rcf-lite 0.23.0 → 0.25.0

package/rcf/test-suites/ts-083.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.390Z",
+  "updatedAt": "2026-09-07T10:21:01.358Z",
+  "purpose": "Cover AC-5102-1 via list-with-prefix probe run and anatomy test cross-check",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5102-1"
+  ],
+  "id": "TS-083",
+  "usId": "US-5102",
+  "title": "T-1 list with prefix returns 10 keys with metadata shape",
+  "testCases": [
+    {
+      "id": "TC-083-ac-5102-1-list-prefix",
+      "acId": "AC-5102-1",
+      "description": "Cover AC-5102-1 via list-with-prefix probe: 10 keys under flags/ all returned with metadata shape",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::list-with-prefix probe passes on 10 keys under a shared prefix (TC-083-list-prefix)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-084.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T10:20:32.566Z",
+  "updatedAt": "2026-09-07T10:21:01.711Z",
+  "purpose": "Cover AC-5201-1 and AC-5201-2 via cache-aside-hit-then-miss probe run and anatomy test cross-check",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5201-1",
+    "AC-5201-2"
+  ],
+  "id": "TS-084",
+  "usId": "US-5201",
+  "title": "T-1 cache-aside hit-then-miss under a fake clock past TTL",
+  "testCases": [
+    {
+      "id": "TC-084-ac-5201-1-hit-within-ttl",
+      "acId": "AC-5201-1",
+      "description": "Cover AC-5201-1 via cache-aside-hit-then-miss probe: within-TTL second read is a cache hit and origin is called once",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::cache-aside-hit-then-miss probe: within-TTL cached branch (TC-084-hit-within-ttl)"
+    },
+    {
+      "id": "TC-084-ac-5201-2-miss-past-ttl",
+      "acId": "AC-5201-2",
+      "description": "Cover AC-5201-2 via cache-aside-hit-then-miss probe: past-TTL read miss triggers a second origin call",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::cache-aside-hit-then-miss probe: past-TTL miss branch (TC-084-miss-past-ttl)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-085.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.741Z",
+  "updatedAt": "2026-09-07T10:21:01.888Z",
+  "purpose": "Cover AC-5301-1 via anatomy test that walks the shipped facade and asserts every event record's shape",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5301-1"
+  ],
+  "id": "TS-085",
+  "usId": "US-5301",
+  "title": "T-1 lifecycle events carry the metadata-only whitelist",
+  "testCases": [
+    {
+      "id": "TC-085-ac-5301-1-metadata-only",
+      "acId": "AC-5301-1",
+      "description": "Cover AC-5301-1 via anatomy test: every event record on the sink carries only {event, key, size, ttl, timestamp}",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::lifecycle events carry only the metadata-only whitelist (TC-085-metadata-only)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-086.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:32.919Z",
+  "updatedAt": "2026-09-07T10:21:02.065Z",
+  "purpose": "Cover AC-5302-1 via event-secrecy probe with two-layer assertions and a mutation-run under SIMULATE_PII_LEAK",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5302-1"
+  ],
+  "id": "TS-086",
+  "usId": "US-5302",
+  "title": "T-1 event secrecy: no body bytes or PII reach the sink",
+  "testCases": [
+    {
+      "id": "TC-086-ac-5302-1-event-secrecy",
+      "acId": "AC-5302-1",
+      "description": "Cover AC-5302-1 via event-secrecy probe: no body bytes / PII / user id reach the sink even under a mutation-run",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::event-secrecy probe passes on PII fixture and fails under SIMULATE_PII_LEAK (TC-086-event-secrecy)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-087.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T10:20:33.096Z",
+  "updatedAt": "2026-09-07T10:21:02.240Z",
+  "purpose": "Cover AC-5401-1 via anatomy test asserting the probe records accountBoundSkipped without CI_HAS_CLOUDFLARE_ACCOUNT and passes in the CI-configured path",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-5401-1"
+  ],
+  "id": "TS-087",
+  "usId": "US-5401",
+  "title": "T-1 real-account eventual-consistency smoke aggregates pass or skipped",
+  "testCases": [
+    {
+      "id": "TC-087-ac-5401-1-real-account-smoke",
+      "acId": "AC-5401-1",
+      "description": "Cover AC-5401-1 via anatomy test: without CI_HAS_CLOUDFLARE_ACCOUNT the probe records accountBoundSkipped true and aggregates pass",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-kv-anatomy.test.js::real-account eventual-consistency smoke records accountBoundSkipped without the env var (TC-087-real-account-smoke)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-090.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:11.255Z",
