diff --git a/CODEOWNERS b/.github/CODEOWNERS
similarity index 100%
rename from CODEOWNERS
rename to .github/CODEOWNERS
diff --git a/SECURITY.md b/.github/SECURITY.md
similarity index 100%
rename from SECURITY.md
rename to .github/SECURITY.md
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 000000000..483bf7f4a
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,82 @@
+---
+name: CI
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+concurrency:
+  group: ci-${{ github.event.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  unit-tests:
+    name: Unit tests
+    runs-on: ubuntu-slim
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version-file: package.json
+
+      - name: Configure sustainable npm
+        uses: lowlydba/sustainable-npm@31d51025884f424f58f22e4e6578178bb4e79632 # v3.0.0
+
+      - name: Install NPM dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm test
+
+  a11y:
+    name: Accessibility (WCAG 2.2 AA)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version-file: package.json
+
+      - name: Configure sustainable npm
+        uses: lowlydba/sustainable-npm@31d51025884f424f58f22e4e6578178bb4e79632 # v3.0.0
+
+      - name: Install NPM dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Install Playwright browser
+        run: npx playwright install chromium --with-deps
+
+      - name: Run accessibility tests
+        run: npm run test:a11y
+
+  query-tests:
+    name: DuckDB query smoke tests
+    uses: ./.github/workflows/query-tests.yml
+    permissions:
+      contents: read
+
+  are-we-good:
+    name: are-we-good
+    runs-on: ubuntu-slim
+    needs: [unit-tests, a11y, query-tests]
+    if: always()
+    steps:
+      - uses: lowlydba/are-we-good@bb8ee9e793e4233fac1992bb880e2a28bed7f42f # v1.0.3
+        with:
+          jobs: ${{ toJSON(needs) }}
diff --git a/.github/workflows/query-tests.yml b/.github/workflows/query-tests.yml
new file mode 100644
index 000000000..39205b183
--- /dev/null
+++ b/.github/workflows/query-tests.yml
@@ -0,0 +1,37 @@
+---
+name: Query Tests
+
+on:
+  workflow_call: # reusable — called from ci.yml on PRs
+  schedule:
+    - cron: '0 6 * * 1' # Monday 06:00 UTC — catches data-side breakage between releases
+  workflow_dispatch:
+
+concurrency:
+  group: query-tests-${{ github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  duckdb:
+    name: DuckDB query smoke tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        with:
+          python-version: '3.12'
+
+      - name: Install duckdb
+        run: pip install duckdb
+
+      - name: Run query smoke tests
+        run: python scripts/test_queries.py
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
deleted file mode 100644
index 6eef4def7..000000000
--- a/.github/workflows/test.yml
+++ /dev/null
@@ -1,37 +0,0 @@
----
-name: Test
-
-on:
-  pull_request:
-  workflow_dispatch:
-
-concurrency:
-  group: test-${{ github.event.number || github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  test:
-    name: Unit tests
-    runs-on: ubuntu-slim
-    steps:
-      - name: Checkout repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-        with:
-          persist-credentials: false
-
-      - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version-file: package.json
-
-      - name: Configure sustainable npm
-        uses: lowlydba/sustainable-npm@31d51025884f424f58f22e4e6578178bb4e79632 # v3.0.0
-
-      - name: Install NPM dependencies
-        run: npm ci
-
-      - name: Run tests
-        run: npm test
diff --git a/README.md b/README.md
index edb45b31c..d8ca86d6c 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 # Overture Documentation
 
+[![WCAG 2.2 AA](https://img.shields.io/badge/WCAG_2.2-AA-green)](https://www.w3.org/WAI/WCAG22/quickref/)
+
 This repository uses [Docusaurus](https://docusaurus.io/) to publish the documentation pages seen at [docs.overturemaps.org](https://docs.overturemaps.org)
 
