rcf-lite 0.27.0 → 0.28.0

package/rcf/code-nodes/cn-607.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-607",
+  "path": "src/blueprint/library-loader.js",
+  "implementsAcIds": [
+    "AC-15801-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T16:20:01Z"
+}

package/rcf/code-nodes/cn-608.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-608",
+  "path": "src/cli/blueprint-library.js",
+  "implementsAcIds": [
+    "AC-15801-1"
+  ],
+  "dependencies": [
+    "CN-607"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T16:20:01Z"
+}

package/rcf/code-nodes/cn-609.json

@@ -0,0 +1,17 @@
+{
+  "cnId": "CN-609",
+  "path": "src/cli/doctor.js",
+  "implementsAcIds": [
+    "AC-15801-3",
+    "AC-16104-3"
+  ],
+  "dependencies": [
+    "CN-605",
+    "CN-606",
+    "CN-624"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T19:20:00Z"
+}

package/rcf/code-nodes/cn-620.json

@@ -0,0 +1,18 @@
+{
+  "cnId": "CN-620",
+  "path": "src/feedback/gh.js",
+  "implementsAcIds": [
+    "AC-15701-2",
+    "AC-15701-3",
+    "AC-15901-1",
+    "AC-15901-2",
+    "AC-15902-1",
+    "AC-16001-1",
+    "AC-16001-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T17:23:38Z",
+  "updatedAt": "2026-09-16T17:23:38Z"
+}

package/rcf/code-nodes/cn-621.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-621",
+  "path": "src/feedback/labels.js",
+  "implementsAcIds": [
+    "AC-15902-1",
+    "AC-15902-3",
+    "AC-15902-4"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T17:23:38Z",
+  "updatedAt": "2026-09-16T17:23:38Z"
+}

package/rcf/code-nodes/cn-622.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-622",
+  "path": "scripts/bootstrap-feedback-labels.mjs",
+  "implementsAcIds": [
+    "AC-15902-2"
+  ],
+  "dependencies": [
+    "CN-620",
+    "CN-621"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T17:23:38Z",
+  "updatedAt": "2026-09-16T17:23:38Z"
+}

package/rcf/code-nodes/cn-623.json

@@ -0,0 +1,16 @@
+{
+  "cnId": "CN-623",
+  "path": "src/feedback/hook.js",
+  "implementsAcIds": [
+    "AC-16101-1",
+    "AC-16101-2",
+    "AC-16101-3",
+    "AC-16103-1",
+    "AC-16103-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T19:20:00Z",
+  "updatedAt": "2026-09-16T19:20:00Z"
+}

package/rcf/code-nodes/cn-624.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-624",
+  "path": "src/setup/feedback-hooks.js",
+  "implementsAcIds": [
+    "AC-16104-1",
+    "AC-16104-2",
+    "AC-16104-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T19:20:00Z",
+  "updatedAt": "2026-09-16T19:20:00Z"
+}

package/rcf/code-nodes/cn-625.json

@@ -0,0 +1,15 @@
+{
+  "cnId": "CN-625",
+  "path": "src/cli/init.js",
+  "implementsAcIds": [
+    "AC-16104-1",
+    "AC-16104-2"
+  ],
+  "dependencies": [
+    "CN-624"
+  ],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T19:20:00Z",
+  "updatedAt": "2026-09-16T19:20:00Z"
+}

package/rcf/code-nodes/cn-626.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-626",
+  "path": "guidance/managed/agent-instructions-block.md",
+  "implementsAcIds": [
+    "AC-16201-1",
+    "AC-16201-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T21:17:00Z",
+  "updatedAt": "2026-09-16T21:17:00Z"
+}

package/rcf/code-nodes/cn-627.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-627",
+  "path": "src/core/store/walker.js#collectBrokenReferences",
+  "implementsAcIds": [
+    "AC-16301-1",
+    "AC-16301-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z"
+}

package/rcf/code-nodes/cn-628.json

@@ -0,0 +1,14 @@
+{
+  "cnId": "CN-628",
+  "path": "src/cli/coverage.js#main",
+  "implementsAcIds": [
+    "AC-16401-1",
+    "AC-16401-2",
+    "AC-16401-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z"
+}