+  "updatedAt": "2026-09-07T12:29:45.408Z",
+  "purpose": "Cover AC-6001-1 via anatomy test: shipped scheduled handler ready() emits cronReady with metadata-only payload and does not dereference env.CACHE",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6001-1"
+  ],
+  "id": "TS-090",
+  "usId": "US-6001",
+  "title": "T-2 scheduled handler opens on boot and emits cronReady",
+  "testCases": [
+    {
+      "id": "TC-090-scheduled-ready",
+      "acId": "AC-6001-1",
+      "description": "Cover AC-6001-1 via anatomy test: scheduled.mjs ready() emits cronReady with metadata-only payload; scheduled.mjs source contains no env.CACHE dereference",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::scheduled handler opens on boot and emits cronReady with metadata-only payload (TC-090-scheduled-ready)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-091.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:11.435Z",
+  "updatedAt": "2026-09-07T12:29:45.586Z",
+  "purpose": "Cover AC-6002-1 via anatomy test: shipped wrangler-test-scheduled probe module drives wrangler dev --test-scheduled on the cf-platform fixture and asserts cronFired fires",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6002-1"
+  ],
+  "id": "TS-091",
+  "usId": "US-6002",
+  "title": "T-2 wrangler-test-scheduled probe passes on the fixture",
+  "testCases": [
+    {
+      "id": "TC-091-wrangler-test-scheduled",
+      "acId": "AC-6002-1",
+      "description": "Cover AC-6002-1 via anatomy test: wrangler-test-scheduled probe runs against the cf-platform fixture and returns aggregateVerdict pass or warn on a wrangler regression",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::wrangler-test-scheduled probe binds and drives cronFired on the cf-platform fixture (TC-091-wrangler-test-scheduled)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-092.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:11.616Z",
+  "updatedAt": "2026-09-07T12:29:45.765Z",
+  "purpose": "Cover AC-6003-1 via anatomy test: shipped real-account-scheduled-smoke probe returns accountBoundSkipped and exits 0 without CI_HAS_CLOUDFLARE_ACCOUNT",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6003-1"
+  ],
+  "id": "TS-092",
+  "usId": "US-6003",
+  "title": "T-2 real-account live-cron smoke probe pass-with-skip",
+  "testCases": [
+    {
+      "id": "TC-092-real-account-smoke-skip",
+      "acId": "AC-6003-1",
+      "description": "Cover AC-6003-1 via anatomy test: real-account-scheduled-smoke probe records accountBoundSkipped: true and aggregates to pass without CI_HAS_CLOUDFLARE_ACCOUNT",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::real-account live-cron smoke probe records accountBoundSkipped without env var (TC-092-real-account-smoke-skip)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-093.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T12:29:11.795Z",
+  "updatedAt": "2026-09-07T12:29:46.122Z",
+  "purpose": "Cover AC-6101-1 and AC-6101-2 via anatomy test: shipped dispatcher-routing probe drives two spy handlers on two expressions plus one unmatched expression and asserts the routed-only invocation and cronUnmatched event",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6101-1",
+    "AC-6101-2"
+  ],
+  "id": "TS-093",
+  "usId": "US-6101",
+  "title": "T-2 dispatcher-routing probe passes on two spy handlers",
+  "testCases": [
+    {
+      "id": "TC-093-dispatch-matched",
+      "acId": "AC-6101-1",
+      "description": "Cover AC-6101-1 via anatomy test: dispatcher-routing probe drives the matched route and only the matched spy is invoked with the bounded context",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::dispatcher-routing probe routes matched expression to the matched spy only (TC-093-dispatch-matched)"
+    },
+    {
+      "id": "TC-093-dispatch-unmatched",
+      "acId": "AC-6101-2",
+      "description": "Cover AC-6101-2 via anatomy test: dispatcher-routing probe drives an unmatched expression and asserts cronUnmatched with no spy invocation",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::dispatcher-routing probe fires cronUnmatched on unmatched expression with no spy invocation (TC-093-dispatch-unmatched)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-094.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T12:29:11.974Z",
+  "updatedAt": "2026-09-07T12:29:46.479Z",
+  "purpose": "Cover AC-6201-1 and AC-6201-2 via anatomy test: shipped skew-tolerance probe drives a fake-clock aligned fire (cronFired outcome onTime) and a fake-clock shifted fire (cronSkewed with delta)",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6201-1",
