rcf-lite 0.23.0 → 0.24.0

package/rcf/test-suites/ts-052.json

@@ -3,18 +3,68 @@
   "updatedAt": "2026-09-05T01:30:00.000Z",
   "purpose": "Cover AC-2301-1..7 via unit tests over the shipped application-admin-console blueprint.json contribution shape (23 contributions in 6 REQ / 9 US / 4 TAC / 4 ADR groups), the requiresAppliedCapabilities and elicits[] declarations, the pack-loader accepting the shipped pack file with every check id cross-checked against blueprint AC ids, the pack appliesTo predicate discipline (references BOTH tacIds and route), the sample-app fixture serving the console shell with the ARIA APG grid permission matrix, the CAPS switch surface selector, the users directory, org switcher, audit-log table with correlation id, access-denied and request-access control, and the negative-run behaviour on the ?break=matrix-grid, ?break=denied and ?break=audit-fields switches.",
   "testLevel": "unit",
-  "acIds": ["AC-2301-1", "AC-2301-2", "AC-2301-3", "AC-2301-4", "AC-2301-5", "AC-2301-6", "AC-2301-7"],
+  "acIds": [
+    "AC-2301-1",
+    "AC-2301-2",
+    "AC-2301-3",
+    "AC-2301-4",
+    "AC-2301-5",
+    "AC-2301-6",
+    "AC-2301-7"
+  ],
   "id": "TS-052",
   "usId": "US-2301",
   "title": "application-admin-console v1.0.0 shelf shape, capability discovery, probe pack cross-check and sample-app fixture",
   "testCases": [
-    {"id": "TC-052-blueprint-json-shape", "acId": "AC-2301-1", "description": "blueprint.json declares 23 contributions with requiresAppliedCapabilities and elicits[]", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::blueprint.json declares 23 contributions with requiresAppliedCapabilities and elicits[] (TC-052-blueprint-json-shape)"},
-    {"id": "TC-052-applies-clean-with-override", "acId": "AC-2301-2", "description": "Fresh init project applies admin-console --allow-no-auth-yet and writes sidecar with allowNoAuthYet true", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::apply --allow-no-auth-yet on bare SPA writes sidecar with allowNoAuthYet:true and empty appliedCapabilities (TC-052-applies-clean-with-override)"},
-    {"id": "TC-052-refuses-bare-spa", "acId": "AC-2301-3", "description": "Fresh init project without auth refuses admin-console apply with exit 3 and spec 5.5.1 message", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::apply refuses on bare SPA with spec 5.5.1 verbatim message and lists applied blueprints (TC-052-refuses-bare-spa)"},
-    {"id": "TC-052-capability-discovery", "acId": "AC-2301-4", "description": "Discovery reads applied capabilities from applied blueprints", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::apply on magic-link project yields [principalDirectory] and on clerk+logging project yields [principalDirectory,roleModel,auditLog] (TC-052-capability-discovery)"},
-    {"id": "TC-052-pack-checks-cross-check", "acId": "AC-2301-5", "description": "Every pack check id matches contributed AC id and applies gates on capability", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::every pack check id matches a contributed AC id and appliesTo predicate gates on the applied capability (TC-052-pack-checks-cross-check)"},
-    {"id": "TC-052-fixture-surfaces", "acId": "AC-2301-6", "description": "Sample-app fixture serves the console shell with grid matrix and required data attributes", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::sample-app fixture serves console shell with ARIA APG grid permission matrix and required data attributes (TC-052-fixture-surfaces)"},
-    {"id": "TC-052-negative-runs", "acId": "AC-2301-7", "description": "Break switches surface the three defects on the DOM", "status": "pending", "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::sample-app fixture break switches surface the three defects on the DOM (TC-052-negative-runs)"}
+    {
+      "id": "TC-052-blueprint-json-shape",
+      "acId": "AC-2301-1",
+      "description": "blueprint.json declares 23 contributions with requiresAppliedCapabilities and elicits[]",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::blueprint.json declares 28 contributions with requiresAppliedCapabilities and elicits[] (TC-052-blueprint-json-shape)"
+    },
+    {
+      "id": "TC-052-applies-clean-with-override",
+      "acId": "AC-2301-2",
+      "description": "Fresh init project applies admin-console --allow-no-auth-yet and writes sidecar with allowNoAuthYet true",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::apply --allow-no-auth-yet on bare SPA writes sidecar with allowNoAuthYet:true and empty appliedCapabilities (TC-052-applies-clean-with-override)"