 ## Structure
diff --git a/__tests__/a11y.test.mjs b/__tests__/a11y.test.mjs
new file mode 100644
index 000000000..03bf94c12
--- /dev/null
+++ b/__tests__/a11y.test.mjs
@@ -0,0 +1,121 @@
+/**
+ * WCAG 2.2 AA accessibility tests using Node's built-in test runner.
+ * Requires a built `build/` directory — run `npm run build` first.
+ * Run with: npm run test:a11y
+ */
+
+import { test, before, after } from 'node:test';
+import assert from 'node:assert/strict';
+import { createServer } from 'node:http';
+import { readFile, access } from 'node:fs/promises';
+import { extname, join, resolve, relative, isAbsolute } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { chromium } from 'playwright';
+import AxeBuilder from '@axe-core/playwright';
+
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+const BUILD_DIR = join(__dirname, '..', 'build');
+const PORT = 3778;
+const BASE_URL = `http://localhost:${PORT}`;
+
+const MIME = {
+  '.html': 'text/html',
+  '.js': 'application/javascript',
+  '.mjs': 'application/javascript',
+  '.css': 'text/css',
+  '.png': 'image/png',
+  '.svg': 'image/svg+xml',
+  '.woff2': 'font/woff2',
+  '.json': 'application/json',
+};
+
+let server, browser;
+
+before(async () => {
+  await access(join(BUILD_DIR, 'index.html')).catch(() => {
+    throw new Error(`build/index.html not found — run 'npm run build' before running accessibility tests`);
+  });
+
+  // minimal static file server, falls back to index.html for Docusaurus client-side routing
+  server = createServer(async (req, res) => {
+    const urlPath = (req.url ?? '/').split('?')[0];
+    const filePath = resolve(join(BUILD_DIR, urlPath === '/' ? 'index.html' : urlPath));
+    // relative() is cross-platform; startsWith(BUILD_DIR + '/') broke on Windows backslashes
+    const rel = relative(BUILD_DIR, filePath);
+    if (rel.startsWith('..') || isAbsolute(rel)) {
+      res.writeHead(403);
+      res.end('Forbidden');
+      return;
+    }
+    try {
+      const data = await readFile(filePath);
+      res.writeHead(200, { 'Content-Type': MIME[extname(filePath)] ?? 'application/octet-stream' });
+      res.end(data);
+    } catch {
+      // SPA fallback only for route-like requests (no extension); a missing
+      // asset (.js/.css/.png) must 404 so broken builds aren't masked.
+      if (extname(filePath) === '') {
+        try {
+          const data = await readFile(join(BUILD_DIR, 'index.html'));
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end(data);
+          return;
+        } catch { /* fall through to 404 */ }
+      }
+      res.writeHead(404);
+      res.end('Not found');
+    }
+  });
+  await new Promise((resolve) => server.listen(PORT, resolve));
+  browser = await chromium.launch();
+});
+
+after(async () => {
+  await browser?.close();
+  if (server) await new Promise((resolve) => server.close(resolve));
+});
+
+function formatViolations(violations, label) {
+  if (violations.length === 0) return;
+  const detail = violations
+    .map((v) =>
+      `[${v.impact}] ${v.id}: ${v.description}\n` +
+      v.nodes.map((n) =>
+        `  • ${n.target}` +
+        (n.failureSummary ? `\n    ${n.failureSummary.replace(/\n/g, '\n    ')}` : '')
+      ).join('\n')
+    )
+    .join('\n\n');
+  assert.fail(`${violations.length} WCAG 2.2 AA violation(s) — ${label}:\n\n${detail}`);
+}
+
+async function runAxe(url) {
+  const context = await browser.newContext();
+  const page = await context.newPage();
+  try {
+    await page.goto(`${BASE_URL}${url}`, { waitUntil: 'domcontentloaded' });
+    await page.waitForSelector('main', { timeout: 10000 });
+    const { violations } = await new AxeBuilder({ page })
+      .withTags(['wcag2a', 'wcag2aa', 'wcag21a', 'wcag21aa', 'wcag22aa'])
+      .analyze();
+    return violations;
+  } finally {
+    await context.close();
+  }
+}
+
+const PAGES = [
+  { path: '/', label: 'homepage' },
+  { path: '/docs/', label: 'docs index' },
+  { path: '/getting-data/', label: 'quickstart (QueryBuilder)' },
+  { path: '/guides/', label: 'guides index' },
+  { path: '/examples/', label: 'examples index' },
+  { path: '/blog/', label: 'blog index' },
+  { path: '/community/', label: 'community (custom table)' },
+];
+
+for (const { path, label } of PAGES) {
+  test(`${label} passes WCAG 2.2 AA`, async () => {
+    formatViolations(await runAxe(path), label);
+  });
+}
diff --git a/blog/2026-03-12-explorer-got-pretty.mdx b/blog/2026-03-12-explorer-got-pretty.mdx
index 8085d0033..742db69d4 100644
--- a/blog/2026-03-12-explorer-got-pretty.mdx
+++ b/blog/2026-03-12-explorer-got-pretty.mdx
@@ -17,6 +17,7 @@ That was the right call for a launch. But as Explorer has matured and more peopl
 <figure className="screenshot-frame">
   <iframe
     src="https://explore.overturemaps.org"
+    title="Overture Maps Explorer"
     width="100%"
     height="500"
     style={{ border: 'none', borderRadius: '8px' }}
diff --git a/docs/guides/divisions/index.mdx b/docs/guides/divisions/index.mdx
index 06a38748f..2eefdb373 100644
--- a/docs/guides/divisions/index.mdx
+++ b/docs/guides/divisions/index.mdx
@@ -16,8 +16,8 @@ import BoundaryCounts from '!!raw-loader!@site/src/queries/duckdb/divisions_boun
 import SpecificFeature from '!!raw-loader!@site/src/queries/duckdb/divisions_query_specific_feature.sql';
 import OSMLookUp from '!!raw-loader!@site/src/queries/duckdb/divisions_lookup_osm.sql';
 import BorderUSMX from '!!raw-loader!@site/src/queries/duckdb/divisions_border_usmx.sql';
-import CountsPerEntity from '!!raw-loader!@site/src/queries/duckdb/divisions_border_usmx.sql';
-import SubTypeCountsUSMXCA from '!!raw-loader!@site/src/queries/duckdb/divisions_border_usmx.sql';
+import CountsPerEntity from '!!raw-loader!@site/src/queries/duckdb/divisions_counts_per_entity.sql';
+import SubTypeCountsUSMXCA from '!!raw-loader!@site/src/queries/duckdb/divisions_subtype_counts_specific_countries.sql';
 import DenmarkLocalityNeighborhood from '!!raw-loader!@site/src/queries/duckdb/divisions_denmark_locality_neighborhood.sql';
 import PhillyPlaces from '!!raw-loader!@site/src/queries/duckdb/divisions_philly_places.sql';
 
