rcf-lite 0.20.0 → 0.22.0

package/blueprints/application-forms-wizard/blueprint.json

@@ -0,0 +1,120 @@
+{
+  "slug": "application-forms-wizard",
+  "version": "1.0.0",
+  "category": "application",
+  "suggestedCompanions": [
+    {
+      "role": "logging",
+      "reason": "Every step transition, validation failure and save-and-return event writes one request-scoped log line with the correlation identifier and the step slug through the applied logger factory."
+    },
+    {
+      "role": "errorHandling",
+      "reason": "The error-summary contract constructs an internal error record per failed field through the applied error-handling factory so the aria-describedby binding renders a consistent message shape across steps."
+    }
+  ],
+  "contributions": [
+    {
+      "id": "application-forms-wizard-REQ-001",
+      "kind": "req",
+      "path": "requirements/application-forms-wizard-req-001.json"
+    },
+    {
+      "id": "application-forms-wizard-REQ-002",
+      "kind": "req",
+      "path": "requirements/application-forms-wizard-req-002.json"
+    },
+    {
+      "id": "application-forms-wizard-REQ-003",
+      "kind": "req",
+      "path": "requirements/application-forms-wizard-req-003.json"
+    },
+    {
+      "id": "application-forms-wizard-REQ-004",
+      "kind": "req",
+      "path": "requirements/application-forms-wizard-req-004.json"
+    },
+    {
+      "id": "application-forms-wizard-REQ-005",
+      "kind": "req",
+      "path": "requirements/application-forms-wizard-req-005.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24101",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24101.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24102",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24102.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24103",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24103.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24104",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24104.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24105",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24105.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24106",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24106.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24107",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24107.json"
+    },
+    {
+      "id": "application-forms-wizard-US-24108",
+      "kind": "us",
+      "path": "user-stories/application-forms-wizard-us-24108.json"
+    },
+    {
+      "id": "TAC-2501-application-forms-wizard-task-list",
+      "kind": "tac",
+      "path": "tacs/tac-2501-application-forms-wizard-task-list.json"
+    },
+    {
+      "id": "TAC-2502-application-forms-wizard-error-summary",
+      "kind": "tac",
+      "path": "tacs/tac-2502-application-forms-wizard-error-summary.json"
+    },
+    {
+      "id": "TAC-2503-application-forms-wizard-draft-store",
+      "kind": "tac",
+      "path": "tacs/tac-2503-application-forms-wizard-draft-store.json"
+    },
+    {
+      "id": "ADR-2501-application-forms-wizard-navigation",
+      "kind": "adr",
+      "path": "adrs/adr-2501-application-forms-wizard-navigation.json",
+      "recommendedDefault": true,
+      "elicited": true,
+      "standardsTraceClause": "GOV.UK Design System step-by-step navigation pattern"
+    },
+    {
+      "id": "ADR-2502-application-forms-wizard-save-and-return",
+      "kind": "adr",
+      "path": "adrs/adr-2502-application-forms-wizard-save-and-return.json",
+      "elicited": true,
+      "standardsTraceClause": "GOV.UK Design System save and return pattern; generic enterprise practice"
+    },
+    {
+      "id": "ADR-2503-application-forms-wizard-step-indicator",
+      "kind": "adr",
+      "path": "adrs/adr-2503-application-forms-wizard-step-indicator.json",
+      "recommendedDefault": true,
+      "elicited": true,
+      "standardsTraceClause": "GOV.UK Design System task list pattern; WCAG 2.2 SC 2.4.6 Headings and Labels"
+    }
+  ]
+}

package/blueprints/application-forms-wizard/contributions/adrs/adr-2501-application-forms-wizard-navigation.json

