docs(08-04): complete export services simplified overloads plan

- SUMMARY.md with task commits and decisions
- STATE.md updated to plan 4 of 6
- ROADMAP.md progress updated

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.planning/ROADMAP.md

@@ -75,7 +75,7 @@ Plans:
   2. The report shows summary counts per permission level with color indicators distinguishing high, medium, and low access levels
   3. A detail-level selector (simple / detailed) controls whether individual item-level rows are shown or collapsed into summary rows
   4. Toggling modes and detail level does not require re-running the scan — it re-renders from the already-fetched data
-**Plans:** 2/6 plans executed
+**Plans:** 4/6 plans executed
 Plans:
 - [ ] 08-01-PLAN.md — RiskLevel enum, PermissionLevelMapping, SimplifiedPermissionEntry, PermissionSummary (Wave 1)
 - [ ] 08-02-PLAN.md — PermissionsViewModel simplified mode, detail toggle, summary computation (Wave 2)
@@ -106,5 +106,5 @@ Plans:
 | 5. Distribution and Hardening | v1.0 | 3/3 | Complete | 2026-04-03 |
 | 6. Global Site Selection | 5/5 | Complete   | 2026-04-07 | - |
 | 7. User Access Audit | 10/10 | Complete   | 2026-04-07 | - |
-| 8. Simplified Permissions | 2/6 | In Progress|  | - |
+| 8. Simplified Permissions | 4/6 | In Progress|  | - |
 | 9. Storage Visualization | v1.1 | 0/? | Not started | - |

.planning/STATE.md

@@ -2,15 +2,15 @@
 gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
-status: in-progress
+status: completed
-stopped_at: Completed 08-02-PLAN.md
+stopped_at: Completed 08-04-PLAN.md
-last_updated: "2026-04-07T12:10:45.515Z"
+last_updated: "2026-04-07T12:14:18.411Z"
-last_activity: 2026-04-07 — Completed 08-01 (Permission Data Models and Mapping Layer)
+last_activity: 2026-04-07 — Completed 08-04 (Export Services Simplified Overloads)
 progress:
   total_phases: 4
   completed_phases: 2
   total_plans: 21
-  completed_plans: 17
+  completed_plans: 19
 ---
 
 # Project State
@@ -25,12 +25,12 @@ See: .planning/PROJECT.md (updated 2026-04-07)
 ## Current Position
 
 Phase: 8 — Simplified Permissions
-Plan: 2 of 6
+Plan: 4 of 6
-Status: Plan 08-02 complete, advancing to 08-03
+Status: Plan 08-04 complete, advancing to 08-05
-Last activity: 2026-04-07 — Completed 08-02 (ViewModel Toggle Logic)
+Last activity: 2026-04-07 — Completed 08-04 (Export Services Simplified Overloads)
 
 ```
-v1.1 Progress: [████████░░] 81%
+v1.1 Progress: [█████████░] 90%
 Phase 6 [x] → Phase 7 [x] → Phase 8 [..] → Phase 9 [ ]
 ```
 
@@ -58,6 +58,8 @@ Phase 6 [x] → Phase 7 [x] → Phase 8 [..] → Phase 9 [ ]
 | Phase 07-user-access-audit P09 | 6 | 1 tasks | 1 files |
 | Phase 07-user-access-audit P10 | 5 | 1 tasks | 1 files |
 | Phase 08 P02 | 84 | 1 tasks | 1 files |
+| Phase 08 P03 | 77 | 1 tasks | 2 files |
+| Phase 08 P04 | 2 | 2 tasks | 2 files |
 
 ## Accumulated Context
 
@@ -111,6 +113,6 @@ None.
 