+    "AC-6201-2"
+  ],
+  "id": "TS-094",
+  "usId": "US-6201",
+  "title": "T-2 skew-tolerance probe passes on fake-clock aligned and shifted fires",
+  "testCases": [
+    {
+      "id": "TC-094-skew-on-time",
+      "acId": "AC-6201-1",
+      "description": "Cover AC-6201-1 via anatomy test: skew-tolerance probe with aligned fake clock drives cronFired outcome onTime and no cronSkewed",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::skew-tolerance probe fires cronFired outcome onTime when clock is inside the window (TC-094-skew-on-time)"
+    },
+    {
+      "id": "TC-094-skew-outside",
+      "acId": "AC-6201-2",
+      "description": "Cover AC-6201-2 via anatomy test: skew-tolerance probe with shifted fake clock drives cronSkewed with the observed delta and the routed handler runs",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::skew-tolerance probe fires cronSkewed with delta when clock is outside the window (TC-094-skew-outside)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-095.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-07T12:29:12.153Z",
+  "updatedAt": "2026-09-07T12:29:46.836Z",
+  "purpose": "Cover AC-6301-1 and AC-6301-2 via anatomy test: shipped skew-tolerance probe drives a spy handler past softBudgetMs=100 and asserts cronStalled fires without terminating the handler; the handler resolves and a final cronFired follows",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6301-1",
+    "AC-6301-2"
+  ],
+  "id": "TS-095",
+  "usId": "US-6301",
+  "title": "T-2 soft-budget verdict on skew-tolerance probe passes cronStalled without termination",
+  "testCases": [
+    {
+      "id": "TC-095-soft-budget-fires",
+      "acId": "AC-6301-1",
+      "description": "Cover AC-6301-1 via anatomy test: skew-tolerance probe drives a spy handler past softBudgetMs=100 and asserts exactly one cronStalled fires with the observed duration >= budget",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::soft-budget breach fires cronStalled once on the shipped dispatcher (TC-095-soft-budget-fires)"
+    },
+    {
+      "id": "TC-095-soft-budget-continues",
+      "acId": "AC-6301-2",
+      "description": "Cover AC-6301-2 via anatomy test: skew-tolerance probe drives a spy handler past softBudgetMs=100 and asserts the handler runs to completion; a final cronFired follows the cronStalled record",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::soft-budget breach does not terminate the handler and a final cronFired follows (TC-095-soft-budget-continues)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-096.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T12:29:12.332Z",
+  "updatedAt": "2026-09-07T12:29:47.015Z",
+  "purpose": "Cover AC-6302-1 via anatomy test: shipped event-secrecy probe returns aggregateVerdict pass with zero forbidden keys and zero PII substrings; mutation-run with SIMULATE_PII_LEAK=true returns aggregateVerdict fail with the leaked fields named",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-6302-1"
+  ],
+  "id": "TS-096",
+  "usId": "US-6302",
+  "title": "T-2 event-secrecy probe passes on shipped and refuses on SIMULATE_PII_LEAK",
+  "testCases": [
+    {
+      "id": "TC-096-event-secrecy",
+      "acId": "AC-6302-1",
+      "description": "Cover AC-6302-1 via anatomy test: event-secrecy probe returns aggregateVerdict pass on the shipped code path with zero forbidden keys and zero PII substrings",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-cron-triggers-anatomy.test.js::event-secrecy probe returns pass with zero forbidden keys and zero PII hits on shipped path (TC-096-event-secrecy)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-100.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.218Z",
+  "updatedAt": "2026-09-07T14:14:37.069Z",
+  "purpose": "Cover AC-7001-1 via anatomy test: DO facade ready() emits namespaceReady with metadata-only payload",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7001-1"
+  ],
+  "id": "TS-100",
+  "usId": "US-7001",
+  "title": "T-3 DO facade opens on boot and emits namespaceReady",
+  "testCases": [
+    {
+      "id": "TC-100-do-facade-ready",
+      "acId": "AC-7001-1",
+      "description": "AC-7001-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::DO facade opens on boot and emits namespaceReady with metadata-only payload (TC-100-do-facade-ready)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-101.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.399Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7101-1 via anatomy test: two concurrent increments serialise in FIFO order and read returns sum",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7101-1"
+  ],
