ChooseLet meaningful content carry the visual energy.
AvoidLet containers, borders and effects compete with the content.
A cultivated, quiet workspace where intelligence becomes tangible.
Explore the identityLiving Clarity is the brand idea. Soft Precision is how the interface behaves: calm structure, stable geometry and useful details.
Four choices that can be checked in any Zillion interface.
ChooseLet meaningful content carry the visual energy.
AvoidLet containers, borders and effects compete with the content.
ChooseKeep navigation and actions predictable while working content adapts.
AvoidRearrange the whole interface whenever a new result appears.
ChooseUse champagne to identify selection, progress or completion.
AvoidDecorate every surface with gold borders or glow.
ChooseShow source, freshness and available authority beside AI results.
AvoidPresent intelligence as unexplained or automatically authoritative.
Use the complete lockup for primary identity. Use the symbol alone only after Zillion is already established.
Keep one symbol width (1×) clear on every side.
The symbol and Zillion name stay fixed. A service name is a quiet descriptor, never a redesigned logo.
Naming model · not exported marksApproved source assetspublic/logo.svgpublic/logo-reverse.svg
Color, type, layout, surfaces, imagery, icons and motion.
Neutral structure. Restrained champagne signals. Independent colors for status.
--canvas#F7F7F5 / #141517--surface#FFFFFF / #202123--ink#222525 / #F2F2EC--accent#81602D / #DCB87AKeep neutral structure quiet so content, intelligence and status remain legible.
Use canvas and surface colors for structure, champagne for meaningful intelligence signals, and semantic colors for status.
Do not use color merely to make an empty area feel designed.
Sans-serif for headings, content and controls. Reserve editorial serif for short notes and the wordmark.
Clear tools make room for the work. 清晰的工具,让内容成为主角。
Typography is one bilingual system with different script-aware families. Application UI stays sans-serif; editorial serif is limited to short notes, and Cormorant is reserved for the Latin wordmark.
Size / weight / line height are explicit. Chinese uses the same hierarchy with roomier line boxes and no compressed tracking.
--type-title32px / 600 / 1.25 Latin · 1.35 ChineseOne concise page or module title.--type-section24px / 600 / 1.3 Latin · 1.4 ChineseStarts a distinct content group.--type-reading16px / 400 / 1.7Paragraphs, guidance and long-form content.--type-ui14px / 500 / 1.5Controls, card content and concise labels.--type-meta12px / 400 / 1.5Dates, state labels and supporting context.Use tabular numerals for aligned data. Do not reduce Chinese below the role size to imitate narrower Latin text.
Use familiar native glyphs by default. The CSS stack chooses the first installed family; test line wrapping on every supported platform.
| Platform | UI / reading | Editorial | Note |
|---|---|---|---|
| Apple | PingFang SC → Hiragino Sans GB | Songti SC → STSong | Primary for macOS and iOS. |
| Windows | Microsoft YaHei | SimSun | Avoid faux-light weights on older systems. |
| Android / Linux | Noto Sans CJK SC → Source Han Sans SC | Noto Serif CJK SC → Source Han Serif SC | Availability varies by image or distribution. |
| Deterministic web | Subsetted Noto Sans SC / Source Han Sans SC | Subsetted Noto Serif SC / Source Han Serif SC | Self-host only after payload and license review. |
Use language-aware line breaking. Avoid a line beginning with closing punctuation or ending with opening punctuation.
Use full-width Chinese punctuation in Chinese sentences. Keep paired quotation marks and book-title marks together where practical.
Use line-height around 1.7 for reading text and spacing between paragraphs. Do not add first-line indentation in compact product UI.
Keep Chinese tracking natural. Do not use Latin all-caps letter spacing or negative tracking to force a line fit.
Prefer weight, color or a short label. Avoid long italic Chinese passages and synthetic oblique glyphs.
Do not insert spaces around ordinary inline Latin words or Arabic numerals in Chinese. Add separation only when ambiguity or a product convention requires it.
Use tabular numerals in columns. Keep values with compact units such as 24px, 12GB and 14:30; localize user-facing measurement conventions.
Use Intl with zh-CN and the product’s explicit time zone/currency. Do not assemble dates or money with string concatenation.
Keep registered Latin product names unchanged. Translate the surrounding role or action, not the mark itself.
Choose Latin and CJK families with compatible visual size and weight; test baseline, punctuation and wrapping rather than matching CSS weight numbers alone.
