rcf-lite 0.26.0 → 0.28.0

package/rcf/tacs/tac-4110-referee-coverage-mode-selector.json

@@ -0,0 +1,21 @@
+{
+  "createdAt": "2026-09-16T22:28:54Z",
+  "updatedAt": "2026-09-16T22:28:54Z",
+  "tacId": "TAC-4110-referee-coverage-mode-selector",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "coverage --mode selector",
+  "purpose": "Add an explicit `--mode <strict|shallow-any>` option to `rcf audit coverage` in `packages/rcf-lite/src/cli/coverage.js`, resolve the strictness in one place before invoking `computeCoverage`, and keep the legacy `--strict` flag as a no-op alias for the new default. The plain command runs strict-by-default; `--mode shallow-any` is the explicit opt-out; `--mode shallow-any --strict` is a usage refusal (exit 2).",
+  "responsibilities": [
+    "Extend OPTION_SPEC with `mode: { type: 'string' }` and keep `strict: { type: 'boolean' }` for backward compatibility (AC-16401-1, AC-16401-2).",
+    "Validate `--mode` against the enum {strict, shallow-any}; reject unknowns with exit 2 (AC-16401-3).",
+    "Refuse `--mode shallow-any --strict` with exit 2 and a usage message that names both flags (AC-16401-3).",
+    "Resolve strictness once: `strict = flags.mode === 'shallow-any' ? false : true`. Pass the resolved value into `computeCoverage` and the strict-gate exit-4 branch, and into the strict-only verification-integrity matrix (AC-16401-1, AC-16401-2).",
+    "Update the HELP block, the module-level comment, and the human-readable error messages so the flag family and its default are self-documenting."
+  ],
+  "internalStructure": "One-shot resolution in main(). No changes to `computeCoverage` or the query layer. The legacy `--strict` flag routes through the same resolver as absence-of-flag, so existing CI invocations (including the repo's own dogfood step) are byte-forward-compatible.",
+  "interfaces": [],
+  "notes": "The repo's own CI dogfood step in `.github/workflows/ci.yml` is updated to the shipped default (plain `rcf audit coverage`) so the referee-guarantees page and the CI match. Existing blueprints and downstream projects that still spell `--strict` keep working."
+}

package/rcf/tacs/tac-4111-referee-finalise-per-ac-refusals.json

@@ -0,0 +1,21 @@
+{
+  "createdAt": "2026-09-16T22:38:04Z",
+  "updatedAt": "2026-09-16T22:38:04Z",
+  "tacId": "TAC-4111-referee-finalise-per-ac-refusals",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "finalise per-AC refusals for UI-BASELINE-UNMET / BROWSER-VERIFICATION-MISSING / SCOPE-MISMATCH",
+  "purpose": "Add three refusal branches to `packages/rcf-lite/src/cli/finalise.js` that read `passLoaded.report.perAcVerdicts[]` after the existing MOCK-ONLY and EVAL branches and refuse promotion (exit 4) when any per-AC verdict matches one of {UI-BASELINE-UNMET, BROWSER-VERIFICATION-MISSING, SCOPE-MISMATCH}. Each refusal leaves the FBS at its current status, prints a stderr message that names the AC(s), the count and the referee-guarantees claim ids, and appends the `summariseReport` block for context. The three ingest helpers land in `packages/rcf-lite/src/finalise/ingest.js` as `findUiBaselineUnmetAcs` / `reportHasUiBaselineUnmet` and `findBrowserVerificationMissingAcs` / `reportHasBrowserVerificationMissing`; `findScopeMismatchAcs` / `reportHasScopeMismatch` already exist and are reused as-is. All three helpers and the finalise-side booleans are re-exported through `src/finalise/index.js`.",
+  "responsibilities": [
+    "Add findUiBaselineUnmetAcs and reportHasUiBaselineUnmet to ingest.js (AC-16501-1, AC-16501-3).",
+    "Add findBrowserVerificationMissingAcs and reportHasBrowserVerificationMissing to ingest.js (AC-16501-2).",
+    "Add three finalise refusal branches after the EVAL refusal branch, in the order UI-BASELINE-UNMET, BROWSER-VERIFICATION-MISSING, SCOPE-MISMATCH; each names the referee-guarantees claim ids in the stderr message so a downstream reader can trace the refusal to the docs promise it enforces (AC-16501-1, AC-16501-2, AC-16501-3).",
+    "Re-export the new helpers through src/finalise/index.js.",
+    "The refusals do NOT expose a --ship-without-* opt-out: the docs page names no sister opt-out for these three (unlike MOCK-ONLY / EVAL). If a project needs to ship anyway, the fix is on the tree (widen the TC, land the browser check, fix the baseline)."
+  ],
+  "internalStructure": "Three straight-line branches modelled on the existing MOCK-ONLY / EVAL refusal shape. Each reads perAcVerdicts, filters by verdict, prints a message, appends summariseReport, and returns 4. Graceful on the pre-0.7.0 report shape (no perAcVerdicts): the helpers return an empty array and the branches fall through to the next check.",
+  "interfaces": [],
+  "notes": "Behavioural addition, not a change: existing verify reports that never emit these verdicts are unaffected. Existing WSD projects whose verify layer already emits UI-BASELINE-UNMET / BROWSER-VERIFICATION-MISSING / SCOPE-MISMATCH will see finalise refuse where it previously silently promoted; that is the referee-guarantees claim holding."
+}

