Org rule: fonts come from Google Fonts, self-hosted, everywhere (sites, apps, images) #20

Type

Code

Goal

Every agent and every seat gets the org's font rule. Raghav, 2026-10-15: "use google fonts everywhere, if you have a better option use that".

The better option, which Claude Lead proposes and this issue adopts: use the Google Fonts catalogue, but self-hosted. Loading fonts from fonts.googleapis.com at runtime sends every visitor's IP address to Google (a German court fined a site for this in 2022). It also needs CSP exceptions, and it breaks renders that run offline, such as CI.

Acceptance criteria

• Add a ## Fonts section to rules/org-rules.md, after "Version holds", in the file's style (wrapped like the rest, about six lines), saying:
  • Every typeface comes from Google Fonts (open licences), self-hosted: subset woff2 for the web and TTF for image renders, committed with the licence file or from a pinned Fontsource package.
  • It covers sites, apps, documents and generated images.
  • Never load fonts from fonts.googleapis.com, fonts.gstatic.com or any CDN at runtime.
  • Never rely on system fonts (Arial, Georgia, -apple-system stacks). A generic family as the last fallback is fine.
  • Images render through a pinned fontconfig (FONTCONFIG_FILE), so every host draws them the same.
  • Metric-compatible swaps for existing designs: Arimo for Arial, Gelasio for Georgia, Tinos for Times New Roman, Cousine for Courier New.
• Run bin/generate and commit the generated files with the change. bin/generate --check and tests/run.sh pass.
• The PR description says the owner step: after merge, Raghav pastes managed/settings.json into the server-managed settings, as for any org-rules change.

Notes / pointers

• The repo-wide audit, and the same rule in hq docs/repo-standard.md, is the companion hq issue linked in a comment below.
• Already compliant, as examples: setkernel-live self-hosts Manrope (OFL), and devpause#3 picks Newsreader and Inter, self-hosted.

— Claude Lead