@metasession.co/devaudit-cli 0.3.18 → 0.3.19

package/sdlc/files/ci/post-deploy-prod.yml.template

@@ -38,7 +38,10 @@ jobs:
     if: >-
       github.event_name == 'workflow_dispatch' ||
       (github.event.deployment_status.state == 'success' &&
-       (github.event.deployment.environment == 'production' || github.event.deployment.environment == 'prod'))
+       (github.event.deployment.environment == 'production' ||
+        github.event.deployment.environment == 'prod' ||
+        endsWith(github.event.deployment.environment, '/ production') ||
+        endsWith(github.event.deployment.environment, '/production')))
     runs-on: {{RUNNER}}
     permissions:
       contents: read
@@ -144,17 +147,17 @@ jobs:
           echo "In-scope releases to promote: ${REQS}"
           echo "REQS=${REQS}" >> "$GITHUB_ENV"
 
-      - name: Start production deployment cycles
+      - name: Start production deployment executions
         run: |
-          chmod +x scripts/report-test-cycle.sh 2>/dev/null || true
+          chmod +x scripts/report-test-execution.sh 2>/dev/null || true
           for PREFIX in ${REQS}; do
             RESP=$(curl -fsS -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" \
               "${BASE}/api/ci/releases/resolve?projectSlug=${PROJECT_SLUG}&versionPrefix=${PREFIX}")
             VERSION=$(echo "$RESP" | jq -r '.latest.version // empty')
             [ -n "$VERSION" ] || VERSION="$PREFIX"
-            bash scripts/report-test-cycle.sh start \
+            bash scripts/report-test-execution.sh start \
               --project-slug "$PROJECT_SLUG" --release "$VERSION" \
-              --sdlc-stage 5 --environment production --cycle-kind deployment \
+              --sdlc-stage 5 --environment production --suite-kind deployment \
               --provider github_actions --external-run-id "$CI_RUN" \
               --external-run-attempt "${{ github.run_attempt }}" --external-job-id "host-deployment" \
               --idempotency-key "github:${{ github.repository }}:post-deploy-prod.deployment:${CI_RUN}:${{ github.run_attempt }}:5:${VERSION}" \
@@ -213,7 +216,7 @@ jobs:
           fi
           exit "$SCRIPT_EXIT"
 
-      - name: Complete production deployment cycles
+      - name: Complete production deployment executions
         if: always() && env.BASE != ''
         run: |
           HOST_VERIFICATION="${{ steps.host_deployment.outputs.verification || 'not_run' }}"
@@ -231,15 +234,15 @@ jobs:
             OUTCOME=failed
             CHECK_STATUS=failed
           fi
-          chmod +x scripts/report-test-cycle.sh scripts/report-release-check.sh 2>/dev/null || true
+          chmod +x scripts/report-test-execution.sh scripts/report-release-check.sh 2>/dev/null || true
           for PREFIX in ${REQS}; do
             RESP=$(curl -fsS -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" \
               "${BASE}/api/ci/releases/resolve?projectSlug=${PROJECT_SLUG}&versionPrefix=${PREFIX}")
             VERSION=$(echo "$RESP" | jq -r '.latest.version // empty')
             [ -n "$VERSION" ] || VERSION="$PREFIX"
-            bash scripts/report-test-cycle.sh complete \
+            bash scripts/report-test-execution.sh complete \
               --project-slug "$PROJECT_SLUG" --release "$VERSION" \
-              --sdlc-stage 5 --environment production --cycle-kind deployment \
+              --sdlc-stage 5 --environment production --suite-kind deployment \
               --provider github_actions --external-run-id "$CI_RUN" \
               --external-run-attempt "${{ github.run_attempt }}" --external-job-id "host-deployment" \
               --idempotency-key "github:${{ github.repository }}:post-deploy-prod.deployment:${CI_RUN}:${{ github.run_attempt }}:5:${VERSION}" \
@@ -269,18 +272,18 @@ jobs:
             exit 1
           fi
 
