rcf-lite 0.20.0 → 0.22.0

package/rcf/fbs/fbs-061.json

@@ -0,0 +1,20 @@
+{
+  "createdAt": "2026-09-06T17:51:45.444Z",
+  "updatedAt": "2026-09-06T17:52:15.196Z",
+  "acIds": [
+    "AC-4101-1",
+    "AC-4101-2",
+    "AC-4101-3",
+    "AC-4101-4",
+    "AC-4101-5",
+    "AC-4101-6"
+  ],
+  "fbsId": "FBS-061",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 46,
+  "executionStatus": "notStarted",
+  "title": "object-storage-s3 v1.0.0 blueprint on the shelf with six Node-only probes against MinIO plus one accountBound R2 smoke and a shared sample-app fixture (T-2 slice)",
+  "summary": "T-2 shelf-blueprint track of the ratified infra round 5 spec (2026-09-06, section 5.2) minted with HQ reserved-block chain ids via --id (REQ-041 / US-4101 / TS-071 / FBS-061 / CN-203..205) after T-1 landed at 040/4001/070/060/200..202. Ships the object-storage-s3 v1.0.0 blueprint on the shelf with 21 contributions in the 6 REQ / 8 US 28101-28108 / 3 TAC 2901-2903 / 4 ADR 2901-2904 groups per spec section 5.2, six Node-only probes under blueprints/object-storage-s3/contributions/probes/ (facade-round-trip, put-get-round-trip, presigned-url, multipart-upload, event-secrecy, r2-real-account-smoke) with matching run-shims writing per-blueprint reports at .rcf/reports/blueprints/object-storage-s3/, and the T-2 slice of the shared sample-app fixture at packages/rcf-lite/test/fixtures/infra-s3-and-queue/. Five probes local-first (accountBound false); r2-real-account-smoke carries accountBound:true and records accountBoundSkipped shape per spec section 3.5 without CI_HAS_CLOUDFLARE_ACCOUNT. Declares capabilities [objectStorage], suggestedCompanions logging and errorHandling, providesRoles absent, requiresAppliedCapabilities absent. Contributes ADR-2904 as scope:global on new topic objectStorageContract per spec section 5.2. Every ADR contribution entry carries standardsTraceClause per section 8a.2 (per HQ mid-flight ruling after PR #154 gate). Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a table with an objectStorage row per spec section 5.6; appends one shelf-registry row for object-storage-s3 at 28101-28899 / 29xx to every shipped blueprint docs/topics.md. Refuses composition when security-secrets-management is not applied with exit 3 and stable message id object-storage-s3-no-secrets on stderr; --allow-no-secrets-yet override records a note on source.notes.",
+  "dependsOnFbsIds": []
+}

package/rcf/requirements/req-017.json

@@ -0,0 +1,18 @@
+{
+  "createdAt": "2026-09-04T17:59:20.149Z",
+  "updatedAt": "2026-09-04T17:59:34.348Z",
+  "reqId": "REQ-017",
+  "prdId": "PRD-001",
+  "title": "Blueprint-shipped browser-verify probe packs with FBS-scoped applicability",
+  "description": "The rcf-lite browser-verify runner extension that lets a blueprint SHIP a Playwright probe pack under its own `probe-packs/` directory and have `rcf verify browser` load, scope and execute it as a required ship gate. The extension adds a pack loader (schema validation, applicability predicate, check-id cross-check against the blueprint's contributed AC ids), a runner pass that runs after invariants and auth-smoke, an aggregate verdict extension that blocks on any `severity: block` pack fail, a `probePacks[]` field on the composed browserVerification record, and one CLI option (`--probe-pack <name>`) that restricts one run to one pack. Enables the visual round T-1..T-5 blueprints (datatable, charts, dashboard, notifications-in-app, admin-console) to declare runtime-observable ACs and ship the browser checks that prove them, without adding any npm dependencies and without letting a pack fire on an FBS whose surface does not exist.",
+  "category": "functional",
+  "domain": "browser-verify",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [],
+    "reason": "content-pending",
+    "classifiedAt": "2026-09-04T17:59:20.168Z"
+  }
+}

