rcf-lite 0.21.0 → 0.22.0

package/rcf/requirements/req-027.json

@@ -0,0 +1,33 @@
+{
+  "createdAt": "2026-09-06T21:11:33.252Z",
+  "updatedAt": "2026-09-06T21:11:33.281Z",
+  "description": "T-4 shelf-blueprint track: application-account-settings v1.0.0 with 24 contributions 6 REQs 10 USs 25101 to 25110 4 TACs 2601 to 2604 4 ADRs 2601 to 2604; requiresAppliedCapabilities principalDirectory with allow-no-auth-yet override; 8 elicits; probe pack with 5 capability-gated checks anchored to AC-25101-1 AC-25102-1 AC-25105-1 AC-25106-1 AC-25108-1; sample-app fixture with 5 conditional surfaces and 4 break switches; rides with clerk 1.3.0 keycloak 1.2.0 oauth2 1.2.0 magic-link 1.2.0 doc-only observability-logging 1.2.0; mechanism minor for Q3 refusal and refusal template. Ninth shipped consumer of T-0 probe-pack runner.",
+  "reqId": "REQ-027",
+  "prdId": "PRD-001",
+  "title": "application-account-settings v1.0.0 blueprint on the shelf with 5-check pack, 4 auth-blueprint minor bumps and observability-logging minor",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "auth"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T21:11:33.280Z",
+    "signals": [
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "magic-link"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "template"
+      }
+    ]
+  }
+}

package/rcf/requirements/req-028.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-06T23:02:59.779Z",
+  "updatedAt": "2026-09-06T23:21:56.789Z",
+  "description": "T-5 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.5): the application-onboarding-tour v1.0.0 blueprint on the shelf with 17 contributions (4 REQs step-manifest + tooltip-as-dialog + checklist-slot + completion-state; 7 USs 26101 to 26107; 3 TACs 2701 step-runner / 2702 checklist-slot / 2703 completion-store; 3 ADRs 2701 dismissal-policy / 2702 completion-store-shape / 2703 checklist-anchor). No requiresAppliedCapabilities (composes on SPA, dashboard, notifications-in-app, account-settings, any auth without hard dependency; documented fallback per Q4 spa-local-storage). Ships a Playwright probe pack with four surface-observable checks anchored to AC-26101-1 AC-26102-1 AC-26103-1 AC-26104-1, and a dependency-free sample-app fixture with the three-to-five step tour honestly realised plus four break switches (no-role, focus-escape, no-collapse, no-persist). Composes on application-dashboard for the dashboard-top anchor slot (with settings-page fallback), application-notifications-in-app for the checklist-completion announcement, application-account-settings for the restart-tour control home, application-spa for routing and iconography. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent. Tenth shipped consumer of the T-0 probe-pack runner extension.",
+  "reqId": "REQ-028",
+  "prdId": "PRD-001",
+  "title": "application-onboarding-tour v1.0.0 blueprint on the shelf with 4-check pack and dependency-free sample-app fixture",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-040.json

@@ -0,0 +1,13 @@
+{
+  "createdAt": "2026-09-06T16:59:00.000Z",
+  "updatedAt": "2026-09-06T16:59:00.000Z",
+  "reqId": "REQ-040",
+  "prdId": "PRD-001",
+  "title": "Persistence-data-postgres v1.0.0 blueprint on the shelf with six Node-only probes proven against a postgres:17-alpine container",
+  "description": "The rcf-lite shelf ships the persistence-data-postgres v1.0.0 blueprint (blueprints/persistence-data-postgres/) with 26 contributions per the ratified infra round 5 spec section 5.1: 7 REQs (facade sole-reader over the pg client; numbered forward-only .sql migrations with one file one transaction; prepared-statement discipline via static string literals with $N parameters; transactional atomicity via a helper wrapping BEGIN and COMMIT; two-path recovery via scheduled pg_dump plus vendor point-in-time recovery; connection-pool posture per deploy target; optional advisory-lock helper elicited default off per Baz Q1 default), 10 USs 27101-27110 binding runtime-observable ACs, 4 TACs 2801-2804 (facade, migration runner, transaction helper, recovery runner), 5 ADRs 2801-2805 (driver choice pg with elicited alternatives, numbered forward-only migrations, runner mode atBoot or ciStep, recovery pg_dump plus PITR both required, pool