+    },
+    {
+      "id": "TC-052-refuses-bare-spa",
+      "acId": "AC-2301-3",
+      "description": "Fresh init project without auth refuses admin-console apply with exit 3 and spec 5.5.1 message",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::apply refuses on bare SPA with spec 5.5.1 verbatim message and lists applied blueprints (TC-052-refuses-bare-spa)"
+    },
+    {
+      "id": "TC-052-capability-discovery",
+      "acId": "AC-2301-4",
+      "description": "Discovery reads applied capabilities from applied blueprints",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::apply on magic-link project yields [principalDirectory] and on clerk+logging project yields [principalDirectory,roleModel,auditLog] (TC-052-capability-discovery)"
+    },
+    {
+      "id": "TC-052-pack-checks-cross-check",
+      "acId": "AC-2301-5",
+      "description": "Every pack check id matches contributed AC id and applies gates on capability",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::every pack check id matches a contributed AC id and appliesTo predicate gates on the applied capability (TC-052-pack-checks-cross-check)"
+    },
+    {
+      "id": "TC-052-fixture-surfaces",
+      "acId": "AC-2301-6",
+      "description": "Sample-app fixture serves the console shell with grid matrix and required data attributes",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::sample-app fixture serves console shell with ARIA APG grid permission matrix and required data attributes (TC-052-fixture-surfaces)"
+    },
+    {
+      "id": "TC-052-negative-runs",
+      "acId": "AC-2301-7",
+      "description": "Break switches surface the three defects on the DOM",
+      "status": "pending",
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::sample-app fixture break switches surface the three defects on the DOM (TC-052-negative-runs)"
+    }
   ],
   "status": "draft"
 }

package/rcf/test-suites/ts-080.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:31.862Z",
+  "updatedAt": "2026-09-07T10:21:00.649Z",
+  "purpose": "Cover AC-5001-1 via anatomy test: the shipped kv-facade module's ready() call opens against the KV binding and emits facadeReady with the metadata-only payload",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5001-1"
+  ],
+  "id": "TS-080",
+  "usId": "US-5001",
+  "title": "T-1 facade opens on boot and emits facadeReady",
+  "testCases": [
+    {
+      "id": "TC-080-ac-5001-1-facade-ready",
+      "acId": "AC-5001-1",
+      "description": "Cover AC-5001-1 via anatomy test: kv-facade.mjs ready() call emits facadeReady with metadata-only payload",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::facade opens on boot and emits facadeReady with metadata-only payload (TC-080-facade-ready)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-081.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.039Z",
+  "updatedAt": "2026-09-07T10:21:00.826Z",
+  "purpose": "Cover AC-5002-1 via anatomy test: a grep on the cf-platform fixture src/ tree for env.CACHE returns exactly src/kv-facade.mjs",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5002-1"
+  ],
+  "id": "TS-081",
+  "usId": "US-5002",
+  "title": "T-1 KV binding sole-reader grep on the applied fixture",
+  "testCases": [
+    {
+      "id": "TC-081-ac-5002-1-sole-reader",
+      "acId": "AC-5002-1",
+      "description": "Cover AC-5002-1 via anatomy test: grep for env.CACHE in cf-platform src/ returns exactly src/kv-facade.mjs",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::env.CACHE binding is dereferenced in exactly one fixture source file (TC-081-sole-reader)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-082.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T10:20:32.213Z",
+  "updatedAt": "2026-09-07T10:21:01.181Z",
+  "purpose": "Cover AC-5101-1 and AC-5101-2 via facade-round-trip probe run and anatomy test cross-check",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5101-1",
+    "AC-5101-2"
+  ],
+  "id": "TS-082",
+  "usId": "US-5101",
+  "title": "T-1 facade round-trip put get delete via in-memory KV driver",
+  "testCases": [
+    {
+      "id": "TC-082-ac-5101-1-round-trip",
+      "acId": "AC-5101-1",
+      "description": "Cover AC-5101-1 via facade-round-trip probe run and anatomy report cross-check",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::facade-round-trip probe passes on the fixture kv-driver (TC-082-round-trip)"
+    },
+    {
