@certrev/cert-block 0.5.4 → 1.0.0

package/src/builder/__tests__/builder.test.tsx

@@ -1,158 +0,0 @@
-/**
- * SSR-render tests for the Builder.io adapter (`@certrev/cert-block/builder`), the panel-validated
- * "ambient-URL anchor" model — exercised through `renderToStaticMarkup` (the edge SSR path).
- *
- * Contract proved here:
- *   • the anchor renders the CURRENT page's verified badge — and badge ONLY (JSON-LD is emitted
- *     server-side, decoupled from the visual slot);
- *   • EVERY non-render path (suppress verdict, no credential for the page) renders nothing in
- *     production (fail-closed);
- *   • in the Builder editor (`isEditing`) with no live credential, a truthful placeholder shows —
- *     never a fake badge, and never any JSON-LD;
- *   • the registration is ZERO-input: the editor cannot choose or forge which credential renders.
- */
-import { renderToStaticMarkup } from 'react-dom/server'
-import { describe, expect, it } from 'vitest'
-import { makeMockPayload } from '../../contract/fixtures.js'
-import type { CertVerdict } from '../../contract/kernel.js'
-import { CertRevAnchor, CertRevProvider, certRevAnchorComponent, type CurrentCredential } from '../index.js'
-
-const renderVerdict: CertVerdict = { decision: 'render', payload: makeMockPayload() }
-const suppressVerdict: CertVerdict = { decision: 'suppress', reason: 'revoked' }
-
-function render(current: CurrentCredential | null, isEditing = false): string {
-	return renderToStaticMarkup(
-		<CertRevProvider current={current} isEditing={isEditing}>
-			<CertRevAnchor />
-		</CertRevProvider>,
-	)
-}
-
-describe('Builder adapter — registration (zero-input anchor)', () => {
-	it('registers "CertREV Review" with NO inputs (editor places it; system resolves the credential)', () => {
-		expect(certRevAnchorComponent.name).toBe('CertREV Review')
-		expect(certRevAnchorComponent.component).toBe(CertRevAnchor)
-		expect(certRevAnchorComponent.inputs).toEqual([])
-	})
-})
-
-describe('Builder adapter — CertRevAnchor render', () => {
-	it('renders the current page’s verified badge — and ONLY the badge (no JSON-LD; that is server-side)', () => {
-		const html = render({ verdict: renderVerdict, pageUrl: 'https://brand.example.com/a' })
-		expect(html).toContain('certrev-badge')
-		expect(html).toContain('Dr. Jane Doe')
-		expect(html).not.toContain('application/ld+json') // JSON-LD decoupled to the article template
-	})
-
-	it('FAIL-CLOSED: a suppress verdict renders nothing', () => {
-		expect(render({ verdict: suppressVerdict })).toBe('')
-	})
-
-	it('FAIL-CLOSED: no credential for this page renders nothing in production', () => {
-		expect(render(null, false)).toBe('')
-	})
-
-	it('EDITOR: no live credential + isEditing renders a truthful placeholder (no badge, no JSON-LD)', () => {
-		const html = render(null, true)
-		expect(html).toContain('data-certrev-editor-placeholder')
-		expect(html).toContain('resolves at publish')
-		expect(html).not.toContain('certrev-badge')
-		expect(html).not.toContain('application/ld+json')
-	})
-
-	it('EDITOR: a live verified credential renders the REAL badge even in editing mode (true draft-verify)', () => {
-		const html = render({ verdict: renderVerdict }, true)
-		expect(html).toContain('certrev-badge')
-		expect(html).not.toContain('data-certrev-editor-placeholder')
-	})
-})
-
-// ── POR-10721 W1/W3: the PUSH kit (CertReviewCard) + contract lock ──
-import {
-	BUILDER_CERT_CHROME_KEYS,
-	BUILDER_REGISTRATION,
-	type BuilderCertChromeData,
-	CERT_COMPONENT_NAME,
-	certRevCertComponent,
-	CertReviewCard,
-	WIRE_INPUTS,
-} from '../index.js'
-
-describe('POR-10721 W3 — Builder kit contract lock (inputs ⇄ wire-type parity)', () => {
-	it('WIRE_INPUTS names are EXACTLY the wire-type keys, in order (no silent drift)', () => {