posture per deploy target). The blueprint declares suggestedCompanions logging and errorHandling with spec section 5.1 reasons, providesRoles absent, capabilities [relationalStore], requiresAppliedCapabilities absent. Contributes ADR-2801 and ADR-2802 as scope:global on the persistenceStore and migrationDiscipline topics reused from persistence-data-sqlite and persistence-data-d1 so applying persistence-data-postgres alongside either of them surfaces a DELIBERATE conflict per the round-2 pattern. Ships six Node-only probes under blueprints/persistence-data-postgres/contributions/probes/ (facade-round-trip, migration-apply, prepared-statement-scan, transaction-atomicity, recovery-restore-round-trip, pool-posture-smoke) each exporting the spec section 3.2 verdict envelope with an anchorAcId matching a contributed AC id, and matching run-<probe-name>.mjs shims that drive the probe against the applied fixture and write the per-blueprint probe report at .rcf/reports/blueprints/persistence-data-postgres/<probe-name>.json per spec section 3.4. None of the six probes carry accountBound:true; Postgres is local-first per Baz decision 8. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/infra-postgres/. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a capability-declaration table with one row for relationalStore per spec section 5.6. Appends one row for persistence-data-postgres at US band 27101-27899 / ADR-TAC suffix block 28xx to the shelf-wide id-band registry table under docs/topics.md on every shipped blueprint. Reserves the round-6 Hyperdrive v1.1.0 adapter slot at ADR-2801 by keeping the driver reference opaque at the facade boundary per spec section 5.7. Re-minted with HQ's reserved round-5 chain-id block (REQ-040 / US-4001 / TS-070 / FBS-060 / CN-200..202) after HQ's round-4 T-1 landed first at origin/main 784d12f and the coordinator ruling changed to reserved-block minting via --id (no more max+1 racing).",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft"
+}

package/rcf/requirements/req-041.json

@@ -0,0 +1,125 @@
+{
+  "createdAt": "2026-09-06T17:49:13.077Z",
+  "updatedAt": "2026-09-06T17:49:13.110Z",
+  "description": "The rcf-lite shelf ships the object-storage-s3 v1.0.0 blueprint (blueprints/object-storage-s3/) with 21 contributions per the ratified infra round 5 spec section 5.2: 6 REQs (facade sole-reader over the S3 client; put / get / delete / list on typed keys; presigned GET URL with bounded TTL; multipart-upload above elicited threshold; four lifecycle events with metadata-only fields; credential-pair discipline via security-secrets-management), 8 USs 28101-28108 binding runtime-observable ACs, 3 TACs (2901 facade, 2902 multipart uploader, 2903 event sink), 4 ADRs (2901 adapter elicited between @aws-sdk/client-s3 and aws4fetch, 2902 presigned TTL default 15 minutes floor 1 minute, 2903 multipart threshold default 8 MiB, 2904 objectStorageContract scope global). The blueprint declares suggestedCompanions logging and errorHandling with spec section 5.2 reasons, providesRoles absent, capabilities [objectStorage], requiresAppliedCapabilities absent. Contributes ADR-2904 as scope:global on new topic objectStorageContract so future non-S3-shape siblings (object-storage-native-gcs, object-storage-native-azure) conflict here by design. Ships six Node-only probes under blueprints/object-storage-s3/contributions/probes/ (facade-round-trip, put-get-round-trip, presigned-url, multipart-upload, event-secrecy, r2-real-account-smoke) each exporting the spec section 3.2 verdict envelope with an anchorAcId matching a contributed AC id, and matching run-<probe-name>.mjs shims writing per-blueprint reports at .rcf/reports/blueprints/object-storage-s3/<probe-name>.json per spec section 3.4. Five probes are local-first (accountBound false); r2-real-account-smoke carries accountBound:true and records the accountBoundSkipped shape per spec section 3.5 without CI_HAS_CLOUDFLARE_ACCOUNT. Ships the T-2 side of the shared sample-app fixture at packages/rcf-lite/test/fixtures/infra-s3-and-queue/ (T-3 shares the fixture and adds its own wrangler-dev src branch) with MinIO under docker compose, @aws-sdk/client-s3 as the fixture's own runtime dep, an S3 facade over MinIO, a security-secrets-management shim realising the secretRef opaque-string contract from a project-local .rcf/secrets/dev.env file, and a README naming docker and podman incantations plus four wired induced-failure switches. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a capability-declaration table with one row for objectStorage per spec section 5.6. Appends one row for object-storage-s3 at US band 28101-28899 / ADR-TAC suffix block 29xx to the shelf-wide id-band registry table under docs/topics.md on every shipped blueprint. Refuses composition when security-secrets-management is not applied with exit 3 and stable message id object-storage-s3-no-secrets on stderr; --allow-no-secrets-yet override records a note on source.notes for later reconciliation. Minted with HQ's reserved round-5 chain-id block via --id (REQ-041 / US-4101 / TS-071 / FBS-061 / CN-203..205) after T-1 minted at 040 / 4001 / 070 / 060 / 200..202; the block reservation avoids next-id racing with HQ's train while T-1 sits open.",
+  "category": "functional",
+  "domain": "application",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "reqId": "REQ-041",
+  "prdId": "PRD-001",
+  "title": "Object-storage-s3 v1.0.0 blueprint on the shelf",
+  "shapeClassification": {
+    "shapes": [
+      "webUi",
+      "httpApi",
+      "auth",
+      "persistence"
+    ],
+    "reason": "keyword-scan",
+    "classifiedAt": "2026-09-06T17:49:13.108Z",
+    "signals": [
+      {
+        "source": "title",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "put"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "get"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "delete"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "GET"
+      },
+      {
+        "source": "description",
+        "shape": "auth",
+        "match": "credential"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "put"
+      },
+      {
+        "source": "description",
+        "shape": "httpApi",
+        "match": "get"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      },
+      {
+        "source": "description",
+        "shape": "webUi",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "table"
+      },
+      {
+        "source": "description",
+        "shape": "persistence",
+        "match": "storage"
+      }
+    ]
+  }
+}

package/rcf/test-suites/ts-053.json

@@ -0,0 +1,70 @@
+{
+  "createdAt": "2026-09-06T15:39:17.193Z",
+  "updatedAt": "2026-09-06T15:39:17.193Z",
+  "testCases": [
+    {
+      "id": "TC-053-blueprint-json-shape",
+      "acId": "AC-2401-1",
+      "description": "blueprint.json declares slug, version 1.0.0, category application, 19 contributions in 5/8/3/3 groups; providesRoles absent; requiresAppliedCapabilities absent; suggestedCompanions logging and errorHandling",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::blueprint.json declares 19 contributions with no capabilities and no requiresAppliedCapabilities (TC-053-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-053-applies-clean",
+      "acId": "AC-2401-2",
+      "description": "Fresh init project applies application-empty-error-states cleanly and reports the tree clean",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::applies cleanly on a fresh init project and adds 19 documents to the tree (TC-053-applies-clean)"
+    },
+    {
+      "id": "TC-053-pack-checks-cross-check",
+      "acId": "AC-2401-3",
+      "description": "Every pack check id matches a contributed AC id; pack-level appliesTo references BOTH tacIds and route; withUrl helper used for every URL string",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::every pack check id matches a contributed AC id and appliesTo binds tacIds AND route (TC-053-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-053-fixture-serves-states",
+      "acId": "AC-2401-4",
+      "description": "Sample-app fixture serves every one of the eight states honestly on its default branch and via ?state= switch",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::sample-app fixture serves every one of the eight states on the default branch (TC-053-fixture-serves-states)"
+    },
+    {
+      "id": "TC-053-negative-runs",
+      "acId": "AC-2401-5",