-      - name: Start production smoke cycles
+      - name: Start production smoke executions
         if: steps.production_probe.outputs.verification == 'production_health_success' && steps.host_deployment.outputs.verification == 'success'
         run: |
-          chmod +x scripts/report-test-cycle.sh 2>/dev/null || true
+          chmod +x scripts/report-test-execution.sh 2>/dev/null || true
           for PREFIX in ${REQS}; do
             RESP=$(curl -fsS -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" \
               "${BASE}/api/ci/releases/resolve?projectSlug=${PROJECT_SLUG}&versionPrefix=${PREFIX}")
             VERSION=$(echo "$RESP" | jq -r '.latest.version // empty')
             [ -n "$VERSION" ] || VERSION="$PREFIX"
-            bash scripts/report-test-cycle.sh start \
+            bash scripts/report-test-execution.sh start \
               --project-slug "$PROJECT_SLUG" --release "$VERSION" \
-              --sdlc-stage 5 --environment production --cycle-kind smoke \
+              --sdlc-stage 5 --environment production --suite-kind smoke \
               --provider github_actions --external-run-id "$CI_RUN" \
               --external-run-attempt "${{ github.run_attempt }}" --external-job-id "production-smoke" \
               --idempotency-key "github:${{ github.repository }}:post-deploy-prod.smoke:${CI_RUN}:${{ github.run_attempt }}:5:${VERSION}" \
@@ -314,7 +317,7 @@ jobs:
           }
           RESULTS_EOF
 
-      - name: Complete production smoke cycles
+      - name: Complete production smoke executions
         if: always() && env.BASE != '' && steps.host_deployment.outcome == 'success'
         run: |
           case "${{ steps.production_smoke.outcome }}" in
@@ -323,15 +326,15 @@ jobs:
             skipped) OUTCOME=skipped; CHECK_STATUS=skipped ;;
             *) OUTCOME=failed; CHECK_STATUS=failed ;;
           esac
-          chmod +x scripts/report-test-cycle.sh scripts/report-release-check.sh 2>/dev/null || true
+          chmod +x scripts/report-test-execution.sh scripts/report-release-check.sh 2>/dev/null || true
           for PREFIX in ${REQS}; do
             RESP=$(curl -fsS -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" \
               "${BASE}/api/ci/releases/resolve?projectSlug=${PROJECT_SLUG}&versionPrefix=${PREFIX}")
             VERSION=$(echo "$RESP" | jq -r '.latest.version // empty')
             [ -n "$VERSION" ] || VERSION="$PREFIX"
-            bash scripts/report-test-cycle.sh complete \
+            bash scripts/report-test-execution.sh complete \
               --project-slug "$PROJECT_SLUG" --release "$VERSION" \
-              --sdlc-stage 5 --environment production --cycle-kind smoke \
+              --sdlc-stage 5 --environment production --suite-kind smoke \
               --provider github_actions --external-run-id "$CI_RUN" \
               --external-run-attempt "${{ github.run_attempt }}" --external-job-id "production-smoke" \
               --idempotency-key "github:${{ github.repository }}:post-deploy-prod.smoke:${CI_RUN}:${{ github.run_attempt }}:5:${VERSION}" \
@@ -365,8 +368,8 @@ jobs:
           # incident-export.yml fires on close → incident_report evidence
           # lands on the portal → ISO29119.3.5.4 + SOC2.CC7.2 flip to COVERED.
           #
-          # testCycleId (CI run ID) cross-references #209 so the incident
-          # report traces back to the specific test cycle that detected
+          # testExecutionId (CI run ID) cross-references #209 so the incident
+          # report traces back to the specific test execution that detected
           # the production failure.
           #
           # Ensure the incident label exists (idempotent).
@@ -385,7 +388,7 @@ jobs:
 
           **Production URL:** ${PROD_URL}
           **Git SHA:** ${GIT_SHA}
-          **testCycleId:** ${CI_RUN}
+          **testExecutionId:** ${CI_RUN}
           **Workflow run:** ${WORKFLOW_URL}
           **Date:** ${DATE}
 
