diff --git a/.changeset/fix-stories-deploy.md b/.changeset/fix-stories-deploy.md
new file mode 100644
index 0000000000..0931605280
--- /dev/null
+++ b/.changeset/fix-stories-deploy.md
@@ -0,0 +1,4 @@
+---
+---
+
+Fix /stories routing and restore nav changes lost during PR #1600 merge conflict resolution.
diff --git a/server/public/design-system.css b/server/public/design-system.css
index 355ece6ba6..b8bbbf00cf 100644
--- a/server/public/design-system.css
+++ b/server/public/design-system.css
@@ -556,6 +556,34 @@ body {
   border-color: white;
 }
 
+/* Filter Pills - horizontal scrollable tag/filter bar */
+.ds-pill {
+  display: inline-flex;
+  align-items: center;
+  padding: var(--space-2) var(--space-5);
+  border-radius: var(--radius-full);
+  font-size: var(--text-xs);
+  font-weight: var(--font-semibold);
+  text-transform: uppercase;
+  letter-spacing: var(--tracking-wide);
+  color: var(--color-text-secondary);
+  background: var(--color-gray-100);
+  border: 1px solid var(--color-gray-300);
+  cursor: pointer;
+  white-space: nowrap;
+  transition: var(--transition-all);
+  text-decoration: none;
+}
+.ds-pill:hover {
+  color: var(--color-text-heading);
+  background: var(--color-gray-200);
+}
+.ds-pill.active {
+  color: var(--color-warning-700);
+  background: var(--color-warning-100);
+  border-color: var(--color-warning-500);
+}
+
 /* -----------------------------------------------------------------------------
    9.2 Cards
    ----------------------------------------------------------------------------- */
diff --git a/server/public/nav.js b/server/public/nav.js
index 74ab5bcfe1..a4cf2f68bf 100644
--- a/server/public/nav.js
+++ b/server/public/nav.js
@@ -103,6 +103,7 @@
           </div>
           <div class="navbar__account">
             <button class="navbar__account-btn" id="accountMenuBtn">
+              <span class="navbar__account-avatar" id="accountAvatar">${escapeHtml((user.firstName || '')[0] || user.email[0]).toUpperCase()}</span>
               <span class="navbar__account-name">${escapeHtml(displayName)}</span>
               <svg width="12" height="12" viewBox="0 0 12 12" fill="currentColor">
                 <path d="M2.5 4.5L6 8L9.5 4.5" stroke="currentColor" stroke-width="1.5" fill="none"/>
@@ -126,7 +127,8 @@
       }
     }
 
-    const isCertificationActive = currentPath.startsWith('/certification') || currentPath.startsWith('/study-guide');
+    const isStoriesActive = currentPath.startsWith('/stories') || currentPath.startsWith('/perspectives') || currentPath.startsWith('/latest');
+    const isCertificationActive = currentPath.startsWith('/academy') || currentPath.startsWith('/certification') || currentPath.startsWith('/study-guide');
     const isCommunityActive = currentPath.startsWith('/community') || currentPath.startsWith('/events') || currentPath.startsWith('/committees') || currentPath.startsWith('/meetings');
     const isRegistryActive = currentPath === '/registry'
       || currentPath.startsWith('/registry/')
@@ -149,8 +151,20 @@
     // AAO logo is white, needs invert on light background
     const logoNeedsInvert = true;
 