+      "description": "Break switches surface the four defects on the DOM for the corresponding pack checks",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::sample-app fixture break switches surface the four defects on the DOM (TC-053-negative-runs)"
+    },
+    {
+      "id": "TC-053-state-enumeration-parity",
+      "acId": "AC-2401-6",
+      "description": "Eight state slugs appear identically across README, guide, pack checks[] and docs/topics.md registry",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::eight state slugs appear identically across README guide pack and docs (TC-053-state-enumeration-parity)"
+    },
+    {
+      "id": "TC-053-readme-gaps-and-changelog",
+      "acId": "AC-2401-7",
+      "description": "README lists mechanism-reach gaps individually; CHANGELOG carries one 1.0.0 entry; docs/topics.md carries the T-1 shelf registry row",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::README lists mechanism-reach gaps and CHANGELOG carries 1.0.0 and topics carries the T-1 row (TC-053-readme-gaps-and-changelog)"
+    }
+  ],
+  "status": "draft",
+  "purpose": "Cover AC-2401-1 through AC-2401-7 via unit tests over the shipped application-empty-error-states blueprint.json contribution shape (19 contributions in the 5 REQ / 8 US / 3 TAC / 3 ADR groups), the applies-clean pass on a fresh init project, the pack-loader accepting the shipped pack file with every check id cross-checked against blueprint AC ids and appliesTo referencing BOTH tacIds and route, the sample-app fixture serving all eight state branches, the negative-run behaviour on the ?break=stack-trace, ?break=leak-id, ?break=no-recovery and ?break=no-live-region switches, the state-slug enumeration parity across README, guide, pack and docs/topics.md registry, and the README mechanism-reach gaps and CHANGELOG 1.0.0 entry.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-2401-1",
+    "AC-2401-2",
+    "AC-2401-3",
+    "AC-2401-4",
+    "AC-2401-5",
+    "AC-2401-6",
+    "AC-2401-7"
+  ],
+  "id": "TS-053",
+  "usId": "US-2401",
+  "title": "application-empty-error-states v1.0.0 shelf shape, probe pack cross-check and sample-app fixture"
+}

package/rcf/test-suites/ts-054.json

@@ -0,0 +1,70 @@
+{
+  "createdAt": "2026-09-06T16:56:55.746Z",
+  "updatedAt": "2026-09-06T16:57:22.760Z",
+  "purpose": "Cover AC-2501-1 through AC-2501-7 via unit tests over the shipped application-file-upload blueprint.json contribution shape (18 contributions in the 5 REQ / 7 US / 3 TAC / 3 ADR groups), the applies-clean pass on a fresh init project, the pack-loader accepting the shipped pack file with every check id cross-checked against blueprint AC ids and appliesTo referencing BOTH tacIds and route, the sample-app fixture serving both transport branches multipart POST and tus.io, the negative-run behaviour on the ?break=no-input ?break=no-live-region ?break=send-refused and ?break=no-chunks switches, the state-and-transport enumeration parity across README guide pack and docs/topics.md registry, and the README mechanism-reach gaps and CHANGELOG 1.0.0 entry.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-2501-1",
+    "AC-2501-2",
+    "AC-2501-3",
+    "AC-2501-4",
+    "AC-2501-5",
+    "AC-2501-6",
+    "AC-2501-7"
+  ],
+  "id": "TS-054",
+  "usId": "US-2501",
+  "title": "application-file-upload v1.0.0 shelf shape, probe pack cross-check and sample-app fixture",
+  "testCases": [
+    {
+      "id": "TC-054-blueprint-json-shape",
+      "acId": "AC-2501-1",
+      "description": "blueprint.json declares slug, version 1.0.0, category application, 18 contributions in 5/7/3/3 groups; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent; suggestedCompanions logging and errorHandling",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::blueprint.json declares 18 contributions with no capabilities and no requiresAppliedCapabilities (TC-054-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-054-applies-clean",
+      "acId": "AC-2501-2",
+      "description": "Fresh init project applies application-file-upload cleanly and reports the tree clean",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::applies cleanly on a fresh init project and adds 18 documents to the tree (TC-054-applies-clean)"
+    },
+    {
+      "id": "TC-054-pack-checks-cross-check",