@@ -429,7 +432,7 @@ jobs:
       - name: Promote in-scope releases (evidence + status)
         if: steps.production_smoke.outcome == 'success'
         run: |
-          chmod +x scripts/upload-evidence.sh scripts/report-test-cycle.sh scripts/report-release-check.sh 2>/dev/null || true
+          chmod +x scripts/upload-evidence.sh scripts/report-test-execution.sh scripts/report-release-check.sh 2>/dev/null || true
           PROMOTED=0
           EVIDENCE_FAILURES=0
           for PREFIX in ${REQS}; do
@@ -440,14 +443,14 @@ jobs:
             [ -z "$VERSION" ] && VERSION="${PREFIX}"
             RELEASE_ID=$(echo "$RESP" | jq -r '.latest.id // empty')
             REQ_FAILURES=0
-            LINEAGE_FLAGS=(--test-cycle "${CI_RUN}")
-            CYCLE_OUT="$(mktemp)"
-            bash scripts/report-test-cycle.sh start \
+            LINEAGE_FLAGS=(--test-execution "${CI_RUN}")
+            EXECUTION_OUT="$(mktemp)"
+            bash scripts/report-test-execution.sh start \
               --project-slug "${PROJECT_SLUG}" \
               --release "${VERSION}" \
               --sdlc-stage 5 \
               --environment production \
-              --cycle-kind smoke \
+              --suite-kind smoke \
               --provider github_actions \
               --external-run-id "${CI_RUN}" \
               --external-run-attempt "${{ github.run_attempt }}" \
@@ -457,11 +460,11 @@ jobs:
               --branch main \
               --workflow-name "Post-Deploy Production" \
               --workflow-url "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
-              --output-file "$CYCLE_OUT"
-            . "$CYCLE_OUT"
-            rm -f "$CYCLE_OUT"
-            if [ "${cycle_supported:-false}" = "true" ] && [ -n "${cycle_record_id:-}" ]; then
-              LINEAGE_FLAGS+=(--evidence-scope cycle --test-cycle-record-id "${cycle_record_id}")
+              --output-file "$EXECUTION_OUT"
+            . "$EXECUTION_OUT"
+            rm -f "$EXECUTION_OUT"
+            if [ "${execution_supported:-false}" = "true" ] && [ -n "${execution_record_id:-}" ]; then
+              LINEAGE_FLAGS+=(--evidence-scope execution --test-execution-record-id "${execution_record_id}")
             fi
             # Production smoke evidence (whole-app health) attached to this release.
             if [ -f prod-smoke-results.json ]; then

package/sdlc/files/ci/python/ci.yml.template

@@ -357,19 +357,19 @@ jobs:
       - name: Generate and upload gate evidence
         if: env.DEVAUDIT_BASE_URL != ''
         run: |
-          chmod +x scripts/upload-evidence.sh scripts/report-test-cycle.sh 2>/dev/null || true
+          chmod +x scripts/upload-evidence.sh scripts/report-test-execution.sh 2>/dev/null || true
           FLAGS="--git-sha ${{ github.sha }} --ci-run-id ${{ github.run_id }} --branch ${{ github.ref_name }}"
           FLAGS="${FLAGS} --release ${{ needs.register-release.outputs.version }} --create-release-if-missing"
           FLAGS="${FLAGS} --environment uat"
           FLAGS="${FLAGS} --sdlc-stage 2"
-          PRIMARY_LINEAGE_FLAGS=(--test-cycle "${{ github.run_id }}")
-          CYCLE_OUT="$(mktemp)"
-          bash scripts/report-test-cycle.sh start \
+          PRIMARY_LINEAGE_FLAGS=(--test-execution "${{ github.run_id }}")
+          EXECUTION_OUT="$(mktemp)"
+          bash scripts/report-test-execution.sh start \
             --project-slug {{PROJECT_SLUG}} \
             --release "${{ needs.register-release.outputs.version }}" \
             --sdlc-stage 2 \
             --environment uat \
-            --cycle-kind quality_gate \
+            --suite-kind quality_gate \
             --provider github_actions \
             --external-run-id "${{ github.run_id }}" \
             --external-run-attempt "${{ github.run_attempt }}" \
@@ -378,11 +378,11 @@ jobs:
             --branch "${{ github.ref_name }}" \
             --workflow-name "Quality Gates" \
             --workflow-url "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
-            --output-file "$CYCLE_OUT"
-          . "$CYCLE_OUT"
-          rm -f "$CYCLE_OUT"
-          if [ "${cycle_supported:-false}" = "true" ] && [ -n "${cycle_record_id:-}" ]; then
-            PRIMARY_LINEAGE_FLAGS+=(--evidence-scope cycle --test-cycle-record-id "${cycle_record_id}")
+            --output-file "$EXECUTION_OUT"
+          . "$EXECUTION_OUT"
+          rm -f "$EXECUTION_OUT"
+          if [ "${execution_supported:-false}" = "true" ] && [ -n "${execution_record_id:-}" ]; then
+            PRIMARY_LINEAGE_FLAGS+=(--evidence-scope execution --test-execution-record-id "${execution_record_id}")
           fi
 