+    // Founding member banner — show for anonymous users only, dismissible
+    const foundingBanner = !user ? `
+      <div class="founding-banner" id="foundingBanner">
+        <div class="founding-banner__inner">
+          <span class="founding-banner__text"><strong>Founding member window closes March 31.</strong> Lock in permanent rates and shape the standards from day one.</span>
+          <a href="${membershipUrl}" class="founding-banner__cta">Learn more &rarr;</a>
+          <button class="founding-banner__close" id="foundingBannerClose" aria-label="Dismiss">&times;</button>
+        </div>
+      </div>
+    ` : '';
+
     return `
-      <nav class="navbar">
+      ${foundingBanner}
+      <nav class="navbar" ${!user ? 'style="top: var(--founding-banner-height, 0px)"' : ''}>
         <div class="navbar__inner">
           <div class="navbar__items">
             <a class="navbar__brand" href="${homeUrl}">
@@ -159,16 +173,17 @@
               </div>
             </a>
             <div class="navbar__links-desktop">
+              <a href="/stories" class="navbar__link ${isStoriesActive ? 'active' : ''}">Stories</a>
               <a href="/certification" class="navbar__link ${isCertificationActive ? 'active' : ''}">Academy</a>
               <a href="/chat" class="navbar__link ${currentPath === '/chat' ? 'active' : ''}">Ask Addie</a>
               <a href="${communityUrl}" class="navbar__link ${isCommunityActive ? 'active' : ''}">Community</a>
-              <a href="/registry" class="navbar__link ${isRegistryActive ? 'active' : ''}">Registry</a>
               <a href="${ctaUrl}" class="navbar__btn--cta">${ctaText}</a>
             </div>
           </div>
           <div class="navbar__items navbar__items--right">
             <div class="navbar__links-desktop">
               <div class="navbar__divider"></div>
+              <a href="/registry" class="navbar__link ${isRegistryActive ? 'active' : ''}">Registry</a>
               <a href="${docsUrl}" class="navbar__link">AdCP Docs</a>
             </div>
             ${authSection}
@@ -181,11 +196,12 @@
         </div>
         <div class="navbar__backdrop" id="mobileBackdrop" aria-hidden="true" role="presentation"></div>
         <div class="navbar__mobile-menu" id="mobileMenu" role="navigation" aria-label="Mobile navigation">
+          <a href="/stories" class="navbar__link ${isStoriesActive ? 'active' : ''}">Stories</a>
           <a href="/certification" class="navbar__link ${isCertificationActive ? 'active' : ''}">Academy</a>
           <a href="/chat" class="navbar__link ${currentPath === '/chat' ? 'active' : ''}">Ask Addie</a>
           <a href="${communityUrl}" class="navbar__link ${isCommunityActive ? 'active' : ''}">Community</a>
-          <a href="/registry" class="navbar__link ${isRegistryActive ? 'active' : ''}">Registry</a>
           <a href="${ctaUrl}" class="navbar__link ${currentPath === '/membership' || currentPath === '/dashboard' ? 'active' : ''}">${ctaText}</a>
+          <a href="/registry" class="navbar__link ${isRegistryActive ? 'active' : ''}">Registry</a>
           <a href="${docsUrl}" class="navbar__link">AdCP Docs</a>
         </div>
       </nav>
@@ -195,6 +211,59 @@
   // Navigation CSS
   const navCSS = `
     <style>
+      /* Founding member banner */
+      :root {
+        --founding-banner-height: 0px;
+      }
+      .founding-banner {
+        position: fixed;
+        top: 0;
+        left: 0;
+        right: 0;
+        z-index: 1001;
+        background: linear-gradient(90deg, var(--color-primary-700, #1a36b4) 0%, var(--color-primary-600, #2d4eb4) 100%);
+        color: #fff;
+        font-size: 0.8125rem;
+        line-height: 1.4;
+      }
+      .founding-banner__inner {
+        max-width: 1140px;
+        margin: 0 auto;
+        padding: 0.5rem 1rem;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        gap: 0.75rem;
+      }
+      .founding-banner__text {
+        text-align: center;
+      }
+      .founding-banner__text strong {
+        font-weight: 700;
+      }
+      .founding-banner__cta {
+        color: #fff;
+        text-decoration: none;
+        font-weight: 600;
+        white-space: nowrap;
+        opacity: 0.9;
+      }
+      .founding-banner__cta:hover { opacity: 1; text-decoration: underline; }
+      .founding-banner__close {
+        background: none;
+        border: none;
+        color: rgba(255,255,255,0.6);
+        font-size: 1.25rem;
+        cursor: pointer;
+        padding: 0 0.25rem;
+        line-height: 1;
+      }
+      .founding-banner__close:hover { color: #fff; }
+      .founding-banner--hidden { display: none; }
+      @media (max-width: 600px) {
+        .founding-banner__inner { flex-wrap: wrap; font-size: 0.75rem; padding: 0.375rem 0.75rem; }
+      }
+
       /* Add padding to body to prevent navbar overlap */
       body {
         padding-top: 60px;
@@ -434,14 +503,35 @@
         position: relative;
       }
 
