@stravica-ai/rcf-schemas 0.3.1 → 0.4.0

package/CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to `@stravica-ai/rcf-schemas` are documented in this file.
 
 The format roughly follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Pre-1.0 breaking changes are signalled by a minor bump per semver 0.x convention.
 
+## 0.4.0 - 2026-07-30
+
+Additive minor bump carrying the 0.7.0 release-train schema surface for `rcf-lite`: three ratified track specs (verification-integrity, UI-design-gate, elicitation-and-playbook-hardening) co-ship every new schema field in one release, resolved through a single `$defs`-uniqueness sweep. Every field is optional at schema level; pre-0.4.0 chains remain valid. The 0.6.0 init-hygiene spec is pure build-side and touches no schemas here.
+
+### Added
+
+- **`common.schema.json`**: new `$defs.attestationMode` enum (`live | sandboxed | mocked | declaredMockOnly | notShipped`), shared between `fbs.dependsOnServices[]` and `manifest.preFlightConfig.servicesInScope[]`.
+- **`test-suite.schema.json`**: optional `runtimeProvenance` on the `testCase` subschema, with `profile` enum (`mock | stub | fixture | live | mixed`), `envVarsRequired[]`, `externalHostsReached[]`, `notes`. `$defs.runtimeProvenance` defined locally.
+- **`fbs.schema.json`**: optional `dependsOnServices[]` (Track A service attestation), plus Track B's `uiBearing` (boolean), `uiClassification`, `designStage` (journeys, navigation model, theme-and-a11y), and `designStageComplete` (boolean gate at `--mark complete`). New `$defs`: `serviceDependency`, `uiClassification`, `uiClassificationSignal`, `designStage`, `designJourney`, `designNavModel`, `designNavRoute`, `designThemeAndA11y`.
+- **`req.schema.json`**: optional `shapeClassification` (Track C+D REQ-shape classifier verdict) with `shapes[]` enum (`webUi | httpApi | auth | persistence | notifications | none`), `reason`, `signals[]`, `classifiedAt`, and `operatorOverride`. New `$defs`: `reqShapeClassification`, `reqShapeSignal`, `reqShapeOperatorOverride`.
+- **`user-story.schema.json`**: optional `provenance` on the acceptance-criterion subschema (Track C+D) with `authoredBy` enum (`operator | baseline | operatorEdited`), `baselineKey`, `injectedAt`, `sourceReqShape`, `acceptedByOperatorAt`. New `$defs.acProvenance`.
+- **`manifest.schema.json`**: broad additive surface across the three tracks. New optional fields: `testCommand` (string), `preFlightConfig[]`, `reviewAudit[]`, `uiBaseline`, `uiBaselineHistory[]`, `browserVerification[]`, `baselineAcOptOuts[]`, `intakeClassification`, `registerCanary[]`, `reviewSurface`. New `$defs`: `preFlightConfigRecord`, `preFlightServiceEntry`, `designShapeAnswer`, `reviewAuditRecord`, `testTheatreFinding` (whose `kind` enum includes Track B's `uiBaselineDrift`), `mutationSamplingRecord`, `mutationSurvivor`, `uiBaselineRecord`, `uiBaselineDefaults`, `uiBaselineComponentVocabulary`, `uiBaselineTypography`, `uiBaselineInteractionDefaults`, `uiBaselineAuthFlow`, `uiBaselineOptOut`, `browserVerificationRecord`, `browserVerificationRoute`, `browserVerificationInvariantCheck`, `browserVerificationAuthSmokeCheck`, `baselineAcOptOutRecord`, `intakeClassificationRecord`, `intakeArtefact`, `intakeValidationFinding`, `intakeElicitationScope`, `registerCanaryRecord`, `registerCanaryGrades`, `registerCanaryPatternGrade`, `registerCanaryWordBudgetGrade`, `reviewSurfaceRecord`, `reviewSurfaceViewServer`. Load-bearing constraints: `baselineAcOptOutRecord.reason` carries `minLength: 20`; `browserVerificationRecord.routesChecked` and `invariantChecks` require `minItems: 1`; `preFlightConfigRecord.id`, `uiBaselineRecord.id`, `baselineAcOptOutRecord.id`, `intakeClassificationRecord.id`, and `registerCanaryRecord.id` carry monotonic id patterns.
+- Fixtures: valid coverage under `fixtures/valid/fbs/`, `test-suite/`, `req/`, `user-story/`, `manifest/`, including a dedicated back-compat manifest fixture (`manifest-004-pre-040-backcompat.json`) proving a pre-0.4.0 manifest still validates against 0.4.0 unchanged. Invalid coverage under `fixtures/invalid/` exercises the enum, minLength, and boolean-type constraints most likely to catch drift downstream.
+- Targeted per-schema tests extended for every new field: `fbs.test.js`, `test-suite.test.js`, `req.test.js`, `user-story.test.js`. New file `manifest.test.js` covers the manifest-level additions in depth, including the `baselineAcOptOutRecord.reason` 20-character floor and every enum shape.
+
+### Changed
+
+- **Canonical `$id`** URLs bumped from `https://schemas.stravica.io/rcf/v0.3.0/...` to `https://schemas.stravica.io/rcf/v0.4.0/...` on every schema, in lock-step with the bundle version. Matches the precedent set at 0.3.0.
+- `manifest.schema.json` description now names the added optional records and states the back-compat guarantee explicitly.
+
+### Notes
+
+- Every addition is optional at schema level. The additive-only contract is proven by `fixtures/valid/manifest/manifest-004-pre-040-backcompat.json` (a bare 0.3.x-era manifest) validating cleanly, and by the `pre-0.4.0 ... still validates` tests in each per-schema test file.
+- `$defs` uniqueness was audited across all three tracks before authoring; no shape-disagreeing collisions. The one intentionally shared def (`common.$defs.attestationMode`) is the enum both FBS's `dependsOnServices[]` and manifest's `preFlightServiceEntry` need.
+- The 0.6.0 init-hygiene spec (`packages/{build,core}` in `rcf-lite`) confirmed schema-free and therefore not represented here.
+- Pre-merge constraint alignments in the same 0.4.0 release: `fbs.$defs.designJourney.steps` `minItems` raised from 1 to 2 to match Track B §3.1 ("2-8 short strings"); `manifest.$defs.preFlightServiceEntry.sourceRefs` `minItems` relaxed from 1 to 0 so operator-added service candidates with no PRD or TAD reference validate. Negative-fixture symmetry back-filled for the enum and id-pattern constraints that lacked a dedicated fixture.
+
 ## 0.3.1 - 2026-07-10
 
