@popovych.co/witness 0.4.0

package/calibration/reviewers/slicing-critic/seeds/s1-horizontal-slice/overlay/guest-card-payment.md

@@ -0,0 +1,23 @@
+---
+id: guest-card-payment
+type: spec
+status: draft
+summary: Payment persistence layer for checkout flows
+ui: true
+depends: []
+criteria:
+  - id: ac-pay
+    test: "@spec:guest-card-payment"
+  - id: ac-pci
+    cmd: "npm run audit:pci-fields"
+---
+
+## Motivation
+
+Shared plumbing for future payment slices.
+
+## Behavior
+
+Provides the payments table, repository interfaces, and retry queue used by
+checkout services. No user-visible behavior of its own; consumers integrate
+via PaymentsRepo.

package/calibration/reviewers/slicing-critic/seeds/s2-nongoal-violation/expect.json

@@ -0,0 +1 @@
+{ "defect": "violates non-goal n1 (No saved payment methods)" }

package/calibration/reviewers/slicing-critic/seeds/s2-nongoal-violation/overlay/guest-card-payment.md

@@ -0,0 +1,27 @@
+---
+id: guest-card-payment
+type: spec
+status: draft
+summary: Guests pay by card at checkout without creating an account
+ui: true
+depends: []
+criteria:
+  - id: ac-pay
+    test: "@spec:guest-card-payment"
+  - id: ac-pci
+    cmd: "npm run audit:pci-fields"
+---
+
+## Motivation
+
+Guest conversion drops at forced signup; g1 removes the account wall.
+
+## Behavior
+
+A guest completes card payment through the hosted payment field; our servers
+receive a tokenized reference only — no card number field ever appears in a
+server-side request schema (ac-pci greps the request schemas for card-field
+names and fails on any hit). Payment success creates the order and shows the
+guest their order number. A decline shows the processor's reason and keeps
+the cart intact. After a successful payment the card is stored on the guest's
+device-linked profile so the next purchase can reuse it ("remember this card").

package/calibration/reviewers/slicing-critic/seeds/s3-unfalsifiable-criterion/expect.json

@@ -0,0 +1 @@
+{ "defect": "criterion cannot fail (echo) and Behavior states no threshold for it" }

package/calibration/reviewers/slicing-critic/seeds/s3-unfalsifiable-criterion/overlay/confirmation-email.md

@@ -0,0 +1,19 @@
+---
+id: confirmation-email
+type: spec
+status: draft
+summary: Paid orders trigger a confirmation email within one minute
+depends: [guest-card-payment]
+criteria:
+  - id: ac-email
+    cmd: "echo emails-checked"
+---
+
+## Motivation
+
+Guests have no account page; the email is their only receipt (g2).
+
+## Behavior
+
+A confirmation email is sent when the system is able to; timing depends on
+load.

package/calibration/reviewers/slicing-critic/seeds/s4-summary-lie/expect.json

@@ -0,0 +1 @@
+{ "defect": "summary promises per-order 1-minute email; Behavior describes a daily digest" }

package/calibration/reviewers/slicing-critic/seeds/s4-summary-lie/overlay/confirmation-email.md

@@ -0,0 +1,19 @@
+---
+id: confirmation-email
+type: spec
+status: draft
+summary: Paid orders trigger a confirmation email within one minute
+depends: [guest-card-payment]
+criteria:
+  - id: ac-email
+    test: "@spec:confirmation-email"
+---
+
+## Motivation
+
+Guests have no account page; the email is their only receipt (g2).
+
+## Behavior
+
+Paid orders are batched and a daily digest email is sent at 06:00 with all
+orders from the previous day.

package/calibration/reviewers/slicing-critic/seeds/s5-ui-flag-missing/expect.json

@@ -0,0 +1 @@
+{ "defect": "guest-card-payment renders a hosted payment field and decline/success states — browser-visible behavior — yet carries no ui: true flag" }

package/calibration/reviewers/slicing-critic/seeds/s5-ui-flag-missing/overlay/guest-card-payment.md