package/rcf/requirements/req-018.json

@@ -0,0 +1,18 @@
+{
+  "createdAt": "2026-09-04T20:05:06.758Z",
+  "updatedAt": "2026-09-04T20:05:16.473Z",
+  "reqId": "REQ-018",
+  "prdId": "PRD-001",
+  "title": "Application-datatable v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-datatable v1.0.0 blueprint (blueprints/application-datatable/) with 22 contributions (6 REQs, 9 USs with 27 runtime-observable ACs, 3 TACs, 4 ADRs), a shipped Playwright probe pack (blueprints/application-datatable/probe-packs/application-datatable.pack.js) whose six checks (AC-17101-1 sort click, AC-17102-1 filter q request, AC-17103-2 pagination aria-live announcement, AC-17104-3 bulk-action confirmation focus return, AC-17105-1 four-state distinctness, AC-17106-1 column reorder keyboard alternative) are anchored to blueprint AC ids, and a dependency-free sample-app fixture (packages/rcf-lite/test/fixtures/probe-pack-application-datatable/) the pack probes at the shelf's own gate. The blueprint is the first ratification of the ratified visual round T-1 (spec 2026-09-04 section 5.1) and the first shipped consumer of T-0's probe-pack runner extension.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [],
+    "reason": "content-pending",
+    "classifiedAt": "2026-09-04T20:05:06.779Z"
+  }
+}