@@ -0,0 +1,25 @@
+{
+  "adrId": "ADR-2501-application-forms-wizard-navigation",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "1.0.0",
+  "status": "accepted",
+  "title": "Step navigation posture is linear by default with free-step as the elicited alternative",
+  "context": "Wizards divide on how much freedom the operator has to jump between steps. A linear posture forbids advancing until the current step is Completed and disables backward jumps to steps whose prerequisites the domain says must be Completed first (an application with a payment step gated on shipping details, say). A free posture lets the operator pick any step at any time and computes the completion states independently. Neither is wrong; the choice is a per-project posture driven by the domain the wizard serves. GOV.UK Design System publishes the step-by-step navigation pattern as the widely-adopted linear model.",
+  "decision": "Adopt linear as the recommended default. The shipped task-list disables rows whose [data-step-state] is Cannot start yet by rendering them as spans without an href. Projects that want free navigation elicit ADR-2501 to the free branch and every row renders as an anchor. recommendedDefault is true because linear is the safer starting posture for a domain the shelf blueprint does not know; elicited is true because the switch is a real per-project answer.",
+  "consequences": "Projects on the default get a linear wizard out of the box with no configuration; the task-list refuses out-of-order entry and the operator walks the manifest in order. Projects electing free get an unconstrained task-list at the price of surfacing every prerequisite the domain implies through the manifest and the copy. All three step-indicator shapes (ADR-2503) render on both branches; the difference is only the click-through on rows whose prerequisites are unfinished.",
+  "alternativesConsidered": [
+    {
+      "name": "Free-step as the shipped default",
+      "summary": "Ship free navigation everywhere and rely on per-step validation to catch out-of-order entries.",
+      "reasonNotChosen": "Loses the affordance the domain often needs (a payment step should not be reachable before shipping details); reads as more forgiving but pushes the domain rule into copy rather than into the surface."
+    },
+    {
+      "name": "Two-step wizard with no task-list",
+      "summary": "Ship no task-list at all and rely on Back and Next.",
+      "reasonNotChosen": "Loses the completion overview and the ARIA progressbar; a wizard with three or more steps benefits materially from the task-list surface."
+    }
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/adrs/adr-2502-application-forms-wizard-save-and-return.json

@@ -0,0 +1,25 @@
+{
+  "adrId": "ADR-2502-application-forms-wizard-save-and-return",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "1.0.0",
+  "status": "accepted",
+  "title": "Save-and-return transport ships as server-side draft table or client-side local buffer with no recommendedDefault",
+  "context": "The abandoned-draft loss class is genuinely per-project. An application whose operators sign in on shared kiosks with rotating identities cannot rely on a local buffer keyed to the browser; the draft must live on a server-side draft table keyed to the operator identifier so the operator can walk to a different device and continue. An application whose operators run on a single personal device with intermittent connectivity is better served by a local buffer that survives a network drop and syncs on the next flush. A shipped default in either direction quietly ships the wrong loss class for at least one common posture, so this blueprint declines to pick one.",
+  "decision": "Ship two transports: server-draft-table (POST /drafts and GET /drafts against operator-configured endpoints) and client-local-buffer (localStorage keyed by wizard slug and step slug with a per-write ISO-8601 sync tick). ADR-2502 records the elicit as required, elicited is true, and no recommendedDefault is committed: a project applying application-forms-wizard MUST answer the elicit and the build gate refuses when neither transport is wired. The GOV.UK Design System save and return pattern informs the server branch; the local branch is generic enterprise practice.",
+  "consequences": "Projects with a server-side draft table get audit-trail-clean per-operator persistence at the price of a server endpoint and a persistence adapter. Projects with a client-side local buffer get zero-server-work persistence at the price of losing drafts when the operator switches device. A project that has not decided cannot silently ship on the shelf default because there is none; the elicit is a real gate. The pack drives both transports on the sample fixture and refuses on the ?draft-store=none branch to prove the missing-transport case fails at severity block.",
+  "alternativesConsidered": [
+    {
+      "name": "Server-only as the shipped default",
+      "summary": "Ship server-draft-table as the sole transport and refuse projects without a server endpoint.",
+      "reasonNotChosen": "Refuses to apply on a hobby SPA with no server; the shelf blueprint has to be reachable by every applied posture."
+    },
+    {
+      "name": "Local-only as the shipped default",
+      "summary": "Ship client-local-buffer as the sole transport and refuse projects with cross-device operators.",
+      "reasonNotChosen": "Ships the wrong loss class for kiosk-shape and multi-device operators; audit-trail-first projects cannot use it."
+    }
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/adrs/adr-2503-application-forms-wizard-step-indicator.json