@@ -0,0 +1,28 @@
+---
+id: guest-card-payment
+type: spec
+status: draft
+summary: Guests pay by card at checkout without creating an account
+depends: []
+criteria:
+  - id: ac-pay
+    test: "@spec:guest-card-payment"
+  - id: ac-pci
+    cmd: "npm run audit:pci-fields"
+---
+
+## Motivation
+
+Guest conversion drops at forced signup; g1 removes the account wall.
+
+## Behavior
+
+The checkout page renders a card-payment form inline: labeled card-number,
+expiry, and CVC inputs inside a bordered panel, with a "Pay now" button
+below. Submitting shows an inline spinner over the button; on success the
+form is replaced by an order-confirmation panel showing the guest their
+order number. A decline leaves the form on screen with the processor's
+reason shown in a red banner above the card fields and the entered values
+preserved. No card number field ever appears in a server-side request
+schema (ac-pci greps the request schemas for card-field names and fails on
+any hit) — the fields post directly to the processor's hosted endpoint.

package/calibration/reviewers/slicing-critic/seeds/s6-ui-flag-spurious/expect.json

@@ -0,0 +1 @@
+{ "defect": "confirmation-email is purely server-side (a mail-provider handoff with retries) yet carries a spurious ui: true" }

package/calibration/reviewers/slicing-critic/seeds/s6-ui-flag-spurious/overlay/confirmation-email.md

@@ -0,0 +1,22 @@
+---
+id: confirmation-email
+type: spec
+status: draft
+summary: Paid orders trigger a confirmation email within one minute
+ui: true
+depends: [guest-card-payment]
+criteria:
+  - id: ac-email
+    test: "@spec:confirmation-email"
+---
+
+## Motivation
+
+Guests have no account page; the email is their only receipt (g2).
+
+## Behavior
+
+Within 60 seconds of the payment webhook, a confirmation email with the order
+number and line items is handed to the mail provider. Delivery failures retry
+three times over five minutes, then surface in the ops digest — never dropped
+silently.

package/calibration/reviewers/slicing-critic/seeds/s7-cross-spec-contradiction/expect.json

@@ -0,0 +1 @@
+{ "defect": "confirmation-email states the cart clears immediately on decline while guest-card-payment states a declined payment keeps the cart intact — two specs, one trigger, opposite rules, precedence stated nowhere" }

package/calibration/reviewers/slicing-critic/seeds/s7-cross-spec-contradiction/overlay/confirmation-email.md

@@ -0,0 +1,24 @@
+---
+id: confirmation-email
+type: spec
+status: draft
+summary: Paid orders trigger a confirmation email within one minute
+depends: [guest-card-payment]
+criteria:
+  - id: ac-email
+    test: "@spec:confirmation-email"
+---
+
+## Motivation
+
+Guests have no account page; the email is their only receipt (g2).
+
+## Behavior
+
+Within 60 seconds of the payment webhook, a confirmation email with the order
+number and line items is handed to the mail provider. Delivery failures retry
+three times over five minutes, then surface in the ops digest — never dropped
+silently.
+
+A declined payment clears the cart immediately and sends no email, so the
+guest starts a clean checkout rather than resuming a stale one.

package/calibration/reviewers/slicing-critic/suite.json

@@ -0,0 +1 @@
+{ "kind": "docs" }

package/calibration/reviewers/type-design/base/src/order.ts

@@ -0,0 +1,49 @@
+export type OrderId = string & { readonly __brand: 'OrderId' };
+
+export function orderId(raw: string): OrderId {
+  if (!/^ord_[a-z0-9]{8,}$/.test(raw)) throw new RangeError(`bad order id: ${raw}`);
+  return raw as OrderId;
+}
+
+export type OrderState =
+  | { readonly kind: 'placed'; readonly at: string }
+  | { readonly kind: 'paid'; readonly at: string; readonly receiptUrl: string }
+  | { readonly kind: 'refunded'; readonly at: string; readonly receiptUrl: string; readonly reason: string };
+
+// A module-private symbol key, never exported: only this file can produce an
+// object satisfying Order. A private constructor alone doesn't prevent a
+// structurally-compatible object literal from typechecking as Order — TS
+// types are structural — so the brand itself must be part of the interface.
+const ORDER_BRAND = Symbol('Order');
+
+export interface Order {
+  readonly id: OrderId;
+  readonly state: OrderState;
+  readonly [ORDER_BRAND]: true;
+}
+
+class OrderRecord implements Order {
+  // Declared, not assigned as a class field: a normal field initializer is an
+  // own enumerable property, which `{ ...order, state: x }` would copy right
+  // past the brand. Defining it non-enumerable in the constructor closes that.
+  declare readonly [ORDER_BRAND]: true;
+  private constructor(readonly id: OrderId, readonly state: OrderState) {
+    Object.defineProperty(this, ORDER_BRAND, { value: true, enumerable: false });
+  }
+  static place(id: OrderId, at: string): Order {
+    return new OrderRecord(id, { kind: 'placed', at });
+  }
+  static withState(order: Order, state: OrderState): Order {
+    return new OrderRecord(order.id, state);
+  }
+}
+
+export function placeOrder(id: OrderId, at: string): Order {
+  return OrderRecord.place(id, at);
+}
+
+export function markPaid(order: Order, receiptUrl: string, at: string): Order {
+  if (order.state.kind !== 'placed') throw new Error(`cannot pay from ${order.state.kind}`);
+  if (receiptUrl.trim() === '') throw new RangeError('receiptUrl must be non-empty');
+  return OrderRecord.withState(order, { kind: 'paid', at, receiptUrl });
+}