package/rcf/code-nodes/cn-629.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-629",
+  "path": "src/finalise/ingest.js#findUiBaselineUnmetAcs",
+  "implementsAcIds": [
+    "AC-16501-1"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z"
+}

package/rcf/code-nodes/cn-630.json

@@ -0,0 +1,12 @@
+{
+  "cnId": "CN-630",
+  "path": "src/finalise/ingest.js#findBrowserVerificationMissingAcs",
+  "implementsAcIds": [
+    "AC-16501-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z"
+}

package/rcf/code-nodes/cn-631.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-631",
+  "path": "src/cli/finalise.js#main",
+  "implementsAcIds": [
+    "AC-16501-3",
+    "AC-16502-3"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z"
+}

package/rcf/code-nodes/cn-632.json

@@ -0,0 +1,13 @@
+{
+  "cnId": "CN-632",
+  "path": "src/core/store/writer.js#updateDocument",
+  "implementsAcIds": [
+    "AC-16502-1",
+    "AC-16502-2"
+  ],
+  "dependencies": [],
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z"
+}

package/rcf/fbs/fbs-180.json

@@ -0,0 +1,45 @@
+{
+  "fbsId": "FBS-180",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 180,
+  "executionStatus": "notStarted",
+  "title": "Slice 1: capture and store",
+  "summary": "Deliver REQ-155 (Local feedback capture): the rcf feedback CLI skeleton, the append-only JSONL store, the gitignore entry with pre-upgrade refusal, list/status/defer/discard sub-verbs, HELP parity, and docs/feedback.md first cut.",
+  "approach": "Add feedbackMain to bin/rcf.js CORE. Write src/cli/feedback.js dispatcher and src/feedback/store.js (append-only JSONL, per-session state ledger, gitignore contribution). Wire feedbackGitignoreEntry into src/setup/managed-gitignore.js. Add doctor check for the gitignore. Publish docs/feedback.md and index it in docs/README.md.",
+  "acIds": [
+    "AC-15501-1",
+    "AC-15501-2",
+    "AC-15501-3",
+    "AC-15501-4",
+    "AC-15502-1",
+    "AC-15502-2",
+    "AC-15503-1",
+    "AC-15503-2",
+    "AC-15501-5"
+  ],
+  "dependsOnFbsIds": [],
+  "contextRequirements": {
+    "tacIds": [
+      "TAC-4101-feedback-cli",
+      "TAC-4102-feedback-store"
+    ],
+    "adrIds": [
+      "ADR-4101-feedback-store-gitignored"
+    ]
+  },
+  "deliverables": [
+    "rcf feedback core verb registered and dispatched",
+    "Append-only JSONL store with fold-by-id read path",
+    "Managed gitignore entry with pre-upgrade refusal on rcf feedback add",
+    "add / list / status / defer / discard sub-verbs with exit-code contracts",
+    "docs/feedback.md first cut"
+  ],
+  "riskLevel": "low",
+  "domain": "feedback",
+  "estimatedSize": "medium",
+  "estimatedHours": 12,
+  "notes": "Foundation slice; nothing depends on anything not in the tree before this lands. Design section 9 decision: body cap 8 KB, no attachments, no screenshots (rejected: attaching rcf define validate --json output and artefact files, marginal value for a larger redaction surface in v1).",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T14:14:36Z"
+}