package/rcf/requirements/req-019.json

@@ -0,0 +1,38 @@
+{
+  "createdAt": "2026-09-04T21:08:13.117Z",
+  "updatedAt": "2026-09-04T21:08:13.139Z",
+  "description": "The rcf-lite shelf ships the application-charts v1.0.0 blueprint (blueprints/application-charts/) with 15 contributions (4 REQs, 6 USs binding runtime-observable ACs, 2 TACs, 3 ADRs), a shipped Playwright probe pack (blueprints/application-charts/probe-packs/application-charts.pack.mjs) whose three checks (AC-18102-1 non-colour distinction, AC-18103-1 text-alternative table, AC-18104-1 keyboard traversal with reduced motion) are anchored to blueprint AC ids per T-0 AC-1701-3, and a dependency-free sample-app fixture (packages/rcf-lite/test/fixtures/probe-pack-application-charts/) the pack probes at the shelf gate. The blueprint is the ratification of the visual round T-2 (spec 2026-09-04 section 5.2), the second shipped consumer of T-0's probe-pack runner extension, and the leaf blueprint the application-dashboard T-3 consumes.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "reqId": "REQ-019",
+  "prdId": "PRD-001",
+  "title": "Application-charts v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-04T21:08:13.137Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "dashboard"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-020.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-04T22:10:00.000Z",
+  "reqId": "REQ-020",
+  "prdId": "PRD-001",
+  "title": "Application-dashboard v1.0.0 blueprint on the shelf with its packaged design-guidance asset, Playwright probe pack and sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-dashboard v1.0.0 blueprint (blueprints/application-dashboard/) with 18 contributions (5 REQs on the dashboard shell composition, the primary-KPI visual hierarchy, the per-tile four-state contract, the timeframe and filter chrome fan-out, and the export handle with format delegation to charts; 7 USs binding runtime-observable ACs plus one US on packaged-guidance adherence; 3 TACs on the tile grid with CSS Grid position semantics and breakpoint reflow, the filter chrome and timeframe picker with the refetch fan-out contract, and the export handle; 3 ADRs on the primary-KPI kinds enum, the timeframe presets and the export formats). Ships a packaged design-guidance asset at blueprints/application-dashboard/assets/guidance/dashboard-design.md covering primary KPI placement, tile density and count limits, timeframe and filter chrome, loading/empty/error states, colour and contrast, when a table beats a chart with delegation to application-datatable, refresh cadence and staleness, and anti-patterns (five https citations from NN/g, Few, Tufte, GOV.UK, WCAG). Ships a Playwright probe pack under blueprints/application-dashboard/probe-packs/application-dashboard.pack.mjs whose three checks (AC-19102-1 primary-KPI position by DOM order and CSS Grid position at 1440/1024/360, AC-19104-1 timeframe refetch fan-out with same boundary and matching as-of ISO-8601 stamp, AC-19103-1 per-tile four-state contract with role region, aria-live polite and non-colour distinction) are anchored to blueprint AC ids per T-0 AC-1701-3. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-dashboard/ with break switches for the negative runs. Extends the pack-browser seam with a resize(width, height) method (via the pinned Playwright MCP's browser_resize tool on the MCP route and page.setViewportSize on the project route) so probe packs can probe breakpoint reflow honestly. Third shipped consumer of T-0's probe-pack runner extension; consumes application-charts on the chart region and references application-datatable in the packaged guidance.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-021.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-04T23:59:00.000Z",
+  "reqId": "REQ-021",
+  "prdId": "PRD-001",
+  "title": "Application-notifications-in-app v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-notifications-in-app v1.0.0 blueprint (blueprints/application-notifications-in-app/) with 19 contributions (5 REQs on live-region preseeding, the transient toast contract, the notification centre inbox with acknowledge round-trip, the per-user preferences UI with sibling-channel delegation, and the delivery-attempt log; 8 USs binding runtime-observable ACs plus three cross-cutting cases on the page load with backlog, the background event and the disjoint-content contract; 3 TACs on the live-region wrappers and the toast factory, the centre inbox with retention and acknowledge round-trip, and the preferences UI with sibling delegation; 3 ADRs on the priority-to-role mapping polite/status vs assertive/alert, the WCAG 2.2.1 six-second toast timeout floor, and the ADR-2103 thirty-day retention window). Reserves the family prefix application-notifications- for the sibling channels the shelf will grow into (email, push, webhook) as documented in the blueprint README and the shelf band registry. Ships a Playwright probe pack under blueprints/application-notifications-in-app/probe-packs/application-notifications-in-app.pack.mjs whose three checks (AC-20101-1 live-region preseeding on every declared route, AC-20102-1 transient toast contract with priority-to-role mapping and timeout floor measured via data-shown-at/data-dismissed-at timestamps, AC-20103-1 centre acknowledge round-trip through data-notification-id enumeration and reconciliation of client + server request logs) are anchored to blueprint AC ids per T-0 AC-1701-3. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-notifications-in-app/ with four break switches for the negative runs (preseed, role, timeout, ack). Fourth shipped consumer of T-0's probe-pack runner extension; consumes the logging companion for the delivery-log write path and the errorHandling companion for the assertive-slot alert boundary; adds no runner surface (reuses the T-3 pack-browser resize seam only for future minor bumps, none in v1.0.0).",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-022.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "reqId": "REQ-022",
+  "prdId": "PRD-001",
+  "title": "Capability-declaration mechanism (capabilities[], elicits[], apply-time discovery, refusal and custom-auth elicitation) and four auth-blueprint 1.1.0 minors adopting it",
+  "description": "The rcf-lite blueprint loader accepts two additive optional top-level fields on blueprint.json: capabilities[] (a non-empty array of lower camelCase strings on the ^[a-z][a-zA-Z0-9]*$ pattern, matching the section 6a role naming convention; a blueprint declares what identity or platform capability it provides so consumer blueprints can gate surfaces on it) and elicits[] (a non-empty array of {id, prompt, kind: enum|string|boolean, default, when?} entries the apply verb reads at apply time to prompt the operator for per-project answers). The loader validates SHAPE; the vocabulary lives in the section 6a table (principalDirectory, roleModel, tenancy, auditLog) extended in the same docs edit. A third additive top-level field requiresAppliedCapabilities[] tells apply that the blueprint refuses to apply when none of the currently-applied blueprints declares any of the required capabilities (unless an allowSkipFlag matching --allow-no-auth-yet is passed); apply then reads back each applied blueprint's source blueprint.json (the applied-blueprint-record schema is closed and refuses new fields; the source-manifest read-back precedent from the T-2 core-companions train applies here) to compute the appliedCapabilities union across the project. When the union is empty AND the blueprint is admin-console AND --allow-no-auth-yet was not passed, the apply exits 3 with a stderr message naming security-auth-* (the spec 5.5.1 verbatim message) and lists the currently-applied blueprints. When --allow-no-auth-yet is passed, apply stamps a note field onto the applied record so a later rcf define validate can flag surfaces that never activated. The elicitation phase prompts on a TTY and reads --answer <id>=<value> (repeatable) plus --answers <file> (JSON object) non-interactively; each elicit's `when` predicate evaluates against the discovered applied-capability set so elicits like the tenancy shape only prompt when the tenancy capability is applied. Apply persists appliedCapabilities and appliedElicitations into a sidecar file at rcf/blueprints/${slug}.applied.json (the applied-blueprint-record schema is closed under additionalProperties:false so the manifest cannot carry them; the sidecar is read by consumer surfaces at runtime). The four shelf auth blueprints adopt capabilities[] in v1.1.0 minor bumps landing in the same PR per spec Q2 default: security-auth-magic-link 1.0.0 -> 1.1.0 capabilities: [principalDirectory]; security-auth-clerk 1.1.0 -> 1.2.0 capabilities: [principalDirectory, roleModel]; security-auth-oauth2 1.0.0 -> 1.1.0 capabilities: [principalDirectory, roleModel]; security-auth-keycloak 1.0.0 -> 1.1.0 capabilities: [principalDirectory, roleModel]. Per section 6 of blueprint-authoring.md, an additive optional field with no global-topic change is a minor bump.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-023.json