Review the release notes before sharing. 分享前请检查版本说明,并确认中英文表达的信息一致。
Visionary 网站Ready / 已就绪
Check wrapping, controls and status messages on a narrow screen. 检查窄屏下的换行、控件与状态反馈。
The guide locally hosts its Latin families. Chinese is native-first because the available regular-only test font is not a complete production family and full upstream sans/serif variable files add roughly 42 MB before optimization.
Use OFL-licensed Noto CJK or Source Han CJK when a product needs deterministic rendering.
Create product-specific WOFF2 subsets from the approved upstream source; retain required Chinese, punctuation, Latin and numeral glyphs.
Preload only the primary above-the-fold face. Declare unicode ranges and font-display: swap; keep the native stack as fallback.
Ship the upstream license and provenance beside every vendored font. Never copy an unexplained build artifact from another repository.
Record compressed bytes, requested faces, layout shift and slow-network behavior before adoption.
Text ≥ 4.5:1. Large text and essential control boundaries ≥ 3:1. Check both themes.
--ink / --canvas—--muted / --surface—--accent / --canvas—--field-line / --surface—Field focus: a neutral 2px edge; other controls keep a visible keyboard outline. Status always includes a label. Glass needs a separate check over its actual background.
Quiet solid surfaces. Soft card edges; clear boundaries for inputs.
A quiet card on the canvas. Use the same surface in forms, lists and modules.
Fields keep a clear edge. Focus strengthens it without an outer glow.
4px grid · 8px fields · 24px cards · 16px gaps.
48121624324864Soft geometry is a shared invariant. Use a small radius scale, then show ownership with space before adding another boundary.
No hard outer corners
✓ Related content stays open
× Avoid boxes inside boxes
Simple stroke icons support labels; they do not replace unfamiliar meaning.
Choose overlay contrast from the actual crop. Page theme never decides image text color.
Bodega Bay✓ Correct · protected foreground
Bodega Bay× Wrong · theme-derived inkGive services dependable proportions while leaving their task architecture open.
Use shared frames, gutters, reading widths and module limits before choosing a service-specific composition.
Do not prescribe the same dashboard, sidebar or column count for every service.
Create hierarchy through spacing, tonal difference and a small number of meaningful edges.
Use a surface when content needs ownership, interaction, state or separation from its surroundings.
Do not card every paragraph or nest containers to decorate hierarchy.
| Use | Timing | Properties |
|---|---|---|
| Feedback / overlay exit | 160ms | --duration-feedback |
| Navigation drawer | 200ms | --duration-navigation |
| Content replacement | 240ms | --duration-replace |
| Font preview | 360ms | --duration-font |
| Panel entrance | 280ms | opacity + translateY(10px → 0) |
| Theme | 700ms | One page crossfade |
Finish exactly at the resting state. Never animate font size, weight or container height for feedback. Reduced motion switches instantly. Rapid input must settle on the latest choice.
700ms fade. Follows the system until you choose a theme.
160ms feedback · 280ms entrance.
Fade in and settle.
Your workspace is up to date.
Use the Visionary transition for meaningful page changes. Fast routes complete silently; delayed routes reveal a branded, accessible progress state.
Suppress flashes on fast routes
Veil, mark and wordmark arrive
Keep visible progress legible
Release after the destination is ready
Reduced motion keeps the same information and uses 140 / 180 / 180ms without decorative looping.
Make state, relationship and presence easier to understand without delaying work.
Use motion for feedback, entrance, spatial continuity, assembly progress and dismissal.
Do not animate static decoration or make AI feel intelligent through glow and drift.
Reusable controls and content boundaries, defined by purpose and state.
The shared system defines the repeatable parts. Services decide what those parts say, contain and accomplish.
| Family | Shared decision | Service decision |
|---|---|---|
| Actions & inputs | Anatomy, state, feedback and accessible interaction. | Fields, validation rules and consequences. |
| Navigation & shell | Brand position, orientation, selected state and reflow. | Destinations, hierarchy and product utilities. |
| Content & data | Surface, list, table, status and progress language. | Domain records, density and comparison model. |
| Feedback & overlays | Placement, urgency, focus, dismissal and recovery. | Trigger, message and product consequence. |
| AI trust controls | Source, freshness, permission, proposal and receipt. | Tools, authority and domain-specific action. |
Make a component reproducible from purpose and behavior, not appearance alone.
Use a shared component when the purpose, anatomy, variants and state model repeat across services.
Do not promote a product-specific composition into the shared library after one use.
One primary action per group.
A button owns one continuous hit area. Use a filled, outlined or quiet variant; never attach a side rail, tab edge or selection stripe.
One primitive across default, filled, invalid, disabled and read-only states. Tab through available fields to compare focus.
Shape and words carry state so color never works alone.