@@ -0,0 +1,25 @@
+{
+  "adrId": "ADR-2503-application-forms-wizard-step-indicator",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "1.0.0",
+  "status": "accepted",
+  "title": "Step indicator shape defaults to task-list, with ARIA progressbar and breadcrumb as elicited alternatives",
+  "context": "Wizards indicate the operator's position through one of three widely-adopted shapes. A task-list (the GOV.UK Design System task list pattern) surfaces every step as a row with a completion state; the operator sees the whole shape at a glance and can jump to a specific step. An ARIA progressbar surfaces a single wrapper carrying aria-valuenow and aria-valuemax; the operator gets a compact completion count without a per-step enumeration. A breadcrumb surfaces the linear path with the current step highlighted; the operator sees the trail and can walk back but does not see the future steps' state. All three satisfy WCAG 2.2 SC 2.4.6 Headings and Labels; the choice is a per-project posture driven by the wizard's shape and the design system.",
+  "decision": "Adopt task-list as the recommended default; the shipped surface renders it with the ARIA progressbar wrapper on top per REQ-001 so every project gets the completion count for free. Projects that prefer a compact indicator elicit the aria-progressbar-only branch and the task-list rows collapse into the progressbar's aria-valuetext. Projects that prefer a trail elicit the breadcrumb branch and the task-list rows render as breadcrumb entries. recommendedDefault is true on task-list; elicited is true because the alternative is a real per-project answer.",
+  "consequences": "Projects on the default get the task-list plus the progressbar with no configuration; the pack anchors on the task-list surface and the progressbar wrapper. Projects electing aria-progressbar-only lose the per-step enumeration and the row jump; the pack skips AC-24106-1 (linear-vs-free row rendering has no rows). Projects electing breadcrumb keep the trail affordance and lose the future-state enumeration; the pack asserts the breadcrumb entries in place of the task-list rows.",
+  "alternativesConsidered": [
+    {
+      "name": "ARIA progressbar as the shipped default",
+      "summary": "Ship the compact progressbar and no task-list.",
+      "reasonNotChosen": "Loses the completion overview and the row-jump affordance; a wizard with three or more steps benefits materially from the task-list."
+    },
+    {
+      "name": "Breadcrumb as the shipped default",
+      "summary": "Ship the trail and no task-list.",
+      "reasonNotChosen": "Loses the future-step state enumeration; the operator cannot see at a glance what remains."
+    }
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/requirements/application-forms-wizard-req-001.json

@@ -0,0 +1,18 @@
+{
+  "reqId": "application-forms-wizard-REQ-001",
+  "prdId": "PRD-001",
+  "title": "Task-list contract: per-step completion state announced through the GOV.UK vocabulary Cannot start yet, Not started, In progress, Completed",
+  "description": "The wizard renders a task-list surface listing every step in a stable order. Each step exposes one of four completion states from the closed GOV.UK vocabulary: Cannot start yet (a prerequisite step is unfinished), Not started (the step is reachable but has no answers), In progress (the step has partial answers), Completed (the step is fully valid). The task-list carries an ARIA progressbar shape naming the total step count and the number completed. The four state strings are a closed enum at v1.0.0; a fifth state is a v1.1.0 minor bump. The surface anchors on TAC-2501 (task-list shell) and is vendor-neutral: the blueprint contributes WHAT strings under WHAT condition, not the visual token set.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "rationale": "Per visual round 4 spec section 5.3, REQ 1.",
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "category:01-task-list-contract"
+  ],
+  "version": "1.0.0",
+  "status": "approved",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/requirements/application-forms-wizard-req-002.json

@@ -0,0 +1,18 @@
+{
+  "reqId": "application-forms-wizard-REQ-002",
+  "prdId": "PRD-001",
+  "title": "Per-step validation timing: on-blur before first submit, then on-change after the first failure, and a full pass on submit reusing the SPA forms-engine",
+  "description": "Every step validates its own answers before advancing. Validation timing is on-blur before the first submit attempt on a step (a field validates when the operator leaves it), then on-change after the first submit failure on that field (so the operator sees the message clear as they correct it), and a full pass on submit that rebuilds the error set from scratch. Validation delegates to the SPA blueprint's forms-engine TAC-205 so a project already applying application-spa does not compose two overlapping engines. On refusal the engine surfaces the failed fields to the error-summary contract (REQ-003). The timing rule is a closed set at v1.0.0; different projects can elicit stricter (validate on every change from the start) via a project-level ADR but the shipped default is the three-mode rule above.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "rationale": "Per visual round 4 spec section 5.3, REQ 2.",
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "category:02-validation-timing"
+  ],
+  "version": "1.0.0",
+  "status": "approved",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/requirements/application-forms-wizard-req-003.json

