From 144f4d6783b10edbd18327cc0ac5aea32bf78533 Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Mon, 7 Sep 2026 05:08:49 +0000
Subject: [PATCH 01/13] =?UTF-8?q?=F0=9F=8E=A8=20UI:=20=ED=8C=8C=EC=9D=BC?=
 =?UTF-8?q?=20=EC=9E=85=EB=A0=A5=20=EB=B2=84=ED=8A=BC=EC=9D=98=20=EC=A0=91?=
 =?UTF-8?q?=EA=B7=BC=EC=84=B1=20=EB=B0=8F=20=EC=8A=A4=ED=83=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B0=9C=EC=84=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

네이티브 `<input type="file">` 요소는 브라우저마다 스타일이 다르고 일관되게 꾸미기 어렵습니다. 또한 기존의 `aria-label`은 'label-in-name' 원칙을 시각적으로 따르지 않습니다.

이를 개선하기 위해, 네이티브 입력 필드는 `hidden` 속성으로 숨기고, 기존 `.primary-action` 클래스를 사용하는 네이티브 `<button>`을 추가하여 클릭 이벤트를 프록시하도록 수정했습니다. 이로써 접근성을 유지하면서 기존 UI 컴포넌트와 어울리는 시각적 UX를 제공합니다. UI 계약 테스트(`test_dashboard_core.py`)도 함께 업데이트되었습니다.
---
 .jules/palette.md            | 4 ++++
 scanner/dashboard/index.html | 5 ++++-
 tests/test_dashboard_core.py | 2 +-
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/.jules/palette.md b/.jules/palette.md
index ea004e2d..269653ff 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,3 +81,7 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
+
+## 2026-09-07 - Native File Input Styling Proxy
+**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
+**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.
diff --git a/scanner/dashboard/index.html b/scanner/dashboard/index.html
index 132bc31b..078a72bd 100644
--- a/scanner/dashboard/index.html
+++ b/scanner/dashboard/index.html
@@ -93,7 +93,8 @@
   <span class="logo"></span><span class="brand">AppGuardrail</span>
   <span class="spacer"></span>
   <span class="meta" id="src">no findings loaded</span>
-  <input type="file" id="file" accept="application/json,.json" aria-label="Upload findings file" style="margin-left:12px">
+  <input type="file" id="file" accept="application/json,.json" hidden>
+  <button type="button" id="header-browse-findings" class="primary-action" style="margin-left:12px">Upload findings file</button>
 </header>
 <p id="findings-summary" class="sr-only" role="status" aria-live="polite" aria-atomic="true"></p>
 <main id="app" tabindex="-1"></main>
@@ -324,7 +325,9 @@ <h1>Dashboard</h1>
   render();
 }
 
+const headerBrowseFindings = document.getElementById('header-browse-findings');
 const fileInput = document.getElementById('file');
+headerBrowseFindings.addEventListener('click', () => fileInput.click());
 fileInput.addEventListener('change', () => {
   const selectedFile = fileInput.files?.[0];
   fileInput.value = '';
diff --git a/tests/test_dashboard_core.py b/tests/test_dashboard_core.py
index 75a5809f..be738615 100644
--- a/tests/test_dashboard_core.py
+++ b/tests/test_dashboard_core.py
@@ -77,7 +77,7 @@ def test_dashboard_rows_are_keyboard_accessible():
     assert 'tabindex="0" role="button"' in html
     assert 'title="View details for finding"' in html
     assert "tbody tr:focus-visible" in html
-    assert "aria-label=\"Upload findings file\"" in html
+    assert ">Upload findings file</button>" in html
     assert "aria-label=\"Search findings\"" in html
     assert "aria-label=\"Filter by severity\"" in html
     assert "tr.addEventListener('keydown'" in html

From ea91cc561bc75b577d8c3035715107b9c39e4e95 Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Mon, 7 Sep 2026 08:55:36 +0000
Subject: [PATCH 02/13] =?UTF-8?q?=F0=9F=8E=A8=20UI:=20=ED=8C=8C=EC=9D=BC?=
 =?UTF-8?q?=20=EC=9E=85=EB=A0=A5=20=EB=B2=84=ED=8A=BC=EC=9D=98=20=EC=A0=91?=
 =?UTF-8?q?=EA=B7=BC=EC=84=B1=20=EB=B0=8F=20=EC=8A=A4=ED=83=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B0=9C=EC=84=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

네이티브 `<input type="file">` 요소는 브라우저마다 스타일이 다르고 일관되게 꾸미기 어렵습니다. 또한 기존의 `aria-label`은 'label-in-name' 원칙을 시각적으로 따르지 않습니다.