Use a whole-surface change, stronger label or icon, and explicit state when needed. Never attach an edge bar to show selection.
Use native controls and one visible label. Help, error and availability stay attached to the field.
| Control | Required states | Narrow-screen behavior |
|---|---|---|
| Search / combobox | Empty, results, no results, loading, error. | Results align to the field and stay onscreen. |
| Text / textarea | Default, filled, invalid, disabled, read-only. | Labels and messages wrap above actions. |
| Date / time | Empty, selected, unavailable, invalid. | Picker may become a focused sheet. |
| Upload | Idle, drag, uploading, complete, failed. | Files become a readable vertical list. |
Make entering, reviewing and correcting information predictable across services.
Use the shared field structure for text, search, selection, date, upload and other direct input.
Do not invent a new field frame for each data type or separate help and error text from the control they explain.
Choose a view to change the module below. Keep the label visible.
Summary view selected.
44px minimum height · 16px field text · 8px corners. Arrow keys browse; Enter selects; Escape closes. Searchable comboboxes and action menus need separate patterns.
A module is a reusable information boundary, not a fixed card template. Its purpose, state, source and available action must remain legible as its interior changes.
One clear question or job gives the module its title and hierarchy.
The interior may be prose, data, media, a list or an editable tool.
State, source and freshness appear at the depth needed to judge the result.
Controls stay close to the object they affect and preserve direct user authority.
Stateful work needs a module. Explanatory prose usually needs spacing, not another card.
Edit a draft, then apply it. The table changes only after a successful save.
| Item | Status | Updated |
|---|---|---|
| Color | Ready | 9 Sept 2026 |
| Typography | Ready | 9 Sept 2026 |
| Surfaces | Draft | 9 Sept 2026 |
Use the smallest structure that supports scanning, comparison and a clear next action.
Match interruption to urgency. Preserve context, name what happened and keep one recovery path.
| Pattern | Use when | Must provide |
|---|---|---|
| Inline notice | The message belongs to nearby content. | Meaning, affected area and next action. |
| Toast | A completed low-risk action needs confirmation. | Short status; no essential recovery only here. |
| Tooltip | A familiar control needs brief supporting detail. | Keyboard and pointer access; nonessential content. |
| Menu / popover | Several contextual actions share one origin. | Clear trigger, focus order, Escape and dismissal. |
| Dialog / drawer | A focused decision or temporary workspace is required. | Title, consequence, focus containment and return. |
Keep the card in place. Explain what happened and offer one next step.
Your weekly overview is ready to explore.
Module ready
Local simulation · retry returns sample content.
480px maximum width · 20px padding · 24px corners. One clear decision.
Focus stays inside. Escape or Cancel closes and returns focus. Open: 280ms. Close: 160ms. Reduced motion: instant.
Compose tasks, decisions, collections, states and responsive layouts.
Choose hierarchy from the task instead of defaulting to equal cards.
A page may contain several regions, but only one owns the current task.
The primary work stays wider, brighter and earlier than supporting context.
Make the current purpose visible before supporting information competes for attention.
Labels, help, validation and the resulting action form one readable sequence.
Reduce uncertainty in forms, reviews and consequential actions.
Narrative objects need cards. Repeated attributes need aligned rows.
Source review
Access policy
Choose list, grid or table according to what a person must scan and compare.
Loading, empty, error and complete are designed states, not leftover whitespace.
Name the work in progress
Explain what belongs here
Name the failure and recovery
Show the result and next step
Make loading, absence, failure, staleness and completion part of the designed experience.
Give identity one focused task, one contextual image and the same soft geometry as the product beyond it.

No product navigation competes with sign-in.
Frame, fields and actions use role-based rounded corners.
Desktop uses a split view; mobile keeps a short contextual image above the form.
Show focus, invalid, loading and recovery without moving the form.
Images are windows into a place, object or body of knowledge. Their own luminance and composition determine overlay treatment.

Choose text and control contrast against the actual crop; do not derive it from the global theme.
Preserve the subject and a stable text-safe region at every breakpoint.
Use a restrained local scrim only when the image cannot provide reliable contrast on its own.
Prefer real context, material detail and useful evidence over generic atmospheric decoration.
Every interface supports Desktop, Tablet and Mobile. Available CSS width—not physical resolution, device detection or orientation—selects the mode. Reading, forms and modules keep their own limits.
68ch400px1600px360px480px| Viewport | Gutter | Behavior |
|---|---|---|
| ≥ 1200px | 32px | Desktop · 1920×1080 primary; persistent navigation; centered 1600px shell; bounded reading width at 4K. |
| 681–1199px | 24px | Two columns when space permits; collapse optional context. |
| ≤ 680px | 20px + safe area | Mobile · one task-first column; drawer navigation; overlays own scrolling and preserve page position. |
Cards: minimum 240px. Long tables scroll inside their own region. Check 320, 390, 768, 1024, 1920×1080 and 3840×2160 CSS viewports, plus 200% zoom.