package/rcf/fbs/fbs-181.json

@@ -0,0 +1,45 @@
+{
+  "fbsId": "FBS-181",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 181,
+  "executionStatus": "complete",
+  "title": "Slice 2: redaction, fingerprint, preview",
+  "summary": "Deliver REQ-156 (Nothing leaves unredacted) and REQ-157 (One finding, one issue): rule-based redaction with disclosure ledger, deterministic 12-hex fingerprint, and the preview sub-verb the operator sees before consenting.",
+  "approach": "Write src/feedback/redact.js, src/feedback/redact-allowlist.json, src/feedback/fingerprint.js and src/feedback/render.js. Add preview to src/cli/feedback.js. Golden-file tests for the render templates; fixture corpus for redact.",
+  "acIds": [
+    "AC-15601-1",
+    "AC-15601-2",
+    "AC-15601-3",
+    "AC-15601-4",
+    "AC-15701-1"
+  ],
+  "dependsOnFbsIds": [
+    "FBS-180"
+  ],
+  "contextRequirements": {
+    "tacIds": [
+      "TAC-4103-feedback-redact",
+      "TAC-4104-feedback-fingerprint",
+      "TAC-4105-feedback-render"
+    ],
+    "adrIds": [
+      "ADR-4102-fingerprint-and-labels",
+      "ADR-4103-redaction-rule-based"
+    ]
+  },
+  "deliverables": [
+    "redact.js pure module with the eight rules and the ledger",
+    "redact-allowlist.json vendor host set",
+    "fingerprint.js pure module and normaliseTitle fallback",
+    "render.js title / body / +1-comment / bundle templates with fingerprint twin",
+    "preview sub-verb with JSON output shape"
+  ],
+  "riskLevel": "medium",
+  "domain": "feedback",
+  "estimatedSize": "medium",
+  "estimatedHours": 16,
+  "notes": "Fingerprint decision confined to this slice via ADR-4102; the labels half of that ADR pays off in slice 4.",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T13:45:23.000Z"
+}

package/rcf/fbs/fbs-182.json

@@ -0,0 +1,42 @@
+{
+  "fbsId": "FBS-182",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 182,
+  "executionStatus": "complete",
+  "title": "Slice 3: destination resolution",
+  "summary": "Deliver REQ-158 (Reports reach the owning repo): library.json:issues field, registry snapshot, destination resolver, review-on-add line, doctor feedback-destinations warn check, docs/library-authoring.md field-table row.",
+  "approach": "Extend library.json schema (issues object) and rcf/blueprint-libraries.json:entries[] snapshot in src/blueprint/library-registry.js. Write src/feedback/destination.js with the walk-and-derive logic. Add the doctor warn-only check. Update docs/library-authoring.md.",
+  "acIds": [
+    "AC-15801-1",
+    "AC-15801-2",
+    "AC-15801-3",
+    "AC-15802-1",
+    "AC-15802-2"
+  ],
+  "dependsOnFbsIds": [
+    "FBS-181"
+  ],
+  "contextRequirements": {
+    "tacIds": [
+      "TAC-4106-feedback-destination"
+    ],
+    "adrIds": [
+      "ADR-4104-destination-on-library"
+    ]
+  },
+  "deliverables": [
+    "library.json issues field (schema + docs)",
+    "rcf library add snapshot into blueprint-libraries.json",
+    "destination.js resolver with derivation fallback and CORE_REPO constant",
+    "doctor feedback-destinations warn check",
+    "docs/library-authoring.md field-table row"
+  ],
+  "riskLevel": "medium",
+  "domain": "feedback",
+  "estimatedSize": "small",
+  "estimatedHours": 8,
+  "notes": "Extends the library manifest surface; downstream library owners can adopt at their own cadence.",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T16:20:01Z"
+}