-		expect(WIRE_INPUTS.map((i) => i.name)).toEqual([...BUILDER_CERT_CHROME_KEYS])
-	})
-	it('BUILDER_REGISTRATION carries every wire input + the placement inputs, named canonically', () => {
-		expect(BUILDER_REGISTRATION.name).toBe(CERT_COMPONENT_NAME)
-		const inputNames = new Set(BUILDER_REGISTRATION.inputs.map((i) => i.name))
-		for (const k of BUILDER_CERT_CHROME_KEYS) expect(inputNames.has(k)).toBe(true)
-		expect(inputNames.has('mode')).toBe(true) // a placement input, NOT a wire-type key
-	})
-})
-
-describe('POR-10721 — certRevCertComponent (the drop-in gen2 registration)', () => {
-	it('carries the identical W3-locked registration as BUILDER_REGISTRATION (name/component/inputs)', () => {
-		expect(certRevCertComponent.name).toBe(CERT_COMPONENT_NAME)
-		expect(certRevCertComponent.component).toBe(CertReviewCard)
-		expect(certRevCertComponent.inputs).toEqual([...BUILDER_REGISTRATION.inputs])
-	})
-	it('inputs is a FRESH mutable array — never the canonical readonly instance', () => {
-		expect(certRevCertComponent.inputs).not.toBe(BUILDER_REGISTRATION.inputs)
-		expect(Object.isFrozen(certRevCertComponent.inputs)).toBe(false)
-	})
-	it('wire inputs sit under the editor "Advanced" reveal; placement inputs stay front-and-center', () => {
-		const byName = new Map(certRevCertComponent.inputs.map((i) => [i.name, i]))
-		for (const k of BUILDER_CERT_CHROME_KEYS) expect(byName.get(k)?.advanced).toBe(true)
-		expect(byName.get('mode')?.advanced).toBeUndefined()
-		expect(byName.get('part')?.advanced).toBeUndefined()
-	})
-})
-
-describe('POR-10721 W1 — CertReviewCard render + the fused-credential R1 gate', () => {
-	const base: Partial<BuilderCertChromeData> = {
-		reviewerName: 'Dr. Jane Doe',
-		verifyUrl: 'https://certrev.com/verify/abc',
-		bylinePlain: 'Reviewed on 2026-03-08 by Dr. Jane Doe.',
-		certifiedAt: '2026-03-08',
-		scopeLine: 'Independent editorial review.',
-		display: { showExpertPhoto: true, showCredentials: true },
-		renderDef: null,
-		stringsVersion: '2026-07',
-	}
-	it('renders a certified face (the reviewer name)', () => {
-		expect(renderToStaticMarkup(<CertReviewCard {...base} />)).toContain('Dr. Jane Doe')
-	})
-	it('name-only when credentialVerification is null — a credential never leaks without its date', () => {
-		expect(renderToStaticMarkup(<CertReviewCard {...base} credentialVerification={null} />)).not.toContain(
-			'FAAAAI',
-		)
-	})
-	it('renders the credential ONLY as the fused (credential + verifiedAt) pair', () => {
-		const html = renderToStaticMarkup(
-			<CertReviewCard {...base} credentialVerification={{ credential: 'FAAAAI', verifiedAt: '2026-03-01' }} />,
-		)
-		expect(html).toContain('FAAAAI')
-	})
-	it('showCredentials:false collapses to name-only even with the pair present', () => {
-		const html = renderToStaticMarkup(
-			<CertReviewCard
-				{...base}
-				display={{ showExpertPhoto: true, showCredentials: false }}
-				credentialVerification={{ credential: 'FAAAAI', verifiedAt: '2026-03-01' }}
-			/>,
-		)
-		expect(html).not.toContain('FAAAAI')
-	})
-	it('returns nothing pre-cert (no reviewerName / verifyUrl)', () => {
-		expect(renderToStaticMarkup(<CertReviewCard />)).toBe('')
-	})
-	it('passes `part` through to renderCertBlock (POR-10741 — header excludes the memo, memo excludes the header)', () => {
-		const withMemo = { ...base, memo: 'Checked the claims against current guidance; accurate.' }
-		const header = renderToStaticMarkup(<CertReviewCard {...withMemo} part="header" />)
-		const memo = renderToStaticMarkup(<CertReviewCard {...withMemo} part="memo" />)
-		expect(header).toContain('Expert reviewed')
-		expect(header).not.toContain('Checked the claims against current guidance; accurate.')