@@ -261,18 +261,26 @@ Using these queries, you can get counts for each feature type in divisions.
 <QueryBuilder query={CountsPerType}></QueryBuilder>
 </TabItem>
 
-<TabItem value="division counts" label="division counts" default>
+<TabItem value="division counts" label="division counts">
 <QueryBuilder query={DivCounts}></QueryBuilder>
 </TabItem>
 
-<TabItem value="division_area counts" label="division_area counts" default>
+<TabItem value="division_area counts" label="division_area counts">
 <QueryBuilder query={DivAreaCounts}></QueryBuilder>
 </TabItem>
 
-<TabItem value="division_boundary counts" label="division_boundary counts" default>
+<TabItem value="division_boundary counts" label="division_boundary counts">
 <QueryBuilder query={BoundaryCounts}></QueryBuilder>
 </TabItem>
 
+<TabItem value="division_area counts by subtype" label="area counts by subtype">
+<QueryBuilder query={CountsPerEntity}></QueryBuilder>
+</TabItem>
+
+<TabItem value="division_area subtype counts (US/MX/CA)" label="subtype counts (US/MX/CA)">
+<QueryBuilder query={SubTypeCountsUSMXCA}></QueryBuilder>
+</TabItem>
+
 </Tabs>
 
 <Tabs>
diff --git a/docusaurus.config.js b/docusaurus.config.js
index f12b2ce2e..586376394 100644
--- a/docusaurus.config.js
+++ b/docusaurus.config.js
@@ -3,8 +3,9 @@
 
 const { themes } = require('prism-react-renderer');
 
-const lightCodeTheme = themes.nightOwlLight;
-const darkCodeTheme = themes.nightOwl;
+// both modes use the dark palette — code blocks are forced dark bg in
+// light mode too (see custom.css), so light-theme token colors fail contrast.
+const codeTheme = themes.nightOwl;
 
