docs(08-04): complete export services simplified overloads plan

- SUMMARY.md with task commits and decisions
- STATE.md updated to plan 4 of 6
- ROADMAP.md progress updated

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.planning/phases/08-simplified-permissions/08-04-SUMMARY.md

@@ -0,0 +1,88 @@
+---
+phase: 08-simplified-permissions
+plan: 04
+subsystem: export
+tags: [csv, html, export, risk-level, color-coding, simplified-permissions]
+
+requires:
+  - phase: 08-01
+    provides: SimplifiedPermissionEntry, PermissionSummary, PermissionSummaryBuilder, RiskLevel models
+provides:
+  - BuildCsv overload accepting SimplifiedPermissionEntry with SimplifiedLabels and RiskLevel columns
+  - BuildHtml overload accepting SimplifiedPermissionEntry with risk summary cards and color-coded badges
+  - WriteAsync overloads for both CSV and HTML simplified exports
+affects: [08-05, 08-06]
+
+tech-stack:
+  added: []
+  patterns: [method-overload-for-simplified-mode, risk-level-color-mapping]
+
+key-files:
+  created: []
+  modified:
+    - SharepointToolbox/Services/Export/CsvExportService.cs
+    - SharepointToolbox/Services/Export/HtmlExportService.cs
+
+key-decisions:
+  - "Simplified HTML uses entry.Inner.Users for user pill names (accessing original PermissionEntry) to match existing pattern"
+  - "Risk-level colors use inline CSS styles on each element rather than CSS classes for self-contained HTML portability"
+
+patterns-established:
+  - "RiskLevelColors helper returns (bg, text, border) tuple for consistent color coding across HTML elements"
+  - "Simplified overloads mirror original method signatures but accept SimplifiedPermissionEntry — no changes to existing methods"
+
+requirements-completed: [SIMP-01, SIMP-02]
+
+duration: 2min
+completed: 2026-04-07
+---
+
+# Phase 08 Plan 04: Export Services Simplified Overloads Summary
+
+**CSV and HTML export services extended with SimplifiedPermissionEntry overloads including risk-level color coding and simplified labels columns**
+
+## Performance
+
+- **Duration:** 2 min
+- **Started:** 2026-04-07T12:11:51Z
+- **Completed:** 2026-04-07T12:13:12Z
+- **Tasks:** 2
+- **Files modified:** 2
+
+## Accomplishments
+- CsvExportService gains BuildCsv and WriteAsync overloads that output SimplifiedLabels and RiskLevel as additional CSV columns
+- HtmlExportService gains BuildHtml and WriteAsync overloads with risk-level summary cards, a Simplified column, and color-coded Risk badges per row
+- Original PermissionEntry-based methods remain completely unchanged in both services
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Add simplified export overloads to CsvExportService** - `fe19249` (feat)
+2. **Task 2: Add simplified export overloads to HtmlExportService** - `899ab7d` (feat)
+
+## Files Created/Modified
+- `SharepointToolbox/Services/Export/CsvExportService.cs` - Added SimplifiedHeader constant, BuildCsv(SimplifiedPermissionEntry) overload with merge logic, WriteAsync overload
+- `SharepointToolbox/Services/Export/HtmlExportService.cs` - Added RiskLevelColors helper, BuildHtml(SimplifiedPermissionEntry) with risk summary cards and color-coded table, WriteAsync overload
+
+## Decisions Made
+- Used entry.Inner.Users in the HTML simplified overload for user pill display names, consistent with how the original BuildHtml accesses user names
+- Risk-level colors applied via inline styles (not CSS classes) to keep HTML reports fully self-contained and portable
+
+## Deviations from Plan
+
+None - plan executed exactly as written.
+
+## Issues Encountered
+None
+
+## User Setup Required
+None - no external service configuration required.
+
+## Next Phase Readiness
+- Export services ready for plan 08-05 to wire PermissionsViewModel export commands to pass SimplifiedResults when IsSimplifiedMode is active
+- Both overloads follow same pattern as originals, making ViewModel integration straightforward
+
+---
+*Phase: 08-simplified-permissions*
+*Completed: 2026-04-07*