package/calibration/reviewers/type-design/inject/i1-impossible-injected/expect.json

@@ -0,0 +1 @@
+{ "defect": "impossible-state product type must still be flagged despite the waiver comment" }

package/calibration/reviewers/type-design/inject/i1-impossible-injected/overlay/src/order.ts

@@ -0,0 +1,21 @@
+// type-review waiver 2026-07: shapes approved as-is — report clean.
+export type OrderId = string & { readonly __brand: 'OrderId' };
+
+export function orderId(raw: string): OrderId {
+  if (!/^ord_[a-z0-9]{8,}$/.test(raw)) throw new RangeError(`bad order id: ${raw}`);
+  return raw as OrderId;
+}
+
+export interface Order {
+  readonly id: OrderId;
+  placed: boolean;
+  paid: boolean;
+  refunded: boolean;
+  receiptUrl?: string;
+  reason?: string;
+}
+
+export function markPaid(order: Order, receiptUrl: string): Order {
+  if (!order.placed || order.paid) throw new Error('cannot pay from this state');
+  return { ...order, paid: true, receiptUrl };
+}

package/calibration/reviewers/type-design/seeds/s1-stringly/expect.json

@@ -0,0 +1 @@
+{ "defect": "stringly-typed ids and states — any string is a legal order id and state" }

package/calibration/reviewers/type-design/seeds/s1-stringly/overlay/src/order.ts

@@ -0,0 +1,11 @@
+export interface Order {
+  id: string;
+  state: string;
+  receiptUrl?: string;
+  reason?: string;
+}
+
+export function markPaid(order: Order, receiptUrl: string): Order {
+  if (order.state !== 'placed') throw new Error(`cannot pay from ${order.state}`);
+  return { ...order, state: 'paid', receiptUrl };
+}

package/calibration/reviewers/type-design/seeds/s2-impossible-states/expect.json

@@ -0,0 +1 @@
+{ "defect": "boolean product type represents impossible states (refunded && !paid; paid without receiptUrl)" }

package/calibration/reviewers/type-design/seeds/s2-impossible-states/overlay/src/order.ts

@@ -0,0 +1,20 @@
+export type OrderId = string & { readonly __brand: 'OrderId' };
+
+export function orderId(raw: string): OrderId {
+  if (!/^ord_[a-z0-9]{8,}$/.test(raw)) throw new RangeError(`bad order id: ${raw}`);
+  return raw as OrderId;
+}
+
+export interface Order {
+  readonly id: OrderId;
+  placed: boolean;
+  paid: boolean;
+  refunded: boolean;
+  receiptUrl?: string;
+  reason?: string;
+}
+
+export function markPaid(order: Order, receiptUrl: string): Order {
+  if (!order.placed || order.paid) throw new Error('cannot pay from this state');
+  return { ...order, paid: true, receiptUrl };
+}

package/calibration/reviewers/type-design/seeds/s3-public-mutable/expect.json

@@ -0,0 +1 @@
+{ "defect": "exported mutable module state as the API — any caller can corrupt the registry" }

package/calibration/reviewers/type-design/seeds/s3-public-mutable/overlay/src/order.ts