 const defaultUrl = 'https://docs.overturemaps.org';
 const defaultBaseUrl = '/';
@@ -225,6 +226,7 @@ const config = {
             position: 'right',
             target: '_blank',
             className: 'github-link',
+            'aria-label': 'View source on GitHub',
           },
         ],
       },
@@ -249,8 +251,8 @@ const config = {
         copyright: `Copyright © ${new Date().getFullYear()} Overture Maps Foundation.`,
       },
       prism: {
-        theme: lightCodeTheme,
-        darkTheme: darkCodeTheme,
+        theme: codeTheme,
+        darkTheme: codeTheme,
         additionalLanguages: ['bash', 'diff', 'json', 'sql', 'python'],
       },
     }),
diff --git a/package-lock.json b/package-lock.json
index 9f28f54b4..abd5e23c3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,6 +24,7 @@
         "react-dom": "^19.2.7"
       },
       "devDependencies": {
+        "@axe-core/playwright": "^4.11.3",
         "@docusaurus/module-type-aliases": "^3.10.0",
         "@docusaurus/types": "^3.10.0",
         "@eslint/js": "^10.0.0",
@@ -36,6 +37,7 @@
         "globals": "^17.6.0",
         "jsdom": "^29.1.1",
         "markdownlint-cli": "^0.48.0",
+        "playwright": "^1.61.0",
         "prettier": "^3.8.4",
         "typescript": "^6.0.3",
         "vitest": "^4.1.8"
@@ -471,6 +473,19 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@axe-core/playwright": {
+      "version": "4.11.3",
+      "resolved": "https://registry.npmjs.org/@axe-core/playwright/-/playwright-4.11.3.tgz",
+      "integrity": "sha512-h/kfksv4F0cVIDlKpT4700OehdRgpvuVskuQ2nb7/JmtWUXpe9ftHAPtwyXGvVSsa6SJ64A9ER7Zrzc/sIvC4w==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "dependencies": {
+        "axe-core": "~4.11.4"
+      },
+      "peerDependencies": {
+        "playwright-core": ">= 1.0.0"
+      }
+    },
     "node_modules/@babel/code-frame": {
       "version": "7.29.0",
       "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz",
@@ -8179,6 +8194,16 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/axe-core": {
+      "version": "4.11.4",
+      "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.11.4.tgz",
+      "integrity": "sha512-KunSNx+TVpkAw/6ULfhnx+HWRecjqZGTOyquAoWHYLRSdK1tB5Ihce1ZW+UY3fj33bYAFWPu7W/GRSmmrCGuxA==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/babel-loader": {
       "version": "9.2.1",
       "resolved": "https://registry.npmjs.org/babel-loader/-/babel-loader-9.2.1.tgz",
@@ -17949,6 +17974,53 @@
         "node": ">=16.0.0"
       }
     },
+    "node_modules/playwright": {
+      "version": "1.61.0",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.61.0.tgz",
+      "integrity": "sha512-Z+7BeeqQPRRzklHsVFP4KTGIyMxKUmfeRA4WisM6G3/XW6nwGeX6fX9qYaDa+CiUqpOkb2f6X3nar05R3kSuJQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.61.0"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "fsevents": "2.3.2"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.61.0",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.61.0.tgz",
+      "integrity": "sha512-caX7TrY3Ml6egyDX0WUcTHDxodl/b51y5wJOdCEA36QviK/s2g081hvmGs8eaE3DWb6NYZQ6BjO/QkNRPenoPA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/playwright/node_modules/fsevents": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+      "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
     "node_modules/pmtiles": {
       "version": "4.4.1",
       "resolved": "https://registry.npmjs.org/pmtiles/-/pmtiles-4.4.1.tgz",
diff --git a/package.json b/package.json
index e63d3f723..4b2074d50 100644
--- a/package.json
+++ b/package.json
@@ -20,6 +20,7 @@
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "test": "vitest run",
+    "test:a11y": "node --test --test-reporter=spec __tests__/a11y.test.mjs",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit"
   },
@@ -40,6 +41,7 @@
     "react-dom": "^19.2.7"
   },
   "devDependencies": {
+    "@axe-core/playwright": "^4.11.3",
     "@docusaurus/module-type-aliases": "^3.10.0",
     "@docusaurus/types": "^3.10.0",
     "@eslint/js": "^10.0.0",
@@ -52,6 +54,7 @@
     "globals": "^17.6.0",
     "jsdom": "^29.1.1",
     "markdownlint-cli": "^0.48.0",
+    "playwright": "^1.61.0",
     "prettier": "^3.8.4",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8"
diff --git a/scripts/test_queries.py b/scripts/test_queries.py
new file mode 100644
index 000000000..1cf4cffd7
--- /dev/null
+++ b/scripts/test_queries.py
@@ -0,0 +1,202 @@
+#!/usr/bin/env python3
+"""
+Execute every DuckDB query in src/queries/duckdb/ against live Overture S3 data.
+
+Single-statement queries (SELECT / COPY wrappers) run as SELECT * FROM (...) LIMIT 0
+to validate S3 paths and schema (parse + bind) with no row data transfer.
+
+Multi-statement scripts (SET VARIABLE, CREATE TABLE chains) run in full inside a
+temporary directory so any COPY ... TO 'file' output is cleaned up automatically.
+
+Exits non-zero on any failure.
+
+Usage:
+    pip install duckdb
+    python scripts/test_queries.py
+"""
+
+import json
+import os
+import re
+import sys
+import tempfile
+import time
+from pathlib import Path
+from urllib.request import urlopen
+
+import duckdb
+
+STAC_URL = "https://stac.overturemaps.org/catalog.json"
+FALLBACK_RELEASE = "2026-05-20.0"
+QUERIES_DIR = Path(__file__).parent.parent / "src" / "queries" / "duckdb"
+
+# Colorize SQL in the log to set it apart from status lines (GitHub Actions
+# renders ANSI; honor NO_COLOR and skip when piped to a file).
+_USE_COLOR = (sys.stdout.isatty() or bool(os.environ.get("CI"))) and not os.environ.get("NO_COLOR")
+
+
+def cyan(s: str) -> str:
+    return f"\033[36m{s}\033[0m" if _USE_COLOR else s
+
+# Lines handled by the shared connection setup — strip before classification.
+# Tolerates a trailing line comment (e.g. "LOAD spatial; --noqa").
+_PREAMBLE = re.compile(
+    r"^\s*(LOAD|INSTALL)\s+\S+\s*;?\s*(--[^\n]*)?$"
+    r"|^\s*SET\s+s3_region\s*=\s*[^;]+;\s*(--[^\n]*)?$",
+    re.IGNORECASE | re.MULTILINE,
+)
+