+      .navbar__account-avatar {
+        width: 28px;
+        height: 28px;
+        border-radius: 50%;
+        background: linear-gradient(135deg, var(--color-warning-700, #b45309), var(--color-warning-500, #d97706));
+        color: #fff;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        font-size: 0.75rem;
+        font-weight: 600;
+        flex-shrink: 0;
+        overflow: hidden;
+      }
+      .navbar__account-avatar img {
+        width: 100%;
+        height: 100%;
+        object-fit: cover;
+        border-radius: 50%;
+      }
+
       .navbar__account-btn {
         display: flex;
         align-items: center;
         gap: 0.5rem;
-        padding: 0.5rem 0.75rem;
+        padding: 0.35rem 0.75rem 0.35rem 0.35rem;
         background: transparent;
         border: 1px solid #e5e7eb;
-        border-radius: 0.375rem;
+        border-radius: 9999px;
         cursor: pointer;
         font-size: 0.875rem;
         font-weight: 500;
@@ -874,8 +964,7 @@
               <ul class="aao-footer__list">
                 <li><a href="${eventsUrl}">Events</a></li>
                 <li><a href="${committeesUrl}">Committees</a></li>
-                <li><a href="${latestBaseUrl}/perspectives">Perspectives</a></li>
-                <li><a href="${latestBaseUrl}/announcements">Announcements</a></li>
+                <li><a href="/stories">Stories</a></li>
               </ul>
             </div>
           </div>
@@ -1254,6 +1343,89 @@
 
     // Setup dropdown toggle
     setupDropdown();
+
+    // Load avatar image asynchronously
+    loadNavAvatar();
+
+    // Founding member banner — adjust body padding and handle dismiss
+    setupFoundingBanner();
+  }
+
+  function setupFoundingBanner() {
+    const banner = document.getElementById('foundingBanner');
+    if (!banner) return;
+
+    // Hide after deadline or if previously dismissed
+    if (new Date() > new Date('2026-04-01T00:00:00Z') || localStorage.getItem('founding-banner-dismissed')) {
+      banner.remove();
+      return;
+    }
+
+    // Measure and set CSS variable for body padding offset
+    function updateBannerHeight() {
+      const h = banner.offsetHeight;
+      document.documentElement.style.setProperty('--founding-banner-height', h + 'px');
+      document.body.style.paddingTop = (60 + h) + 'px';
+    }
+    updateBannerHeight();
+    window.addEventListener('resize', updateBannerHeight);
+
+    // Dismiss
+    const closeBtn = document.getElementById('foundingBannerClose');
+    if (closeBtn) {
+      closeBtn.addEventListener('click', function(e) {
+        e.stopPropagation();
+        banner.classList.add('founding-banner--hidden');
+        document.body.style.paddingTop = '60px';
+        document.querySelector('.navbar').style.top = '0';
+        document.documentElement.style.setProperty('--founding-banner-height', '0px');
+        localStorage.setItem('founding-banner-dismissed', '1');
+      });
+    }
+  }
+
+  function isSafeImageUrl(url) {
+    if (!url) return false;
+    try {
+      var parsed = new URL(url, window.location.origin);
+      return parsed.protocol === 'https:';
+    } catch (e) {
+      return false;
+    }
+  }
+
+  function setAvatarImage(el, url) {
+    var img = document.createElement('img');
+    img.src = url;
+    img.alt = '';
+    el.textContent = '';
+    el.appendChild(img);
+  }
+
+  function loadNavAvatar() {
+    var el = document.getElementById('accountAvatar');
+    if (!el) return;
+
+    // Try portrait first, fall back to community profile avatar
+    fetch(apiBaseUrl + '/api/me/portrait', { credentials: 'include' })
+      .then(function(res) { return res.ok ? res.json() : null; })
+      .then(function(data) {
+        if (data && data.portrait && isSafeImageUrl(data.portrait.image_url)) {
+          setAvatarImage(el, data.portrait.image_url);
+          return;
+        }
+        // No portrait — try community profile avatar
+        return fetch(apiBaseUrl + '/api/me/community/hub', { credentials: 'include' })
+          .then(function(res) { return res.ok ? res.json() : null; })
+          .then(function(hubData) {
+            if (!hubData) return;
+            var url = hubData.profile && hubData.profile.avatar_url;
+            if (isSafeImageUrl(url)) {
+              setAvatarImage(el, url);
+            }
+          });
+      })
+      .catch(function(err) { console.debug('Avatar load failed:', err); });
   }
 