@@ -0,0 +1,14 @@
+{
+  "createdAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "reqId": "REQ-023",
+  "prdId": "PRD-001",
+  "title": "Application-admin-console v1.0.0 blueprint on the shelf with capability-gated surfaces, a Playwright probe pack and a sample-app fixture",
+  "description": "The rcf-lite shelf ships the application-admin-console v1.0.0 blueprint (blueprints/application-admin-console/) with 23 contributions (6 REQs on the console shell with no dead links to unapplied capabilities, the users surface conditional on principalDirectory, the roles surface conditional on roleModel with Owner + Admin + Member + Viewer baseline, the orgs surface conditional on tenancy, the audit-log surface conditional on the auditLog logging companion, and the access-denied and request-access states per WCAG; 9 USs 21101-21109 binding runtime-observable ACs plus the conditional-refusal apply-time behaviour; 4 TACs 2201-2204 on the console shell reading the surface manifest, the apply-time capability discovery, the permission matrix as an ARIA APG grid, and the audit view consuming application-datatable; 4 ADRs 2201-2204 on the capability vocabulary, baseline roles with elicited additions, invite transport with email default delegated to the email sibling and elicited, and audit-log retention window elicited). The blueprint declares requiresAppliedCapabilities: [principalDirectory] and allowSkipFlag: allow-no-auth-yet so a bare-SPA apply refuses with exit 3 and the spec 5.5.1 verbatim message naming security-auth-*; the override records a note on the applied record. Declares elicits[] gating baselineRoles (only when roleModel is applied), tenancyShape (only when tenancy is applied), inviteTransport, and auditRetentionDays (only when auditLog is applied). Declares suggestedCompanions logging and errorHandling with the ratified spec section 5.5 reasons; providesRoles absent per spec 5.5.3 (the console is a consumer of principalDirectory, never a provider). Ships a Playwright probe pack under blueprints/application-admin-console/probe-packs/application-admin-console.pack.mjs whose four checks (AC-21102-1 users directory, AC-21103-1 permission matrix, AC-21104-1 org switcher, AC-21105-1 audit-log surface) each carry an appliesTo predicate that reads manifest.blueprints[] and the read-back capabilities so an inapplicable check records applicable: false and the aggregate verdict treats it as neither pass nor fail. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-admin-console/ with a CAPS env or query switch selecting which surfaces exist (mirrors the applied capability set so the sample app plays every fixture), a console shell whose nav only links applied surfaces, a users directory table with per-row invite and deactivate controls enumerated by data-user-id, a permission matrix rendered as an ARIA APG grid with role=grid, role=row, role=gridcell, role=rowheader on role rows and role=columnheader on permission columns announcing the exact permission string on focus (WCAG 4.1.3), an org switcher (only under tenancy), an audit-log table with actor / target / before / after / timestamp / correlation id enumerated by data-audit-id, an access-denied route with a request-access control, request log on window.__adminFetches and /__requests, and break switches for the negative runs (matrix-grid, denied, audit-fields). Reads applied capabilities from the rcf/blueprints/application-admin-console.applied.json sidecar or from an ADMIN_CONSOLE_CAPS env override so the fixture can play fixtures (b) SPA + magic-link, (c) SPA + clerk + logging, and (d) custom-auth elicited capabilities. Fifth shipped consumer of T-0's probe-pack runner extension; consumes application-datatable (T-1) for the users directory and audit views."
+,
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-024.json

