// Erste Audit — 1 Quiz im Integrations-Modul (warum DSGVO+AI-Act zusammen)
    if ((state.moduleCorrect && state.moduleCorrect['integration'] >= 1)) unlockBadge('erste_audit');
    // DSGVO-Kenner — 5 Quiz in DSGVO-Essenz-Modulen
    if ((state.moduleCorrect && state.moduleCorrect['dsgvo-essenz'] >= 5)) unlockBadge('dsgvo_kenner');
    // AI-Act-Kenner — 5 Quiz in AI-Act-Essenz-Modulen
    if ((state.moduleCorrect && state.moduleCorrect['ai-act-essenz'] >= 5)) unlockBadge('ai_act_kenner');
    // Crosswalk-Meister — 5 Quiz im Crosswalk-Modul (DSFA <-> RMS)
    if ((state.moduleCorrect && state.moduleCorrect['crosswalk'] >= 5)) unlockBadge('crosswalk_meister');
    // Art-22-Pro — 3 Quiz im Art-22-Modul
    if ((state.moduleCorrect && state.moduleCorrect['art22'] >= 3)) unlockBadge('art22_pro');
    // Register-Architekt — alle Flashcards des Risikoregister-Moduls bestanden
    if ((state.modulePassedFlash && state.modulePassedFlash['risikoregister'])) unlockBadge('register_architekt');
    // KURT-Meister — alle 5 Curricula komplett
    if ((state.completedCurricula || []).length >= 5) unlockBadge('kurt_meister');
    // Compliance-Disziplin — 14-Tage-Streak (etwas weicher als Cora's 30, weil KURT-Use-Cases punktuell)
    if (state.maxStreak >= 14) unlockBadge('streak_14');
    // Night Owl & Early Bird (beibehalten)
    const h = new Date().getHours();
    if (h >= 22) unlockBadge('night_owl');
    if (h < 7) unlockBadge('early_bird');