이를 개선하기 위해, 네이티브 입력 필드는 `hidden` 속성으로 숨기고, 기존 `.primary-action` 클래스를 사용하는 네이티브 `<button>`을 추가하여 클릭 이벤트를 프록시하도록 수정했습니다. 이로써 접근성을 유지하면서 기존 UI 컴포넌트와 어울리는 시각적 UX를 제공합니다. UI 계약 테스트(`test_dashboard_core.py`)도 함께 업데이트되었습니다.

From 05e3f1feb8665836d61773b83467ed21342273b1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 7 Sep 2026 18:15:59 +0900
Subject: [PATCH 03/13] docs(ui): restore protected palette authority

---
 .jules/palette.md | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.jules/palette.md b/.jules/palette.md
index 269653ff..7c076005 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -16,7 +16,7 @@
 
 ## 2024-10-24 - Interactive Table Rows Keyboard Accessibility
 **Learning:** Interactive table rows (e.g. `tr.scan` with `onclick` handlers) are not inherently accessible to keyboard users. Screen readers may ignore them, and they cannot be focused or activated via keyboard.
-**Action:** When making table rows interactive, always add `tabindex="0"`, `role="button"`, an appropriate `aria-label`, and a `keydown` event listener to handle `Enter` and `Space` key presses.
+**Action:** Always add `tabindex="0"`, `role="button"`, an appropriate `aria-label`, and a `keydown` event listener to handle `Enter` and `Space` key presses.
 
 ## 2026-07-18 - 표준화된 에러 메시지와 동적 복수형 처리
 **Learning:** CLI 도구에서 에러 메시지의 일관성(`❌ Error:`)과 실천 가능한 조언(`💡 Hint:`)의 명확한 구분은 사용자의 문제 해결 경험을 크게 향상시킨다. 또한 하드코딩된 복수형 접미사(예: `components`)는 터미널 출력의 품질을 떨어뜨린다.
@@ -81,7 +81,3 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
-
-## 2026-09-07 - Native File Input Styling Proxy
-**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
-**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.

From ee9b40d391117d52ff8495a8a9c482ddf3eb91c6 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 7 Sep 2026 18:16:32 +0900
Subject: [PATCH 04/13] repair(ui): adopt exact protected palette doctrine

---
 .jules/palette.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.jules/palette.md b/.jules/palette.md
index 7c076005..ea004e2d 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -16,7 +16,7 @@
 
 ## 2024-10-24 - Interactive Table Rows Keyboard Accessibility
 **Learning:** Interactive table rows (e.g. `tr.scan` with `onclick` handlers) are not inherently accessible to keyboard users. Screen readers may ignore them, and they cannot be focused or activated via keyboard.
-**Action:** Always add `tabindex="0"`, `role="button"`, an appropriate `aria-label`, and a `keydown` event listener to handle `Enter` and `Space` key presses.
+**Action:** When making table rows interactive, always add `tabindex="0"`, `role="button"`, an appropriate `aria-label`, and a `keydown` event listener to handle `Enter` and `Space` key presses.
 
 ## 2026-07-18 - 표준화된 에러 메시지와 동적 복수형 처리
 **Learning:** CLI 도구에서 에러 메시지의 일관성(`❌ Error:`)과 실천 가능한 조언(`💡 Hint:`)의 명확한 구분은 사용자의 문제 해결 경험을 크게 향상시킨다. 또한 하드코딩된 복수형 접미사(예: `components`)는 터미널 출력의 품질을 떨어뜨린다.

From 786b31c877bd2895f143ce42a54d03f22b97733d Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Mon, 7 Sep 2026 12:57:49 +0000
Subject: [PATCH 05/13] =?UTF-8?q?=F0=9F=8E=A8=20UI:=20=ED=8C=8C=EC=9D=BC?=
 =?UTF-8?q?=20=EC=9E=85=EB=A0=A5=20=EB=B2=84=ED=8A=BC=EC=9D=98=20=EC=A0=91?=
 =?UTF-8?q?=EA=B7=BC=EC=84=B1=20=EB=B0=8F=20=EC=8A=A4=ED=83=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B0=9C=EC=84=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

네이티브 `<input type="file">` 요소는 브라우저마다 스타일이 다르고 일관되게 꾸미기 어렵습니다. 또한 기존의 `aria-label`은 'label-in-name' 원칙을 시각적으로 따르지 않습니다.