package/rcf/tacs/tac-4112-referee-finalise-verified-invariant.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-16T22:38:04Z",
+  "updatedAt": "2026-09-16T22:38:04Z",
+  "tacId": "TAC-4112-referee-finalise-verified-invariant",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "finalise verified-invariant: writer refusal + merge-state precondition",
+  "purpose": "Gate the two paths that let the 0.27.0 chain say verified without an actual post-merge runtime check. (a) Refuse a define-update patch that writes FBS.executionStatus=verified unless the caller passes options.allowVerifiedOverride=true; the finalise CLI is the sole caller that sets that seam. The define-update CLI exposes the escape valve as --acknowledge-verified-override, matching the escalation clause on this train (existing WSD projects may still need a manual escape hatch for repair scenarios). (b) In `packages/rcf-lite/src/cli/finalise.js`, spawn a git rev-parse subprocess just before the executionStatus write and refuse promotion (exit 4) when the branch is not one of {main, master}. --allow-pre-merge is the deliberate pre-merge dry-run opt-out; the decision is logged on stdout so the operator sees it. Absent a git checkout the check degrades to a warn line rather than a hard fail.",
+  "responsibilities": [
+    "Add the FBS.executionStatus=verified refusal to updateDocument in `packages/rcf-lite/src/core/store/writer.js`, gated on options.allowVerifiedOverride (AC-16502-1, AC-16502-2).",
+    "Add --acknowledge-verified-override to the define-update CLI, threading options.allowVerifiedOverride through (AC-16502-1).",
+    "Wire the finalise CLI's own updateDocument call to pass options.allowVerifiedOverride:true (backward compatibility for the finalise happy path).",
+    "Add resolveGitBranch helper in finalise.js as a testable seam (deps.spawn) around child_process.spawn (AC-16502-3).",
+    "Add the branch-name refusal branch just before the executionStatus write; support --allow-pre-merge and degrade to a warn line when the branch cannot be resolved (AC-16502-3).",
+    "Update HELP for both CLIs so the flags and their intent are self-documenting."
+  ],
+  "internalStructure": "Writer refusal fires at the very top of the patch-apply path in updateDocument, before deep-merge and dot-path assignments run, so no partial state ever lands. The finalise-side branch check uses child_process.spawn (imported at module top) with the deps.spawn seam consumers can override in tests; the shape mirrors spawnVerify's own seam. The default-branch set is small and conventional ({main, master}) rather than reading the git remote's symbolic ref (which fails offline and adds a round-trip on every finalise).",
+  "interfaces": [],
+  "notes": "Behavioural addition, not a change on the finalise happy path (finalise passes the override flag through). Downstream projects that ran `rcf define update <fbs> --set executionStatus=verified` without --acknowledge-verified-override will see the write refused; the fix is either finalise or the new opt-out flag. Downstream projects whose finalise ran off a non-default branch will see the pre-merge refusal; --allow-pre-merge is the documented dry-run seam."
+}