+      "id": "TC-082-ac-5101-2-delete-then-null",
+      "acId": "AC-5101-2",
+      "description": "Cover AC-5101-2 via facade-round-trip probe: delete then get returns null and emits kvMiss",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::facade-round-trip probe verifies delete-then-null branch (TC-082-delete-null)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-083.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.390Z",
+  "updatedAt": "2026-09-07T10:21:01.358Z",
+  "purpose": "Cover AC-5102-1 via list-with-prefix probe run and anatomy test cross-check",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5102-1"
+  ],
+  "id": "TS-083",
+  "usId": "US-5102",
+  "title": "T-1 list with prefix returns 10 keys with metadata shape",
+  "testCases": [
+    {
+      "id": "TC-083-ac-5102-1-list-prefix",
+      "acId": "AC-5102-1",
+      "description": "Cover AC-5102-1 via list-with-prefix probe: 10 keys under flags/ all returned with metadata shape",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::list-with-prefix probe passes on 10 keys under a shared prefix (TC-083-list-prefix)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-084.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T10:20:32.566Z",
+  "updatedAt": "2026-09-07T10:21:01.711Z",
+  "purpose": "Cover AC-5201-1 and AC-5201-2 via cache-aside-hit-then-miss probe run and anatomy test cross-check",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5201-1",
+    "AC-5201-2"
+  ],
+  "id": "TS-084",
+  "usId": "US-5201",
+  "title": "T-1 cache-aside hit-then-miss under a fake clock past TTL",
+  "testCases": [
+    {
+      "id": "TC-084-ac-5201-1-hit-within-ttl",
+      "acId": "AC-5201-1",
+      "description": "Cover AC-5201-1 via cache-aside-hit-then-miss probe: within-TTL second read is a cache hit and origin is called once",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::cache-aside-hit-then-miss probe: within-TTL cached branch (TC-084-hit-within-ttl)"
+    },
+    {
+      "id": "TC-084-ac-5201-2-miss-past-ttl",
+      "acId": "AC-5201-2",
+      "description": "Cover AC-5201-2 via cache-aside-hit-then-miss probe: past-TTL read miss triggers a second origin call",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::cache-aside-hit-then-miss probe: past-TTL miss branch (TC-084-miss-past-ttl)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-085.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.741Z",
+  "updatedAt": "2026-09-07T10:21:01.888Z",
+  "purpose": "Cover AC-5301-1 via anatomy test that walks the shipped facade and asserts every event record's shape",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5301-1"
+  ],
+  "id": "TS-085",
+  "usId": "US-5301",
+  "title": "T-1 lifecycle events carry the metadata-only whitelist",
+  "testCases": [
+    {
+      "id": "TC-085-ac-5301-1-metadata-only",
+      "acId": "AC-5301-1",
+      "description": "Cover AC-5301-1 via anatomy test: every event record on the sink carries only {event, key, size, ttl, timestamp}",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::lifecycle events carry only the metadata-only whitelist (TC-085-metadata-only)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-086.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.919Z",
+  "updatedAt": "2026-09-07T10:21:02.065Z",
+  "purpose": "Cover AC-5302-1 via event-secrecy probe with two-layer assertions and a mutation-run under SIMULATE_PII_LEAK",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5302-1"
+  ],
+  "id": "TS-086",
+  "usId": "US-5302",
+  "title": "T-1 event secrecy: no body bytes or PII reach the sink",
+  "testCases": [
+    {
+      "id": "TC-086-ac-5302-1-event-secrecy",
+      "acId": "AC-5302-1",
+      "description": "Cover AC-5302-1 via event-secrecy probe: no body bytes / PII / user id reach the sink even under a mutation-run",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::event-secrecy probe passes on PII fixture and fails under SIMULATE_PII_LEAK (TC-086-event-secrecy)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-087.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:33.096Z",
+  "updatedAt": "2026-09-07T10:21:02.240Z",
+  "purpose": "Cover AC-5401-1 via anatomy test asserting the probe records accountBoundSkipped without CI_HAS_CLOUDFLARE_ACCOUNT and passes in the CI-configured path",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5401-1"
+  ],
+  "id": "TS-087",
+  "usId": "US-5401",
+  "title": "T-1 real-account eventual-consistency smoke aggregates pass or skipped",
