fix: render buyer-facing image evidence

CHANGELOG.d/2.12.6-provider-error-boundary.md

@@ -1,4 +1,5 @@
 ## Fixed
 
 - Keep contextual-orchestrator, OIDC, RankWeave, TEPP, and durable-ingestion diagnostics behind stable product error boundaries while retaining the original exception for server-side chaining.
+- Route browser transport and tenant-settings failures through the same boundary so 5xx provider details never reach buyer-facing error text.
 - Keep browser 5xx and transport failures behind the same stable client error boundary.

docs/adr/0123-provider-error-boundary.md

@@ -20,9 +20,9 @@ operator logging. Provider response parsers use generic validation errors and
 never interpolate the raw response into an exception message.
 
 The browser API client is a second trust boundary: HTTP 5xx details are
-discarded, and transport failures become a stable status-0 client error
-before any UI handler can render them. Client-error details remain available
-only for actionable validation or authorization responses.
+discarded, and transport failures become a stable status-0 client error before
+any UI handler can render them. Client-error details remain available only for
+actionable validation or authorization responses.
 
 Missing or malformed evidence remains unavailable; it is never converted into
 a fabricated negative result. Existing input-validation errors outside a

frontend/src/PostBody.tsx

@@ -22,10 +22,20 @@ function parsePipeDelimitedTable(text: string): string[][] | null {
 function renderImageText(text: string) {
   const rows = parsePipeDelimitedTable(text);
   if (!rows) return <p>{text}</p>;
+  const [header, ...bodyRows] = rows;
   return (
     <table className="post-body-table post-image-text-table">
+      <thead>
+        <tr>
+          {header.map((cell, cellIndex) => (
+            <th key={`post-image-text-header-${cellIndex}`} scope="col">
+              {cell}
+            </th>
+          ))}
+        </tr>
+      </thead>
       <tbody>
-        {rows.map((row, rowIndex) => (
+        {bodyRows.map((row, rowIndex) => (
           <tr key={`post-image-text-row-${rowIndex}`}>
             {row.map((cell, cellIndex) => (
               <td key={`post-image-text-cell-${rowIndex}-${cellIndex}`}>{cell}</td>
@@ -72,7 +82,14 @@ function renderImageEvidence(
           <ol>
             {imageContent.regions.map((region) => (
               <li key={region.region_index}>
-                <span>{region.caption || region.extracted_text || t("Unknown")}</span>
+                {region.caption ? <p>{region.caption}</p> : null}
+                {region.extracted_text ? (
+                  <div className="post-image-region-text">
+                    {renderImageText(region.extracted_text)}
+                  </div>
+                ) : region.caption ? null : (
+                  t("Unknown")
+                )}
                 {region.tags.length ? (
                   <small>
                     {t("Image tags")}: {region.tags.join(", ")}