이를 개선하기 위해, 네이티브 입력 필드는 `hidden` 속성으로 숨기고, 기존 `.primary-action` 클래스를 사용하는 네이티브 `<button>`을 추가하여 클릭 이벤트를 프록시하도록 수정했습니다. 이로써 접근성을 유지하면서 기존 UI 컴포넌트와 어울리는 시각적 UX를 제공합니다. UI 계약 테스트(`test_dashboard_core.py`)도 함께 업데이트되었습니다.
---
 .jules/palette.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.jules/palette.md b/.jules/palette.md
index ea004e2d..269653ff 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,3 +81,7 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
+
+## 2026-09-07 - Native File Input Styling Proxy
+**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
+**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.

From 93c4f6dd36cf5f1d998759e63a24af01f7246bfc Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Mon, 7 Sep 2026 14:47:07 +0000
Subject: [PATCH 06/13] =?UTF-8?q?=F0=9F=8E=A8=20UI:=20=ED=8C=8C=EC=9D=BC?=
 =?UTF-8?q?=20=EC=9E=85=EB=A0=A5=20=EB=B2=84=ED=8A=BC=EC=9D=98=20=EC=A0=91?=
 =?UTF-8?q?=EA=B7=BC=EC=84=B1=20=EB=B0=8F=20=EC=8A=A4=ED=83=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B0=9C=EC=84=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

네이티브 `<input type="file">` 요소는 브라우저마다 스타일이 다르고 일관되게 꾸미기 어렵습니다. 또한 기존의 `aria-label`은 'label-in-name' 원칙을 시각적으로 따르지 않습니다.

이를 개선하기 위해, 네이티브 입력 필드는 `hidden` 속성으로 숨기고, 기존 `.primary-action` 클래스를 사용하는 네이티브 `<button>`을 추가하여 클릭 이벤트를 프록시하도록 수정했습니다. 이로써 접근성을 유지하면서 기존 UI 컴포넌트와 어울리는 시각적 UX를 제공합니다. UI 계약 테스트(`test_dashboard_core.py`)도 함께 업데이트되었습니다.

From 5f938580fd32b15fc99508b26cbc47839f577a04 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 8 Sep 2026 11:59:47 +0900
Subject: [PATCH 07/13] fix(pr): remove reintroduced duplicate file-input
 doctrine

---
 .jules/palette.md | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/.jules/palette.md b/.jules/palette.md
index 269653ff..ea004e2d 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,7 +81,3 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
-
-## 2026-09-07 - Native File Input Styling Proxy
-**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
-**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.

From 2bfdee556fff9b64fe31610358b7e140670c24ab Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 11 Sep 2026 15:04:18 +0900
Subject: [PATCH 08/13] docs(dashboard): record file-picker proxy change

---
 CHANGELOG.d/1131-dashboard-upload-proxy.md | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 CHANGELOG.d/1131-dashboard-upload-proxy.md

diff --git a/CHANGELOG.d/1131-dashboard-upload-proxy.md b/CHANGELOG.d/1131-dashboard-upload-proxy.md
new file mode 100644
index 00000000..46d896fe
--- /dev/null
+++ b/CHANGELOG.d/1131-dashboard-upload-proxy.md
@@ -0,0 +1,2 @@
+### Changed
+- (Dashboard) 헤더의 findings 파일 선택 컨트롤을 기존 `primary-action` 버튼으로 표시하고, 실제 파일 선택은 숨긴 네이티브 파일 입력이 계속 담당하도록 정리했습니다.

From 852aea1bc1e35d423bbf51158616668b96b7fa27 Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Fri, 11 Sep 2026 07:16:39 +0000
Subject: [PATCH 09/13] =?UTF-8?q?=F0=9F=8E=A8=20UI:=20=ED=8C=8C=EC=9D=BC?=
 =?UTF-8?q?=20=EC=9E=85=EB=A0=A5=20=EB=B2=84=ED=8A=BC=EC=9D=98=20=EC=A0=91?=
 =?UTF-8?q?=EA=B7=BC=EC=84=B1=20=EB=B0=8F=20=EC=8A=A4=ED=83=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B0=9C=EC=84=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

네이티브 `<input type="file">` 요소는 브라우저마다 스타일이 다르고 일관되게 꾸미기 어렵습니다. 또한 기존의 `aria-label`은 'label-in-name' 원칙을 시각적으로 따르지 않습니다.