+  "testCases": [
+    {
+      "id": "TC-087-ac-5401-1-real-account-smoke",
+      "acId": "AC-5401-1",
+      "description": "Cover AC-5401-1 via anatomy test: without CI_HAS_CLOUDFLARE_ACCOUNT the probe records accountBoundSkipped true and aggregates pass",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::real-account eventual-consistency smoke records accountBoundSkipped without the env var (TC-087-real-account-smoke)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-090.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:11.255Z",
+  "updatedAt": "2026-09-07T12:29:45.408Z",
+  "purpose": "Cover AC-6001-1 via anatomy test: shipped scheduled handler ready() emits cronReady with metadata-only payload and does not dereference env.CACHE",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6001-1"
+  ],
+  "id": "TS-090",
+  "usId": "US-6001",
+  "title": "T-2 scheduled handler opens on boot and emits cronReady",
+  "testCases": [
+    {
+      "id": "TC-090-scheduled-ready",
+      "acId": "AC-6001-1",
+      "description": "Cover AC-6001-1 via anatomy test: scheduled.mjs ready() emits cronReady with metadata-only payload; scheduled.mjs source contains no env.CACHE dereference",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::scheduled handler opens on boot and emits cronReady with metadata-only payload (TC-090-scheduled-ready)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-091.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:11.435Z",
+  "updatedAt": "2026-09-07T12:29:45.586Z",
+  "purpose": "Cover AC-6002-1 via anatomy test: shipped wrangler-test-scheduled probe module drives wrangler dev --test-scheduled on the cf-platform fixture and asserts cronFired fires",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6002-1"
+  ],
+  "id": "TS-091",
+  "usId": "US-6002",
+  "title": "T-2 wrangler-test-scheduled probe passes on the fixture",
+  "testCases": [
+    {
+      "id": "TC-091-wrangler-test-scheduled",
+      "acId": "AC-6002-1",
+      "description": "Cover AC-6002-1 via anatomy test: wrangler-test-scheduled probe runs against the cf-platform fixture and returns aggregateVerdict pass or warn on a wrangler regression",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::wrangler-test-scheduled probe binds and drives cronFired on the cf-platform fixture (TC-091-wrangler-test-scheduled)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-092.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:11.616Z",
+  "updatedAt": "2026-09-07T12:29:45.765Z",
+  "purpose": "Cover AC-6003-1 via anatomy test: shipped real-account-scheduled-smoke probe returns accountBoundSkipped and exits 0 without CI_HAS_CLOUDFLARE_ACCOUNT",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6003-1"
+  ],
+  "id": "TS-092",
+  "usId": "US-6003",
+  "title": "T-2 real-account live-cron smoke probe pass-with-skip",
+  "testCases": [
+    {
+      "id": "TC-092-real-account-smoke-skip",
+      "acId": "AC-6003-1",
+      "description": "Cover AC-6003-1 via anatomy test: real-account-scheduled-smoke probe records accountBoundSkipped: true and aggregates to pass without CI_HAS_CLOUDFLARE_ACCOUNT",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::real-account live-cron smoke probe records accountBoundSkipped without env var (TC-092-real-account-smoke-skip)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-093.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T12:29:11.795Z",
+  "updatedAt": "2026-09-07T12:29:46.122Z",
+  "purpose": "Cover AC-6101-1 and AC-6101-2 via anatomy test: shipped dispatcher-routing probe drives two spy handlers on two expressions plus one unmatched expression and asserts the routed-only invocation and cronUnmatched event",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6101-1",
+    "AC-6101-2"
+  ],
+  "id": "TS-093",
+  "usId": "US-6101",
+  "title": "T-2 dispatcher-routing probe passes on two spy handlers",
+  "testCases": [
+    {
+      "id": "TC-093-dispatch-matched",
+      "acId": "AC-6101-1",
+      "description": "Cover AC-6101-1 via anatomy test: dispatcher-routing probe drives the matched route and only the matched spy is invoked with the bounded context",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::dispatcher-routing probe routes matched expression to the matched spy only (TC-093-dispatch-matched)"
+    },
+    {
+      "id": "TC-093-dispatch-unmatched",
+      "acId": "AC-6101-2",
