CLOSED SOURCE IS A STATE
The project registry needed a fourth state. live/dev/rnd describe activity, not access — a live thing can still be sealed. So locked became a parallel flag: diagonal hairline hatch over the card, a ghost ⊘ watermark, a dashed ⊘ CLOSED SRC badge.
design rule
Access states shouldn't be prose. A visitor scanning the ledger should read "sealed" from the card's skin before reading a word. The hatch does that work — it's the same pattern as locked doors in the sim the whole site borrows from.
Demos get their own language: OPEN DEMO instead of OPEN →, no SOURCE button, copy that says exactly what's running (a static snapshot, not the live backend). Showing a thing you won't release is fine — pretending it's a release isn't.