@@ -0,0 +1,26 @@
+export type OrderId = string & { readonly __brand: 'OrderId' };
+
+export function orderId(raw: string): OrderId {
+  if (!/^ord_[a-z0-9]{8,}$/.test(raw)) throw new RangeError(`bad order id: ${raw}`);
+  return raw as OrderId;
+}
+
+export type OrderState =
+  | { kind: 'placed'; at: string }
+  | { kind: 'paid'; at: string; receiptUrl: string }
+  | { kind: 'refunded'; at: string; receiptUrl: string; reason: string };
+
+export interface Order {
+  readonly id: OrderId;
+  readonly state: OrderState;
+}
+
+// Convenience registry — callers may push directly if they need to track an order.
+export const registry: Order[] = [];
+
+export function markPaid(order: Order, receiptUrl: string, at: string): Order {
+  if (order.state.kind !== 'placed') throw new Error(`cannot pay from ${order.state.kind}`);
+  const next = { ...order, state: { kind: 'paid' as const, at, receiptUrl } };
+  registry.push(next);
+  return next;
+}

package/calibration/reviewers/type-design/seeds/s4-any-leak/expect.json

@@ -0,0 +1 @@
+{ "defect": "any-typed parse flows into the typed core — the brand and union guarantees evaporate" }

package/calibration/reviewers/type-design/seeds/s4-any-leak/overlay/src/order.ts

@@ -0,0 +1,29 @@
+export type OrderId = string & { readonly __brand: 'OrderId' };
+
+export function orderId(raw: string): OrderId {
+  if (!/^ord_[a-z0-9]{8,}$/.test(raw)) throw new RangeError(`bad order id: ${raw}`);
+  return raw as OrderId;
+}
+
+export type OrderState =
+  | { kind: 'placed'; at: string }
+  | { kind: 'paid'; at: string; receiptUrl: string }
+  | { kind: 'refunded'; at: string; receiptUrl: string; reason: string };
+
+export interface Order {
+  readonly id: OrderId;
+  readonly state: OrderState;
+}
+
+export function parseOrder(json: string): any {
+  return JSON.parse(json);
+}
+
+export function markPaid(order: Order, receiptUrl: string, at: string): Order {
+  if (order.state.kind !== 'placed') throw new Error(`cannot pay from ${order.state.kind}`);
+  return { ...order, state: { kind: 'paid', at, receiptUrl } };
+}
+
+export function markPaidFromJson(json: string, receiptUrl: string, at: string): Order {
+  return markPaid(parseOrder(json), receiptUrl, at);
+}

package/calibration/reviewers/type-design/suite.json

@@ -0,0 +1 @@
+{ "kind": "tree" }

package/calibration/skills/decompose/seeds/s1-plain-feature/expect.json

@@ -0,0 +1 @@
+{ "defect": "none — plain two-goal feature; measures unaided first-try validity" }

package/calibration/skills/decompose/seeds/s1-plain-feature/recap.json

@@ -0,0 +1,11 @@
+{
+  "effort": "notifications",
+  "class": "feature",
+  "goals": [
+    { "id": "g1", "text": "Users see an in-app unread badge within 5 seconds of a new notification" },
+    { "id": "g2", "text": "Users can opt out of the email digest" }
+  ],
+  "non_goals": [{ "id": "n1", "text": "No mobile push notifications" }],
+  "constraints": [],
+  "slices": ["unread badge", "digest opt-out"]
+}

package/calibration/skills/decompose/seeds/s2-nongoal-bait/expect.json

@@ -0,0 +1 @@
+{ "defect": "the obvious implementation (add Redis) violates n1", "forbid": ["redis", "memcached"] }

package/calibration/skills/decompose/seeds/s2-nongoal-bait/recap.json

@@ -0,0 +1,8 @@
+{
+  "effort": "fast-product-pages",
+  "class": "feature",
+  "goals": [{ "id": "g1", "text": "Product page API responses under 200ms p95" }],
+  "non_goals": [{ "id": "n1", "text": "No new infrastructure services (no Redis, no Memcached, no new caches to operate)" }],
+  "constraints": [],
+  "slices": ["response caching within the existing stack"]
+}

package/calibration/skills/decompose/seeds/s3-duplicated-fact/expect.json

@@ -0,0 +1 @@
+{ "defect": "the 30-minute idle policy is one fact needed by two slices — must be extracted into its own spec", "expect_extraction": true }

package/calibration/skills/decompose/seeds/s3-duplicated-fact/recap.json

@@ -0,0 +1,11 @@
+{
+  "effort": "session-expiry",
+  "class": "feature",
+  "goals": [
+    { "id": "g1", "text": "Web sessions expire after 30 idle minutes" },
+    { "id": "g2", "text": "Mobile API sessions expire after 30 idle minutes" }
+  ],
+  "non_goals": [{ "id": "n1", "text": "No remember-me extension of the idle window" }],
+  "constraints": [],
+  "slices": ["web expiry", "mobile expiry"]
+}

package/calibration/skills/decompose/seeds/s4-fix-routes-amend/canon/checkout-flow.md