@@ -0,0 +1,69 @@
+{
+  "createdAt": "2026-09-06T15:38:14.226Z",
+  "updatedAt": "2026-09-06T15:38:14.250Z",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "rationale": "Per visual round 4 spec section 5.1 (2026-09-06).",
+  "description": "The rcf-lite shelf ships the application-empty-error-states v1.0.0 blueprint (blueprints/application-empty-error-states/) with 19 to 24 contributions (5 REQs on the state catalogue with eight named states, the recovery-action contract per state, the announcement contract with role=region and aria-live=polite, the server-error surface with no stack-trace and no resource-id leak in production, and the offline state with a write-buffer and navigator.onLine reconnection semantics; 8 USs 22101 to 22108 binding runtime-observable ACs one per named state; 3 TACs 2301 state-machine from FBS render to state render to recovery, 2302 recovery-action router across parent-surface search request-access retry, 2303 offline write-buffer with reconciliation semantics; 3 ADRs 2301 HTTP status to rendered state mapping with standardsTraceClause RFC 9110 and recommendedDefault true, 2302 production hides stack traces with recommendedDefault true and elicited true, 2303 offline strategy across write-buffer read-only-banner refuse-writes with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.1; providesRoles absent; capabilities empty; requiresAppliedCapabilities absent (no auth required). Ships a Playwright probe pack under blueprints/application-empty-error-states/probe-packs/application-empty-error-states.pack.mjs whose eight checks (AC-22101-1 not-found, AC-22102-1 forbidden, AC-22103-1 server-error, AC-22104-1 permission-denied, AC-22105-1 offline, AC-22106-1 empty-list, AC-22107-1 no-search-results, AC-22108-1 error-boundary) each anchor one named state via TAC-2301 or an operator-configured error-shell path glob; pack URLs composed by the withUrl(runtimeUrl, path) helper per round 3 T-3 fix train. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-empty-error-states/ realising all eight states honestly with a query switch ?state=<name> and break switches ?break=stack-trace, ?break=leak-id, ?break=no-recovery and ?break=no-live-region so each check refuses on its own defect. Sixth shipped consumer of T-0s probe-pack runner extension; T-3 forms-wizard and T-4 account-settings both compose this blueprint.",
+  "reqId": "REQ-024",
+  "prdId": "PRD-001",
+  "title": "Application-empty-error-states v1.0.0 blueprint on the shelf with the eight-state contract, Playwright probe pack and sample-app fixture",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "auth"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T15:38:14.249Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "role"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "render"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "render"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "rendered"
+      },
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "permission"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-025.json

@@ -0,0 +1,59 @@
+{
+  "createdAt": "2026-09-06T16:55:02.404Z",
+  "updatedAt": "2026-09-06T16:56:22.580Z",
+  "description": "The rcf-lite shelf ships the application-file-upload v1.0.0 blueprint (blueprints/application-file-upload/) with 18 to 22 contributions (5 REQs on the input contract with a labelled file input plus drop-zone plus keyboard alternative per WCAG 2.5.7, the progress contract with per-file percent plus aggregate percent plus polite live-region tick, the refusal contract with MIME-type refusal and size-limit refusal and virus-scan hit and aria-describedby error binding and focus-to-retry, the transport contract with chunked-and-resumable and multipart POST default and tus.io elicited alternative, and the completion contract with an assertive-slot announcement on success per WCAG 4.1.3 and per-file remove and retry; 7 USs 23101 to 23107 one per REQ plus two cross-cutting cases network-interruption resumption and background-tab progress; 3 TACs 2401 input surface, 2402 transport contract, 2403 progress announcer; 3 ADRs 2401 transport across multipart POST and tus.io and per-vendor SDK with recommendedDefault true on multipart and elicited true, 2402 accepted MIME set and per-file size cap with elicited true, 2403 virus-scan integration via operator-supplied verifier through a capability plus elicit with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.2; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-file-upload/probe-packs/application-file-upload.pack.mjs with four surface-observable checks anchored to TAC-2401 or an operator-configured upload-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-file-upload/ realising both transport branches multipart POST and tus.io honestly plus break switches so each check refuses on its own defect. Seventh shipped consumer of T-0's probe-pack runner extension.",
+  "reqId": "REQ-025",
+  "prdId": "PRD-001",
+  "title": "Application-file-upload v1.0.0 blueprint on the shelf with the file-input plus drop-zone contract, chunked-resumable transport, refusal semantics and Playwright probe pack",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T16:55:02.427Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "POST"
+      }
+    ]
+  },
+  "rationale": "Per visual round 4 spec section 5.2 (2026-09-06)."
+}