@@ -0,0 +1,18 @@
+{
+  "reqId": "application-forms-wizard-REQ-003",
+  "prdId": "PRD-001",
+  "title": "Error-summary contract: top-of-page summary with skip links per failed field, aria-invalid on the field, and focus moved to the summary heading on submit failure",
+  "description": "On submit refusal the step renders a top-of-page error summary region carrying a heading and one skip link per failed field. Each skip link's target is a focusable field element; the field carries aria-invalid=\"true\" while unresolved and aria-describedby pointing at the field-level error message. On submit failure the client moves focus to the summary heading so a screen-reader user hears the error class and can walk the skip links; visual users see the heading anchor scroll into view. The summary and per-field bindings anchor on TAC-2502 (error-summary contract). Per WCAG 2.2 SC 3.3.1 Error Identification and SC 3.3.3 Error Suggestion.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "rationale": "Per visual round 4 spec section 5.3, REQ 3.",
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "category:03-error-summary"
+  ],
+  "version": "1.0.0",
+  "status": "approved",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/requirements/application-forms-wizard-req-004.json

@@ -0,0 +1,18 @@
+{
+  "reqId": "application-forms-wizard-REQ-004",
+  "prdId": "PRD-001",
+  "title": "Summary-review contract: a summary-list rendering per step with Change links returning to each step and retaining every other answer on save",
+  "description": "After every step is Completed (per REQ-001) the wizard renders a summary-review surface: one summary-list section per step, each row a definition-list entry naming the field label and the operator's answer, and a Change link per row that navigates to the step with the field focused. Editing on the target step and saving returns to the summary-review surface with every other answer retained; only the edited answer is updated. The summary-list shape follows the GOV.UK Design System summary-list pattern. Per WCAG 2.2 SC 3.3.4 Error Prevention (Legal, Financial, Data): the summary-review is the last checkpoint before submission and every answer is reversible up to submit.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "rationale": "Per visual round 4 spec section 5.3, REQ 4.",
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "category:04-summary-review"
+  ],
+  "version": "1.0.0",
+  "status": "approved",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/requirements/application-forms-wizard-req-005.json

@@ -0,0 +1,18 @@
+{
+  "reqId": "application-forms-wizard-REQ-005",
+  "prdId": "PRD-001",
+  "title": "Save-and-return contract: a server-side draft table or a client-side local buffer with a sync tick; refuses to ship if neither is wired",
+  "description": "The wizard commits partial answers between steps to a draft store so an operator can leave the surface and return without losing progress. Two transports ship: a server-side draft table (POST /drafts persists per-operator per-wizard rows, GET /drafts hydrates on return) and a client-side local buffer (localStorage keyed by operator identifier and wizard slug with a per-write sync tick). ADR-2502 commits to no recommendedDefault because the abandoned-draft loss class is genuinely per-project. A wizard that ships without either transport is refused at build gate: the draft-store TAC is a required companion. Per WCAG 2.2 SC 3.3.7 Redundant Entry: information the operator has already entered is preserved across sessions and not re-solicited.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "rationale": "Per visual round 4 spec section 5.3, REQ 5.",
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "category:05-save-and-return"
+  ],
+  "version": "1.0.0",
+  "status": "approved",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/tacs/tac-2501-application-forms-wizard-task-list.json