+# COPY(<select>) TO '<file>' [WITH (...)] — unwrap to just the inner SELECT.
+# Tolerates leading comment lines (left behind after the SET preamble is stripped).
+_COPY_WRAP = re.compile(
+    r"\A(?:\s*--[^\n]*\n)*\s*COPY\s*\((.+)\)\s+TO\s+'[^']+?'[^;]*\Z",
+    re.DOTALL | re.IGNORECASE,
+)
+
+# COPY ( <select> ) TO <rest> — split into prefix / inner / suffix so the inner
+# SELECT can be wrapped in LIMIT 0. Greedy inner backtracks to the last ") TO".
+_COPY_STMT = re.compile(
+    r"\A((?:\s*--[^\n]*\n)*\s*COPY\s*\()(.+)(\)\s+TO\s+.+)\Z",
+    re.DOTALL | re.IGNORECASE,
+)
+
+
+def limit_copy(stmt: str) -> str:
+    """
+    Wrap a COPY's inner SELECT in LIMIT 0 so the file is still written (correct
+    schema, zero rows) without scanning S3. Non-COPY statements pass through, so
+    SET/CREATE steps that resolve variables still run for real.
+    """
+    m = _COPY_STMT.match(stmt)
+    if not m:
+        return stmt
+    prefix, inner, suffix = m.groups()
+    return f"{prefix}SELECT * FROM (\n{inner}\n) _q LIMIT 0{suffix}"
+
+
+def fetch_release() -> str:
+    try:
+        with urlopen(STAC_URL, timeout=10) as r:
+            return json.loads(r.read())["latest"]
+    except Exception as exc:
+        print(f"  STAC fetch failed ({exc}), falling back to {FALLBACK_RELEASE}")
+        return FALLBACK_RELEASE
+
+
+def split_statements(sql: str) -> list[str]:
+    """Naive semicolon split — sufficient for S3-path SQL with no semicolons in strings."""
+    return [s.strip() for s in sql.split(";") if s.strip()]
+
+
+def prepare(raw: str, release: str) -> tuple[str, bool]:
+    """
+    Returns (sql, is_multi).
+
+    Substitutes release token, strips connection-preamble lines, then decides:
+    - Single COPY wrapper → unwrap inner SELECT, is_multi=False
+    - Single SELECT/other → as-is, is_multi=False
+    - Multiple statements  → full cleaned SQL, is_multi=True
+    """
+    sql = raw.replace("__OVERTURE_RELEASE", release)
+    sql = _PREAMBLE.sub("", sql).strip()
+
+    stmts = split_statements(sql)
+    if not stmts:
+        return "", False
+
+    if len(stmts) == 1:
+        m = _COPY_WRAP.match(stmts[0])
+        return (m.group(1).strip() if m else stmts[0].rstrip(";")), False
+
+    return sql, True
+
+
+def run_multi(con: duckdb.DuckDBPyConnection, sql: str) -> None:
+    # chdir into tmpdir so COPY...TO writes go to scratch space
+    prev = os.getcwd()
+    with tempfile.TemporaryDirectory() as tmpdir:
+        os.chdir(tmpdir)
+        try:
+            for stmt in split_statements(sql):
+                con.execute(limit_copy(stmt))
+        finally:
+            os.chdir(prev)
+
+
+def main() -> None:
+    sys.stdout.reconfigure(line_buffering=True)  # flush each line so CI shows live progress
+    dry_run = "--dry-run" in sys.argv or "-n" in sys.argv
+
+    release = fetch_release()
+    print(f"Release: {release}\n")
+
+    con = None
+    if not dry_run:
+        con = duckdb.connect()
+        for stmt in [
+            "INSTALL httpfs", "LOAD httpfs",
+            "INSTALL spatial", "LOAD spatial",
+            "SET s3_region='us-west-2'",
+        ]:
+            print(f"  setup  {stmt} ... ", end="", flush=True)
+            t0 = time.perf_counter()
+            # INSTALL hits extensions.duckdb.org and can time out transiently; retry it.
+            retries = 3 if stmt.upper().startswith("INSTALL") else 1
+            for attempt in range(1, retries + 1):
+                try:
+                    con.execute(stmt)
+                    break
+                except Exception as exc:
+                    if attempt == retries:
+                        raise
+                    print(f"retry {attempt} ({exc.__class__.__name__}) ", end="", flush=True)
+                    time.sleep(2 * attempt)
+            print(f"ok ({time.perf_counter() - t0:.2f}s)")
+        print()
+
+    queries = sorted(QUERIES_DIR.glob("*.sql"))
+    failures: list[tuple[str, str]] = []
+
+    for path in queries:
+        sql, is_multi = prepare(path.read_text(), release)
+        if not sql:
+            print(f"  skip   {path.name}")
+            continue
+
+        # Print exactly what runs: single statements execute wrapped in LIMIT 0,
+        # which still resolves the S3 glob and binds the schema (catching bad
+        # releases and column drift) but skips reading row data — ~27x faster
+        # than LIMIT 1, which scans row groups to find a matching row.
+        exec_sql = sql if is_multi else f"SELECT * FROM (\n{sql}\n) _q LIMIT 0"
+        label = "script" if is_multi else "query "
+        print(f"\n  {label} {path.name}")
+        for line in exec_sql.splitlines():
+            print(f"    {cyan(line)}")
+        if dry_run:
+            continue
+        t0 = time.perf_counter()
+        try:
+            if is_multi:
+                run_multi(con, sql)
+            else:
+                con.execute(exec_sql)
+            print(f"  -> ok ({time.perf_counter() - t0:.2f}s)")
+        except Exception as exc:
+            print(f"  -> FAIL ({time.perf_counter() - t0:.2f}s): {exc}")
+            failures.append((path.name, str(exc)))
+
+    print()
+    if dry_run:
+        print(f"Dry run: printed {len(queries)} queries (nothing executed).")
+        return
+    if failures:
+        print(f"{len(failures)} failure(s):")
+        for name, err in failures:
+            print(f"  {name}: {err}")
+        sys.exit(1)
+
+    print(f"All {len(queries)} DuckDB queries passed.")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/src/components/CommunityTable.module.css b/src/components/CommunityTable.module.css
index 83ea7c6e8..4d1a8f60e 100644
--- a/src/components/CommunityTable.module.css
+++ b/src/components/CommunityTable.module.css
@@ -18,7 +18,7 @@
   font-size: 0.75rem;
   text-transform: uppercase;
   letter-spacing: 0.05em;
-  color: var(--ifm-color-emphasis-600);
+  color: var(--ifm-color-emphasis-700); /* was 600 (~4.3:1), 700 (~9.7:1) passes AA */
   margin-right: 0.25rem;
   min-width: 5rem;
 }
@@ -57,7 +57,8 @@
 
