Design system addendum

Single-select; tapping the active chip deselects (lifestyle is optional). Selection = ink fill, check glyph. Filters the feed — copy must always say so. Label with the noun ("Vegan"), never "No meat" — lifestyle is identity, not exclusion. Chip is a real button with aria-pressed. Selection is signaled by fill + check glyph, not color alone. Min target 44pt.

Multi-select. Uses accent (terracotta), never ink — allergies are a different tier from taste/lifestyle and must look like it. Always followed by the kitchen-confirmation reminder. Promise precisely: "excluded from your feed and search; saved dishes stay visible with warnings." Never "removed everywhere." Check glyph + weight change accompany the color shift. Announce as "Nuts allergy, on".

Marks a saved/retained dish that conflicts with the user's allergy settings. Top-left so it never collides with sort/trending tags (bottom-left). Conflicting dishes are kept, never auto-deleted — accompanied by a list-level caption explaining that. Name the allergen ("! Nuts"), not a generic warning. "!" glyph carries the signal without color. Image alt includes "contains nuts".

Shown when a dish reached via save, collection, or shared link conflicts with an allergy. Sits above the trust card — safety outranks persuasion. Three beats, always: what it contains → why you're seeing it anyway → confirm with the kitchen. role="alert". Border + glyph + text; never color-only. Treat allergen data as prototype/best-effort — say so in Profile.

The anti-star-rating. "How we know" expands inline: repeat orders through Morsel handoffs within 90 days, never self-reported — plus a prototype-data note. Below a minimum sample the number is withheld entirely (cold start), never extrapolated. Status: proposed model, not operational fact — no order pipeline exists in the prototype; the repeat-order signal depends on unbuilt carrier integration, attribution, and consent plumbing, all open feasibility questions. Sample size always visible. Methodology in one sentence. Abstention copy admits the limit plainly. Ring graphic is decorative (aria-hidden); the stat reads as text. Disclosure is a real button, expanded state announced.

Status must disable the actions it invalidates: closed kitchens and sold-out dishes show a disabled primary that names the reason ("Opens 8 AM", "Sold out") instead of a dead "Order". Always pair the negative with the recovery: when it reopens / usually back tomorrow. Disabled buttons keep ≥4.5:1 text contrast on their label text; reason is in the label itself, not a tooltip.

The order sheet never dead-ends: no carriers → pickup stays; a failed app-open shows an inline error with retry and keeps every alternative visible. Blame the situation, not the user. Always end on the option that can't fail (pickup). Failure banner is role="alert"; retry is a text button ≥44pt tall in the row.

Search results carry name + price on the photo; the browse feed stays photo-only. Rationale: searchers are comparing candidates, browsers are grazing. Same glass component as feed chrome. Name · price. Nothing else — distance and % stay in detail. Label is real text over a dark glass fill (≥4.5:1 on any photo).

Mirrors the real layout (hero block + staggered grid) so content doesn't jump on arrival. Shimmer only — no spinners, no logo pulses. Container has aria-label="Loading dishes near you"; shimmer stops under prefers-reduced-motion.

Quiet sunken banners under the hero — informational, not blocking. Location-off offers both recoveries (system permission or manual entry). Offline warns about staleness rather than hiding content. role="status", not alert — these don't interrupt. Actions are discrete buttons.

Names every active constraint, tier by tier, with a separate action per tier. "Clear filters" must never clear an allergy — dietary edits route to the safety screen deliberately. State the cause, list the limits, offer one action per tier. Footnote that allergies are never cleared by shortcuts. Constraint chips are a list with a label; allergy chips carry the "!" glyph.

All type classes scale through a single --ts multiplier (100–140% exposed in the prototype's Tweaks). Photo tiles keep their aspect ratio; text containers grow and wrap — chips wrap to new lines, buttons grow vertically, nothing truncates below 140%. Maps to iOS Dynamic Type up to XXL. Glass labels and warn chips scale with --ts too; hit targets never shrink below 44pt.

Every state carries a glyph or border treatment alongside its color: selection = check, warning = "!", cold start = dashed. Active feed tab = underline + weight. This is the floor for any new component. Verified against deuteranopia simulation; terracotta-on-cream also passes 4.5:1 for text ≥13px.