+      "acId": "AC-2501-3",
+      "description": "Every pack check id matches a contributed AC id; pack-level appliesTo references BOTH tacIds and route; withUrl helper used for every URL string",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::every pack check id matches a contributed AC id and appliesTo binds tacIds AND route (TC-054-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-054-fixture-serves-transports",
+      "acId": "AC-2501-4",
+      "description": "Sample-app fixture serves the multipart POST default and the tus.io elicited alternative honestly on their default branches and via ?transport= switch",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::sample-app fixture serves both transport branches on the default branch (TC-054-fixture-serves-transports)"
+    },
+    {
+      "id": "TC-054-negative-runs",
+      "acId": "AC-2501-5",
+      "description": "Break switches surface the four defects on the DOM or network layer for the corresponding pack checks",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::sample-app fixture break switches surface the four defects on the DOM (TC-054-negative-runs)"
+    },
+    {
+      "id": "TC-054-state-and-transport-parity",
+      "acId": "AC-2501-6",
+      "description": "Four state slugs and two transport slugs appear identically across README, guide, pack checks[] and docs/topics.md registry",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::four state slugs and two transport slugs appear identically across README guide pack and docs (TC-054-state-and-transport-parity)"
+    },
+    {
+      "id": "TC-054-readme-gaps-and-changelog",
+      "acId": "AC-2501-7",
+      "description": "README lists mechanism-reach gaps individually; CHANGELOG carries one 1.0.0 entry; docs/topics.md carries the T-2 shelf registry row",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::README lists mechanism-reach gaps and CHANGELOG carries 1.0.0 and topics carries the T-2 row (TC-054-readme-gaps-and-changelog)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-055.json

@@ -0,0 +1,77 @@
+{
+  "createdAt": "2026-09-06T19:04:07.390Z",
+  "updatedAt": "2026-09-06T19:04:27.043Z",
+  "purpose": "Cover AC-2601-1 through AC-2601-7 via unit tests over the shipped application-forms-wizard blueprint.json contribution shape (19 contributions in the 5 REQ / 8 US / 3 TAC / 3 ADR groups), the applies-clean pass on a fresh init project, the pack-loader accepting the shipped pack file with every check id cross-checked against blueprint AC ids and appliesTo referencing BOTH tacIds and route, the sample-app fixture serving the four wizard surfaces honestly and both save-and-return transports on their query branches, the negative-run behaviour on the ?break=task-list-vocab ?break=no-summary ?break=no-retain and ?break=no-draft switches, the vocabulary-and-transport enumeration parity across README guide pack and docs/topics.md registry, and the README mechanism-reach gaps and CHANGELOG 1.0.0 entry.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-2601-1",
+    "AC-2601-2",
+    "AC-2601-3",
+    "AC-2601-4",
+    "AC-2601-5",
+    "AC-2601-6",
+    "AC-2601-7"
+  ],
+  "id": "TS-055",
+  "usId": "US-2601",
+  "title": "application-forms-wizard v1.0.0 shelf shape, probe pack cross-check and sample-app fixture",
+  "testCases": [
+    {
+      "id": "TC-055-blueprint-json-shape",
+      "acId": "AC-2601-1",
+      "description": "blueprint.json declares slug, version 1.0.0, category application, 19 contributions in 5/8/3/3 groups; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent; suggestedCompanions logging and errorHandling",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::blueprint.json declares 19 contributions with no capabilities and no requiresAppliedCapabilities (TC-055-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-055-applies-clean",
+      "acId": "AC-2601-2",
+      "description": "Fresh init project applies application-forms-wizard cleanly and reports the tree clean",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::applies cleanly on a fresh init project and adds 19 documents to the tree (TC-055-applies-clean)"
+    },
+    {
+      "id": "TC-055-pack-checks-cross-check",
+      "acId": "AC-2601-3",