@@ -0,0 +1,46 @@
+{
+  "tacId": "TAC-2501-application-forms-wizard-task-list",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "1.0.0",
+  "status": "approved",
+  "name": "Wizard task-list shell",
+  "purpose": "Owns the task-list surface of the wizard: the ordered enumeration of steps, the per-step completion-state slot from the closed GOV.UK vocabulary, the ARIA progressbar wrapper, and the linear-or-free navigation gate. Every AC on REQ-001 anchors on this TAC, and every AC that reads step order anchors here.",
+  "responsibilities": [
+    "Enumerate every step in a stable order derived from the elicited step manifest and render one [data-step-slug] row per step (AC-24101-1).",
+    "Render [data-step-state] on every row from the closed enum {Cannot start yet, Not started, In progress, Completed} (AC-24101-1).",
+    "Render an ARIA progressbar wrapper on the surface with aria-valuenow (completed count), aria-valuemax (total step count) and aria-valuetext naming the completion in words (AC-24101-1).",
+    "Honour the ADR-2501 linear-vs-free branch by rendering rows whose prerequisites are unfinished as non-anchor spans on linear and as anchors on free (AC-24106-1).",
+    "Delegate to TAC-2503 to hydrate step states from the draft store on entry and to persist step completion transitions on advance."
+  ],
+  "internalStructure": "One task-list module the shell mounts on the /task-list route. On mount it reads the step manifest, reads the draft store for the operator's per-step answers, computes the per-step completion state from the answers, renders the enumeration, and wires the row-click handler to the linear-vs-free branch. On step advance the module recomputes the state for the just-completed step and updates the progressbar aria-valuenow. Framework is not prescribed; the module's interfaces are what the project realises against React, Vue, Svelte or vanilla DOM.",
+  "interfaces": [
+    {
+      "name": "renderTaskList",
+      "kind": "factory",
+      "description": "renderTaskList({ manifest, answers, nav }) -> void. Renders the shell and wires the row handlers."
+    },
+    {
+      "name": "computeStepState",
+      "kind": "factory",
+      "description": "computeStepState({ step, answers }) -> stateString. Returns one of {Cannot start yet, Not started, In progress, Completed}."
+    },
+    {
+      "name": "statesEnum",
+      "kind": "shape",
+      "description": "The four state strings are the closed enum {\"Cannot start yet\", \"Not started\", \"In progress\", \"Completed\"}. A fifth state is a v1.1.0 minor bump."
+    }
+  ],
+  "dependencies": [
+    {
+      "name": "Draft store",
+      "kind": "tac",
+      "tacId": "TAC-2503-application-forms-wizard-draft-store",
+      "description": "The task-list reads the draft store on entry and writes on advance."
+    }
+  ],
+  "tradeoffs": "One task-list module keeps the enumeration deterministic and lint-checkable but ties every step to a manifest entry the project supplies. A project rendering the wizard without a task-list (a single-flow submit surface with no completion overview) does not apply this TAC; the wizard-shell TACs still hold. Known mechanism-reach gap: the pack asserts row order and state strings but does not additionally probe that focus moves to the task-list on route entry; a v1.1.0 minor bump can drive the accessibility tree.",
+  "notes": "See README Known mechanism-reach gaps.",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/tacs/tac-2502-application-forms-wizard-error-summary.json

@@ -0,0 +1,40 @@
+{
+  "tacId": "TAC-2502-application-forms-wizard-error-summary",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "1.0.0",
+  "status": "approved",
+  "name": "Wizard error-summary contract",
+  "purpose": "Owns the top-of-page error-summary contract on submit refusal: the summary region, the skip-link binding per failed field, the aria-invalid and aria-describedby marking on the fields themselves, the focus move to the summary heading, and the validation-timing gate the SPA forms-engine drives per REQ-002. Every AC on REQ-002 and REQ-003 anchors on this TAC.",
+  "responsibilities": [
+    "Render [data-surface=\"error-summary\"] at the top of the step on submit refusal with a heading and one skip-link anchor per failed field (AC-24103-1).",
+    "Mark every failed field with aria-invalid=\"true\" and aria-describedby pointing at its per-field error message id (AC-24103-1).",
+    "Move focus to the summary heading on submit failure (AC-24103-1).",
+    "Delegate validation to the SPA forms-engine TAC-205 on the on-blur, on-change and on-submit triggers per REQ-002 (AC-24102-1); this TAC does not re-implement validation, it consumes the engine.",
+    "Clear aria-invalid on a field when its message clears and remove the anchor from the summary on the next successful submit."
+  ],
+  "internalStructure": "One error-summary module the shell mounts inside the step surface. On submit refusal the module reads the engine's error set, renders the anchor list, moves focus, and wires the anchor click to focus the corresponding field. On subsequent input events after the first failure the module re-runs the engine per-field and updates the message; on the next submit the module rebuilds the error set from scratch. Framework is not prescribed; the interfaces are what the project realises.",
+  "interfaces": [
+    {
+      "name": "renderSummary",
+      "kind": "factory",
+      "description": "renderSummary({ errors, headingId }) -> void. Renders the summary region and wires focus."
+    },
+    {
+      "name": "bindField",
+      "kind": "factory",
+      "description": "bindField({ field, message }) -> void. Sets aria-invalid and aria-describedby."
+    }
+  ],
+  "dependencies": [
+    {
+      "name": "Applied SPA forms-engine",
+      "kind": "external",
+      "description": "The error-summary consumes the applied application-spa forms-engine (TAC-205 in that blueprint) to run per-field validation; this TAC does not ship its own engine. A project without application-spa applied wires an engine of its own choice against this TAC's interfaces (renderSummary and bindField)."
+    }
+  ],
+  "tradeoffs": "Consuming the SPA forms-engine keeps a project on the shelf free from a second overlapping engine but ties this TAC to the SPA blueprint's validation shape. Known mechanism-reach gap: the pack asserts the summary and the aria bindings but does not additionally probe the focus-order sweep across every field in the DOM after focus moves to the heading; a v1.1.0 minor bump can walk the tab order and diff.",
+  "notes": "See README Known mechanism-reach gaps.",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/tacs/tac-2503-application-forms-wizard-draft-store.json