package/rcf/test-suites/ts-050.json

@@ -27,7 +27,7 @@
       "acId": "AC-2101-2",
       "description": "Fresh init project applies the blueprint cleanly; walkTree produces zero errors; 5 REQs and 8 USs land under the application-notifications-in-app prefix",
       "status": "pending",
-      "testPointer": "test/blueprint/application-notifications-in-app-anatomy.test.js::application-notifications-in-app: applies cleanly on a fresh init project and adds 19 documents to the tree (TC-050-applies-clean)"
+      "testPointer": "test/blueprint/application-notifications-in-app-anatomy.test.js::application-notifications-in-app: applies cleanly on a fresh init project and adds 20 documents to the tree (TC-050-applies-clean)"
     },
     {
       "id": "TC-050-pack-checks-cross-check",

package/rcf/test-suites/ts-052.json

@@ -21,7 +21,7 @@
       "acId": "AC-2301-1",
       "description": "blueprint.json declares 23 contributions with requiresAppliedCapabilities and elicits[]",
       "status": "pending",
-      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::blueprint.json declares 28 contributions with requiresAppliedCapabilities and elicits[] (TC-052-blueprint-json-shape)"
+      "testPointer": "test/blueprint/application-admin-console-anatomy.test.js::blueprint.json declares 34 contributions with requiresAppliedCapabilities and elicits[] (TC-052-blueprint-json-shape)"
     },
     {
       "id": "TC-052-applies-clean-with-override",

package/rcf/test-suites/ts-053.json

@@ -7,14 +7,14 @@
       "acId": "AC-2401-1",
       "description": "blueprint.json declares slug, version 1.0.0, category application, 19 contributions in 5/8/3/3 groups; providesRoles absent; requiresAppliedCapabilities absent; suggestedCompanions logging and errorHandling",
       "status": "pending",
-      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::blueprint.json declares 19 contributions with no capabilities and no requiresAppliedCapabilities (TC-053-blueprint-json-shape)"
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::blueprint.json declares 21 contributions with no capabilities and no requiresAppliedCapabilities (TC-053-blueprint-json-shape)"
     },
     {
       "id": "TC-053-applies-clean",
       "acId": "AC-2401-2",
       "description": "Fresh init project applies application-empty-error-states cleanly and reports the tree clean",
       "status": "pending",
-      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::applies cleanly on a fresh init project and adds 19 documents to the tree (TC-053-applies-clean)"
+      "testPointer": "test/blueprint/application-empty-error-states-anatomy.test.js::applies cleanly on a fresh init project and adds 21 documents to the tree (TC-053-applies-clean)"
     },
     {
       "id": "TC-053-pack-checks-cross-check",

package/rcf/test-suites/ts-054.json

@@ -21,14 +21,14 @@
       "acId": "AC-2501-1",
       "description": "blueprint.json declares slug, version 1.0.0, category application, 18 contributions in 5/7/3/3 groups; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent; suggestedCompanions logging and errorHandling",
       "status": "pending",
-      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::blueprint.json declares 18 contributions with no capabilities and no requiresAppliedCapabilities (TC-054-blueprint-json-shape)"
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::blueprint.json declares 20 contributions with no capabilities and no requiresAppliedCapabilities (TC-054-blueprint-json-shape)"
     },
     {
       "id": "TC-054-applies-clean",
       "acId": "AC-2501-2",
       "description": "Fresh init project applies application-file-upload cleanly and reports the tree clean",
       "status": "pending",
-      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::applies cleanly on a fresh init project and adds 18 documents to the tree (TC-054-applies-clean)"
+      "testPointer": "test/blueprint/application-file-upload-anatomy.test.js::applies cleanly on a fresh init project and adds 20 documents to the tree (TC-054-applies-clean)"
     },
     {
       "id": "TC-054-pack-checks-cross-check",