+      "description": "Every pack check id matches a contributed AC id; pack-level appliesTo references BOTH tacIds and route; withUrl helper used for every URL string",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::every pack check id matches a contributed AC id and appliesTo binds tacIds AND route (TC-055-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-055-pack-loader-discovers",
+      "acId": "AC-2601-3",
+      "description": "Pack loader discovers the shipped pack against an applied scratch project",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::application-forms-wizard: pack loader discovers the shipped pack against an applied scratch project (TC-055-pack-loader-discovers)"
+    },
+    {
+      "id": "TC-055-fixture-serves-surfaces",
+      "acId": "AC-2601-4",
+      "description": "Sample-app fixture serves the four wizard surfaces honestly and the two draft-store transports on their query branches",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::sample-app fixture serves the four wizard surfaces and both draft-store transports (TC-055-fixture-serves-surfaces)"
+    },
+    {
+      "id": "TC-055-negative-runs",
+      "acId": "AC-2601-5",
+      "description": "Break switches surface the four defects on the DOM or storage layer for the corresponding pack checks",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::sample-app fixture break switches surface the four defects on the DOM (TC-055-negative-runs)"
+    },
+    {
+      "id": "TC-055-vocabulary-and-transport-parity",
+      "acId": "AC-2601-6",
+      "description": "Closed GOV.UK vocabulary strings and the two transport slugs appear identically across README, guide, pack checks[] and docs/topics.md registry",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::four state slugs and two transport slugs appear identically across README guide pack and docs (TC-055-vocabulary-and-transport-parity)"
+    },
+    {
+      "id": "TC-055-readme-gaps-and-changelog",
+      "acId": "AC-2601-7",
+      "description": "README lists mechanism-reach gaps individually; CHANGELOG carries one 1.0.0 entry; docs/topics.md carries the T-3 shelf registry row and the cross-reference to application-empty-error-states",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::README lists mechanism-reach gaps and CHANGELOG carries 1.0.0 and topics carries the T-3 row (TC-055-readme-gaps-and-changelog)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-056.json

@@ -0,0 +1,78 @@
+{
+  "createdAt": "2026-09-06T21:13:07.603Z",
+  "updatedAt": "2026-09-06T21:13:07.603Z",
+  "purpose": "Cover AC-2701-1 through AC-2701-8 via unit tests over the shipped application-account-settings blueprint.json contribution shape (24 contributions in the 6 REQ / 10 US / 4 TAC / 4 ADR groups), the applies-clean pass on a fresh init project with security-auth-magic-link applied, the bare-SPA refusal at exit 3 with the shipped refusal template, the --allow-no-auth-yet override sidecar note, the Q3 refusal for an operator answering security-surface-shape without applied credentialSelfService or hostedIdentityUi, the pack-loader accepting the shipped pack file with every check id cross-checked against blueprint AC ids and appliesTo referencing BOTH tacIds and route, the sample-app fixture serving the five conditional surfaces honestly and refusing on the four break switches, the section 6a capability table extension in blueprint-authoring.md, and the four amended auth blueprints and observability-logging blueprint carrying their new capabilities[] and CHANGELOG entries.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-2701-1",
+    "AC-2701-2",
+    "AC-2701-3",
+    "AC-2701-4",
+    "AC-2701-5",
+    "AC-2701-6",
+    "AC-2701-7",
+    "AC-2701-8"
+  ],
+  "id": "TS-056",
+  "usId": "US-2701",
+  "title": "application-account-settings v1.0.0 shelf shape, probe pack cross-check, sample-app fixture, auth-minor and observability-logging minor bumps, mechanism minor for Q3 refusal",
+  "testCases": [
+    {
+      "id": "TC-056-blueprint-json-shape",
+      "acId": "AC-2701-1",