 ## Session Continuity
 
-Last session: 2026-04-07T12:10:45.513Z
+Last session: 2026-04-07T12:14:18.409Z
-Stopped at: Completed 08-02-PLAN.md
+Stopped at: Completed 08-04-PLAN.md
 Resume file: None

.planning/phases/08-simplified-permissions/08-04-SUMMARY.md

@@ -0,0 +1,88 @@
+---
+phase: 08-simplified-permissions
+plan: 04
+subsystem: export
+tags: [csv, html, export, risk-level, color-coding, simplified-permissions]
+
+requires:
+  - phase: 08-01
+    provides: SimplifiedPermissionEntry, PermissionSummary, PermissionSummaryBuilder, RiskLevel models
+provides:
+  - BuildCsv overload accepting SimplifiedPermissionEntry with SimplifiedLabels and RiskLevel columns
+  - BuildHtml overload accepting SimplifiedPermissionEntry with risk summary cards and color-coded badges
+  - WriteAsync overloads for both CSV and HTML simplified exports
+affects: [08-05, 08-06]
+
+tech-stack:
+  added: []
+  patterns: [method-overload-for-simplified-mode, risk-level-color-mapping]
+
+key-files:
+  created: []
+  modified:
+    - SharepointToolbox/Services/Export/CsvExportService.cs
+    - SharepointToolbox/Services/Export/HtmlExportService.cs
+
+key-decisions:
+  - "Simplified HTML uses entry.Inner.Users for user pill names (accessing original PermissionEntry) to match existing pattern"
+  - "Risk-level colors use inline CSS styles on each element rather than CSS classes for self-contained HTML portability"
+
+patterns-established:
+  - "RiskLevelColors helper returns (bg, text, border) tuple for consistent color coding across HTML elements"
+  - "Simplified overloads mirror original method signatures but accept SimplifiedPermissionEntry — no changes to existing methods"
+
+requirements-completed: [SIMP-01, SIMP-02]
+
+duration: 2min
+completed: 2026-04-07
+---
+
+# Phase 08 Plan 04: Export Services Simplified Overloads Summary
+
+**CSV and HTML export services extended with SimplifiedPermissionEntry overloads including risk-level color coding and simplified labels columns**
+
+## Performance
+
+- **Duration:** 2 min
+- **Started:** 2026-04-07T12:11:51Z
+- **Completed:** 2026-04-07T12:13:12Z
+- **Tasks:** 2
+- **Files modified:** 2
+
+## Accomplishments
+- CsvExportService gains BuildCsv and WriteAsync overloads that output SimplifiedLabels and RiskLevel as additional CSV columns
+- HtmlExportService gains BuildHtml and WriteAsync overloads with risk-level summary cards, a Simplified column, and color-coded Risk badges per row
+- Original PermissionEntry-based methods remain completely unchanged in both services
+
+## Task Commits
+
+Each task was committed atomically:
+
+1. **Task 1: Add simplified export overloads to CsvExportService** - `fe19249` (feat)
+2. **Task 2: Add simplified export overloads to HtmlExportService** - `899ab7d` (feat)
+
+## Files Created/Modified
+- `SharepointToolbox/Services/Export/CsvExportService.cs` - Added SimplifiedHeader constant, BuildCsv(SimplifiedPermissionEntry) overload with merge logic, WriteAsync overload
+- `SharepointToolbox/Services/Export/HtmlExportService.cs` - Added RiskLevelColors helper, BuildHtml(SimplifiedPermissionEntry) with risk summary cards and color-coded table, WriteAsync overload
+
+## Decisions Made
+- Used entry.Inner.Users in the HTML simplified overload for user pill display names, consistent with how the original BuildHtml accesses user names
+- Risk-level colors applied via inline styles (not CSS classes) to keep HTML reports fully self-contained and portable
+
+## Deviations from Plan
+
+None - plan executed exactly as written.
+
+## Issues Encountered
+None
+
+## User Setup Required
+None - no external service configuration required.
+
+## Next Phase Readiness
+- Export services ready for plan 08-05 to wire PermissionsViewModel export commands to pass SimplifiedResults when IsSimplifiedMode is active
+- Both overloads follow same pattern as originals, making ViewModel integration straightforward
+
+---
+*Phase: 08-simplified-permissions*
+*Completed: 2026-04-07*