이를 개선하기 위해, 네이티브 입력 필드는 `hidden` 속성으로 숨기고, 기존 `.primary-action` 클래스를 사용하는 네이티브 `<button>`을 추가하여 클릭 이벤트를 프록시하도록 수정했습니다. 이로써 접근성을 유지하면서 기존 UI 컴포넌트와 어울리는 시각적 UX를 제공합니다. UI 계약 테스트(`test_dashboard_core.py`)도 함께 업데이트되었습니다.
---
 .jules/palette.md                          | 4 ++++
 CHANGELOG.d/1131-dashboard-upload-proxy.md | 2 --
 2 files changed, 4 insertions(+), 2 deletions(-)
 delete mode 100644 CHANGELOG.d/1131-dashboard-upload-proxy.md

diff --git a/.jules/palette.md b/.jules/palette.md
index ea004e2d..269653ff 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,3 +81,7 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
+
+## 2026-09-07 - Native File Input Styling Proxy
+**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
+**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.
diff --git a/CHANGELOG.d/1131-dashboard-upload-proxy.md b/CHANGELOG.d/1131-dashboard-upload-proxy.md
deleted file mode 100644
index 46d896fe..00000000
--- a/CHANGELOG.d/1131-dashboard-upload-proxy.md
+++ /dev/null
@@ -1,2 +0,0 @@
-### Changed
-- (Dashboard) 헤더의 findings 파일 선택 컨트롤을 기존 `primary-action` 버튼으로 표시하고, 실제 파일 선택은 숨긴 네이티브 파일 입력이 계속 담당하도록 정리했습니다.

From 5cdbb7ab55ce92ba72c411890a69c73cc9bc1503 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 11 Sep 2026 18:10:36 +0900
Subject: [PATCH 10/13] repair(ui): restore canonical palette authority

---
 .jules/palette.md | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/.jules/palette.md b/.jules/palette.md
index 269653ff..ea004e2d 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,7 +81,3 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
-
-## 2026-09-07 - Native File Input Styling Proxy
-**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
-**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.

From 1d3d84548aaf1dec6551985f371d9d1911edbc4e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 11 Sep 2026 18:10:45 +0900
Subject: [PATCH 11/13] docs(ui): restore dashboard upload release note

---
 CHANGELOG.d/1131-dashboard-upload-proxy.md | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 CHANGELOG.d/1131-dashboard-upload-proxy.md

diff --git a/CHANGELOG.d/1131-dashboard-upload-proxy.md b/CHANGELOG.d/1131-dashboard-upload-proxy.md
new file mode 100644
index 00000000..46d896fe
--- /dev/null
+++ b/CHANGELOG.d/1131-dashboard-upload-proxy.md
@@ -0,0 +1,2 @@
+### Changed
+- (Dashboard) 헤더의 findings 파일 선택 컨트롤을 기존 `primary-action` 버튼으로 표시하고, 실제 파일 선택은 숨긴 네이티브 파일 입력이 계속 담당하도록 정리했습니다.

From a1333e3c9783d5d2f83ce15804db078ca5bd6602 Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Fri, 11 Sep 2026 11:39:44 +0000
Subject: [PATCH 12/13] =?UTF-8?q?=F0=9F=8E=A8=20UI:=20=ED=8C=8C=EC=9D=BC?=
 =?UTF-8?q?=20=EC=9E=85=EB=A0=A5=20=EB=B2=84=ED=8A=BC=EC=9D=98=20=EC=A0=91?=
 =?UTF-8?q?=EA=B7=BC=EC=84=B1=20=EB=B0=8F=20=EC=8A=A4=ED=83=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B0=9C=EC=84=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

네이티브 `<input type="file">` 요소는 브라우저마다 스타일이 다르고 일관되게 꾸미기 어렵습니다. 또한 기존의 `aria-label`은 'label-in-name' 원칙을 시각적으로 따르지 않습니다.