 Added optional `noCodeNodes` boolean to `fbs.schema.json`. It declares that a build spec produces no traceable code (docs-only or config-only): `rcf build --mark complete` records it via `--no-code-nodes` and the CodeNode gate skips the spec. Additive and backward-compatible - existing FBS documents without the field remain valid. Canonical `$id` URLs stay at `v0.3.0`, following the patch-release precedent set at 0.2.1.

package/fixtures/invalid/fbs/fbs-008-design-stage-complete-non-boolean.json

@@ -0,0 +1,15 @@
+{
+  "fbsId": "FBS-016",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 16,
+  "executionStatus": "inProgress",
+  "title": "Web UI dashboard",
+  "summary": "Dashboard rendering.",
+  "acIds": ["AC-1101-1"],
+  "dependsOnFbsIds": [],
+  "uiBearing": true,
+  "designStageComplete": "yes",
+  "createdAt": "2026-07-30T14:15:00Z",
+  "updatedAt": "2026-07-30T14:15:00Z"
+}

package/fixtures/invalid/fbs/fbs-009-design-stage-bad-theme-mode.json

@@ -0,0 +1,23 @@
+{
+  "fbsId": "FBS-016",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 16,
+  "executionStatus": "inProgress",
+  "title": "Web UI dashboard",
+  "summary": "Dashboard rendering.",
+  "acIds": ["AC-1101-1"],
+  "dependsOnFbsIds": [],
+  "uiBearing": true,
+  "designStage": {
+    "themeAndA11y": {
+      "themeMode": "sepia",
+      "themeTokensModule": "src/ui/tokens.ts",
+      "contrastTargets": "WCAG AA",
+      "contrastTestPath": "test/a11y.test.ts",
+      "contrastTestAuthoredBeforePalette": true
+    }
+  },
+  "createdAt": "2026-07-30T14:15:00Z",
+  "updatedAt": "2026-07-30T14:15:00Z"
+}

