From c7a8a938b3a1c7c91473e16b3e4b5dd7cf899526 Mon Sep 17 00:00:00 2001
From: Russell Ballestrini <russell.ballestrini@gmail.com>
Date: Sun, 31 May 2026 16:57:19 -0400
Subject: [PATCH] zebra-spaces: load unmario.com in the timeline column until
 v0.3 lands

---
 web/zebra-spaces.html | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/web/zebra-spaces.html b/web/zebra-spaces.html
index d1bc431..233ebd3 100644
--- a/web/zebra-spaces.html
+++ b/web/zebra-spaces.html
@@ -29,11 +29,12 @@
   }
   .timeline {
     border-right: 1px solid #ddd; padding-right: 2rem; min-height: 60vh;
-    min-width: 0;
+    min-width: 0; display: flex; flex-direction: column;
   }
   .controls { min-width: 0; }
-  .timeline-placeholder {
-    font-size: 0.8rem; color: #999; padding: 1rem 0; line-height: 1.6;
+  .timeline-frame {
+    flex: 1; min-height: 80vh; width: 100%;
+    border: 1px solid #ddd; background: #fff;
   }
   @media (max-width: 800px) {
     body { padding: 1.25rem; }
@@ -157,7 +158,15 @@
 <div class="page">
 
 <main class="timeline">
-  <p class="timeline-placeholder">timeline — coming soon</p>
+  <!-- placeholder content for the timeline column until v0.3 lands. unmario.com is
+       framed unsandboxed so its own JS can run; it's same-org, public-domain. If
+       it refuses framing (CSP/X-Frame-Options) the iframe just stays blank — no
+       impact on the controls column. -->
+  <iframe class="timeline-frame"
+          src="https://unmario.com/"
+          title="unmario"
+          loading="lazy"
+          referrerpolicy="no-referrer"></iframe>
 </main>
 
 <aside class="controls">
@@ -1368,8 +1377,8 @@ logLine('', 'ready — pick a handle, type a rendezvous code, enter the space');
 
 <footer style="margin:2.2rem auto 0;font-size:0.65rem;color:#999;line-height:1.7;word-break:break-all;font-family:monospace">
   <span id="pi-seal" style="color:#777;cursor:default;user-select:none" title="">page integrity</span> &nbsp;·&nbsp; built <span class="stamp-date">2026-05-31</span><br>
-  md5 <span class="stamp-md5">f46e2dfdf2c37cae463f3514d8e693fd</span><br>
-  sha256 <span class="stamp-sha">48d4ea81bbd2337161e755e84ae85a3c79f51de2cbc4d5ecba2af3a324d13e14</span><br>
+  md5 <span class="stamp-md5">59cff62721b306e556354c7b5f7128c3</span><br>
+  sha256 <span class="stamp-sha">0554de3a7a0dafec83a4933327ea3b9a6c243f0a33976d7d60221c67aa126b47</span><br>
   <span style="color:#bbb">hashes are of this page with these two fields zeroed — to verify, blank them and re-hash</span><br>
   <span style="color:#bbb">one self-contained file — <strong>save a copy</strong> and verify against these hashes; point at your own servers with ?signal= and ?turncred=, or <a href="host-your-own.html" style="color:#999">host your own community</a></span>
 </footer>