+      "description": "Cover AC-6101-2 via anatomy test: dispatcher-routing probe drives an unmatched expression and asserts cronUnmatched with no spy invocation",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::dispatcher-routing probe fires cronUnmatched on unmatched expression with no spy invocation (TC-093-dispatch-unmatched)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-094.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T12:29:11.974Z",
+  "updatedAt": "2026-09-07T12:29:46.479Z",
+  "purpose": "Cover AC-6201-1 and AC-6201-2 via anatomy test: shipped skew-tolerance probe drives a fake-clock aligned fire (cronFired outcome onTime) and a fake-clock shifted fire (cronSkewed with delta)",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6201-1",
+    "AC-6201-2"
+  ],
+  "id": "TS-094",
+  "usId": "US-6201",
+  "title": "T-2 skew-tolerance probe passes on fake-clock aligned and shifted fires",
+  "testCases": [
+    {
+      "id": "TC-094-skew-on-time",
+      "acId": "AC-6201-1",
+      "description": "Cover AC-6201-1 via anatomy test: skew-tolerance probe with aligned fake clock drives cronFired outcome onTime and no cronSkewed",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::skew-tolerance probe fires cronFired outcome onTime when clock is inside the window (TC-094-skew-on-time)"
+    },
+    {
+      "id": "TC-094-skew-outside",
+      "acId": "AC-6201-2",
+      "description": "Cover AC-6201-2 via anatomy test: skew-tolerance probe with shifted fake clock drives cronSkewed with the observed delta and the routed handler runs",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::skew-tolerance probe fires cronSkewed with delta when clock is outside the window (TC-094-skew-outside)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-095.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T12:29:12.153Z",
+  "updatedAt": "2026-09-07T12:29:46.836Z",
+  "purpose": "Cover AC-6301-1 and AC-6301-2 via anatomy test: shipped skew-tolerance probe drives a spy handler past softBudgetMs=100 and asserts cronStalled fires without terminating the handler; the handler resolves and a final cronFired follows",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6301-1",
+    "AC-6301-2"
+  ],
+  "id": "TS-095",
+  "usId": "US-6301",
+  "title": "T-2 soft-budget verdict on skew-tolerance probe passes cronStalled without termination",
+  "testCases": [
+    {
+      "id": "TC-095-soft-budget-fires",
+      "acId": "AC-6301-1",
+      "description": "Cover AC-6301-1 via anatomy test: skew-tolerance probe drives a spy handler past softBudgetMs=100 and asserts exactly one cronStalled fires with the observed duration >= budget",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::soft-budget breach fires cronStalled once on the shipped dispatcher (TC-095-soft-budget-fires)"
+    },
+    {
+      "id": "TC-095-soft-budget-continues",
+      "acId": "AC-6301-2",
+      "description": "Cover AC-6301-2 via anatomy test: skew-tolerance probe drives a spy handler past softBudgetMs=100 and asserts the handler runs to completion; a final cronFired follows the cronStalled record",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::soft-budget breach does not terminate the handler and a final cronFired follows (TC-095-soft-budget-continues)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-096.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:12.332Z",
+  "updatedAt": "2026-09-07T12:29:47.015Z",
+  "purpose": "Cover AC-6302-1 via anatomy test: shipped event-secrecy probe returns aggregateVerdict pass with zero forbidden keys and zero PII substrings; mutation-run with SIMULATE_PII_LEAK=true returns aggregateVerdict fail with the leaked fields named",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6302-1"
+  ],
+  "id": "TS-096",
+  "usId": "US-6302",
+  "title": "T-2 event-secrecy probe passes on shipped and refuses on SIMULATE_PII_LEAK",
+  "testCases": [
+    {
+      "id": "TC-096-event-secrecy",
+      "acId": "AC-6302-1",
+      "description": "Cover AC-6302-1 via anatomy test: event-secrecy probe returns aggregateVerdict pass on the shipped code path with zero forbidden keys and zero PII substrings",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::event-secrecy probe returns pass with zero forbidden keys and zero PII hits on shipped path (TC-096-event-secrecy)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-100.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.218Z",
+  "updatedAt": "2026-09-07T14:14:37.069Z",
+  "purpose": "Cover AC-7001-1 via anatomy test: DO facade ready() emits namespaceReady with metadata-only payload",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7001-1"