+      "description": "blueprint.json declares 24 contributions with requiresAppliedCapabilities and elicits[] (TC-056-blueprint-json-shape)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::blueprint.json declares 24 contributions with requiresAppliedCapabilities and elicits[] (TC-056-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-056-applies-clean",
+      "acId": "AC-2701-2",
+      "description": "applies cleanly on a magic-link project with 24 contributions and appliedCapabilities=[principalDirectory] (TC-056-applies-clean)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::applies cleanly on a magic-link project with 24 contributions and appliedCapabilities=[principalDirectory] (TC-056-applies-clean)"
+    },
+    {
+      "id": "TC-056-apply-refusal-and-override",
+      "acId": "AC-2701-3",
+      "description": "apply refuses on bare SPA with the [application-account-settings-bare-spa] message; --allow-no-auth-yet applies with a scaffolding note (TC-056-apply-refusal-and-override)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::apply refuses on bare SPA with the [application-account-settings-bare-spa] message; --allow-no-auth-yet applies with a scaffolding note (TC-056-apply-refusal-and-override)"
+    },
+    {
+      "id": "TC-056-q3-refusal",
+      "acId": "AC-2701-8",
+      "description": "Q3 gate: security-surface-shape answered without applied credentialSelfService or hostedIdentityUi is silently gated at apply; the sidecar records no shape entry; the TAC-2603 hosted-ui-bridge enforces the refusal at surface load time",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::Q3 gate: security-surface-shape is silently gated when neither credentialSelfService nor hostedIdentityUi is applied; sidecar records no shape entry; TAC-2603 hosted-ui-bridge enforces the refusal at surface load (TC-056-q3-refusal)"
+    },
+    {
+      "id": "TC-056-pack-checks-cross-check",
+      "acId": "AC-2701-4",
+      "description": "every pack check id matches a contributed AC id; pack-level appliesTo names tacIds AND route; per-check appliesTo gates on the applied capability (TC-056-pack-checks-cross-check)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::every pack check id matches a contributed AC id; pack-level appliesTo names tacIds AND route; per-check appliesTo gates on the applied capability (TC-056-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-056-fixture-and-switches",
+      "acId": "AC-2701-5",
+      "description": "sample-app fixture serves the five conditional surfaces honestly (TC-056-fixture-and-switches)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::sample-app fixture serves the five conditional surfaces honestly (TC-056-fixture-and-switches)"
+    },
+    {
+      "id": "TC-056-negative-runs",
+      "acId": "AC-2701-6",
+      "description": "sample-app fixture break switches surface the four defects (TC-056-negative-runs)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::sample-app fixture break switches surface the four defects (TC-056-negative-runs)"
+    },
+    {
+      "id": "TC-056-shelf-doc-consistency",
+      "acId": "AC-2701-7",
+      "description": "four amended auth blueprints declare the ratified capability sets and observability-logging declares sessionInventory (TC-056-shelf-doc-consistency)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::four amended auth blueprints declare the ratified capability sets and observability-logging declares sessionInventory (TC-056-shelf-doc-consistency)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-057.json

@@ -0,0 +1,78 @@
+{
+  "createdAt": "2026-09-06T23:05:23.898Z",
+  "updatedAt": "2026-09-06T23:19:05.155Z",
+  "purpose": "Cover AC-2801-1 through AC-2801-8 via unit tests over the shipped application-onboarding-tour blueprint.json contribution shape (17 contributions in the 4 REQ / 7 US / 3 TAC / 3 ADR groups), the ADR shape and standardsTraceClause discipline on the ADR contribution entries per spec section 8a, the applies-clean pass on a fresh init project (no requiresAppliedCapabilities), the pack-loader accepting the shipped pack file with every check id cross-checked against blueprint AC ids and appliesTo referencing BOTH tacIds and route, the sample-app fixture serving the tour surface honestly on both apps=dashboard and apps= (empty) branches plus multiple store branches, the four break switches surfacing the four defects (no-role, focus-escape, no-collapse, no-persist), the docs consistency (README, guide, topics.md, blueprint CHANGELOG) and the withUrl helper plus browser.resize breakpoint usage (WCAG 2.4.11) in the pack source.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-2801-1",