package/fixtures/invalid/fbs/fbs-010-service-attestation-bad-mode.json

@@ -0,0 +1,22 @@
+{
+  "fbsId": "FBS-011",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 11,
+  "executionStatus": "inProgress",
+  "title": "Email channel",
+  "summary": "Recovery email dispatch.",
+  "acIds": ["AC-1001-2"],
+  "dependsOnFbsIds": [],
+  "dependsOnServices": [
+    {
+      "id": "resend",
+      "displayName": "Resend email API",
+      "purpose": "outbound transactional email delivery",
+      "attestationMode": "someday",
+      "acIds": ["AC-1001-2"]
+    }
+  ],
+  "createdAt": "2026-07-30T14:15:00Z",
+  "updatedAt": "2026-07-30T14:15:00Z"
+}

package/fixtures/invalid/fbs/fbs-011-design-journey-single-step.json

@@ -0,0 +1,24 @@
+{
+  "fbsId": "FBS-016",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 16,
+  "executionStatus": "inProgress",
+  "title": "Web UI dashboard",
+  "summary": "Dashboard rendering.",
+  "acIds": ["AC-1101-1"],
+  "dependsOnFbsIds": [],
+  "uiBearing": true,
+  "designStage": {
+    "journeys": [
+      {
+        "id": "single-step-journey",
+        "actor": "signed-in owner",
+        "goal": "see status at a glance",
+        "steps": ["lands on / after login"]
+      }
+    ]
+  },
+  "createdAt": "2026-07-30T14:15:00Z",
+  "updatedAt": "2026-07-30T14:15:00Z"
+}

package/fixtures/invalid/manifest/manifest-004-optout-reason-too-short.json

@@ -0,0 +1,18 @@
+{
+  "version": "2.0.0",
+  "projectName": "Reason floor breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "baselineAcOptOuts": [
+    {
+      "id": "boo-2026-07-30-002",
+      "createdAt": "2026-07-30T14:30:00Z",
+      "reqId": "REQ-012",
+      "baselineKey": "auth.htmlLoginPage",
+      "scope": "req",
+      "reason": "too short",
+      "operatorAckAt": "2026-07-30T14:30:00Z"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-005-browser-verify-bad-verdict.json

@@ -0,0 +1,24 @@
+{
+  "version": "2.0.0",
+  "projectName": "Bad browser-verify verdict",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "browserVerification": [
+    {
+      "id": "bv-FBS-016-1",
+      "fbsId": "FBS-016",
+      "createdAt": "2026-07-30T15:22:00Z",
+      "mode": "agentScreenshotCritique",
+      "runtimeProfile": "local-dev",
+      "runtimeUrl": "http://127.0.0.1:3000",
+      "routesChecked": [
+        { "path": "/", "screenshotPath": ".rcf/artefacts/bv-FBS-016-1/dashboard.png", "themeApplied": "light" }
+      ],
+      "invariantChecks": [
+        { "invariant": "sharedNavPresent", "verdict": "pass" }
+      ],
+      "verdict": "green"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-006-intake-fidelity-bad.json

@@ -0,0 +1,16 @@
+{
+  "version": "2.0.0",
+  "projectName": "Intake fidelity enum breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "intakeClassification": {
+    "id": "ic-2026-07-30-001",
+    "createdAt": "2026-07-30T13:50:00Z",
+    "fidelity": "wireframeSet",
+    "artefacts": [],
+    "validationFindings": [],
+    "elicitationScope": {},
+    "operatorAckAt": "2026-07-30T13:55:00Z"
+  }
+}