package/rcf/test-suites/ts-055.json

@@ -21,14 +21,14 @@
       "acId": "AC-2601-1",
       "description": "blueprint.json declares slug, version 1.0.0, category application, 19 contributions in 5/8/3/3 groups; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent; suggestedCompanions logging and errorHandling",
       "status": "pending",
-      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::blueprint.json declares 19 contributions with no capabilities and no requiresAppliedCapabilities (TC-055-blueprint-json-shape)"
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::blueprint.json declares 20 contributions with no capabilities and no requiresAppliedCapabilities (TC-055-blueprint-json-shape)"
     },
     {
       "id": "TC-055-applies-clean",
       "acId": "AC-2601-2",
       "description": "Fresh init project applies application-forms-wizard cleanly and reports the tree clean",
       "status": "pending",
-      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::applies cleanly on a fresh init project and adds 19 documents to the tree (TC-055-applies-clean)"
+      "testPointer": "test/blueprint/application-forms-wizard-anatomy.test.js::applies cleanly on a fresh init project and adds 20 documents to the tree (TC-055-applies-clean)"
     },
     {
       "id": "TC-055-pack-checks-cross-check",

package/rcf/test-suites/ts-056.json

@@ -22,14 +22,14 @@
       "acId": "AC-2701-1",
       "description": "blueprint.json declares 24 contributions with requiresAppliedCapabilities and elicits[] (TC-056-blueprint-json-shape)",
       "status": "pending",
-      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::blueprint.json declares 24 contributions with requiresAppliedCapabilities and elicits[] (TC-056-blueprint-json-shape)"
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::blueprint.json declares 28 contributions with requiresAppliedCapabilities and elicits[] (TC-056-blueprint-json-shape)"
     },
     {
       "id": "TC-056-applies-clean",
       "acId": "AC-2701-2",
       "description": "applies cleanly on a magic-link project with 24 contributions and appliedCapabilities=[principalDirectory] (TC-056-applies-clean)",
       "status": "pending",
-      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::applies cleanly on a magic-link project with 24 contributions and appliedCapabilities=[principalDirectory] (TC-056-applies-clean)"
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::applies cleanly on a magic-link project with 28 contributions and appliedCapabilities=[principalDirectory] (TC-056-applies-clean)"
     },
     {
       "id": "TC-056-apply-refusal-and-override",
@@ -69,9 +69,9 @@
     {
       "id": "TC-056-shelf-doc-consistency",
       "acId": "AC-2701-7",
-      "description": "four amended auth blueprints declare the ratified capability sets and observability-logging declares sessionInventory (TC-056-shelf-doc-consistency)",
+      "description": "four amended auth blueprints declare the ratified capability sets and observability-logging drops sessionInventory (TC-056-shelf-doc-consistency)",
       "status": "pending",
-      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::four amended auth blueprints declare the ratified capability sets and observability-logging declares sessionInventory (TC-056-shelf-doc-consistency)"
+      "testPointer": "test/blueprint/application-account-settings-anatomy.test.js::four amended auth blueprints declare the ratified capability sets and observability-logging drops sessionInventory (TC-056-shelf-doc-consistency)"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-057.json

@@ -22,7 +22,7 @@
       "acId": "AC-2801-1",
       "description": "blueprint.json declares 17 contributions with no requiresAppliedCapabilities and elicits[] (TC-057-blueprint-json-shape)",
       "status": "pending",
-      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::blueprint.json declares 17 contributions with no requiresAppliedCapabilities and elicits[] (TC-057-blueprint-json-shape)"
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::blueprint.json declares 21 contributions with no requiresAppliedCapabilities and elicits[] (TC-057-blueprint-json-shape)"
     },
     {
       "id": "TC-057-adr-shape",
@@ -36,7 +36,7 @@
       "acId": "AC-2801-3",
       "description": "applies cleanly on a fresh project with 17 contributions and no requiresAppliedCapabilities refusal (TC-057-applies-clean)",
       "status": "pending",
-      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::applies cleanly on a fresh project with 17 contributions and no requiresAppliedCapabilities refusal (TC-057-applies-clean)"
+      "testPointer": "test/blueprint/application-onboarding-tour-anatomy.test.js::applies cleanly on a fresh project with 21 contributions and no requiresAppliedCapabilities refusal (TC-057-applies-clean)"
     },
     {
       "id": "TC-057-pack-checks-cross-check",