package/rcf/fbs/fbs-183.json

@@ -0,0 +1,50 @@
+{
+  "fbsId": "FBS-183",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 183,
+  "executionStatus": "inProgress",
+  "title": "Slice 4: submit, dedupe, fallback",
+  "summary": "Deliver REQ-159 (Consent-gated submission under reporter identity) and REQ-160 (No path leaves the operator stuck): gh module seam, submit sub-verb with dedupe search, label pre-check, outbox bundle fallback, and the scripts/bootstrap-feedback-labels.mjs maintainer aid.",
+  "approach": "Write src/feedback/gh.js with the RCF_FEEDBACK_GH_MODULE seam. Implement submit in src/cli/feedback.js: preflight -> dedupe search -> create-or-comment -> label pre-check -> bundle fallback. Write the bootstrap script. Extend rcf feedback status with gh availability. Tests use a fake gh module through the seam.",
+  "acIds": [
+    "AC-15701-2",
+    "AC-15701-3",
+    "AC-15901-1",
+    "AC-15901-2",
+    "AC-15902-1",
+    "AC-15902-2",
+    "AC-15902-3",
+    "AC-16001-1",
+    "AC-16001-2",
+    "AC-16001-3",
+    "AC-15902-4",
+    "AC-16001-4"
+  ],
+  "dependsOnFbsIds": [
+    "FBS-182"
+  ],
+  "contextRequirements": {
+    "tacIds": [
+      "TAC-4107-feedback-gh"
+    ],
+    "adrIds": [
+      "ADR-4105-gh-ambient-auth",
+      "ADR-4106-bundled-entries-terminal"
+    ]
+  },
+  "deliverables": [
+    "gh.js single-shell-out seam with fake-module override",
+    "submit sub-verb with preflight, dedupe, create-or-comment and bundle fallback",
+    "Label pre-check with droppedLabels ledger",
+    "scripts/bootstrap-feedback-labels.mjs (six-label idempotent bootstrap)",
+    "gh availability surfaced by rcf feedback status"
+  ],
+  "riskLevel": "medium",
+  "domain": "feedback",
+  "estimatedSize": "large",
+  "estimatedHours": 16,
+  "notes": "Largest slice; carries the operator-visible submit flow and every fallback branch.",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T17:25:50Z"
+}

package/rcf/fbs/fbs-184.json

@@ -0,0 +1,49 @@
+{
+  "fbsId": "FBS-184",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 184,
+  "executionStatus": "complete",
+  "title": "Slice 5: the ask",
+  "summary": "Deliver REQ-161 (One ask per session, at idle, never automatic): hook quiet rule, per-harness hook handlers, installer wired into rcf init, doctor feedback-hooks check, settings file, env variables, opt-in/opt-out sub-verbs.",
+  "approach": "Write src/feedback/hook.js with pure shouldAsk() and per-harness emit(). Write src/setup/feedback-hooks.js installer (mergeable). Wire init Step 6 and doctor feedback-hooks check. Add hook sub-verb and opt-in/opt-out sub-verbs. Add rcf/feedback-settings.json handling. Add RCF_FEEDBACK_ASK and RCF_FEEDBACK_DISABLE env handling.",
+  "acIds": [
+    "AC-16101-1",
+    "AC-16101-2",
+    "AC-16101-3",
+    "AC-16102-1",
+    "AC-16102-2",
+    "AC-16103-1",
+    "AC-16103-2",
+    "AC-16103-3",
+    "AC-16104-1",
+    "AC-16104-2",
+    "AC-16104-3"
+  ],
+  "dependsOnFbsIds": [
+    "FBS-183"
+  ],
+  "contextRequirements": {
+    "tacIds": [
+      "TAC-4108-feedback-hook"
+    ],
+    "adrIds": [
+      "ADR-4107-stop-is-ask-event",
+      "ADR-4108-hooks-in-committed-config"
+    ]
+  },
+  "deliverables": [
+    "hook.js with pure quiet-rule shouldAsk and per-harness emit",
+    "feedback-hooks.js installer merged into .claude/settings.json and .codex/hooks.json",
+    "rcf init step 6; --no-feedback-hooks flag; doctor feedback-hooks check",
+    "rcf feedback opt-in / opt-out sub-verbs; RCF_FEEDBACK_ASK, RCF_FEEDBACK_DISABLE env",
+    "session-end bundle flush and session-start carry-over context line"
+  ],
+  "riskLevel": "medium",
+  "domain": "feedback",
+  "estimatedSize": "large",
+  "estimatedHours": 16,
+  "notes": "Introduces harness-facing config; the Codex hook trust prompt is a first-run curiosity, covered by RULE 17. Design section 9 decision: no global (~/.config) setting in v1 (rejected: a ~/.rcf/feedback.json file, because the behaviour a teammate sees on a shared project should come from the project, not from someone's home directory; a per-machine preference is the RCF_FEEDBACK_ASK env var).",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T19:20:00Z"
+}