@@ -0,0 +1,40 @@
+{
+  "tacId": "TAC-2503-application-forms-wizard-draft-store",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "1.0.0",
+  "status": "approved",
+  "name": "Wizard draft store",
+  "purpose": "Owns the save-and-return contract: the transport branch (server-side draft table or client-side local buffer), the sync tick on write, the hydrate-on-return path, and the in-progress list enumeration. Every AC on REQ-005 anchors on this TAC. Delegates the no-in-progress empty case to the application-empty-error-states empty-list state.",
+  "responsibilities": [
+    "On step advance persist the operator's partial answers per REQ-005 via the elicited transport (POST /drafts on server; localStorage write on local) (AC-24105-1).",
+    "On wizard entry hydrate the operator's answers from the draft store (GET /drafts on server; localStorage read on local) so the task-list computes the correct completion state (AC-24101-1, AC-24105-1).",
+    "Render a [data-sync-tick] element on the client-local branch carrying an ISO-8601 timestamp updated on every write (AC-24105-1).",
+    "Enumerate the operator's drafts on the /in-progress list surface (AC-24107-1) and delegate the zero-drafts case to the application-empty-error-states empty-list state (AC-24108-1).",
+    "Refuse to render the wizard when neither transport is wired (a project applying application-forms-wizard without a draft-store elicit answer fails at build gate per ADR-2502)."
+  ],
+  "internalStructure": "One draft-store module the shell mounts on wizard entry. On mount the module reads the ADR-2502 elicit answer, resolves the transport factory (server-draft-table or client-local-buffer), and exposes the four operations {read, write, list, remove} to the task-list and summary-review modules. The server branch POSTs and GETs against operator-configured /drafts endpoints; the local branch reads and writes window.localStorage under the namespaced key draft:<wizard-slug>:<step-slug>. Neither transport ships a sync engine; the flush semantics are those of the underlying transport (server persistence on POST, browser persistence on the local write).",
+  "interfaces": [
+    {
+      "name": "resolveTransport",
+      "kind": "factory",
+      "description": "resolveTransport({ elicit }) -> { read, write, list, remove }. Returns the transport bound to the elicited branch."
+    },
+    {
+      "name": "transportsEnum",
+      "kind": "shape",
+      "description": "The transport branches are the closed enum {server-draft-table, client-local-buffer}. A third branch is a v1.1.0 minor bump."
+    }
+  ],
+  "dependencies": [
+    {
+      "name": "Applied application-empty-error-states blueprint",
+      "kind": "external",
+      "description": "The zero-drafts case on /in-progress delegates to the empty-list state contributed by application-empty-error-states (TAC-2301 state machine, [data-surface=\"empty-list\"] wrapper with a [data-recovery=\"create\"] control). A project applying application-forms-wizard without application-empty-error-states also applied sees the /in-progress empty branch render a fallback empty message, which fails the sibling's runtime enforcement pack."
+    }
+  ],
+  "tradeoffs": "Two transports keep the shelf blueprint reachable by every project shape (a hobby SPA with no server can ship the local branch; an enterprise SPA with an audit trail ships the server branch) at the price of a per-project elicit at apply time. Known mechanism-reach gap: the pack asserts POST /drafts and GET /drafts round-trip on the server branch and the localStorage write on the local branch, but does not additionally probe cross-tab hydration on the local branch or server-side dedupe on the server branch; both are v1.1.0 minor-bump candidates.",
+  "notes": "See README Known mechanism-reach gaps.",
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/user-stories/application-forms-wizard-us-24101.json