package/rcf/test-suites/ts-140.json

@@ -23,63 +23,63 @@
       "acId": "AC-11001-1",
       "description": "Cover AC-11001-1 via anatomy test: provisioner facade boot emits provisionerReady with metadata-only payload and only the facade reads the token",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11001-1 provisioner boot and sole reader (TC-140)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11001-1 provisioner boot and sole reader"
     },
     {
       "id": "TC-140-manifest-schema-shape-valid",
       "acId": "AC-11101-1",
       "description": "Cover AC-11101-1 via anatomy test: hetzner-server.schema.json validates the fixture manifests",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11101-1 manifest schema shape valid (TC-140-manifest-schema-shape-valid)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11101-1 manifest schema shape valid"
     },
     {
       "id": "TC-140-manifest-applies-mocked-provision",
       "acId": "AC-11102-1",
       "description": "Cover AC-11102-1 via anatomy test: mocked hcloud shell path returns id, primaryIpv4, location, serverType and hetznerServerProvisioned fires",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11102-1 manifest applies to mocked provision (TC-140-manifest-applies-mocked-provision)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11102-1 manifest applies to mocked provision"
     },
     {
       "id": "TC-140-cloud-init-render-baseline-present",
       "acId": "AC-11201-1",
       "description": "Cover AC-11201-1 via anatomy test: rendered cloud-init YAML carries the six baseline blocks",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11201-1 cloud-init render baseline present (TC-140-cloud-init-render-baseline-present)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11201-1 cloud-init render baseline present"
     },
     {
       "id": "TC-140-cloud-init-hardened-account-bound-probe",
       "acId": "AC-11202-1",
       "description": "Cover AC-11202-1 via anatomy test: probe module manifest declares accountBound true and the fixture readme documents the ssh baseline checks",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11202-1 cloud-init hardened account-bound probe declared (TC-140-cloud-init-hardened-account-bound-probe)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11202-1 cloud-init hardened account-bound probe declared"
     },
     {
       "id": "TC-140-firewall-shape-valid-and-refuses-open-ssh",
       "acId": "AC-11301-1",
       "description": "Cover AC-11301-1 via anatomy test: schema accepts a rule set with 22 restricted plus 80/443 open and refuses an open-ssh mutation",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11301-1 firewall shape valid and refuses open ssh (TC-140-firewall-shape-valid-and-refuses-open-ssh)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11301-1 firewall shape valid and refuses open ssh"
     },
     {
       "id": "TC-140-snapshot-cadence-enum",
       "acId": "AC-11401-1",
       "description": "Cover AC-11401-1 via anatomy test: snapshotCadence enum is weekly, daily, off",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11401-1 snapshot cadence enum (TC-140-snapshot-cadence-enum)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11401-1 snapshot cadence enum"
     },
     {
       "id": "TC-140-snapshot-on-demand-account-bound-probe",
       "acId": "AC-11402-1",
       "description": "Cover AC-11402-1 via anatomy test: snapshot on-demand probe declares accountBound true and readme names the hcloud image list check",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11402-1 snapshot on demand account-bound probe declared (TC-140-snapshot-on-demand-account-bound-probe)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11402-1 snapshot on demand account-bound probe declared"
     },
     {
       "id": "TC-140-lifecycle-events-metadata-only",
       "acId": "AC-11501-1",
       "description": "Cover AC-11501-1 via anatomy test: hcloud dry-run mock drives four lifecycle events, payloads carry only metadata fields, event-secrecy mutation FAILS",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11501-1 lifecycle events metadata only (TC-140-lifecycle-events-metadata-only)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11501-1 lifecycle events metadata only"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-150.json

