Disable owner-only launcher actions until attested

README.md

@@ -60,6 +60,7 @@ Policy behavior in launcher shell:
 1. Membership is required for all member-channel polling flows.
 2. `onramp_attested` identity assurance is required for owner support-ticket and governance install-token actions.
 3. Assurance state is displayed independently from membership state in the top summary cards.
+4. Owner-only buttons are UI-disabled until both membership is active and assurance is `onramp_attested`.
 
 Run locally:
 

app/app.js

@@ -83,6 +83,23 @@ function setSummary(id, value) {
   el.textContent = value;
 }
 
+function setButtonDisabled(id, disabled) {
+  const el = $(id);
+  if (!el) return;
+  el.disabled = Boolean(disabled);
+}
+
+function refreshActionLocks(statusPayload) {
+  const effective = statusPayload && typeof statusPayload === "object" ? statusPayload : state.lastStatus;
+  const membershipActive = String(effective?.status || "").toLowerCase() === "active";
+  const attested = isOnrampAttested(effective?.identity_assurance_level);
+  const ownerActionReady = membershipActive && attested;
+
+  setButtonDisabled("btnSupportTicket", !ownerActionReady);
+  setButtonDisabled("btnInstallToken", !ownerActionReady);
+  setButtonDisabled("btnQuickInstallStatus", !membershipActive);
+}
+
 function refreshOverview(statusPayload) {
   const currentWallet = wallet();
   setSummary("summaryWallet", currentWallet || "not connected");
@@ -93,6 +110,7 @@ function refreshOverview(statusPayload) {
     setSummary("summaryAssurance", assurance);
     setSummary("summaryAdminPolicy", isOnrampAttested(assurance) ? "ready" : "blocked");
     setSummary("summaryLastSync", nowISO());
+    refreshActionLocks(statusPayload);
     return;
   }
   const designation = $("designationCode")?.value?.trim() || "-";
@@ -100,6 +118,7 @@ function refreshOverview(statusPayload) {
   const assurance = assuranceDisplay(state.lastStatus?.identity_assurance_level);
   setSummary("summaryAssurance", assurance);
   setSummary("summaryAdminPolicy", isOnrampAttested(assurance) ? "ready" : "blocked");
+  refreshActionLocks();
 }
 
 function setFlowStatus(message) {

app/style.css

@@ -153,6 +153,12 @@ button:active {
   transform: translateY(1px);
 }
 
+button:disabled {
+  cursor: not-allowed;
+  filter: grayscale(0.5);
+  opacity: 0.55;
+}
+
 .event-list {
   display: grid;
   gap: 8px;