@@ -0,0 +1,28 @@
+{
+  "usId": "application-forms-wizard-US-24101",
+  "prdId": "PRD-001",
+  "reqId": "application-forms-wizard-REQ-001",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "The task-list surface renders every step with one of the four GOV.UK completion states and an ARIA progressbar naming the completion count",
+  "asA": "operator working through a multi-step form",
+  "iWant": "a task-list surface that shows me every step in order, tells me for each step whether I Cannot start yet, have Not started, am In progress or have Completed it, and announces the total number completed",
+  "soThat": "I can see at a glance where I am, decide which step to pick up next, and know when I have nothing left to do before the summary review",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-24101-1",
+      "testable": true,
+      "scope": "runtime",
+      "description": "Given the wizard task-list route, the rendered surface exposes [data-surface=\"task-list\"] carrying a [role=\"progressbar\"] with aria-valuenow, aria-valuemax and aria-valuetext, and one child element per step carrying [data-step-slug] and [data-step-state] whose value is one of the closed set {Cannot start yet, Not started, In progress, Completed}. The pack drives the real browser to /task-list and reads the state string per step, the progressbar values, and the enumerated step order."
+    }
+  ],
+  "tacIds": [
+    "TAC-2501-application-forms-wizard-task-list"
+  ],
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "contract:task-list"
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/user-stories/application-forms-wizard-us-24102.json

@@ -0,0 +1,29 @@
+{
+  "usId": "application-forms-wizard-US-24102",
+  "prdId": "PRD-001",
+  "reqId": "application-forms-wizard-REQ-002",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Each step validates its own answers on blur before the first submit, then on change after the first failure, and rebuilds the error set from scratch on submit",
+  "asA": "operator filling in a step whose answers I have partially entered",
+  "iWant": "field-level messages to appear when I leave a field (not while I am mid-typing), then to update as I correct them after I have already tried to submit, and every message rebuilt from scratch on the next submit",
+  "soThat": "I am not scolded while typing, I see my corrections take effect immediately after a submit failure, and I trust that what shows on the page is what the engine last checked",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-24102-1",
+      "testable": true,
+      "scope": "runtime",
+      "description": "On the wizard step route, focusing a field then blurring it without a valid entry renders a field-level error message referenced by aria-describedby without setting aria-invalid=\"true\" before the first submit (the pack asserts the message element is present and referenced). After a submit attempt fails on the field, subsequent input events on the same field update the message text on every change (the pack drives a first-submit-fail then a valid input and reads the message element's textContent transitioning to empty). On the next submit the engine rebuilds the error set from scratch (the pack asserts a previously failing field that has been corrected no longer appears in the summary)."
+    }
+  ],
+  "tacIds": [
+    "TAC-2501-application-forms-wizard-task-list",
+    "TAC-2502-application-forms-wizard-error-summary"
+  ],
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "contract:validation-timing"
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/user-stories/application-forms-wizard-us-24103.json

@@ -0,0 +1,28 @@
+{
+  "usId": "application-forms-wizard-US-24103",
+  "prdId": "PRD-001",
+  "reqId": "application-forms-wizard-REQ-003",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "On submit refusal the step renders a top-of-page error summary with one skip link per failed field, aria-invalid on the field, and focus moved to the summary heading",
+  "asA": "operator who has submitted a step with an invalid entry",
+  "iWant": "a top-of-page summary of every failed field with a skip link that lands me on the field itself, the failed fields marked so a screen reader announces the error class, and focus placed on the summary heading so I hear the summary before anything else",
+  "soThat": "I can walk the failures in order, land directly on the field that needs fixing, and hear what went wrong before the rest of the page reads out",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-24103-1",
+      "testable": true,
+      "scope": "runtime",
+      "description": "Given a submit refusal on the wizard step, the rendered surface exposes [data-surface=\"error-summary\"] with a heading (h2 or role=heading), one anchor element per failed field with href pointing at the field's id, and every failed field carries aria-invalid=\"true\" plus aria-describedby referencing its per-field error message. Focus after submit lands on the summary heading (document.activeElement matches the summary heading selector). The pack drives /step/2 with empty required inputs, submits and reads the summary heading, the anchor href list, the field aria-invalid attribute and the active-element selector."
+    }
+  ],
+  "tacIds": [
+    "TAC-2502-application-forms-wizard-error-summary"
+  ],
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "contract:error-summary"
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/user-stories/application-forms-wizard-us-24104.json