+    "AC-2801-2",
+    "AC-2801-3",
+    "AC-2801-4",
+    "AC-2801-5",
+    "AC-2801-6",
+    "AC-2801-7",
+    "AC-2801-8"
+  ],
+  "id": "TS-057",
+  "usId": "US-2801",
+  "title": "application-onboarding-tour v1.0.0 shelf shape, probe pack cross-check, sample-app fixture with dashboard-and-settings-page checklist branches and multiple completion-store branches, and the four break switches under Q4 spa-local-storage fallback",
+  "testCases": [
+    {
+      "id": "TC-057-blueprint-json-shape",
+      "acId": "AC-2801-1",
+      "description": "blueprint.json declares 17 contributions with no requiresAppliedCapabilities and elicits[] (TC-057-blueprint-json-shape)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::blueprint.json declares 17 contributions with no requiresAppliedCapabilities and elicits[] (TC-057-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-057-adr-shape",
+      "acId": "AC-2801-2",
+      "description": "ADR JSON documents validate against 0.6.1 and standardsTraceClause is non-null on ADR contribution entries (TC-057-adr-shape)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::ADR JSON documents validate against 0.6.1 and standardsTraceClause is non-null on ADR contribution entries (TC-057-adr-shape)"
+    },
+    {
+      "id": "TC-057-applies-clean",
+      "acId": "AC-2801-3",
+      "description": "applies cleanly on a fresh project with 17 contributions and no requiresAppliedCapabilities refusal (TC-057-applies-clean)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::applies cleanly on a fresh project with 17 contributions and no requiresAppliedCapabilities refusal (TC-057-applies-clean)"
+    },
+    {
+      "id": "TC-057-pack-checks-cross-check",
+      "acId": "AC-2801-4",
+      "description": "every pack check id matches a contributed AC id; pack-level appliesTo names tacIds AND route; withUrl helper used; browser.resize breakpoints appear (TC-057-pack-checks-cross-check)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::every pack check id matches a contributed AC id; pack-level appliesTo names tacIds AND route; withUrl helper used; browser.resize breakpoints appear (TC-057-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-057-fixture-and-switches",
+      "acId": "AC-2801-5",
+      "description": "sample-app fixture serves the honest tour on both apps=dashboard and apps= (empty) branches and multiple store branches (TC-057-fixture-and-switches)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::sample-app fixture serves the honest tour on both apps=dashboard and apps= (empty) branches and multiple store branches (TC-057-fixture-and-switches)"
+    },
+    {
+      "id": "TC-057-negative-runs",
+      "acId": "AC-2801-6",
+      "description": "sample-app fixture break switches surface the four defects (TC-057-negative-runs)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::sample-app fixture break switches surface the four defects (TC-057-negative-runs)"
+    },
+    {
+      "id": "TC-057-shelf-doc-consistency",
+      "acId": "AC-2801-7",
+      "description": "AC ids and cross-reference blueprint slugs appear identically across README, guide, pack descriptions and topics.md (TC-057-shelf-doc-consistency)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::AC ids and cross-reference blueprint slugs appear identically across README, guide, pack descriptions and topics.md (TC-057-shelf-doc-consistency)"
+    },
+    {
+      "id": "TC-057-changelog-guide-and-mechanism-reach",
+      "acId": "AC-2801-8",
+      "description": "README lists mechanism-reach gaps per AC and guide names WCAG SCs and the ARIA APG dialog-modal pattern with URLs (TC-057-changelog-guide-and-mechanism-reach)",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::README lists mechanism-reach gaps per AC and guide names WCAG SCs and the ARIA APG dialog-modal pattern with URLs (TC-057-changelog-guide-and-mechanism-reach)"
+    }
+  ],
+  "status": "draft"
+}