           UPLOAD_FAILURES=0
@@ -546,7 +546,7 @@ jobs:
             exit 1
           fi
 
-      - name: Complete primary quality-gate cycle
+      - name: Complete primary quality-gate execution
         if: always() && env.DEVAUDIT_BASE_URL != ''
         run: |
           case "${{ job.status }}" in
@@ -554,13 +554,13 @@ jobs:
             cancelled) OUTCOME=cancelled ;;
             *)         OUTCOME=failed ;;
           esac
-          chmod +x scripts/report-test-cycle.sh 2>/dev/null || true
-          bash scripts/report-test-cycle.sh complete \
+          chmod +x scripts/report-test-execution.sh 2>/dev/null || true
+          bash scripts/report-test-execution.sh complete \
             --project-slug {{PROJECT_SLUG}} \
             --release "${{ needs.register-release.outputs.version }}" \
             --sdlc-stage 2 \
             --environment uat \
-            --cycle-kind quality_gate \
+            --suite-kind quality_gate \
             --provider github_actions \
             --external-run-id "${{ github.run_id }}" \
             --external-run-attempt "${{ github.run_attempt }}" \

package/sdlc/files/ci/quality-gates-provenance.yml.template

@@ -42,6 +42,9 @@ jobs:
           PR_TITLE: ${{ github.event.pull_request.title }}
           PR_BODY: ${{ github.event.pull_request.body }}
           HEAD_REF: ${{ github.event.pull_request.head.ref }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          INTEGRATION_BRANCH: {{INTEGRATION_BRANCH}}
+          RELEASE_BRANCH: {{RELEASE_BRANCH}}
         run: |
           chmod +x scripts/check-release-pr-scope.sh 2>/dev/null || true
           bash scripts/check-release-pr-scope.sh

package/sdlc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metasession.co/devaudit-sdlc",
-  "version": "0.3.18",
+  "version": "0.3.19",
   "description": "DevAudit SDLC CLI Engine — cross-agent terminal-driven SDLC orchestrator.",
   "bin": {
     "devaudit-sdlc": "./src/bin/devaudit-sdlc.js"

package/sdlc/src/blueprints/3-compile-evidence.raw.md

@@ -82,7 +82,7 @@ A release is classified by version shape and release mode. **Most of this doc wa
 
 ### Housekeeping outcomes
 
-Normal housekeeping skips the per-requirement evidence and approval path. Run the relevant gates, obtain terminal-green PR review, and merge to `develop`; the bare-date portal row is integration history. When a tracked release later absorbs the work, its bundled-change manifest preserves the source title, evidence ownership, stage, and cycles.
+Normal housekeeping skips the per-requirement evidence and approval path. Run the relevant gates, obtain terminal-green PR review, and merge to `develop`; the bare-date portal row is integration history. When a tracked release later absorbs the work, its bundled-change manifest preserves the source title, evidence ownership, stage, and executions.
 
 Use standalone housekeeping only when the change cannot reasonably wait for that tracked release. Follow `docs/release-playbooks/housekeeping-release.md`: add the validated `STANDALONE-HOUSEKEEPING-vYYYY.MM.DD.json` declaration, document why promotion is necessary, pass the required checks, and verify production. There is no automatic release-ticket or security-summary stub PR for either housekeeping outcome.
 
@@ -173,27 +173,27 @@ Rules:
 - `environment_gap` and `precondition_gap` skips must be resolved before listing — if they appear here, the gate is not truly `SKIPPED` with operator approval.
 - A skipped test never proves an acceptance criterion.
 
-## Test Cycles
+## Test Executions
 
-Prefer the first-class release-journey / cycle API when the portal exposes it. Generate the table from the API response rather than inferring cycles from uploaded files:
+Prefer the first-class release-journey / execution API when the portal exposes it. Generate the table from the API response rather than inferring executions from uploaded files:
 
 ```bash
 # Example:
 curl -s -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" \
   "${DEVAUDIT_BASE_URL%/}/api/projects/<slug>/releases/REQ-XXX/journey" \
   > /tmp/release-journey.json
-bash scripts/render-test-cycles.sh /tmp/release-journey.json
+bash scripts/render-test-executions.sh /tmp/release-journey.json
 ```
 
-The helper renders a first-class table when `.cycles[]` is present, and falls back to legacy `testCycleId` grouping when the portal has not yet rolled out cycle records.
+The helper renders a first-class table when `.testExecutions[]` is present. It must not infer executions from legacy artifact grouping.
 