package/fixtures/invalid/manifest/manifest-007-intake-artefact-bad-kind.json

@@ -0,0 +1,18 @@
+{
+  "version": "2.0.0",
+  "projectName": "Intake artefact kind enum breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "intakeClassification": {
+    "id": "ic-2026-07-30-001",
+    "createdAt": "2026-07-30T13:50:00Z",
+    "fidelity": "napkin",
+    "artefacts": [
+      { "path": "docs/scribbles.md", "kind": "wireframe" }
+    ],
+    "validationFindings": [],
+    "elicitationScope": {},
+    "operatorAckAt": "2026-07-30T13:55:00Z"
+  }
+}

package/fixtures/invalid/manifest/manifest-008-intake-finding-bad-kind.json

@@ -0,0 +1,22 @@
+{
+  "version": "2.0.0",
+  "projectName": "Intake validation finding kind enum breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "intakeClassification": {
+    "id": "ic-2026-07-30-001",
+    "createdAt": "2026-07-30T13:50:00Z",
+    "fidelity": "briefLight",
+    "artefacts": [],
+    "validationFindings": [
+      {
+        "kind": "typoDetected",
+        "detail": "not in the schema enum",
+        "raisedAt": "2026-07-30T13:52:00Z"
+      }
+    ],
+    "elicitationScope": {},
+    "operatorAckAt": "2026-07-30T13:55:00Z"
+  }
+}

package/fixtures/invalid/manifest/manifest-009-review-surface-bad-mode.json

@@ -0,0 +1,17 @@
+{
+  "version": "2.0.0",
+  "projectName": "Review-surface viewServer mode enum breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "reviewSurface": {
+    "viewServer": {
+      "mode": "daemon",
+      "startedAt": "2026-07-30T09:40:00Z",
+      "socketPath": ".rcf/view.sock",
+      "pid": 1,
+      "healthCheckPath": "http://127.0.0.1:4373/healthz",
+      "lastHeartbeatAt": "2026-07-30T09:40:00Z"
+    }
+  }
+}

package/fixtures/invalid/manifest/manifest-010-preflight-bad-id.json

@@ -0,0 +1,16 @@
+{
+  "version": "2.0.0",
+  "projectName": "Preflight-config id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "preFlightConfig": [
+    {
+      "id": "preflight-001",
+      "createdAt": "2026-07-30T14:20:00Z",
+      "prdId": "PRD-001",
+      "servicesInScope": [],
+      "operatorAckAt": "2026-07-30T14:22:00Z"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-011-ui-baseline-bad-id.json

@@ -0,0 +1,14 @@
+{
+  "version": "2.0.0",
+  "projectName": "UI-baseline id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "uiBaseline": {
+    "id": "baseline-001",
+    "createdAt": "2026-07-30T14:15:00Z",
+    "prdId": "PRD-001",
+    "defaults": {},
+    "operatorAckAt": "2026-07-30T14:15:00Z"
+  }
+}

package/fixtures/invalid/manifest/manifest-012-review-audit-bad-id.json

@@ -0,0 +1,16 @@
+{
+  "version": "2.0.0",
+  "projectName": "Review-audit id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "reviewAudit": [
+    {
+      "id": "audit-011-1",
+      "fbsId": "FBS-011",
+      "createdAt": "2026-07-30T15:10:00Z",
+      "testTheatreFindings": [],
+      "verdict": "pass"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-013-browser-verify-bad-id.json

@@ -0,0 +1,24 @@
+{
+  "version": "2.0.0",
+  "projectName": "Browser-verify id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "browserVerification": [
+    {
+      "id": "verify-016-1",
+      "fbsId": "FBS-016",
+      "createdAt": "2026-07-30T15:22:00Z",
+      "mode": "operatorSession",
+      "runtimeProfile": "local-dev",
+      "runtimeUrl": "http://127.0.0.1:3000",
+      "routesChecked": [
+        { "path": "/", "screenshotPath": ".rcf/artefacts/verify-016-1/dashboard.png", "themeApplied": "light" }
+      ],
+      "invariantChecks": [
+        { "invariant": "sharedNavPresent", "verdict": "pass" }
+      ],
+      "verdict": "pass"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-014-baseline-optout-bad-id.json