Every Zillion interface supports Desktop, Tablet and Mobile. Available CSS width chooses the mode; capability and content decide the final composition.
≥ 1200pxReview typography and spacing before sharing.
Check 1920×1080 first, then 3840×2160 and 200% zoom. The composition grows; the reading line does not.
681–1199pxReview typography and spacing before sharing.
Resize or enter split view. Content reflows from available width and preserves task, state and order.
≤ 680pxReview typography and spacing before sharing.
Check narrow and tall screens, landscape and the on-screen keyboard. The page must never scroll behind an overlay.
A stable workspace that assembles useful interfaces around the current intention.
Keep orientation and authority stable while the agent assembles the smallest useful module.
Ready to type. A compact conversation over the page. Or an integrated conversation alongside your work.
Local demonstration · no model connection or saved data
Try editing these notes, drafting a message, and switching layouts. Both areas keep their place.
48 charactersReview the summary before sharing with the team.
Source: example document
Try editing these notes, drafting a message, and switching layouts. Both areas keep their place.
Review the summary before sharing with the team.
Location, authority and primary controls stay put while useful modules change inside the canvas.
Let intelligence change useful content without destabilizing the workspace around it.
Purpose, content, context and action are visible in the module itself.
Three sources agree; one newer source needs review.
4 sources · newest 12 min agoMake generated interfaces judgeable without requiring the conversation transcript.
The object keeps its identity while status, available control and certainty change.
Review scope
Ready to run
3 of 4 sources
Receipt available
Conversation establishes intent. Persistent work moves into a module that can be inspected and edited directly.
4 sources · 1 needs attention
Use each medium for what it does best without turning the product into chat with attachments.
Reason, source, freshness, permission and receipt are visible where they affect a decision.
This will replace one stale citation and preserve the previous version.
Keep completed work, identify the failed part and offer the narrowest useful recovery.
The existing summary is preserved. Retry the unavailable source only.
Please try again.
Keep partial intelligence useful without overstating success or collapsing the whole workspace.
The same module keeps its identity and trust information while placement and density change.
Non-negotiable laws that keep every Zillion service recognizably part of one brand.
These laws override local styling convenience. Service specifications may add detail, but may not silently contradict them.
Visual specimens live in Identity. Open these only when an edge case needs exact language.
Give every Zillion service a recognizable family resemblance without forcing identical products or layouts.
Use the current Zillion symbol and Cormorant wordmark as orientation, not as decoration competing with the product.
Each law is a visible judgment. Open the exact language only for an edge case.
One meaningful accent
Accent used as decoration
Reserve the accent for intelligence, meaningful selection, significant value and intentional completion.
Bodega BayForeground follows the crop
Bodega BayPage theme chooses image ink
Keep overlay content readable regardless of application theme.
Both languages are composed
Chinese treated as overflow
Make English and Chinese equal design inputs rather than translation layers.
State has shape and words
Color carries state alone
Make WCAG 2.2 AA the shared baseline rather than a final audit layer.
Hierarchy survives reflow
Desktop is merely squeezed
Support Desktop, Tablet and Mobile without losing task, order, state or control.
Source stays with the result
Trust is detached below
Make AI-generated work understandable and judgeable.
Known and inferred are distinct
Guess presented as fact
Protect meaning when design, language or generated output changes.
Space before another container
Cards nested for decoration
Protect Living Clarity from fashionable effects that replace hierarchy or meaning.
A final shared-language check before a service-specific design moves forward.
A reviewer should be able to judge hierarchy, state, trust and action directly from the rendered screen.
A design is ready for service-specific refinement only when every relevant question has a visible answer.
Does it remain recognizably Zillion without the logo?
Is there one clear protagonist and one unambiguous primary action?
Are color, typography, imagery and motion used according to their semantic roles?
Are loading, empty, error, stale, disabled and completion states defined where relevant?
Do English and Chinese carry equal meaning and visual authority?
Does task, input and state survive narrow layouts and 200% zoom?
Are keyboard, focus, contrast, touch and reduced-motion requirements met?
Does every AI-created module expose enough reason, provenance, freshness, uncertainty and authority?
Are consequential actions explicit and followed by an accurate receipt?
Can every deviation from a shared rule name its requirement and owner?
The shared language sets invariants. A service defines the product decisions needed to make those invariants useful in its domain.