+  ],
+  "id": "TS-100",
+  "usId": "US-7001",
+  "title": "T-3 DO facade opens on boot and emits namespaceReady",
+  "testCases": [
+    {
+      "id": "TC-100-do-facade-ready",
+      "acId": "AC-7001-1",
+      "description": "AC-7001-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::DO facade opens on boot and emits namespaceReady with metadata-only payload (TC-100-do-facade-ready)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-101.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.399Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7101-1 via anatomy test: two concurrent increments serialise in FIFO order and read returns sum",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7101-1"
+  ],
+  "id": "TS-101",
+  "usId": "US-7101",
+  "title": "T-3 single-cell concurrent increment",
+  "testCases": [
+    {
+      "id": "TC-101-single-cell-concurrent",
+      "acId": "AC-7101-1",
+      "description": "AC-7101-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::two concurrent increments serialise per instance and read returns the sum (TC-101-single-cell-concurrent)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-102.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.579Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7201-1 via anatomy test: storage round-trip on both sql and kv backends",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7201-1"
+  ],
+  "id": "TS-102",
+  "usId": "US-7201",
+  "title": "T-3 storage round-trip",
+  "testCases": [
+    {
+      "id": "TC-102-storage-round-trip",
+      "acId": "AC-7201-1",
+      "description": "AC-7201-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::storage round-trip covers put get delete list on both sql and kv backends (TC-102-storage-round-trip)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-103.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.758Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7301-1 via anatomy test: alarm fires once and drains storage",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7301-1"
+  ],
+  "id": "TS-103",
+  "usId": "US-7301",
+  "title": "T-3 alarm fires once",
+  "testCases": [
+    {
+      "id": "TC-103-alarm-fires-once",
+      "acId": "AC-7301-1",
+      "description": "AC-7301-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::alarm fires exactly once and drains storage (TC-103-alarm-fires-once)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-104.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.939Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7401-1 via anatomy test: hub broadcast fans out within window",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7401-1"
+  ],
+  "id": "TS-104",
+  "usId": "US-7401",
+  "title": "T-3 hub broadcast within window",
+  "testCases": [
+    {
+      "id": "TC-104-hub-broadcast",
+      "acId": "AC-7401-1",
+      "description": "AC-7401-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::hub broadcast fans out to all connected clients within the elicited window (TC-104-hub-broadcast)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-105.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.119Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7402-1 via anatomy test: hibernate-and-wake round-trip preserves storage",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7402-1"
+  ],
+  "id": "TS-105",
+  "usId": "US-7402",
+  "title": "T-3 hibernate-and-wake preserves storage",
+  "testCases": [
+    {
+      "id": "TC-105-hibernate-wake",
+      "acId": "AC-7402-1",
+      "description": "AC-7402-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::hibernate and wake round trip preserves storage and doWakeUp fires exactly once (TC-105-hibernate-wake)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-106.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.299Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7501-1 via anatomy test: event-secrecy on shipped path returns pass with zero forbidden keys",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7501-1"
+  ],
+  "id": "TS-106",
+  "usId": "US-7501",
+  "title": "T-3 event-secrecy shipped path",
+  "testCases": [
+    {
+      "id": "TC-106-event-secrecy",
+      "acId": "AC-7501-1",
+      "description": "AC-7501-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::event-secrecy result on the hub broadcast probe returns pass on the shipped path (TC-106-event-secrecy)"
+    }
+  ],
+  "status": "draft"
+}