@@ -0,0 +1,18 @@
+{
+  "version": "2.0.0",
+  "projectName": "Baseline-AC opt-out id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "baselineAcOptOuts": [
+    {
+      "id": "optout-001",
+      "createdAt": "2026-07-30T14:30:00Z",
+      "reqId": "REQ-012",
+      "baselineKey": "auth.htmlLoginPage",
+      "scope": "req",
+      "reason": "operator ruling with sufficient length to clear the twenty-character floor",
+      "operatorAckAt": "2026-07-30T14:30:00Z"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-015-intake-bad-id.json

@@ -0,0 +1,16 @@
+{
+  "version": "2.0.0",
+  "projectName": "Intake-classification id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "intakeClassification": {
+    "id": "intake-001",
+    "createdAt": "2026-07-30T13:50:00Z",
+    "fidelity": "napkin",
+    "artefacts": [],
+    "validationFindings": [],
+    "elicitationScope": {},
+    "operatorAckAt": "2026-07-30T13:55:00Z"
+  }
+}

package/fixtures/invalid/manifest/manifest-016-register-canary-bad-id.json

@@ -0,0 +1,24 @@
+{
+  "version": "2.0.0",
+  "projectName": "Register-canary id pattern breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "registerCanary": [
+    {
+      "id": "canary-001",
+      "createdAt": "2026-07-30T18:10:00Z",
+      "buildVersion": "0.7.0-rc.1",
+      "fixturePromptId": "canary-prompt-01",
+      "responseWordCount": 152,
+      "grades": {
+        "internalRuleCitation": { "verdict": "pass", "matches": [] },
+        "unglossedJargon": { "verdict": "pass", "matches": [] },
+        "redundantPermissionAsk": { "verdict": "pass", "matches": [] },
+        "bypassOffer": { "verdict": "pass", "matches": [] },
+        "wordCountBudget": { "verdict": "pass", "target": 200, "actual": 152 }
+      },
+      "verdict": "pass"
+    }
+  ]
+}

package/fixtures/invalid/manifest/manifest-017-register-canary-missing-dimension.json

@@ -0,0 +1,23 @@
+{
+  "version": "2.0.0",
+  "projectName": "Register-canary grades structural breach",
+  "prd": { "id": "PRD-001", "path": "rcf/prd.json" },
+  "tad": { "id": "TAD-001", "path": "rcf/tad.json" },
+  "bs":  { "id": "BS-001",  "path": "rcf/build-sequence.json" },
+  "registerCanary": [
+    {
+      "id": "rc-2026-07-30-001",
+      "createdAt": "2026-07-30T18:10:00Z",
+      "buildVersion": "0.7.0-rc.1",
+      "fixturePromptId": "canary-prompt-01",
+      "responseWordCount": 152,
+      "grades": {
+        "internalRuleCitation": { "verdict": "pass", "matches": [] },
+        "unglossedJargon": { "verdict": "pass", "matches": [] },
+        "redundantPermissionAsk": { "verdict": "pass", "matches": [] },
+        "bypassOffer": { "verdict": "pass", "matches": [] }
+      },
+      "verdict": "pass"
+    }
+  ]
+}

package/fixtures/invalid/req/req-004-shape-classification-bad-shape.json

@@ -0,0 +1,18 @@
+{
+  "reqId": "REQ-012",
+  "prdId": "PRD-001",
+  "title": "Dashboard",
+  "description": "Signed-in dashboard for owners.",
+  "category": "functional",
+  "domain": "webUi",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-07-30T14:20:00Z",
+  "updatedAt": "2026-07-30T14:20:00Z",
+  "shapeClassification": {
+    "shapes": ["chatbot"],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-07-30T14:20:00Z"
+  }
+}

package/fixtures/invalid/test-suite/ts-006-runtime-provenance-bad-profile.json

@@ -0,0 +1,24 @@
+{
+  "id": "TS-015",
+  "usId": "US-1001",
+  "title": "Recovery email dispatch",
+  "purpose": "Cover the recovery-email flow.",
+  "testLevel": "integration",
+  "acIds": ["AC-1001-2"],
+  "testCases": [
+    {
+      "id": "TC-015-happy-path",
+      "acId": "AC-1001-2",
+      "description": "email dispatched on recovery event",
+      "status": "passing",
+      "runtimeProvenance": {
+        "profile": "somehow",
+        "envVarsRequired": [],
+        "externalHostsReached": []
+      }
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-07-30T14:20:00Z",
+  "updatedAt": "2026-07-30T14:20:00Z"
+}

