add "no dependency on Tor controller connection" to the design
Please never make Tor Browser (Button) dependent on having a Tor controller connection. If it always could work without, that would be awesome.
Otherwise this would break the ability to run Tor Browser behind an Transparent Proxy Anonymizing Middlebox, where by design connection to the Tor control port are forbiden. (Because "getinfo address" leaks the real IP.)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information