@@ -23,63 +23,63 @@
       "acId": "AC-12001-1",
       "description": "Cover AC-12001-1 via anatomy test: fixture compose.yaml declares service-per-container, named networks and volumes, and a .env for non-secret config",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12001-1 compose layout shape valid (TC-150-compose-layout-shape-valid)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12001-1 compose layout shape valid"
     },
     {
       "id": "TC-150-secrets-file-mount-shape",
       "acId": "AC-12101-1",
       "description": "Cover AC-12101-1 via anatomy test: compose.yaml declares secrets under top-level secrets with a file source and mounts them into the web service; the mounted file is 0o400",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12101-1 secrets file mount shape (TC-150-secrets-file-mount-shape)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12101-1 secrets file mount shape"
     },
     {
       "id": "TC-150-secrets-scan-fails-on-plaintext",
       "acId": "AC-12102-1",
       "description": "Cover AC-12102-1 via anatomy test: secrets-as-files-scan probe passes on the canonical fixture and fails under SIMULATE_PLAINTEXT_SECRET naming the literal",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12102-1 secrets-as-files scan fails on plaintext (TC-150-secrets-scan-fails-on-plaintext)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12102-1 secrets-as-files scan fails on plaintext"
     },
     {
       "id": "TC-150-compose-config-lint-refuses-missing-healthcheck",
       "acId": "AC-12201-1",
       "description": "Cover AC-12201-1 via anatomy test: compose-config-lint probe passes on canonical fixture and fails under SIMULATE_MISSING_HEALTHCHECK naming the service",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12201-1 compose-config-lint refuses missing healthcheck (TC-150-compose-config-lint-refuses-missing-healthcheck)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12201-1 compose-config-lint refuses missing healthcheck"
     },
     {
       "id": "TC-150-real-account-minimal-stack-up-declared-and-skipped-shape",
       "acId": "AC-12202-1",
       "description": "Cover AC-12202-1 via anatomy test: real-account-minimal-stack-up probe declares accountBound true and records accountBoundSkipped when the env var is unset",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12202-1 real-account-minimal-stack-up declared and skipped shape (TC-150-real-account-minimal-stack-up-declared-and-skipped-shape)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12202-1 real-account-minimal-stack-up declared and skipped shape"
     },
     {
       "id": "TC-150-restart-discipline-lint-refuses-unclassified",
       "acId": "AC-12301-1",
       "description": "Cover AC-12301-1 via anatomy test: compose-config-lint enforces restart policy classification and fails under SIMULATE_UNCLASSIFIED_RESTART naming the service",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12301-1 restart discipline lint refuses unclassified (TC-150-restart-discipline-lint-refuses-unclassified)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12301-1 restart discipline lint refuses unclassified"
     },
     {
       "id": "TC-150-caddyfile-validate-refuses-invalid-directive",
       "acId": "AC-12401-1",
       "description": "Cover AC-12401-1 via anatomy test: caddyfile-validate probe passes on canonical Caddyfile and fails under SIMULATE_INVALID_CADDYFILE naming the line",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12401-1 caddyfile-validate refuses invalid directive (TC-150-caddyfile-validate-refuses-invalid-directive)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12401-1 caddyfile-validate refuses invalid directive"
     },
     {
       "id": "TC-150-real-account-reload-burst-declared-and-skipped-shape",
       "acId": "AC-12402-1",
       "description": "Cover AC-12402-1 via anatomy test: real-account-reload-burst probe declares accountBound true and records accountBoundSkipped when the env var is unset",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12402-1 real-account-reload-burst declared and skipped shape (TC-150-real-account-reload-burst-declared-and-skipped-shape)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12402-1 real-account-reload-burst declared and skipped shape"
     },
     {
       "id": "TC-150-log-driver-classification",
       "acId": "AC-12501-1",
       "description": "Cover AC-12501-1 via anatomy test: compose-config-lint asserts every service declares a logging driver and fails under SIMULATE_UNCLASSIFIED_LOG_DRIVER naming the service",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12501-1 log driver classification (TC-150-log-driver-classification)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12501-1 log driver classification"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-185.json