package/rcf/requirements/req-026.json

@@ -0,0 +1,154 @@
+{
+  "createdAt": "2026-09-06T19:03:15.348Z",
+  "updatedAt": "2026-09-06T19:07:15.107Z",
+  "description": "The rcf-lite shelf ships the application-forms-wizard v1.0.0 blueprint (blueprints/application-forms-wizard/) with 19 contributions (5 REQs on the task-list contract with the closed GOV.UK vocabulary Cannot start yet plus Not started plus In progress plus Completed with an ARIA progressbar wrapper, the per-step validation timing rule on-blur before first submit then on-change after first failure and a full pass on submit reusing SPA forms-engine TAC-205 per WCAG 2.2 SC 3.3.1 and 3.3.3, the error-summary contract with a top-of-page summary and skip links per failed field with aria-invalid true on the field and aria-describedby to the per-field error message and focus moved to the summary heading on submit failure, the summary-review contract with a summary-list rendering per step with Change links returning to each step and every other answer retained on save per WCAG 2.2 SC 3.3.4, the save-and-return contract with a server-side draft table or a client-side local buffer with a per-write ISO-8601 sync tick with the pack refusing to ship if neither is wired per WCAG 2.2 SC 3.3.7; 8 USs 24101 to 24108 one per REQ plus three cross-cutting cases linear-vs-free navigation, in-progress list and no-in-progress empty state delegated to application-empty-error-states; 3 TACs 2501 task-list shell and 2502 error-summary contract and 2503 draft store; 3 ADRs 2501 navigation posture linear default with elicited free branch, 2502 save-and-return transport across server-draft-table and client-local-buffer elicited with NO recommendedDefault because the abandoned-draft loss class does not ship silently, 2503 step indicator across task-list ARIA progressbar and breadcrumb with recommendedDefault true on task-list). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.3; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-forms-wizard/probe-packs/application-forms-wizard.pack.mjs with four surface-observable checks anchored to TAC-2501 or an operator-configured wizard-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-forms-wizard/ realising the four wizard surfaces honestly plus both save-and-return transports server default and local elicited plus four break switches so each check refuses on its own defect. Eighth shipped consumer of T-0 probe-pack runner extension. Consumes application-empty-error-states for the no-in-progress empty state on the /in-progress list surface.",
+  "reqId": "REQ-026",
+  "prdId": "PRD-001",
+  "title": "Application-forms-wizard v1.0.0 blueprint on the shelf with the task-list contract, error-summary contract, summary-review pattern, save-and-return draft store and Playwright probe pack",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T19:03:15.372Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "title",
+        "shape": "persistence",
+        "match": "store"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "page"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "aria-"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "rendering"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "WCAG"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "navigation"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "store"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "nav"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "navigation"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "post"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "route"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "form"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-027.json