package/fixtures/invalid/user-story/us-003-provenance-bad-authored-by.json

@@ -0,0 +1,23 @@
+{
+  "usId": "US-1201",
+  "prdId": "PRD-001",
+  "reqId": "REQ-012",
+  "version": "0.1.0",
+  "status": "draft",
+  "title": "Signed-in owner reaches dashboard",
+  "asA": "signed-in owner",
+  "iWant": "to land on the dashboard after logging in",
+  "soThat": "I can see every monitor at a glance",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-1201-1",
+      "description": "any authenticated route renders the shared nav",
+      "testable": true,
+      "provenance": {
+        "authoredBy": "guessed"
+      }
+    }
+  ],
+  "createdAt": "2026-07-30T14:20:00Z",
+  "updatedAt": "2026-07-30T14:20:00Z"
+}

package/fixtures/valid/fbs/fbs-004-track-a-service-attestation.json

@@ -0,0 +1,23 @@
+{
+  "fbsId": "FBS-011",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 11,
+  "executionStatus": "inProgress",
+  "title": "Email channel via Resend",
+  "summary": "Route recovery emails through the Resend transactional API.",
+  "acIds": ["AC-1001-2"],
+  "dependsOnFbsIds": [],
+  "dependsOnServices": [
+    {
+      "id": "resend",
+      "displayName": "Resend email API",
+      "purpose": "outbound transactional email delivery",
+      "attestationMode": "live",
+      "acIds": ["AC-1001-2"],
+      "preFlightRef": "pfc-2026-07-30-001#services.resend"
+    }
+  ],
+  "createdAt": "2026-07-30T14:20:00Z",
+  "updatedAt": "2026-07-30T14:20:00Z"
+}

package/fixtures/valid/fbs/fbs-005-track-b-ui-design-stage.json

@@ -0,0 +1,56 @@
+{
+  "fbsId": "FBS-016",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 16,
+  "executionStatus": "inProgress",
+  "title": "Web UI dashboard",
+  "summary": "Ship the signed-in owner's dashboard with a shared nav and a light-default theme toggle.",
+  "acIds": ["AC-1101-1", "AC-1101-2"],
+  "dependsOnFbsIds": [],
+  "uiBearing": true,
+  "uiClassification": {
+    "verdict": "ui",
+    "reason": "keyword-scan",
+    "signals": [
+      { "source": "summary", "match": "dashboard" },
+      { "source": "summary", "match": "nav" }
+    ],
+    "classifiedAt": "2026-07-30T14:20:00Z"
+  },
+  "designStage": {
+    "journeys": [
+      {
+        "id": "signed-in-owner-checks-status",
+        "actor": "signed-in owner",
+        "goal": "see current status of every monitor at a glance",
+        "steps": [
+          "lands on / after login",
+          "sees count tiles and monitor list",
+          "clicks a monitor to see its detail"
+        ]
+      }
+    ],
+    "navModel": {
+      "shape": "shared-persistent",
+      "routes": [
+        { "path": "/", "label": "Dashboard", "authRequired": true },
+        { "path": "/monitors", "label": "Monitors", "authRequired": true }
+      ],
+      "signedInAsAffordance": true,
+      "notes": "one persistent nav bar rendered by src/ui/layout.ts on every authenticated route"
+    },
+    "themeAndA11y": {
+      "themeMode": "light-default-with-toggle",
+      "themeTokensModule": "src/ui/tokens.ts",
+      "contrastTargets": "WCAG AA (4.5 text, 3.0 large text, 3.0 UI component)",
+      "contrastTestPath": "test/ui-accessibility.test.ts",
+      "contrastTestAuthoredBeforePalette": true
+    },
+    "authoredAt": "2026-07-30T14:35:00Z",
+    "authoredBy": "rcf-lite-engineer:design-worker"
+  },
+  "designStageComplete": true,
+  "createdAt": "2026-07-30T14:15:00Z",
+  "updatedAt": "2026-07-30T14:35:00Z"
+}