@@ -0,0 +1,54 @@
+{
+  "createdAt": "2026-09-16T14:25:30Z",
+  "updatedAt": "2026-09-16T14:25:30Z",
+  "purpose": "Cover AC-15501-1..5 (rcf feedback add): happy-path write and env stamp; gitignore refusal and --force bypass; blueprint destination-cannot-be-resolved exits 3 (design 3.1); enum and size validation on class, severity, title and body; blueprint-specific env stamps (blueprintVersion, libraryPrefix, libraryRef, resolvedSha/tarballSha256) sourced from the manifest record.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15501-1",
+    "AC-15501-2",
+    "AC-15501-3",
+    "AC-15501-4",
+    "AC-15501-5"
+  ],
+  "id": "TS-185",
+  "usId": "US-15501",
+  "title": "Slice 1 (FBS-180): rcf feedback add records one JSONL entry, honours the gitignore refusal, marks blueprint-unresolved with exit 3, validates enums and caps, and stamps blueprint-specific env fields",
+  "testCases": [
+    {
+      "id": "TC-185-add-writes-one-jsonl-line-and-stamps-env",
+      "acId": "AC-15501-1",
+      "description": "Cover AC-15501-1 via the CLI test: a fully-flagged add writes exactly one JSONL line, prints \"recorded <id> (<n> pending). Nothing sent.\", exit 0, and the entry environment carries harness, rcfLiteVersion, nodeVersion and platform.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-1: rcf feedback add writes one JSONL line and stamps env"
+    },
+    {
+      "id": "TC-185-add-refuses-without-gitignore",
+      "acId": "AC-15501-2",
+      "description": "Cover AC-15501-2 via the CLI test: add on a project whose .gitignore does not cover .rcf/feedback/ refuses with exit 2 and points at rcf doctor --fix; --force bypasses the refusal.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-2: add refuses when .gitignore does not cover .rcf/feedback/"
+    },
+    {
+      "id": "TC-185-add-blueprint-unresolved-exits-3",
+      "acId": "AC-15501-3",
+      "description": "Cover AC-15501-3 via the CLI test: --kind blueprint against a target absent from rcf/manifest.json:blueprints[] still records the entry, prints the recorded line on stdout, prints \"destination unresolved: <target>\" on stderr, exit 3.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-3: blueprint target that does not resolve exits 3 and records unresolved"
+    },
+    {
+      "id": "TC-185-add-rejects-bad-class",
+      "acId": "AC-15501-4",
+      "description": "Cover AC-15501-4 (enum arm) via the CLI test: --class not-a-real-class exits 2 and stderr names the enum.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-4: invalid --class exits 2 naming the enum"
+    },
+    {
+      "id": "TC-185-add-blueprint-stamps",
+      "acId": "AC-15501-5",
+      "description": "Cover AC-15501-5 via the CLI test: given a manifest with a git-pinned library blueprint, a shelf blueprint and a core entry, the recorded entries stamp blueprintVersion/libraryPrefix/libraryRef/resolvedSha appropriately; the core entry carries none of these fields.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-5: blueprint entries stamp version, libraryPrefix, libraryRef and resolvedSha from the manifest record"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-186.json