@@ -0,0 +1,33 @@
+{
+  "createdAt": "2026-09-06T21:11:33.252Z",
+  "updatedAt": "2026-09-06T21:11:33.281Z",
+  "description": "T-4 shelf-blueprint track: application-account-settings v1.0.0 with 24 contributions 6 REQs 10 USs 25101 to 25110 4 TACs 2601 to 2604 4 ADRs 2601 to 2604; requiresAppliedCapabilities principalDirectory with allow-no-auth-yet override; 8 elicits; probe pack with 5 capability-gated checks anchored to AC-25101-1 AC-25102-1 AC-25105-1 AC-25106-1 AC-25108-1; sample-app fixture with 5 conditional surfaces and 4 break switches; rides with clerk 1.3.0 keycloak 1.2.0 oauth2 1.2.0 magic-link 1.2.0 doc-only observability-logging 1.2.0; mechanism minor for Q3 refusal and refusal template. Ninth shipped consumer of T-0 probe-pack runner.",
+  "reqId": "REQ-027",
+  "prdId": "PRD-001",
+  "title": "application-account-settings v1.0.0 blueprint on the shelf with 5-check pack, 4 auth-blueprint minor bumps and observability-logging minor",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "auth"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T21:11:33.280Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "magic-link"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "template"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-028.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-06T23:02:59.779Z",
+  "updatedAt": "2026-09-06T23:21:56.789Z",
+  "description": "T-5 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.5): the application-onboarding-tour v1.0.0 blueprint on the shelf with 17 contributions (4 REQs step-manifest + tooltip-as-dialog + checklist-slot + completion-state; 7 USs 26101 to 26107; 3 TACs 2701 step-runner / 2702 checklist-slot / 2703 completion-store; 3 ADRs 2701 dismissal-policy / 2702 completion-store-shape / 2703 checklist-anchor). No requiresAppliedCapabilities (composes on SPA, dashboard, notifications-in-app, account-settings, any auth without hard dependency; documented fallback per Q4 spa-local-storage). Ships a Playwright probe pack with four surface-observable checks anchored to AC-26101-1 AC-26102-1 AC-26103-1 AC-26104-1, and a dependency-free sample-app fixture with the three-to-five step tour honestly realised plus four break switches (no-role, focus-escape, no-collapse, no-persist). Composes on application-dashboard for the dashboard-top anchor slot (with settings-page fallback), application-notifications-in-app for the checklist-completion announcement, application-account-settings for the restart-tour control home, application-spa for routing and iconography. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent. Tenth shipped consumer of the T-0 probe-pack runner extension.",
+  "reqId": "REQ-028",
+  "prdId": "PRD-001",
+  "title": "application-onboarding-tour v1.0.0 blueprint on the shelf with 4-check pack and dependency-free sample-app fixture",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-040.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-06T16:59:00.000Z",
+  "updatedAt": "2026-09-06T16:59:00.000Z",
+  "reqId": "REQ-040",
+  "prdId": "PRD-001",
+  "title": "Persistence-data-postgres v1.0.0 blueprint on the shelf with six Node-only probes proven against a postgres:17-alpine container",
+  "description": "The rcf-lite shelf ships the persistence-data-postgres v1.0.0 blueprint (blueprints/persistence-data-postgres/) with 26 contributions per the ratified infra round 5 spec section 5.1: 7 REQs (facade sole-reader over the pg client; numbered forward-only .sql migrations with one file one transaction; prepared-statement discipline via static string literals with $N parameters; transactional atomicity via a helper wrapping BEGIN and COMMIT; two-path recovery via scheduled pg_dump plus vendor point-in-time recovery; connection-pool posture per deploy target; optional advisory-lock helper elicited default off per Baz Q1 default), 10 USs 27101-27110 binding runtime-observable ACs, 4 TACs 2801-2804 (facade, migration runner, transaction helper, recovery runner), 5 ADRs 2801-2805 (driver choice pg with elicited alternatives, numbered forward-only migrations, runner mode atBoot or ciStep, recovery pg_dump plus PITR both required, pool posture per deploy target). The blueprint declares suggestedCompanions logging and errorHandling with spec section 5.1 reasons, providesRoles absent, capabilities [relationalStore], requiresAppliedCapabilities absent. Contributes ADR-2801 and ADR-2802 as scope:global on the persistenceStore and migrationDiscipline topics reused from persistence-data-sqlite and persistence-data-d1 so applying persistence-data-postgres alongside either of them surfaces a DELIBERATE conflict per the round-2 pattern. Ships six Node-only probes under blueprints/persistence-data-postgres/contributions/probes/ (facade-round-trip, migration-apply, prepared-statement-scan, transaction-atomicity, recovery-restore-round-trip, pool-posture-smoke) each exporting the spec section 3.2 verdict envelope with an anchorAcId matching a contributed AC id, and matching run-<probe-name>.mjs shims that drive the probe against the applied fixture and write the per-blueprint probe report at .rcf/reports/blueprints/persistence-data-postgres/<probe-name>.json per spec section 3.4. None of the six probes carry accountBound:true; Postgres is local-first per Baz decision 8. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/infra-postgres/. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a capability-declaration table with one row for relationalStore per spec section 5.6. Appends one row for persistence-data-postgres at US band 27101-27899 / ADR-TAC suffix block 28xx to the shelf-wide id-band registry table under docs/topics.md on every shipped blueprint. Reserves the round-6 Hyperdrive v1.1.0 adapter slot at ADR-2801 by keeping the driver reference opaque at the facade boundary per spec section 5.7. Re-minted with HQ's reserved round-5 chain-id block (REQ-040 / US-4001 / TS-070 / FBS-060 / CN-200..202) after HQ's round-4 T-1 landed first at origin/main 784d12f and the coordinator ruling changed to reserved-block minting via --id (no more max+1 racing).",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}