Offline is read-only, with a banner
The user’s web decision of 2026-10-07: offline, the UI stays usable READ-ONLY from the replica, with a non-modal banner. This replaces the “block the whole UI” rule. Actions are disabled or queued explicitly, and nothing pretends to succeed.