-| Source Release | SDLC Stage | Cycle | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |
+| Source Release | SDLC Stage | Execution | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- |
 | REQ-XXX | 2 implement_test | #1 | quality_gate | passed | [Quality Gates](https://github.com/example/repo/actions/runs/123) (run 123, attempt 1) | quality-gates.json | None | 2026-07-16 11:03:00 |
 | REQ-XXX | 2 implement_test | #2 | e2e | passed | [E2E Regression](https://github.com/example/repo/actions/runs/124) (run 124, attempt 2) | e2e-results.json, screenshots.zip | Incident #501 fixed in PR #507 | 2026-07-16 11:19:00 |
 | REQ-089 | 4 uat_review | #1 | uat | passed | [UAT Review](https://devaudit.example/releases/REQ-089) | uat-checklist.md | None | 2026-07-16 12:02:00 |
 
-**Final assessment:** [First-class cycle records show all stage cycles passed / N cycles failed — see incidents]
+**Final assessment:** [First-class test execution records show all stage executions passed / N executions failed — see incidents]
 
 ## Bundled Release Context
 
@@ -338,12 +338,12 @@ status: "nil"
 
 ## Attestation
 
-No incidents or defects were discovered during the test cycle for release `<version>`.
+No incidents or defects were discovered during the test execution for release `<version>`.
 
 ## Scope
 
 - **Release:** <version>
-- **Test cycle:** <description>
+- **Test execution:** <description>
 - **Test cases executed:** <count>
 - **Test cases passed:** <count>
 - **Test cases failed:** 0
@@ -352,7 +352,7 @@ No incidents or defects were discovered during the test cycle for release `<vers
 
 ## Framework attribution
 
-- [x] `ISO29119.3.5.4` (Test incident report — nil report for this release cycle)
+- [x] `ISO29119.3.5.4` (Test incident report — nil report for this release execution)
 
 ## Sign-off
 

package/sdlc/src/blueprints/4-submit-for-review.raw.md

@@ -179,7 +179,7 @@ CI runs automatically on this PR. The following gates must pass before merge:
 - [ ] Implementation plan present and matches implementation (MEDIUM/HIGH risk)
 - [ ] Release ticket created
 - [ ] Test evidence saved
-- [ ] Test execution summary includes Test Cycles section (all CI runs for this release listed)
+- [ ] Test execution summary includes Test Executions section (all CI runs for this release listed)
 - [ ] Security evidence saved
 - [ ] AI use documented
 

package/sdlc/src/blueprints/5-deploy-main.raw.md

@@ -151,7 +151,7 @@ The backend stores both with reviewer identity, SHA, and timestamp. This satisfi
 
 1. Wait for `post-deploy-prod.yml` to complete successfully **and** for its host-deployment check to confirm terminal success for the merged SHA.
 2. Open the release in DevAudit: `https://[DEVAUDIT_BASE_URL]/projects/[PROJECT_SLUG]/releases/[releaseId]`.
-3. Review the production deployment and smoke cycle records, their evidence, and any post-deploy actions logged in the release ticket. Do not approve while either cycle or the host deployment remains queued/in progress.
+3. Review the production deployment and smoke test execution records, their evidence, and any post-deploy actions logged in the release ticket. Do not approve while either execution or the host deployment remains queued/in progress.
 4. Click **Approve Production** — status transitions to `prod_approved`.
 5. Click **Mark as Released** — status transitions to `released`. This dispatches the automated close-out flow.
 