@@ -0,0 +1,29 @@
+{
+  "usId": "application-forms-wizard-US-24104",
+  "prdId": "PRD-001",
+  "reqId": "application-forms-wizard-REQ-004",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "After every step is Completed the wizard renders a summary-review surface with one summary-list section per step and a Change link per row that retains every other answer on save",
+  "asA": "operator who has finished every step in the wizard",
+  "iWant": "a summary-review surface that lists every step's answers as a definition list, with a Change link per row that takes me back to the step with the field focused, and my other answers still present when I save",
+  "soThat": "I can review everything I entered before I submit, revise a single answer without losing the rest, and satisfy myself the submission is what I intended",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-24104-1",
+      "testable": true,
+      "scope": "runtime",
+      "description": "Given every step is Completed, /summary renders [data-surface=\"summary-review\"] with one [data-summary-list-section] per step; each section holds a <dl> summary list carrying [data-summary-row] entries with a <dt> label and a <dd> value; every row carries a [data-recovery=\"change\"] link whose href routes back to the step. After clicking a Change link, editing that field and saving, the operator returns to /summary and every other row's value is preserved verbatim. The pack drives /summary, reads the row count and dl structure, follows one Change link, updates one field, saves, and diffs the summary rows before and after to prove only the edited row changed."
+    }
+  ],
+  "tacIds": [
+    "TAC-2501-application-forms-wizard-task-list",
+    "TAC-2503-application-forms-wizard-draft-store"
+  ],
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "contract:summary-review"
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/user-stories/application-forms-wizard-us-24105.json

@@ -0,0 +1,28 @@
+{
+  "usId": "application-forms-wizard-US-24105",
+  "prdId": "PRD-001",
+  "reqId": "application-forms-wizard-REQ-005",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Save-and-return is wired via a server-side draft table or a client-side local buffer with a sync tick; the pack refuses to ship if neither is present",
+  "asA": "operator who has partially completed a wizard and will return later",
+  "iWant": "my partial answers persisted between steps and across sessions, either to a server-side draft table or to a local buffer that surfaces a sync tick when it writes",
+  "soThat": "closing the tab or losing the network mid-way does not force me to start again from the first step",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-24105-1",
+      "testable": true,
+      "scope": "runtime",
+      "description": "On ?draft-store=server, entering an answer on step 1 and advancing issues a POST /drafts request whose body carries the operator identifier, the wizard slug, the step slug and the answer field; a subsequent GET /drafts on the same operator returns the persisted answer (the pack drives step 1, types into a field, advances, then re-issues a fresh GET /drafts and reads the JSON body). On ?draft-store=local, the same input path writes into window.localStorage under a namespaced key (draft:<wizard-slug>:<step-slug>) and renders a [data-sync-tick] element carrying an ISO-8601 timestamp updated on every write. When both transports are absent (?draft-store=none) the pack fails at severity block naming the missing transport."
+    }
+  ],
+  "tacIds": [
+    "TAC-2503-application-forms-wizard-draft-store"
+  ],
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "contract:save-and-return"
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}

package/blueprints/application-forms-wizard/contributions/user-stories/application-forms-wizard-us-24106.json

@@ -0,0 +1,28 @@
+{
+  "usId": "application-forms-wizard-US-24106",
+  "prdId": "PRD-001",
+  "reqId": "application-forms-wizard-REQ-001",
+  "version": "1.0.0",
+  "status": "approved",
+  "title": "Linear-vs-free step navigation is a per-project elicit; the task-list respects it by disabling out-of-order entry on linear and permitting it on free",
+  "asA": "operator whose project has committed to a step order posture",
+  "iWant": "the task-list to disable step links whose prerequisites are unfinished when the project runs linear, or to permit any step at any time when the project runs free",
+  "soThat": "the surface matches the project's committed posture and does not let me enter a step whose prerequisites the domain forbids",
+  "acceptanceCriteria": [
+    {
+      "id": "AC-24106-1",
+      "testable": true,
+      "scope": "runtime",
+      "description": "On the ?nav=linear branch, task-list rows whose [data-step-state] is Cannot start yet render as non-anchor spans (no clickable href) and the pack asserts a click on the row does not change the URL. On the ?nav=free branch every row renders as an anchor and a click on any row navigates to that step's route. ADR-2501 records the elicit and the shipped default is linear."
+    }
+  ],
+  "tacIds": [
+    "TAC-2501-application-forms-wizard-task-list"
+  ],
+  "tags": [
+    "blueprint:application-forms-wizard",
+    "case:linear-vs-free-navigation"
+  ],
+  "createdAt": "2026-09-06T18:00:00Z",
+  "updatedAt": "2026-09-06T18:00:00Z"
+}