package/rcf/fbs/fbs-185.json

@@ -0,0 +1,34 @@
+{
+  "fbsId": "FBS-185",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 185,
+  "executionStatus": "complete",
+  "title": "Slice 6: instruction and release",
+  "summary": "Deliver REQ-162 (Agents know when to log and when to ask): RULE 17 in the managed instructions block, build:managed regen, CHANGELOG entry, docs index row, docs-site follow-up ticket for the mirror page and the form paragraph.",
+  "approach": "Append RULE 17 to guidance/managed/agent-instructions-block.md (design section 3.4 wording, static). Run pnpm run build:managed to regenerate the block hash and harness-template.md. Update CHANGELOG.md, docs/README.md index and open a follow-up ticket for the docs-site mirror page and the \"submit a blueprint idea\" form paragraph.",
+  "acIds": [
+    "AC-16201-1",
+    "AC-16201-2"
+  ],
+  "dependsOnFbsIds": [
+    "FBS-184"
+  ],
+  "contextRequirements": {
+    "tacIds": [],
+    "adrIds": []
+  },
+  "deliverables": [
+    "RULE 17 in guidance/managed/agent-instructions-block.md (static wording)",
+    "pnpm run build:managed regenerated block hash and harness-template.md",
+    "CHANGELOG entry and docs/README.md index row for docs/feedback.md",
+    "Docs-site follow-up ticket opened for the mirror page and form paragraph"
+  ],
+  "riskLevel": "low",
+  "domain": "feedback",
+  "estimatedSize": "small",
+  "estimatedHours": 4,
+  "notes": "Ships with slice 5 (the rule and the hook reference each other); one-file edit plus the hash regen.",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T13:45:23.000Z"
+}

package/rcf/fbs/fbs-186.json

@@ -0,0 +1,16 @@
+{
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z",
+  "acIds": [
+    "AC-16301-1",
+    "AC-16301-2"
+  ],
+  "fbsId": "FBS-186",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 70,
+  "executionStatus": "notStarted",
+  "title": "Referee-guarantees: define validate walks ADR supersededBy and relatedAdrs",
+  "summary": "Extend collectBrokenReferences in packages/rcf-lite/src/core/store/walker.js so the two ADR schema-declared cross-links (supersededBy, relatedAdrs) walk through the same check helper as the existing FBS / TS / CN / EVAL cross-links. Broken targets surface as brokenReference errors named to the ADR file and the field, keyed rule:resolveTo:adr. Empty / absent fields stay silent. The walker change plus test/store/walker.test.js coverage closes referee-guarantees docs claim C-7. w-2026-09-16-dave-011.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-187.json

@@ -0,0 +1,17 @@
+{
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z",
+  "acIds": [
+    "AC-16401-1",
+    "AC-16401-2",
+    "AC-16401-3"
+  ],
+  "fbsId": "FBS-187",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 71,
+  "executionStatus": "notStarted",
+  "title": "Referee-guarantees: rcf audit coverage strict-by-default with --mode shallow-any opt-out",
+  "summary": "Flip the shipped default of `rcf audit coverage` from shallow-any to strict; add --mode shallow-any as the explicit opt-out (prints gaps, exits 0); keep --strict as a no-op alias; refuse --mode shallow-any --strict and --mode <unknown>. Update the repo's own CI dogfood step to the shipped default and add `rcf audit eval coverage --strict` alongside so referee-guarantees claim C-20 holds. Update docs/getting-started.md and docs/how-it-works.md to show the new default and the opt-out. Closes referee-guarantees docs claims C-11, C-14 and C-20. w-2026-09-16-dave-012.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-188.json

@@ -0,0 +1,17 @@
+{
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z",
+  "acIds": [
+    "AC-16501-1",
+    "AC-16501-2",
+    "AC-16501-3"
+  ],
+  "fbsId": "FBS-188",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 72,
+  "executionStatus": "notStarted",
+  "title": "Referee-guarantees: finalise refuses UI-BASELINE-UNMET, BROWSER-VERIFICATION-MISSING, SCOPE-MISMATCH",
+  "summary": "Add three finalise refusal branches after the MOCK-ONLY / EVAL branches. UI-BASELINE-UNMET (also covers a block-severity probe-pack failure, C-36), BROWSER-VERIFICATION-MISSING and SCOPE-MISMATCH each refuse promotion (exit 4) with a stderr message that names the AC(s), the count and the referee-guarantees claim ids. No --ship-without-* opt-out: the docs page names none and the failure classes are the shape the referee is chartered to refuse. Closes referee-guarantees docs claims C-28, C-29, C-30, C-36. w-2026-09-16-dave-013.",
+  "dependsOnFbsIds": []
+}