 /* Per-group color tokens — Theme: navy, Tool: teal, Type: lime */
 .pillTheme  { --pill-color: var(--om-primary-navy);        --pill-bg-hover: rgba(44,46,127,0.08); }
-.pillTool   { --pill-color: var(--om-secondary-teal-dark); --pill-bg-hover: rgba(5,165,175,0.1);  }
+/* #05A5AF was 2.5:1 on light bg; #056B73 gives 5.7:1 on #f1f3f5 and 6.3:1 white-on-teal */
+.pillTool   { --pill-color: #056B73;                       --pill-bg-hover: rgba(5,107,115,0.1);  }
 /* Type uses primary bright blue — distinct from navy and teal */
 .pillType   { --pill-color: var(--om-primary-blue); --pill-bg-hover: rgba(64,81,204,0.08); }
 
@@ -187,7 +188,7 @@
   flex-direction: column;
   gap: 0.15rem;
   font-size: 0.8rem;
-  color: var(--ifm-color-emphasis-600);
+  color: var(--ifm-color-emphasis-700); /* was 600, fails AA; 700 passes */
   margin-top: auto;
 }
 
@@ -203,7 +204,7 @@
 
 .cardRelease {
   font-size: 0.75rem;
-  color: var(--ifm-color-emphasis-500);
+  color: var(--ifm-color-emphasis-700); /* was 500, very low contrast; 700 passes AA */
 }
 
 .cardTags {
diff --git a/src/components/home.module.css b/src/components/home.module.css
index ce496ef24..2fd7cb9b4 100644
--- a/src/components/home.module.css
+++ b/src/components/home.module.css
@@ -32,7 +32,8 @@
 
 .featuredIcon {
   display: inline-block;
-  color: #f97316;
+  /* #c2410c is orange-700, 5.1:1 on white — passes WCAG AA (4.5:1) */
+  color: #c2410c;
   margin-right: 0.4em;
   font-style: normal;
 }
@@ -50,6 +51,12 @@
   line-height: 1.6;
 }
 
+/* Underline inline links so they're distinguishable without relying on color (WCAG 1.4.1) */
+.featuredDesc p a {
+  text-decoration: underline;
+  text-underline-offset: 2px;
+}
+
 /* ── SECTIONS ── */
 .docSection {
   max-width: 760px;
diff --git a/src/css/custom.css b/src/css/custom.css
index 4a9403ef9..9314e142f 100644
--- a/src/css/custom.css
+++ b/src/css/custom.css
@@ -19,6 +19,12 @@
 [data-theme='light'] .token.prolog,
 [data-theme='light'] .token.doctype { color: #6c7086; font-style: italic; }
 
+/* nightOwl's #637777 comment is only 3.46:1 on the forced-dark bg; prism sets
+   it inline, so !important is required. Lighter gray passes AA in both themes. */
+.token.comment,
+.token.prolog,
+.token.doctype { color: #8b9d9d !important; }
+
 [data-theme='light'] .token.keyword,
 [data-theme='light'] .token.operator { color: #cba6f7; }
 
