in the manifests repository, not here.
+
 ## Monday 2026-10-12 (night): the laptop on the home page is playing
 
 - **Six apps, filmed by you, now run on the laptop's screen** on <https://felhom.eu> and the English