@@ -0,0 +1,58 @@
+{
+  "createdAt": "2026-09-16T14:25:30Z",
+  "updatedAt": "2026-09-16T14:25:30Z",
+  "purpose": "Cover AC-15502-1 (rcf feedback list default vs --all/--json) and AC-15502-2 (rcf feedback status counts, opt-out state and gh availability summary) with no file mutation and no network calls.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15502-1",
+    "AC-15502-2"
+  ],
+  "id": "TS-186",
+  "usId": "US-15502",
+  "title": "Slice 1 (FBS-180): rcf feedback list and rcf feedback status expose the pending set, every state under --all/--json, and the counts / opt-out / gh summary",
+  "testCases": [
+    {
+      "id": "TC-186-list-default-hides-non-pending",
+      "acId": "AC-15502-1",
+      "description": "Cover AC-15502-1 (default and --all rows) via the CLI test: default output shows only pending; --all shows every state with a [status] prefix column.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-1: rcf feedback list default shows only pending entries, --all includes every state"
+    },
+    {
+      "id": "TC-186-list-json-and-no-mutation",
+      "acId": "AC-15502-1",
+      "description": "Cover AC-15502-1 (--json shape and no file mutation) via the CLI test: --json emits an array whose length matches total in --all; sha-256 of entries.jsonl is invariant across list runs.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-1: list --json is machine-readable and length matches total in --all mode"
+    },
+    {
+      "id": "TC-186-status-json-shape",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (--json shape) via the CLI test: status --json returns counts by status, optOut boolean, optOutSource, and the gh / destinations summary keys.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: rcf feedback status --json emits counts, optOut and gh summary"
+    },
+    {
+      "id": "TC-186-status-optout-env-ask",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (env RCF_FEEDBACK_ASK=0 arm) via the CLI test: the env variable flips optOut to true and names its source.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: RCF_FEEDBACK_ASK=0 flips optOut in status"
+    },
+    {
+      "id": "TC-186-status-optout-env-disable",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (env RCF_FEEDBACK_DISABLE=1 arm) via the CLI test: the env variable flips optOut to true and names its source.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: RCF_FEEDBACK_DISABLE=1 flips optOut and names its source"
+    },
+    {
+      "id": "TC-186-status-text-summary",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (text output) via the CLI test: the text status summarises counts on one line and opt-out state on another line, and never touches the network (store read only).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: text status summarises counts on one line and opt-out state on another"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-187.json

@@ -0,0 +1,44 @@
+{
+  "createdAt": "2026-09-16T14:25:30Z",
+  "updatedAt": "2026-09-16T14:25:30Z",
+  "purpose": "Cover AC-15503-1 (rcf feedback defer appends a deferredUntilSession state line per pending entry stamped with the current sessionId) and AC-15503-2 (rcf feedback discard marks only named entries or every pending under --all, hides them from list default, and refuses on an unknown id).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15503-1",
+    "AC-15503-2"
+  ],
+  "id": "TS-187",
+  "usId": "US-15503",
+  "title": "Slice 1 (FBS-180): rcf feedback defer and rcf feedback discard honour the fold-by-id state transitions and refuse on unknown ids",
+  "testCases": [
+    {
+      "id": "TC-187-defer-appends-state-lines",
+      "acId": "AC-15503-1",
+      "description": "Cover AC-15503-1 via the CLI test: defer appends one deferredUntilSession state line per pending entry, stamped with the current sessionId; the folded read reports both entries at status deferredUntilSession; no network call.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-1: defer appends a deferredUntilSession state line per pending entry"
+    },
+    {
+      "id": "TC-187-discard-by-id-hides-from-default",
+      "acId": "AC-15503-2",
+      "description": "Cover AC-15503-2 (named ids) via the CLI test: discard <id1> <id2> marks those entries discarded, list default hides them, --all shows their status.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-2: discard <id> marks only named entries and hides them from list default"
+    },
+    {
+      "id": "TC-187-discard-all-marks-every-pending",
+      "acId": "AC-15503-2",
+      "description": "Cover AC-15503-2 (--all arm) via the CLI test: discard --all marks every pending entry discarded and list default is empty.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-2: discard --all marks every pending entry discarded"
+    },
+    {
+      "id": "TC-187-discard-refuses-unknown-id",
+      "acId": "AC-15503-2",
+      "description": "Cover AC-15503-2 (unknown-id arm) via the CLI test: discard on an unknown id exits 2, no state line is written to the log.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-2: discard with an unknown id exits 2 and writes nothing"
+    }
+  ],
+  "status": "draft"
+}