+  "id": "TS-101",
+  "usId": "US-7101",
+  "title": "T-3 single-cell concurrent increment",
+  "testCases": [
+    {
+      "id": "TC-101-single-cell-concurrent",
+      "acId": "AC-7101-1",
+      "description": "AC-7101-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::two concurrent increments serialise per instance and read returns the sum (TC-101-single-cell-concurrent)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-102.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.579Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7201-1 via anatomy test: storage round-trip on both sql and kv backends",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7201-1"
+  ],
+  "id": "TS-102",
+  "usId": "US-7201",
+  "title": "T-3 storage round-trip",
+  "testCases": [
+    {
+      "id": "TC-102-storage-round-trip",
+      "acId": "AC-7201-1",
+      "description": "AC-7201-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::storage round-trip covers put get delete list on both sql and kv backends (TC-102-storage-round-trip)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-103.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.758Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7301-1 via anatomy test: alarm fires once and drains storage",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7301-1"
+  ],
+  "id": "TS-103",
+  "usId": "US-7301",
+  "title": "T-3 alarm fires once",
+  "testCases": [
+    {
+      "id": "TC-103-alarm-fires-once",
+      "acId": "AC-7301-1",
+      "description": "AC-7301-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::alarm fires exactly once and drains storage (TC-103-alarm-fires-once)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-104.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:43.939Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7401-1 via anatomy test: hub broadcast fans out within window",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7401-1"
+  ],
+  "id": "TS-104",
+  "usId": "US-7401",
+  "title": "T-3 hub broadcast within window",
+  "testCases": [
+    {
+      "id": "TC-104-hub-broadcast",
+      "acId": "AC-7401-1",
+      "description": "AC-7401-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::hub broadcast fans out to all connected clients within the elicited window (TC-104-hub-broadcast)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-105.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.119Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7402-1 via anatomy test: hibernate-and-wake round-trip preserves storage",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7402-1"
+  ],
+  "id": "TS-105",
+  "usId": "US-7402",
+  "title": "T-3 hibernate-and-wake preserves storage",
+  "testCases": [
+    {
+      "id": "TC-105-hibernate-wake",
+      "acId": "AC-7402-1",
+      "description": "AC-7402-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::hibernate and wake round trip preserves storage and doWakeUp fires exactly once (TC-105-hibernate-wake)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-106.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.299Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7501-1 via anatomy test: event-secrecy on shipped path returns pass with zero forbidden keys",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7501-1"
+  ],
+  "id": "TS-106",
+  "usId": "US-7501",
+  "title": "T-3 event-secrecy shipped path",
+  "testCases": [
+    {
+      "id": "TC-106-event-secrecy",
+      "acId": "AC-7501-1",
+      "description": "AC-7501-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::event-secrecy result on the hub broadcast probe returns pass on the shipped path (TC-106-event-secrecy)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-107.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.480Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7601-1 via anatomy test: sole-reader-scan probe module exports the anchor and shape",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7601-1"
+  ],
+  "id": "TS-107",
+  "usId": "US-7601",
+  "title": "T-3 sole-reader-scan probe shape",
+  "testCases": [
+    {
+      "id": "TC-107-sole-reader-scan",
+      "acId": "AC-7601-1",
+      "description": "AC-7601-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::sole-reader-scan probe binds and surfaces no leaks on the clean fixture (TC-107-sole-reader-scan)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-108.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.660Z",
+  "updatedAt": "2026-09-07T14:14:37.070Z",
+  "purpose": "Cover AC-7701-1 via anatomy test: wrangler.toml carries DO bindings and migrations tag",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7701-1"