   // Run when DOM is ready
diff --git a/server/public/stories/index.html b/server/public/stories/index.html
index 91c16d3989..3c22c3d784 100644
--- a/server/public/stories/index.html
+++ b/server/public/stories/index.html
@@ -34,18 +34,6 @@
       margin: 0 auto var(--space-4);
       line-height: var(--leading-relaxed);
     }
-    .addie-inline {
-      display: inline-flex;
-      align-items: center;
-      gap: var(--space-2);
-      font-size: var(--text-sm);
-      color: var(--color-text-muted);
-      text-decoration: none;
-      transition: color 0.15s ease;
-    }
-    .addie-inline:hover { color: var(--color-primary-600); }
-    .addie-inline svg { width: 16px; height: 16px; }
-
     /* Page-level topic pills */
     .topic-bar {
       max-width: var(--container-content);
@@ -54,37 +42,13 @@
     }
     .pill-tabs {
       display: flex;
-      gap: var(--space-2);
+      gap: var(--space-3);
       overflow-x: auto;
       -webkit-overflow-scrolling: touch;
       scrollbar-width: none;
       justify-content: center;
     }
     .pill-tabs::-webkit-scrollbar { display: none; }
-    .pill-tab {
-      padding: var(--space-1-5) var(--space-4);
-      border-radius: var(--radius-full);
-      font-size: var(--text-xs);
-      font-weight: var(--font-semibold);
-      text-transform: uppercase;
-      letter-spacing: var(--tracking-wide);
-      color: var(--color-text-muted);
-      background: var(--color-gray-100);
-      border: 1px solid transparent;
-      cursor: pointer;
-      white-space: nowrap;
-      transition: all 0.15s ease;
-      text-decoration: none;
-    }
-    .pill-tab:hover {
-      color: var(--color-text-heading);
-      background: var(--color-gray-200);
-    }
-    .pill-tab.active {
-      color: #92400e;
-      background: #fef3c7;
-      border-color: #f59e0b;
-    }
 
     /* Content sections */
     .content-section {
@@ -303,7 +267,7 @@
     .stories-footer-cta {
       text-align: center;
       padding: var(--space-10) var(--space-6);
-      max-width: 520px;
+      max-width: 680px;
       margin: 0 auto;
     }
     .stories-footer-headline {
@@ -320,33 +284,13 @@
     }
     .stories-footer-actions {
       display: flex;
-      gap: var(--space-3);
+      gap: var(--space-4);
       justify-content: center;
+      flex-wrap: wrap;
     }
-    .stories-footer-btn {
-      display: inline-flex;
-      align-items: center;
-      padding: var(--space-2-5) var(--space-6);
-      border-radius: var(--radius-lg);
-      font-size: var(--text-sm);
-      font-weight: var(--font-semibold);
-      text-decoration: none;
-      transition: all 0.15s ease;
-    }
-    .stories-footer-btn--primary {
-      background: var(--color-primary-600);
-      color: #fff;
-    }
-    .stories-footer-btn--primary:hover {
-      background: var(--color-primary-700);
-    }
-    .stories-footer-btn--secondary {
-      background: var(--color-bg-card);
-      color: var(--color-text-heading);
-      border: 1px solid var(--color-border);
-    }
-    .stories-footer-btn--secondary:hover {
-      border-color: var(--color-gray-400);
+    .stories-footer-actions .ds-btn {
+      white-space: nowrap;
+      padding: var(--space-3) var(--space-6);
     }
 
     @media (max-width: 1024px) {
@@ -368,10 +312,6 @@
   <section class="stories-hero">
     <h1>Stories from the front lines of agentic advertising</h1>
     <p class="stories-hero-sub">Find the story that's about your world — then go deeper with analysis, industry news, and community perspectives.</p>
-    <a href="/chat" class="addie-inline">
-      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z"/></svg>
-      Not sure where to start? Ask Addie
-    </a>
   </section>
 