package/rcf/fbs/fbs-189.json

@@ -0,0 +1,17 @@
+{
+  "createdAt": "2026-09-17T00:15:00Z",
+  "updatedAt": "2026-09-17T00:15:00Z",
+  "acIds": [
+    "AC-16502-1",
+    "AC-16502-2",
+    "AC-16502-3"
+  ],
+  "fbsId": "FBS-189",
+  "prdId": "PRD-001",
+  "bsId": "BS-001",
+  "buildOrder": 73,
+  "executionStatus": "notStarted",
+  "title": "Referee-guarantees: verified-invariant gate + merge-state precondition on finalise",
+  "summary": "Gate the two paths that let the 0.27.0 chain say verified without a real finalise run. Writer refuses FBS.executionStatus=verified unless options.allowVerifiedOverride is true; rcf define update exposes --acknowledge-verified-override as the deliberate manual escape; rcf build finalise passes the seam through so its happy path is unchanged. Finalise spawns git rev-parse --abbrev-ref HEAD before the executionStatus write and refuses promotion (exit 4) when the branch is not main / master; --allow-pre-merge is the deliberate opt-out (logged on stdout). Absent a git checkout the check degrades to a warn line. Closes referee-guarantees docs claims C-22 and C-26. w-2026-09-16-dave-013.",
+  "dependsOnFbsIds": []
+}

package/rcf/requirements/req-155.json

@@ -0,0 +1,13 @@
+{
+  "reqId": "REQ-155",
+  "prdId": "PRD-001",
+  "title": "Local feedback capture",
+  "description": "The agent records a finding about a blueprint or about rcf-lite itself with one CLI call. Nothing leaves the machine. The store is per-clone and gitignored, so unredacted content cannot ride a git push. The operator can list, defer or discard recorded findings by hand. Pre-upgrade projects whose .gitignore does not cover the store path are refused (with the rcf doctor --fix line) so a working tree cannot leak by accident.",
+  "category": "functional",
+  "domain": "functional",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T13:45:23.000Z"
+}

package/rcf/requirements/req-156.json

@@ -0,0 +1,13 @@
+{
+  "reqId": "REQ-156",
+  "prdId": "PRD-001",
+  "title": "Nothing leaves the machine unredacted",
+  "description": "Every issue title, body and evidence pointer that would leave the machine is redacted by a deterministic, rule-based pass and the redactions are disclosed to the operator before consent. The stored entry stays raw; only the rendered issue and bundle are redacted. Project root, other absolute paths, emails, non-allowlisted hostnames and URLs, private and link-local IPs, secret-looking strings, operator identity and the git remote of the reporting project are stripped. A body with a residual secret pattern refuses to submit and the offending line is shown to the operator so the agent can rewrite it.",
+  "category": "functional",
+  "domain": "functional",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T13:45:23.000Z"
+}

package/rcf/requirements/req-157.json

@@ -0,0 +1,13 @@
+{
+  "reqId": "REQ-157",
+  "prdId": "PRD-001",
+  "title": "One finding, one issue",
+  "description": "The same defect reported by many users folds into one GitHub issue with additional reporters as +1 comments, not into one issue per user. The fingerprint is deterministic from kind, target key, anchor and symptom class; blueprint version is not part of the fingerprint so a defect that persists across versions folds. Search unavailability falls through to create with a dedupe: unchecked stamp; closed issues are not matched (a recurrence is a regression).",
+  "category": "functional",
+  "domain": "functional",
+  "priority": "must",
+  "version": "0.1.0",
+  "status": "draft",
+  "createdAt": "2026-09-16T13:45:23.000Z",
+  "updatedAt": "2026-09-16T13:45:23.000Z"
+}