package/sdlc/src/blueprints/implementing-an-sdlc-issue.raw.md

@@ -67,7 +67,7 @@ The [`sdlc-implementer`](#skills-inventory) skill is the **default way to implem
 > Implement issue #N under the SDLC.
 ```
 
-It **triages first** (Phase 0): it reads the issue + labels, classifies the change-type against the [change-workflows](https://github.com/metasession-dev/DevAudit-Installer/blob/main/docs/change-workflows.md) taxonomy, announces a **Workflow Decision** (which path, which gates, which approvals, what's skipped), and routes — only a tracked change continues into the full cycle; housekeeping / trivial / doc-only is announced and handed off to its lighter path. So pointing the skill at an issue no longer defaults to maximum ceremony — it decides the path at pickup.
+It **triages first** (Phase 0): it reads the issue + labels, classifies the change-type against the [change-workflows](https://github.com/metasession-dev/DevAudit-Installer/blob/main/docs/change-workflows.md) taxonomy, announces a **Workflow Decision** (which path, which gates, which approvals, what's skipped), and routes — only a tracked change continues into the full execution; housekeeping / trivial / doc-only is announced and handed off to its lighter path. So pointing the skill at an issue no longer defaults to maximum ceremony — it decides the path at pickup.
 
 For a tracked change it then runs Phases 1–4 unattended (with a plan-approval pause for HIGH/CRITICAL risk, or always-on via `--require-plan-approval`): classify risk, assign the next `REQ-XXX`, write the implementation plan, update `RTM.md`, implement, delegate all end-to-end / visual test work to [`e2e-test-engineer`](#skills-inventory), run the gates, compile evidence, open the PR, and submit for UAT review on the portal. It then **halts** at the UAT gate. After a reviewer approves on the portal:
 
@@ -77,9 +77,9 @@ For a tracked change it then runs Phases 1–4 unattended (with a plan-approval
 
 It runs Phase 5: merge, monitor post-deploy, confirm production smoke evidence, advance the release. If changes are requested at UAT instead of approval, it addresses them and re-submits for UAT re-review. It **refuses** issues that decompose into multiple requirements (split them first).
 
-**Where it routes (the Phase-0 decision):** the skill now makes this call at pickup rather than you discovering mid-PR that you over- (or under-) ceremonied. It still **drives each path to completion** — these are the paths it takes *instead of* the full tracked cycle, not points where it abandons you:
+**Where it routes (the Phase-0 decision):** the skill now makes this call at pickup rather than you discovering mid-PR that you over- (or under-) ceremonied. It still **drives each path to completion** — these are the paths it takes *instead of* the full tracked execution, not points where it abandons you:
 
-- **Trivial / housekeeping changes** → the skill drives the lightweight escape hatch (above) to merge: branch → all gates locally → `chore:`/`docs:`/`ci:` PR → review → merge. No requirement, no tracked cycle, but it guides every step. Docs, formatting, dependency bumps, CI tweaks (`docs:` / `chore:` / `ci:` …) don't need a requirement. (Note: `feat` / `fix` / `refactor` / `perf` commits **do** require a `[REQ-XXX]` / `Ref: REQ-XXX` and are rejected by commitlint + `validate-commits.sh` without one.)
+- **Trivial / housekeeping changes** → the skill drives the lightweight escape hatch (above) to merge: branch → all gates locally → `chore:`/`docs:`/`ci:` PR → review → merge. No requirement, no tracked execution, but it guides every step. Docs, formatting, dependency bumps, CI tweaks (`docs:` / `chore:` / `ci:` …) don't need a requirement. (Note: `feat` / `fix` / `refactor` / `perf` commits **do** require a `[REQ-XXX]` / `Ref: REQ-XXX` and are rejected by commitlint + `validate-commits.sh` without one.)
 - **Compliance-doc-only** → the skill drives a docs push against an **existing** `REQ-XXX` through to merge; no new requirement, no quality gates.
 - **Stage-1 planning in isolation, or e2e test work alone** → run the manual walkthrough / invoke `e2e-test-engineer` directly.