-		expect(memo).toContain('Checked the claims against current guidance; accurate.')
-		expect(memo).not.toContain('Expert reviewed')
-	})
-})

package/src/modal/cert-modal-view.test.ts

@@ -1,175 +0,0 @@
-/** Unit tests for the pure cert-modal view (POR-10102): envelope → dialog HTML. */
-
-import { describe, expect, it } from "vitest";
-import {
-	type CertModalContent,
-	deriveInitials,
-	renderCertDialogInner,
-	renderExpertDialogInner,
-	safeHref,
-	signatureName,
-	stripProtocol,
-} from "./cert-modal-view.js";
-import { CERT_SCOPE_LINE, COMPENSATED_EXPERT_CUE } from "./display-strings.js";
-
-const FULL: CertModalContent = {
-	expert: {
-		displayName: "Dr. Erik Schraga, MD",
-		credentials: [
-			{ cardLabel: "Board-Certified" },
-			{ cardLabel: "Emergency Medicine" },
-		],
-		profileUrl: "https://certrev.com/expert/abc",
-		photoUrl: null,
-		bio: "Short bio.",
-		background: "Reviews health content for accuracy and responsible framing.",
-	},
-	certifiedAt: "2026-04-14T00:00:00.000Z",
-	verifyUrl: "https://certrev.com/verify/abc123",
-	articleTitle: "Spring Cold or Spring Allergies?",
-	displayCertId: "CR-2026-0512",
-	display: { showExpertPhoto: false, showBio: true },
-};
-
-describe("name helpers", () => {
-	it("deriveInitials strips honorific AND post-nominal (ES, not EM)", () => {
-		expect(deriveInitials("Dr. Erik Schraga, MD")).toBe("ES");
-		expect(deriveInitials("Jane Doe")).toBe("JD");
-		expect(deriveInitials("Prof. Ada Lovelace, PhD")).toBe("AL");
-		expect(deriveInitials("Madonna")).toBe("MA");
-		expect(deriveInitials("")).toBe("");
-	});
-	it("signatureName is the bare given+family name", () => {
-		expect(signatureName("Dr. Erik Schraga, MD")).toBe("Erik Schraga");
-		expect(signatureName("Jane Doe")).toBe("Jane Doe");
-	});
-	it("stripProtocol / safeHref", () => {
-		expect(stripProtocol("https://certrev.com/verify/x/")).toBe(
-			"certrev.com/verify/x",
-		);
-		expect(safeHref("https://certrev.com/x")).toBe("https://certrev.com/x");
-		expect(safeHref("javascript:alert(1)")).toBe("#");
-		expect(safeHref("/relative")).toBe("#");
-		expect(safeHref(null)).toBe("#");
-	});
-});
-
-describe("renderCertDialogInner (3a)", () => {
-	it("renders the header, name, creds, article title, cert id, signature, stamp, CTA", () => {
-		const html = renderCertDialogInner(FULL) ?? "";
-		expect(html).toContain("Certificate of Expert Review");
-		expect(html).toContain("Dr. Erik Schraga, MD");
-		expect(html).toContain("Board-Certified · Emergency Medicine");
-		expect(html).toContain("Spring Cold or Spring Allergies?");
-		expect(html).toContain("CR-2026-0512");
-		expect(html).toContain(">Erik Schraga<"); // Allura signature = core name
-		expect(html).toContain("certrev.com/verify/abc123"); // footer url, protocol stripped
-		expect(html).toContain("CERTREV VERIFIED · CERTIFIED"); // the stamp textPath
-		expect(html).toContain("View full certificate");
-		expect(html).toContain('href="https://certrev.com/verify/abc123"');
-	});
-	it("fails closed with no reviewer name", () => {
-		expect(
-			renderCertDialogInner({
-				...FULL,
-				expert: { ...FULL.expert, displayName: "" },
-			}),
-		).toBeNull();
-		expect(renderCertDialogInner({ ...FULL, expert: null })).toBeNull();
-	});
-	it('drops the "Certifies the article" block when no title', () => {
-		const html = renderCertDialogInner({ ...FULL, articleTitle: null }) ?? "";
-		expect(html).not.toContain("Certifies the article");
-	});
-	it("drops the Certificate ID column when no display id", () => {
-		const html = renderCertDialogInner({ ...FULL, displayCertId: null }) ?? "";