@@ -209,6 +215,20 @@
   border-left: 3px solid var(--om-secondary-cyan);
 }
 
+/* Underline inline links so they pass link-in-text-block (WCAG 1.4.1) */
+.markdown p a,
+.markdown li a,
+article p a,
+article li a {
+  text-decoration: underline;
+  text-underline-offset: 2px;
+}
+
+/* Blog author email byline — default #8d949e is only 3.06:1 on white */
+[class*='authorEmail'] {
+  color: var(--ifm-color-emphasis-700) !important;
+}
+
 /* Landing page: remove empty title header and excess padding */
 .docs-doc-id-index .theme-doc-markdown > header {
   display: none;
diff --git a/src/queries/duckdb/boulder_co_duckdb.sql b/src/queries/duckdb/boulder_co_duckdb.sql
deleted file mode 100644
index 6a335ed20..000000000
--- a/src/queries/duckdb/boulder_co_duckdb.sql
+++ /dev/null
@@ -1,9 +0,0 @@
-COPY (
-    SELECT *
-    FROM read_parquet("s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=*/type=*/*", union_by_name = True)
-    WHERE
-        bbox.xmin >= -105.30
-        AND bbox.ymin >= 39.98
-        AND bbox.xmax <= -105.24
-        AND bbox.ymax <= 40.07
-) TO 'boulder_co_overture.parquet';
diff --git a/src/queries/duckdb/buildings_detroit.sql b/src/queries/duckdb/buildings_detroit.sql
index 23d495876..b8fb6839b 100644
--- a/src/queries/duckdb/buildings_detroit.sql
+++ b/src/queries/duckdb/buildings_detroit.sql
@@ -1,4 +1,5 @@
 LOAD spatial; -- noqa
+LOAD httpfs;  -- noqa
 
 SET s3_region='us-west-2';
 
@@ -9,7 +10,7 @@ COPY(
     height,
     geometry
   FROM
-    read_parquet('az://overturemapswestus2.blob.core.windows.net/release/__OVERTURE_RELEASE/theme=buildings/type=building/*', filename=true, hive_partitioning=1)
+    read_parquet('s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=buildings/type=building/*', filename=true, hive_partitioning=1)
   WHERE
     names.primary IS NOT NULL
     AND bbox.xmin BETWEEN -84.36 AND -82.42
diff --git a/src/queries/duckdb/buildings_madrid.sql b/src/queries/duckdb/buildings_madrid.sql
deleted file mode 100644
index e1b534e0d..000000000
--- a/src/queries/duckdb/buildings_madrid.sql
+++ /dev/null
@@ -1,17 +0,0 @@
-LOAD spatial; -- noqa
-
-SET s3_region='us-west-2';
-
-COPY(
-  SELECT
-    id,
-    names.primary as primary_name,
-    height,
-    geometry
-  FROM
-    read_parquet('s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=buildings/type=building/*', filename=true, hive_partitioning=1)
-  WHERE
-    names.primary IS NOT NULL
-    AND bbox.xmin BETWEEN -4.009 AND -3.455
-    AND bbox.ymin BETWEEN 40.211 AND 40.596
-) TO 'madrid_buildings.geojson' WITH (FORMAT GDAL, DRIVER 'GeoJSON');
diff --git a/src/queries/duckdb/confident_mountains.sql b/src/queries/duckdb/confident_mountains.sql
deleted file mode 100644
index c7d259c04..000000000
--- a/src/queries/duckdb/confident_mountains.sql
+++ /dev/null
@@ -1,17 +0,0 @@
-LOAD spatial; -- noqa
-LOAD httpfs;  -- noqa
-SET s3_region='us-west-2';
-
-COPY(
-    SELECT
-       id,
-       names.primary as primary_name,
-       geometry,    -- DuckDB v.1.1.0 will autoload this as a `geometry` type
-       categories.primary as primary_category,
-       sources[1].dataset AS primary_source,
-       confidence
-    FROM read_parquet('s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=places/type=*/*', filename=true, hive_partitioning=1)
-    WHERE categories.primary = 'mountain' AND confidence > .90
-    ORDER BY confidence DESC
-) TO 'overture_places_mountains_gt90.geojson'
-WITH (FORMAT GDAL, DRIVER 'GeoJSON');
diff --git a/src/queries/duckdb/divisions_denmark_locality_neighborhood.sql b/src/queries/duckdb/divisions_denmark_locality_neighborhood.sql
index f0e1b1a2b..a362de988 100644
--- a/src/queries/duckdb/divisions_denmark_locality_neighborhood.sql
+++ b/src/queries/duckdb/divisions_denmark_locality_neighborhood.sql
@@ -10,7 +10,7 @@ COPY (
     subtype,
     geometry -- DuckDB v.1.1.0 will autoload this as a `geometry` type
   FROM
-    read_parquet('s3://overturemaps-us-west-2/release/2024-07-22.0/theme=divisions/type=division/*', filename=true, hive_partitioning=1)
+    read_parquet('s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=divisions/type=division/*', filename=true, hive_partitioning=1)
   WHERE
     country = 'DK'
     AND subtype IN ('locality','neighborhood')
diff --git a/src/queries/duckdb/seattle_buildings_for_map.sql b/src/queries/duckdb/seattle_buildings_for_map.sql
index 89a27b677..e2f582200 100644
--- a/src/queries/duckdb/seattle_buildings_for_map.sql
+++ b/src/queries/duckdb/seattle_buildings_for_map.sql
@@ -1,4 +1,7 @@
 LOAD spatial; -- noqa
+LOAD httpfs;  -- noqa
+
+SET s3_region='us-west-2';
 
