Add the approved responsive, keyboard-accessible interface using plain HTML, CSS, and browser JavaScript. Provide a public landing page, login, employee request form and personal list, coordinator queue and decision controls, administrator audit view, logout, loading states, validation messages, deliberate denial pages, and a visible local-training-data notice.

Start the application on an available localhost port and report the exact URL. Create synthetic demonstration identities through a bounded seed command that does not print passwords or commit runtime credential files. Pause so I can enter or set local passwords privately.

Fly one public request, one employee submission, one authorized coordinator decision, one administrator audit review, and one deliberately denied direct request. Capture runtime evidence without exposing credentials or session cookies. Stop the service cleanly after the demonstration unless I ask to keep it running.