-		expect(html).not.toContain("Certificate ID");
-		expect(html).toContain("Issued"); // other meta cols still present
-	});
-	it("escapes a hostile reviewer name", () => {
-		const html =
-			renderCertDialogInner({
-				...FULL,
-				expert: { ...FULL.expert, displayName: "<script>x</script>" },
-			}) ?? "";
-		expect(html).not.toContain("<script>x</script>");
-		expect(html).toContain("&lt;script&gt;");
-	});
-});
-
-describe("renderExpertDialogInner (4b)", () => {
-	it("renders the header, name, verified credential chips, bio, trust, CTA", () => {
-		const html = renderExpertDialogInner(FULL) ?? "";
-		expect(html).toContain("Verified reviewer");
-		expect(html).toContain("Dr. Erik Schraga, MD");
-		expect(html).toContain(">Board-Certified<");
-		expect(html).toContain(">Emergency Medicine<");
-		expect(html).toContain("Reviews health content for accuracy"); // verified background as bio
-		expect(html).toContain("Independently reviewed · Certified Apr 14, 2026");
-		expect(html).toContain("View full profile on CertREV");
-		expect(html).toContain('href="https://certrev.com/expert/abc"');
-	});
-	it("NEVER renders an affiliation subtitle (omitted — no data source)", () => {
-		const html = renderExpertDialogInner(FULL) ?? "";
-		expect(html).not.toContain("crm-id__subtitle");
-	});
-	it("drops the bio when showBio is false", () => {
-		const html =
-			renderExpertDialogInner({ ...FULL, display: { showBio: false } }) ?? "";
-		expect(html).not.toContain("crm-bio");
-	});
-	it("renders no chips when there are no credentials", () => {
-		const html =
-			renderExpertDialogInner({
-				...FULL,
-				expert: { ...FULL.expert, credentials: [] },
-			}) ?? "";
-		expect(html).not.toContain("crm-chips");
-	});
-	it("drops a javascript: profile url to #", () => {
-		const html =
-			renderExpertDialogInner({
-				...FULL,
-				expert: { ...FULL.expert, profileUrl: "javascript:alert(1)" },
-			}) ?? "";
-		expect(html).toContain('href="#"');
-		expect(html).not.toContain("javascript:");
-	});
-	it("fails closed with no reviewer name", () => {
-		expect(
-			renderExpertDialogInner({
-				...FULL,
-				expert: { ...FULL.expert, displayName: null },
-			}),
-		).toBeNull();
-	});
-});
-
-describe("FTC disclosure footer (POR-10496)", () => {
-	const COMPENSATED: CertModalContent = {
-		...FULL,
-		expert: { ...FULL.expert, compensationCue: COMPENSATED_EXPERT_CUE },
-	};
-	// A pro-bono reviewer carries no cue (FULL omits `compensationCue`).
-	const PRO_BONO = FULL;
-
-	for (const [label, render] of [
-		["reviewer (4b)", renderExpertDialogInner],
-		["certificate (3a)", renderCertDialogInner],
-	] as const) {
-		it(`${label}: compensated → the cue label + the scope line`, () => {
-			const html = render(COMPENSATED) ?? "";
-			expect(html).toContain("crm-disclosure");
-			expect(html).toContain("crm-disclosure__cue");
-			expect(html).toContain(COMPENSATED_EXPERT_CUE);
-			expect(html).toContain(CERT_SCOPE_LINE);
-		});
-		it(`${label}: pro-bono → the scope line ONLY (no cue label)`, () => {
-			const html = render(PRO_BONO) ?? "";
-			expect(html).toContain("crm-disclosure"); // footer + scope line always render
-			expect(html).toContain(CERT_SCOPE_LINE);
-			expect(html).not.toContain("crm-disclosure__cue"); // the "Compensated expert" label is dropped
-			expect(html).not.toContain(COMPENSATED_EXPERT_CUE);
-		});
-	}
-});

package/src/modal/certrev-cert-modal.test.ts

@@ -1,125 +0,0 @@
-// @vitest-environment jsdom
-/**
- * Unit tests — the `<certrev-cert-modal>` kill-switch decision (POR-10101 / POR-10684).