 COPY (
     SELECT
@@ -6,7 +9,7 @@ COPY (
         height,
         level,
         geometry -- DuckDB v.1.1.0 will autoload this as a `geometry` type
-    FROM read_parquet('az://overturemapswestus2.blob.core.windows.net/release/__OVERTURE_RELEASE/theme=buildings/type=building/*', filename=true, hive_partitioning=1)
+    FROM read_parquet('s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=buildings/type=building/*', filename=true, hive_partitioning=1)
     WHERE bbox.xmin > -122.68 AND bbox.xmax < -121.98
     AND bbox.ymin > 47.36 AND bbox.ymax < 47.79
 ) TO 'seattle_buildings.geojsonseq' WITH (FORMAT GDAL, DRIVER 'GeoJSONSeq', SRS 'EPSG:4326');
diff --git a/src/queries/duckdb/seattle_placenames_for_map.sql b/src/queries/duckdb/seattle_placenames_for_map.sql
index 0acb41806..36b7b856c 100644
--- a/src/queries/duckdb/seattle_placenames_for_map.sql
+++ b/src/queries/duckdb/seattle_placenames_for_map.sql
@@ -1,13 +1,16 @@
 LOAD spatial; -- noqa
+LOAD httpfs;  -- noqa
+-- Access the data on AWS in this example
+SET s3_region='us-west-2';
 
 COPY (
     SELECT
         subtype,
-        locality_type,
         names.primary as name,
         geometry -- DuckDB v.1.1.0 will autoload this as a `geometry` type
-    FROM read_parquet('az://overturemapswestus2.blob.core.windows.net/release/2024-04-16-beta.0/theme=admins/type=locality/*', hive_partitioning=1)
-    WHERE bbox.xmin > -122.679404 AND bbox.xmax < -121.978275
+    FROM read_parquet('s3://overturemaps-us-west-2/release/__OVERTURE_RELEASE/theme=divisions/type=division/*', hive_partitioning=1)
+    WHERE subtype IN ('locality', 'neighborhood')
+    AND bbox.xmin > -122.679404 AND bbox.xmax < -121.978275
     AND bbox.ymin > 47.360619 AND bbox.ymax < 47.786336
 ) TO 'seattle_placenames.geojson'
 WITH (FORMAT GDAL, DRIVER 'GeoJSON', SRS 'EPSG:4326');
diff --git a/test_queries.py b/test_queries.py
deleted file mode 100644
index 202e1c053..000000000
--- a/test_queries.py
+++ /dev/null
@@ -1,32 +0,0 @@
-# Run the DuckDB Queries
-import duckdb, re, sqlfluff
-from os import walk, path
-
-cursor = duckdb.connect()
-cursor.execute("INSTALL httpfs;")
-cursor.execute("INSTALL azure;")
-
-# Current version?
-search = re.compile(r"overtureRelease: '(.*)'")
-
-with open('docusaurus.config.js', 'r') as f:
-    for line in f:
-        if search.search(line):
-            overture_release = search.search(line).group(1)
-
-print(f"Using Overture release: {overture_release}")
-
-def format_query(query):
-    return query.replace('__OVERTURE_RELEASE', overture_release)
-    
-# Read and Fluff all queries
-for (dir, dirnames, queries) in walk("src/queries/duckdb"):
-
-    for idx, q in enumerate(sorted(queries)):
-        query = open(path.join(dir,q),'r').read()
-        query = format_query(query)
-        print(idx, q)
-
-        res = sqlfluff.lint(query)
-
-        print(res)
diff --git a/vitest.config.js b/vitest.config.js
index 2e9805eb7..4ece0d151 100644
--- a/vitest.config.js
+++ b/vitest.config.js
@@ -11,5 +11,8 @@ export default defineConfig({
   test: {
     include: ['src/**/__tests__/**/*.test.{js,jsx}'],
     setupFiles: ['./src/setupTests.js'],
+    // CI runners are slower under load; the render-heavy CommunityTable tests
+    // can exceed the 5s default and flake. 20s gives ample headroom.
+    testTimeout: 20000,
   },
 });