   <!-- Page-level topic pills -->
@@ -450,9 +390,9 @@ <h2 class="section-heading">Industry News</h2>
     <p class="stories-footer-headline">These stories are just the beginning.</p>
     <p class="stories-footer-desc">Join the practitioners shaping how advertising works in an agentic world — certification, community, and tools to build with.</p>
     <div class="stories-footer-actions">
-      <a href="/membership" class="stories-footer-btn stories-footer-btn--primary">Get started</a>
-      <a href="/academy" class="stories-footer-btn stories-footer-btn--secondary">Start learning</a>
-      <a href="/community/" class="stories-footer-btn stories-footer-btn--secondary">Meet the community</a>
+      <a href="/membership" class="ds-btn ds-btn-primary">Get started</a>
+      <a href="/certification" class="ds-btn ds-btn-ghost">Start learning</a>
+      <a href="/community/" class="ds-btn ds-btn-ghost">Meet the community</a>
     </div>
   </div>
 
@@ -576,7 +516,7 @@ <h2 class="section-heading">Industry News</h2>
         var sorted = Object.keys(allTopics).sort(function(a, b) { return allTopics[b] - allTopics[a]; });
 
         var allTab = document.createElement('a');
-        allTab.className = 'pill-tab' + (activeTopic === 'all' ? ' active' : '');
+        allTab.className = 'ds-pill pill-tab' + (activeTopic === 'all' ? ' active' : '');
         allTab.textContent = 'All';
         allTab.href = '/stories';
         allTab.setAttribute('data-topic', 'all');
@@ -585,7 +525,7 @@ <h2 class="section-heading">Industry News</h2>
 
         sorted.forEach(function(topic) {
           var tab = document.createElement('a');
-          tab.className = 'pill-tab' + (activeTopic === topic ? ' active' : '');
+          tab.className = 'ds-pill pill-tab' + (activeTopic === topic ? ' active' : '');
           tab.textContent = TOPIC_LABELS[topic] || topic.charAt(0).toUpperCase() + topic.slice(1).replace(/-/g, ' ');
           tab.href = '/stories?topic=' + encodeURIComponent(topic);
           tab.setAttribute('data-topic', topic);
diff --git a/server/src/http.ts b/server/src/http.ts
index 2f46994923..970b40d114 100644
--- a/server/src/http.ts
+++ b/server/src/http.ts
@@ -710,21 +710,38 @@ export class HTTPServer {
         return next();
       }
 
-      // Determine the file path to check
+      // Sanitize input: split into segments, reject traversal and
+      // non-allowlisted characters. Reconstructing from validated segments
+      // breaks taint propagation from req.path.
+      const segments = urlPath.split('/').filter(Boolean);
+      if (segments.some(s => s === '..' || s === '.' || !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(s))) {
+        return next();
+      }
+
+      // Determine which file to look for
+      const lastSegment = segments[segments.length - 1] || '';
       let filePath: string;
-      if (urlPath.endsWith('.html')) {
-        filePath = path.join(publicPath, urlPath);
-      } else if (!urlPath.includes('.')) {
-        // Extensionless path - check if .html version exists
-        filePath = path.join(publicPath, urlPath + '.html');
+      if (lastSegment.endsWith('.html')) {
+        filePath = path.join(publicPath, ...segments);
+      } else if (!lastSegment.includes('.')) {
+        // Extensionless path - try .html version
+        filePath = path.join(publicPath, ...segments.slice(0, -1), lastSegment + '.html');
       } else {
-        // Has an extension but not .html - skip
         return next();
       }
 
       try {
-        // Check if file exists
-        await fs.access(filePath);
+        // Read HTML file; for extensionless paths, also try /index.html
+        let html: string;
+        try {
+          html = await fs.readFile(filePath, 'utf-8');
+        } catch {
+          if (lastSegment.endsWith('.html')) {
+            throw new Error('not found');
+          }
+          filePath = path.join(publicPath, ...segments, 'index.html');
+          html = await fs.readFile(filePath, 'utf-8');
+        }
 
         // Cross-domain session bridge: if on AdCP without a session cookie,
         // redirect through AAO to pick up the session (if one exists).
@@ -734,8 +751,7 @@ export class HTTPServer {
         const user = await getUserFromRequest(req, res);
         await enrichUserWithMembership(user);
 
-        // Read and inject config
-        let html = await fs.readFile(filePath, 'utf-8');
+        // Inject config
         const configScript = getAppConfigScript(user);
 
         // Inject before </head>