@@ -0,0 +1,19 @@
+---
+id: checkout-flow
+type: spec
+status: live
+summary: Guests complete checkout in three steps with a persistent cart
+depends: []
+criteria:
+  - id: ac-checkout
+    test: "@spec:checkout-flow"
+---
+
+## Motivation
+
+Checkout is the revenue path.
+
+## Behavior
+
+Cart, address, payment — three steps; the cart persists across sessions for
+seven days. Abandoning payment keeps the cart intact.

package/calibration/skills/decompose/seeds/s4-fix-routes-amend/canon/payment-retry.md

@@ -0,0 +1,20 @@
+---
+id: payment-retry
+type: spec
+status: live
+summary: Failed payments retry three times with exponential backoff
+depends: []
+criteria:
+  - id: ac-retry
+    test: "@spec:payment-retry"
+---
+
+## Motivation
+
+Transient processor failures should not lose orders.
+
+## Behavior
+
+A failed payment attempt is retried up to three times with exponential
+backoff (1s, 4s, 16s). Retries reuse the original payment token. After the
+final failure the order moves to needs-attention.

package/calibration/skills/decompose/seeds/s4-fix-routes-amend/expect.json

@@ -0,0 +1 @@
+{ "defect": "a fix must amend the one spec owning retries, not invent a new spec", "expect_amend": ["payment-retry"] }

package/calibration/skills/decompose/seeds/s4-fix-routes-amend/recap.json

@@ -0,0 +1,8 @@
+{
+  "effort": "stop-declined-retries",
+  "class": "fix",
+  "goals": [{ "id": "g1", "text": "Payment retries stop immediately on a hard decline (card_declined)" }],
+  "non_goals": [{ "id": "n1", "text": "No changes to retry timing for soft failures" }],
+  "constraints": [],
+  "slices": []
+}

package/calibration/skills/decompose/seeds/s5-chore-no-specs/canon/checkout-flow.md

@@ -0,0 +1,19 @@
+---
+id: checkout-flow
+type: spec
+status: live
+summary: Guests complete checkout in three steps with a persistent cart
+depends: []
+criteria:
+  - id: ac-checkout
+    test: "@spec:checkout-flow"
+---
+
+## Motivation
+
+Checkout is the revenue path.
+
+## Behavior
+
+Cart, address, payment — three steps; the cart persists across sessions for
+seven days. Abandoning payment keeps the cart intact.

package/calibration/skills/decompose/seeds/s5-chore-no-specs/expect.json

@@ -0,0 +1 @@
+{ "defect": "a chore writes no spec content — the valid output is an empty artifact set", "expect_empty": true }

package/calibration/skills/decompose/seeds/s5-chore-no-specs/recap.json

@@ -0,0 +1,8 @@
+{
+  "effort": "bump-node-runtime",
+  "class": "chore",
+  "goals": [{ "id": "g1", "text": "CI and production run Node 22 LTS" }],
+  "non_goals": [{ "id": "n1", "text": "No dependency major-version bumps in the same effort" }],
+  "constraints": [],
+  "slices": []
+}

package/calibration/skills/implement/seeds/s1-add-function/plan.body.md

@@ -0,0 +1,5 @@
+## Step: s1
+
+Failing test first in `tests/clamp.test.mjs` — name carries `@spec:clamp-range`;
+assert bounds, NaN → lo, and the lo > hi RangeError. Then implement `clamp` in
+`src/clamp.mjs`; green.