- *
- * `isArtifactSuppressed` is the modal-side lifecycle gate: a fetched Delivery-API artifact that is
- * REVOKED (the slim `CertTombstone` OR a legacy envelope with `revokedAt` set) or EXPIRED must NOT
- * render "verified" content. The route-integration + control-plane tests prove the tombstone is
- * SERVED and cryptographically verifies to `suppress:'revoked'`; this pins the modal's consumption
- * of it — including the SLIM tombstone (no payload), which a `payload.lifecycle` read alone would
- * miss so `markSuppressed()` would never fire (POR-10684).
- */
-
-import type {
-	CertDeliveryArtifact,
-	CertDeliveryEnvelope,
-	CertTombstone,
-} from "@certrev/cert-contract";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { CERT_MODAL_TAG, isArtifactSuppressed } from "./certrev-cert-modal.js";
-
-function envelope(
-	lifecycle: Partial<CertDeliveryEnvelope["payload"]["lifecycle"]>,
-): CertDeliveryEnvelope {
-	// Only `lifecycle` matters to the gate; the rest is filler cast through `unknown`.
-	return {
-		payload: {
-			lifecycle: {
-				issuedAt: "2026-01-01T00:00:00.000Z",
-				expiresAt: "2099-01-01T00:00:00.000Z",
-				revokedAt: null,
-				revision: 1,
-				...lifecycle,
-			},
-		},
-		signature: {},
-	} as unknown as CertDeliveryEnvelope;
-}
-
-/** A SLIM revocation tombstone (POR-10481): `kind: 'tombstone'`, subject + revocation facts, NO payload. */
-function tombstone(): CertTombstone {
-	return {
-		kind: "tombstone",
-		contractVersion: 1,
-		subject: { platform: "shopify", externalId: "gid://shopify/Article/12345" },
-		revokedAt: "2026-06-20T00:00:00.000Z",
-		revocationReason: "cert_revoked",
-		signature: { alg: "ed25519", kid: "cert-issuer-1", value: "x".repeat(86) },
-	} as unknown as CertTombstone;
-}
-
-describe("isArtifactSuppressed (modal kill-switch)", () => {
-	it("a live envelope (not revoked, not expired) → NOT suppressed", () => {
-		expect(isArtifactSuppressed(envelope({}))).toBe(false);
-	});
-
-	it('a SLIM tombstone (kind: "tombstone", no payload) → suppressed (POR-10684)', () => {
-		// The whole point of POR-10684: a slim tombstone has NO `payload.lifecycle`, so the old
-		// payload-only read returned false and markSuppressed() never fired. `isTombstone` catches it.
-		expect(isArtifactSuppressed(tombstone())).toBe(true);
-	});
-
-	it("a REVOKED envelope (legacy: revokedAt set) → suppressed", () => {
-		expect(
-			isArtifactSuppressed(envelope({ revokedAt: "2026-06-20T00:00:00.000Z" })),
-		).toBe(true);
-	});
-
-	it("an EXPIRED envelope (expiresAt in the past) → suppressed", () => {
-		expect(
-			isArtifactSuppressed(envelope({ expiresAt: "2020-01-01T00:00:00.000Z" })),
-		).toBe(true);
-	});
-
-	it("a missing/malformed artifact → NOT suppressed (fail-open; the 404 path handles absence)", () => {
-		expect(isArtifactSuppressed(null)).toBe(false);
-		expect(isArtifactSuppressed(undefined)).toBe(false);
-		expect(
-			isArtifactSuppressed({ payload: {} } as unknown as CertDeliveryArtifact),
-		).toBe(false);
-	});
-});
-
-describe("<certrev-cert-modal> markSuppressed on a fetched slim tombstone (POR-10684)", () => {
-	afterEach(() => {
-		vi.unstubAllGlobals();
-		document.body.innerHTML = "";
-	});
-
-	it("a fetched slim tombstone → marks the host suppressed AND hides the light-DOM triggers", async () => {
-		// The Delivery API serves a slim tombstone (200, kind: 'tombstone', no payload). Before
-		// POR-10684 the modal read `payload.lifecycle`, missed it, and never called markSuppressed().