 - **Cross-issue refactors** spanning multiple `REQ-XXX` scopes → out of the one-issue contract; the skill refuses and asks you to split.

package/sdlc/files/_common/scripts/render-test-cycles.sh

@@ -1,227 +0,0 @@
-#!/usr/bin/env bash
-# render-test-cycles.sh — Render release test cycles as markdown tables.
-#
-# Usage:
-#   bash scripts/render-test-cycles.sh path/to/release-journey.json
-#
-# Supported inputs:
-#   1. First-class cycle payloads with `.cycles[]`
-#   2. Legacy grouped-evidence payloads with one of:
-#        - `.legacyCycles[]`
-#        - `.testCycleGroups[]`
-#        - `.evidenceGroups[]`
-#
-# Output:
-#   Markdown suitable for inclusion under `## Test Cycles` in
-#   `compliance/evidence/REQ-XXX/test-execution-summary.md`.
-
-set -euo pipefail
-
-INPUT_JSON="${1:-}"
-
-if [ -z "$INPUT_JSON" ] || [ ! -f "$INPUT_JSON" ]; then
-  echo "Usage: $0 <release-journey.json>" >&2
-  exit 2
-fi
-
-if ! command -v jq >/dev/null 2>&1; then
-  echo "Error: jq is required." >&2
-  exit 1
-fi
-
-stage_label() {
-  case "$1" in
-    1) printf '1 plan' ;;
-    2) printf '2 implement_test' ;;
-    3) printf '3 compile_evidence' ;;
-    4) printf '4 uat_review' ;;
-    5) printf '5 production' ;;
-    *) printf '%s unknown' "${1:-?}" ;;
-  esac
-}
-
-format_date() {
-  local value="$1"
-  if [ -z "$value" ] || [ "$value" = "null" ]; then
-    printf 'Unknown'
-  else
-    printf '%s' "$value" | sed -E 's/T/ /; s/Z$//; s/[.][0-9]+$//'
-  fi
-}
-
-render_first_class_cycles() {
-  echo "| Source Release | SDLC Stage | Cycle | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |"
-  echo "| --- | --- | --- | --- | --- | --- | --- | --- | --- |"
-
-  declare -A COUNTS=()
-  local rows
-  rows="$(
-    jq -r '
-      (.cycles // [])
-      | sort_by(.sourceRelease // "", .sdlcStage // 0, .startedAt // "", .completedAt // "", .cycleKind // "")
-      | .[]
-      | {
-          sourceRelease: (.sourceRelease // "Unknown"),
-          stageCode: ((.sdlcStage // 0) | tostring),
-          kind: (.cycleKind // "unknown"),
-          outcome: (.outcome // "unknown"),
-          workflow: (
-            if (.workflowUrl // "") != "" then
-              "[" + ((.workflowName // "Workflow")) + "](" + .workflowUrl + ")"
-            else
-              (.workflowName // "Manual")
-            end
-          ),
-          runMeta: (
-            [
-              (if (.externalRunId // "") != "" then "run " + .externalRunId else empty end),
-              (if (.externalRunAttempt // null) != null then "attempt " + (.externalRunAttempt | tostring) else empty end)
-            ]
-            | map(select(length > 0))
-            | join(", ")
-          ),
-          evidence: (
-            (.relatedEvidence // [])
-            | map(.displayName // .fileName // .name // .evidenceType // empty)
-            | map(select(length > 0))
-            | join(", ")
-          ),
-          incident: (
-            [
-              (.incidentReference // empty),
-              (.remediationReference // empty),
-              (.outcomeReason // empty)
-            ]
-            | map(select(length > 0))
-            | join("; ")
-          ),
-          date: (.completedAt // .startedAt // "")
-        }
-      | @base64
-    ' "$INPUT_JSON"
-  )"
-
-  if [ -z "$rows" ]; then
-    echo "| Unknown | Unknown | None | unknown | unknown | No cycle records returned | None | None | Unknown |"
-    echo
-    echo "**Final assessment:** No first-class cycle records were returned by the portal."
-    return 0
-  fi
-
-  while IFS= read -r row_b64; do
-    [ -n "$row_b64" ] || continue
-    local source_release stage_code kind outcome workflow run_meta evidence incident date
-    source_release="$(printf '%s' "$row_b64" | base64 -d | jq -r '.sourceRelease')"
-    stage_code="$(printf '%s' "$row_b64" | base64 -d | jq -r '.stageCode')"
-    kind="$(printf '%s' "$row_b64" | base64 -d | jq -r '.kind')"
-    outcome="$(printf '%s' "$row_b64" | base64 -d | jq -r '.outcome')"
-    workflow="$(printf '%s' "$row_b64" | base64 -d | jq -r '.workflow')"
-    run_meta="$(printf '%s' "$row_b64" | base64 -d | jq -r '.runMeta')"
-    evidence="$(printf '%s' "$row_b64" | base64 -d | jq -r '.evidence')"
-    incident="$(printf '%s' "$row_b64" | base64 -d | jq -r '.incident')"