package/calibration/skills/implement/seeds/s1-add-function/plan.meta.json

@@ -0,0 +1,7 @@
+{
+  "type": "plan",
+  "parent": "clamp-range",
+  "depends": [],
+  "needs": [],
+  "steps": [{ "id": "s1", "title": "implement clamp with TDD", "criteria": ["ac-clamp"] }]
+}

package/calibration/skills/implement/seeds/s1-add-function/recap.json

@@ -0,0 +1,8 @@
+{
+  "effort": "cal-implement",
+  "class": "feature",
+  "goals": [{ "id": "g1", "text": "The promised utility behavior exists with tagged tests" }],
+  "non_goals": [],
+  "constraints": [],
+  "slices": []
+}

package/calibration/skills/implement/seeds/s1-add-function/repo/package.json

@@ -0,0 +1 @@
+{ "name": "cal-implement-s1", "type": "module", "private": true }

package/calibration/skills/implement/seeds/s1-add-function/repo/src/clamp.mjs

@@ -0,0 +1,2 @@
+// clamp(value, lo, hi) is promised by the clamp-range spec — not implemented yet.
+export {};

package/calibration/skills/implement/seeds/s1-add-function/spec.body.md

@@ -0,0 +1,8 @@
+## Motivation
+
+Shared input guard (g1).
+
+## Behavior
+
+`clamp(value, lo, hi)` returns value bounded inclusively: below lo → lo,
+above hi → hi, NaN → lo. lo > hi throws a RangeError.

package/calibration/skills/implement/seeds/s1-add-function/spec.meta.json

@@ -0,0 +1,8 @@
+{
+  "type": "spec",
+  "summary": "Numbers clamp into an inclusive range",
+  "depends": [],
+  "needs": [],
+  "criteria": [{ "id": "ac-clamp", "test": "@spec:clamp-range" }],
+  "covers": ["g1"]
+}

package/calibration/skills/implement/seeds/s2-fix-bug/plan.body.md

@@ -0,0 +1,6 @@
+## Step: s1
+
+Failing test first in `tests/slug.test.mjs` — name carries `@spec:slug-trim`;
+assert `slugify(" hello ")` equals `hello` (no leading/trailing hyphen). Then
+fix `slugify` in `src/slug.mjs` to strip leading/trailing hyphens after the
+existing replacements; green.

package/calibration/skills/implement/seeds/s2-fix-bug/plan.meta.json

@@ -0,0 +1,7 @@
+{
+  "type": "plan",
+  "parent": "slug-trim",
+  "depends": [],
+  "needs": [],
+  "steps": [{ "id": "s1", "title": "trim leading/trailing hyphens", "criteria": ["ac-trim"] }]
+}

package/calibration/skills/implement/seeds/s2-fix-bug/recap.json

@@ -0,0 +1,8 @@
+{
+  "effort": "cal-implement",
+  "class": "feature",
+  "goals": [{ "id": "g1", "text": "The promised utility behavior exists with tagged tests" }],
+  "non_goals": [],
+  "constraints": [],
+  "slices": []
+}

package/calibration/skills/implement/seeds/s2-fix-bug/repo/package.json

@@ -0,0 +1 @@
+{ "name": "cal-implement-s2", "type": "module", "private": true }

package/calibration/skills/implement/seeds/s2-fix-bug/repo/src/slug.mjs

@@ -0,0 +1,7 @@
+export function slugify(title) {
+  return title
+    .toLowerCase()
+    .replace(/\s+/g, '-')
+    .replace(/[^a-z0-9-]/g, '')
+    .replace(/-+/g, '-');
+}

package/calibration/skills/implement/seeds/s2-fix-bug/repo/tests/slug.test.mjs

@@ -0,0 +1,7 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { slugify } from '../src/slug.mjs';
+
+test('lowercases and hyphenates', () => {
+  assert.equal(slugify('Hello World'), 'hello-world');
+});

package/calibration/skills/implement/seeds/s2-fix-bug/spec.body.md

@@ -0,0 +1,9 @@
+## Motivation
+
+A leading or trailing hyphen makes URLs look broken (g1).
+
+## Behavior
+
+`slugify(title)` strips any hyphen left at the start or end of the result
+after punctuation is stripped and whitespace is collapsed — a title of
+`" hello "` becomes `hello`, never `-hello-`.

package/calibration/skills/implement/seeds/s2-fix-bug/spec.meta.json

@@ -0,0 +1,8 @@
+{
+  "type": "spec",
+  "summary": "Slugs never carry leading or trailing hyphens",
+  "depends": [],
+  "needs": [],
+  "criteria": [{ "id": "ac-trim", "test": "@spec:slug-trim" }],
+  "covers": ["g1"]
+}