-		vi.stubGlobal(
-			"fetch",
-			vi.fn(
-				async () =>
-					({ ok: true, json: async () => tombstone() }) as unknown as Response,
-			),
-		);
-
-		const el = document.createElement(CERT_MODAL_TAG) as HTMLElement & {
-			open(kind: "cert" | "expert"): boolean;
-		};
-		el.setAttribute("data-delivery-api", "https://portal.certrev.com");
-		el.setAttribute("data-platform", "shopify");
-		el.setAttribute("data-external-id", "gid://shopify/Article/12345");
-		el.setAttribute("data-fonts", "host"); // skip document-level font injection in the test
-		document.body.appendChild(el);
-
-		const trigger = document.createElement("a");
-		trigger.setAttribute("data-certrev-modal-open", "cert");
-		document.body.appendChild(trigger);
-
-		const handled = el.open("cert");
-		expect(handled).toBe(true); // it has a fetch source, so it takes over the open
-		// The open() kicks off an un-awaited fetch; await the private in-flight promise it stored.
-		await (el as unknown as { fetchInFlight: Promise<void> | null })
-			.fetchInFlight;
-
-		expect(el.hasAttribute("data-certrev-suppressed")).toBe(true);
-		expect(trigger.hasAttribute("hidden")).toBe(true);
-		expect(trigger.getAttribute("aria-hidden")).toBe("true");
-		// A revoked cert never renders a dialog.
-		expect(el.shadowRoot?.querySelector("dialog")).toBeNull();
-	});
-});

package/src/modal/ftc-guard.test.ts

@@ -1,153 +0,0 @@
-// @vitest-environment jsdom
-/**
- * Unit tests for the native FTC disclosure tamper guard (iframe→native parity for the MSA §3
- * anti-stripping kill switch). Pure DOM. The expected text is the single source of truth
- * `FTC_DISCLOSURE_LINE`, so these also pin the guard to the verbatim copy.
- */
-
-import { beforeEach, describe, expect, it } from "vitest";
-import { FTC_DISCLOSURE_LINE } from "./ftc-disclosure.js";
-import {
-	enforceFtcDisclosure,
-	FTC_NEUTRALIZED_ATTR,
-	installFtcGuard,
-	isDisclosureIntact,
-	neutralizeMemo,
-} from "./ftc-guard.js";
-
-beforeEach(() => {
-	document.head.innerHTML = "";
-	document.body.innerHTML = "";
-});
-
-/** jsdom returns a 0×0 box for everything; stub a non-zero rect so the visibility check passes. */
-function makeVisible(el: Element): void {
-	(el as HTMLElement).getBoundingClientRect = () =>
-		({
-			width: 200,
-			height: 18,
-			top: 0,
-			left: 0,
-			right: 200,
-			bottom: 18,
-			x: 0,
-			y: 0,
-			toJSON() {},
-		}) as DOMRect;
-}
-
-/** Mount a memo wrap + section carrying the verbatim disclosure line. Returns the line node too. */
-function mountMemo(lineText: string = FTC_DISCLOSURE_LINE): {
-	wrap: HTMLElement;
-	memo: HTMLElement;
-	line: HTMLElement;
-} {
-	const wrap = document.createElement("div");
-	wrap.className = "certrev-memo-wrap";
-	wrap.innerHTML = `
-		<section class="certrev-memo">
-			<p class="certrev-memo__ftc" data-ftc-disclosure><span data-ftc-line>${lineText}</span></p>
-		</section>`;
-	document.body.appendChild(wrap);
-	const line = wrap.querySelector<HTMLElement>("[data-ftc-line]")!;
-	makeVisible(line);
-	return {
-		wrap,
-		memo: wrap.querySelector<HTMLElement>(".certrev-memo")!,
-		line,
-	};
-}
-
-describe("isDisclosureIntact", () => {
-	it("true when the line is present, verbatim, and visible", () => {
-		const { memo } = mountMemo();
-		expect(isDisclosureIntact(memo)).toBe(true);
-	});
-