-    date="$(printf '%s' "$row_b64" | base64 -d | jq -r '.date')"
-    [ -n "$source_release" ] || continue
-    local group_key cycle_ordinal workflow_cell evidence_cell incident_cell
-    group_key="${source_release}|${stage_code}"
-    COUNTS["$group_key"]=$(( ${COUNTS["$group_key"]:-0} + 1 ))
-    cycle_ordinal="#${COUNTS[$group_key]}"
-    workflow_cell="$workflow"
-    if [ -n "$run_meta" ]; then
-      workflow_cell="${workflow_cell} (${run_meta})"
-    fi
-    evidence_cell="${evidence:-None}"
-    incident_cell="${incident:-None}"
-    printf '| %s | %s | %s | %s | %s | %s | %s | %s | %s |\n' \
-      "$source_release" \
-      "$(stage_label "$stage_code")" \
-      "$cycle_ordinal" \
-      "$kind" \
-      "$outcome" \
-      "$workflow_cell" \
-      "$evidence_cell" \
-      "$incident_cell" \
-      "$(format_date "$date")"
-  done <<<"$rows"
-
-  echo
-  echo "**Final assessment:** Stage-scoped cycle numbering is authoritative from first-class portal cycle records."
-}
-
-render_legacy_cycles() {
-  echo "> Legacy portal fallback — first-class cycle records unavailable; grouped by uploaded evidence \`testCycleId\`."
-  echo
-  echo "| Source Release | SDLC Stage | Cycle | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |"
-  echo "| --- | --- | --- | --- | --- | --- | --- | --- | --- |"
-
-  local rows
-  rows="$(
-    jq -r '
-      (.legacyCycles // .testCycleGroups // .evidenceGroups // [])
-      | .[]
-      | {
-          sourceRelease: (.sourceRelease // "Legacy grouped evidence"),
-          stageLabel: (.sdlcStageLabel // "legacy grouping"),
-          cycleId: (.testCycleId // .cycleId // "unknown"),
-          kind: (.cycleKind // "legacy"),
-          outcome: (.outcome // "unknown"),
-          workflow: (
-            if (.workflowUrl // "") != "" then
-              "[" + ((.workflowName // "Workflow")) + "](" + .workflowUrl + ")"
-            else
-              (.workflowName // "Legacy grouping")
-            end
-          ),
-          evidence: (
-            (.relatedEvidence // .evidence // [])
-            | map(.displayName // .fileName // .name // .evidenceType // .path // empty)
-            | map(select(length > 0))
-            | join(", ")
-          ),
-          incident: (.incidentReference // .notes // "Legacy fallback"),
-          date: (.date // .createdAt // "")
-        }
-      | @base64
-    ' "$INPUT_JSON"
-  )"
-
-  if [ -z "$rows" ]; then
-    echo "| Legacy grouped evidence | legacy grouping | unknown | legacy | unknown | Legacy grouping | None | Legacy fallback | Unknown |"
-    echo
-    echo "**Final assessment:** Legacy fallback used, but no grouped evidence records were returned."
-    return 0
-  fi
-
-  while IFS= read -r row_b64; do
-    [ -n "$row_b64" ] || continue
-    local source_release stage_label_value cycle_id kind outcome workflow evidence incident date
-    source_release="$(printf '%s' "$row_b64" | base64 -d | jq -r '.sourceRelease')"
-    stage_label_value="$(printf '%s' "$row_b64" | base64 -d | jq -r '.stageLabel')"
-    cycle_id="$(printf '%s' "$row_b64" | base64 -d | jq -r '.cycleId')"
-    kind="$(printf '%s' "$row_b64" | base64 -d | jq -r '.kind')"
-    outcome="$(printf '%s' "$row_b64" | base64 -d | jq -r '.outcome')"
-    workflow="$(printf '%s' "$row_b64" | base64 -d | jq -r '.workflow')"
-    evidence="$(printf '%s' "$row_b64" | base64 -d | jq -r '.evidence')"
-    incident="$(printf '%s' "$row_b64" | base64 -d | jq -r '.incident')"
-    date="$(printf '%s' "$row_b64" | base64 -d | jq -r '.date')"
-    [ -n "$cycle_id" ] || continue
-    printf '| %s | %s | %s | %s | %s | %s | %s | %s | %s |\n' \
-      "$source_release" \
-      "$stage_label_value" \
-      "$cycle_id" \
-      "$kind" \
-      "$outcome" \
-      "$workflow" \
-      "${evidence:-None}" \
-      "${incident:-Legacy fallback}" \
-      "$(format_date "$date")"
-  done <<<"$rows"
-
-  echo
-  echo "**Final assessment:** Legacy grouping was used because the portal did not expose first-class cycle records."
-}
-
-if jq -e '((.cycles // []) | length) > 0' "$INPUT_JSON" >/dev/null 2>&1; then
-  render_first_class_cycles
-else
-  render_legacy_cycles
-fi