+  ],
+  "id": "TS-108",
+  "usId": "US-7701",
+  "title": "T-3 wrangler.toml DO bindings and migrations",
+  "testCases": [
+    {
+      "id": "TC-108-wrangler-do-bindings",
+      "acId": "AC-7701-1",
+      "description": "AC-7701-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::wrangler toml carries DO bindings and migrations tag additively over T-0 T-1 T-2 blocks (TC-108-wrangler-do-bindings)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-109.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T14:13:44.840Z",
+  "updatedAt": "2026-09-07T14:14:37.071Z",
+  "purpose": "Cover AC-7002-1 via anatomy test: real-account probe records accountBoundSkipped without env var",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-7002-1"
+  ],
+  "id": "TS-109",
+  "usId": "US-7002",
+  "title": "T-3 real-account probe skipped without env var",
+  "testCases": [
+    {
+      "id": "TC-109-real-account-skip",
+      "acId": "AC-7002-1",
+      "description": "AC-7002-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/platform-cloudflare-durable-objects-anatomy.test.js::real-account storage smoke probe records accountBoundSkipped without env var (TC-109-real-account-skip)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-110.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T16:52:18.024Z",
+  "updatedAt": "2026-09-07T16:53:10.788Z",
+  "purpose": "Cover AC-8001-1 via anatomy test: fixture JWT validates, principal reduces to {email,sub,groups} on request.auth",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-8001-1"
+  ],
+  "id": "TS-110",
+  "usId": "US-8001",
+  "title": "T-4 JWT validator: fixture-signed JWT validates and principal reduces onto request.auth",
+  "testCases": [
+    {
+      "id": "TC-110-jwt-validator-pass",
+      "acId": "AC-8001-1",
+      "description": "AC-8001-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/edge-cloudflare-access-anatomy.test.js::JWT validator validates a fixture-signed JWT and reduces principal onto request auth (TC-110-jwt-validator-pass)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-111.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T16:52:18.228Z",
+  "updatedAt": "2026-09-07T16:53:10.972Z",
+  "purpose": "Cover AC-8002-1 via anatomy test: missing, expired, mis-signed each 401 with allowed audit keys only",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-8002-1"
+  ],
+  "id": "TS-111",
+  "usId": "US-8002",
+  "title": "T-4 JWT validator: reject cases return 401 with metadata-only audit event",
+  "testCases": [
+    {
+      "id": "TC-111-jwt-validator-reject",
+      "acId": "AC-8002-1",
+      "description": "AC-8002-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/edge-cloudflare-access-anatomy.test.js::JWT validator rejects missing expired and mis-signed with metadata-only audit event (TC-111-jwt-validator-reject)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-112.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T16:52:18.413Z",
+  "updatedAt": "2026-09-07T16:53:11.156Z",
+  "purpose": "Cover AC-8003-1 via anatomy test: fixture applied source tree grepped, only validator hits the header string in live source",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-8003-1"
+  ],
+  "id": "TS-112",
+  "usId": "US-8003",
+  "title": "T-4 sole-reader guarantee: src/jwt-validator.mjs is the only reader of the Cf-Access-Jwt-Assertion header",
+  "testCases": [
+    {
+      "id": "TC-112-sole-reader-boundary",
+      "acId": "AC-8003-1",
+      "description": "AC-8003-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/edge-cloudflare-access-anatomy.test.js::jwt-validator mjs is the sole reader of the Cf-Access-Jwt-Assertion header in the fixture source tree (TC-112-sole-reader-boundary)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-113.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-07T16:52:18.597Z",
+  "updatedAt": "2026-09-07T16:53:11.340Z",
+  "purpose": "Cover AC-8101-1 via anatomy test: blueprint.json elicits block carries the expected ids and default values",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-8101-1"
+  ],
+  "id": "TS-113",
+  "usId": "US-8101",
+  "title": "T-4 Access application declaration: elicits access-application-host/id and access-policy-shape",
+  "testCases": [
+    {
+      "id": "TC-113-elicits-application-declaration",
+      "acId": "AC-8101-1",
+      "description": "AC-8101-1 anatomy proof",
+      "status": "pending",
+      "testPointer": "test/blueprint/edge-cloudflare-access-anatomy.test.js::blueprint json elicits Access application host or self-hosted id plus policy shape enum (TC-113-elicits-application-declaration)"
+    }
+  ],
+  "status": "draft"
+}