-	it("false when the disclosure line node is missing (stripped)", () => {
-		const { memo, line } = mountMemo();
-		line.remove();
-		expect(isDisclosureIntact(memo)).toBe(false);
-	});
-
-	it("false when the text was altered (a single changed word)", () => {
-		const { memo } = mountMemo(
-			FTC_DISCLOSURE_LINE.replace("Independent", "Sponsored"),
-		);
-		expect(isDisclosureIntact(memo)).toBe(false);
-	});
-
-	it("false when the line is hidden via display:none", () => {
-		const { memo, line } = mountMemo();
-		line.style.display = "none";
-		expect(isDisclosureIntact(memo)).toBe(false);
-	});
-
-	it("false when the line is hidden via visibility:hidden", () => {
-		const { memo, line } = mountMemo();
-		line.style.visibility = "hidden";
-		expect(isDisclosureIntact(memo)).toBe(false);
-	});
-
-	it("false when the line is collapsed to a zero box (rect 0×0)", () => {
-		const { memo, line } = mountMemo();
-		(line as HTMLElement).getBoundingClientRect = () =>
-			({ width: 0, height: 0 }) as DOMRect;
-		expect(isDisclosureIntact(memo)).toBe(false);
-	});
-});
-
-describe("neutralizeMemo", () => {
-	it("replaces the memo with the marked neutral notice (no attribution survives)", () => {
-		const { memo } = mountMemo();
-		memo.querySelector("span")!; // sanity: exists pre-neutralize
-		neutralizeMemo(memo);
-		expect(document.querySelector(".certrev-memo")).toBeNull();
-		const notice = document.querySelector(`[${FTC_NEUTRALIZED_ATTR}]`);
-		expect(notice).not.toBeNull();
-		expect(notice!.textContent).toContain("required disclosure was not shown");
-	});
-});
-
-describe("enforceFtcDisclosure", () => {
-	it("leaves an intact memo untouched and returns true", () => {
-		mountMemo();
-		expect(enforceFtcDisclosure(document)).toBe(true);
-		expect(document.querySelector(".certrev-memo")).not.toBeNull();
-		expect(document.querySelector(`[${FTC_NEUTRALIZED_ATTR}]`)).toBeNull();
-	});
-
-	it("neutralizes a tampered memo and returns false", () => {
-		const { line } = mountMemo();
-		line.remove(); // strip the disclosure
-		expect(enforceFtcDisclosure(document)).toBe(false);
-		expect(document.querySelector(".certrev-memo")).toBeNull();
-		expect(document.querySelector(`[${FTC_NEUTRALIZED_ATTR}]`)).not.toBeNull();
-	});
-
-	it("NO-OP (no false positive) when there is no memo at all — the no-memo certified path", () => {
-		// A certified article without an expert memo renders no .certrev-memo (only the card cue).
-		document.body.innerHTML =
-			'<section class="certrev-badge certrev-card">card only, no memo</section>';
-		expect(enforceFtcDisclosure(document)).toBe(true);
-		expect(document.querySelector(`[${FTC_NEUTRALIZED_ATTR}]`)).toBeNull();
-		expect(document.querySelector(".certrev-card")).not.toBeNull();
-	});
-});
-
-describe("installFtcGuard", () => {
-	it("enforces on install (document already interactive)", () => {
-		const { line } = mountMemo();
-		line.remove();
-		installFtcGuard(document);
-		expect(document.querySelector(`[${FTC_NEUTRALIZED_ATTR}]`)).not.toBeNull();
-	});
-
-	it("is idempotent — a second install does not double-bind / re-throw", () => {
-		mountMemo();
-		installFtcGuard(document);
-		expect(() => installFtcGuard(document)).not.toThrow();
-		// Still intact (the second call is a no-op; nothing neutralized a valid memo).
-		expect(document.querySelector(".certrev-memo")).not.toBeNull();
-	});
-});