이를 개선하기 위해, 네이티브 입력 필드는 `hidden` 속성으로 숨기고, 기존 `.primary-action` 클래스를 사용하는 네이티브 `<button>`을 추가하여 클릭 이벤트를 프록시하도록 수정했습니다. 이로써 접근성을 유지하면서 기존 UI 컴포넌트와 어울리는 시각적 UX를 제공합니다. UI 계약 테스트(`test_dashboard_core.py`)도 함께 업데이트되었습니다.
---
 .jules/palette.md                          | 4 ++++
 CHANGELOG.d/1131-dashboard-upload-proxy.md | 2 --
 2 files changed, 4 insertions(+), 2 deletions(-)
 delete mode 100644 CHANGELOG.d/1131-dashboard-upload-proxy.md

diff --git a/.jules/palette.md b/.jules/palette.md
index ea004e2d..269653ff 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,3 +81,7 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
+
+## 2026-09-07 - Native File Input Styling Proxy
+**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
+**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.
diff --git a/CHANGELOG.d/1131-dashboard-upload-proxy.md b/CHANGELOG.d/1131-dashboard-upload-proxy.md
deleted file mode 100644
index 46d896fe..00000000
--- a/CHANGELOG.d/1131-dashboard-upload-proxy.md
+++ /dev/null
@@ -1,2 +0,0 @@
-### Changed
-- (Dashboard) 헤더의 findings 파일 선택 컨트롤을 기존 `primary-action` 버튼으로 표시하고, 실제 파일 선택은 숨긴 네이티브 파일 입력이 계속 담당하도록 정리했습니다.

From 324f07b3385ef3e3684e58e77892549cce469232 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 12 Sep 2026 18:28:29 +0900
Subject: [PATCH 13/13] repair(ui): restore canonical picker contract evidence

---
 .jules/palette.md                             |  4 ----
 CHANGELOG.d/1131-dashboard-upload-proxy.md    |  2 ++
 tests/test_dashboard_upload_proxy_contract.py | 20 +++++++++++++++++++
 3 files changed, 22 insertions(+), 4 deletions(-)
 create mode 100644 CHANGELOG.d/1131-dashboard-upload-proxy.md
 create mode 100644 tests/test_dashboard_upload_proxy_contract.py

diff --git a/.jules/palette.md b/.jules/palette.md
index 269653ff..ea004e2d 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,7 +81,3 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
-
-## 2026-09-07 - Native File Input Styling Proxy
-**Learning:** The native `<input type="file">` element is difficult to style consistently across browsers, and it relies on an `aria-label` that doesn't follow 'label-in-name' principles visually.
-**Action:** Hide the native input using the `hidden` attribute and proxy its functionality via a styled native `<button>` with an explicit `addEventListener`. This provides a predictable visual UX while preserving keyboard accessibility and matching existing UI components.
diff --git a/CHANGELOG.d/1131-dashboard-upload-proxy.md b/CHANGELOG.d/1131-dashboard-upload-proxy.md
new file mode 100644
index 00000000..46d896fe
--- /dev/null
+++ b/CHANGELOG.d/1131-dashboard-upload-proxy.md
@@ -0,0 +1,2 @@
+### Changed
+- (Dashboard) 헤더의 findings 파일 선택 컨트롤을 기존 `primary-action` 버튼으로 표시하고, 실제 파일 선택은 숨긴 네이티브 파일 입력이 계속 담당하도록 정리했습니다.
diff --git a/tests/test_dashboard_upload_proxy_contract.py b/tests/test_dashboard_upload_proxy_contract.py
new file mode 100644
index 00000000..06220881
--- /dev/null
+++ b/tests/test_dashboard_upload_proxy_contract.py
@@ -0,0 +1,20 @@
+"""Regression contract for the dashboard header findings-file picker proxy."""
+
+from scanner.cli.appguardrail import dashboard_index_path
+
+
+def test_header_upload_proxy_preserves_native_file_input_contract():
+    """Visible button activation delegates to the hidden native picker boundary."""
+    html = dashboard_index_path().read_text(encoding="utf-8")
+
+    assert '<input type="file" id="file" accept="application/json,.json" hidden>' in html
+    assert (
+        '<button type="button" id="header-browse-findings" class="primary-action" '
+        'style="margin-left:12px">Upload findings file</button>' in html
+    )
+    assert "const headerBrowseFindings = document.getElementById('header-browse-findings');" in html
+    assert "const fileInput = document.getElementById('file');" in html
+    assert "headerBrowseFindings.addEventListener('click', () => fileInput.click());" in html
+    assert "const selectedFile = fileInput.files?.[0];" in html
+    assert "fileInput.value = '';" in html
+    assert "if(!selectedFile) return;" in html