rcf-lite 0.27.0 → 0.28.0

package/rcf/test-suites/ts-140.json

@@ -23,63 +23,63 @@
       "acId": "AC-11001-1",
       "description": "Cover AC-11001-1 via anatomy test: provisioner facade boot emits provisionerReady with metadata-only payload and only the facade reads the token",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11001-1 provisioner boot and sole reader (TC-140)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11001-1 provisioner boot and sole reader"
     },
     {
       "id": "TC-140-manifest-schema-shape-valid",
       "acId": "AC-11101-1",
       "description": "Cover AC-11101-1 via anatomy test: hetzner-server.schema.json validates the fixture manifests",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11101-1 manifest schema shape valid (TC-140-manifest-schema-shape-valid)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11101-1 manifest schema shape valid"
     },
     {
       "id": "TC-140-manifest-applies-mocked-provision",
       "acId": "AC-11102-1",
       "description": "Cover AC-11102-1 via anatomy test: mocked hcloud shell path returns id, primaryIpv4, location, serverType and hetznerServerProvisioned fires",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11102-1 manifest applies to mocked provision (TC-140-manifest-applies-mocked-provision)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11102-1 manifest applies to mocked provision"
     },
     {
       "id": "TC-140-cloud-init-render-baseline-present",
       "acId": "AC-11201-1",
       "description": "Cover AC-11201-1 via anatomy test: rendered cloud-init YAML carries the six baseline blocks",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11201-1 cloud-init render baseline present (TC-140-cloud-init-render-baseline-present)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11201-1 cloud-init render baseline present"
     },
     {
       "id": "TC-140-cloud-init-hardened-account-bound-probe",
       "acId": "AC-11202-1",
       "description": "Cover AC-11202-1 via anatomy test: probe module manifest declares accountBound true and the fixture readme documents the ssh baseline checks",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11202-1 cloud-init hardened account-bound probe declared (TC-140-cloud-init-hardened-account-bound-probe)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11202-1 cloud-init hardened account-bound probe declared"
     },
     {
       "id": "TC-140-firewall-shape-valid-and-refuses-open-ssh",
       "acId": "AC-11301-1",
       "description": "Cover AC-11301-1 via anatomy test: schema accepts a rule set with 22 restricted plus 80/443 open and refuses an open-ssh mutation",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11301-1 firewall shape valid and refuses open ssh (TC-140-firewall-shape-valid-and-refuses-open-ssh)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11301-1 firewall shape valid and refuses open ssh"
     },
     {
       "id": "TC-140-snapshot-cadence-enum",
       "acId": "AC-11401-1",
       "description": "Cover AC-11401-1 via anatomy test: snapshotCadence enum is weekly, daily, off",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11401-1 snapshot cadence enum (TC-140-snapshot-cadence-enum)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11401-1 snapshot cadence enum"
     },
     {
       "id": "TC-140-snapshot-on-demand-account-bound-probe",
       "acId": "AC-11402-1",
       "description": "Cover AC-11402-1 via anatomy test: snapshot on-demand probe declares accountBound true and readme names the hcloud image list check",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11402-1 snapshot on demand account-bound probe declared (TC-140-snapshot-on-demand-account-bound-probe)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11402-1 snapshot on demand account-bound probe declared"
     },
     {
       "id": "TC-140-lifecycle-events-metadata-only",
       "acId": "AC-11501-1",
       "description": "Cover AC-11501-1 via anatomy test: hcloud dry-run mock drives four lifecycle events, payloads carry only metadata fields, event-secrecy mutation FAILS",
       "status": "pending",
-      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::T-1 deploy-hetzner-server AC-11501-1 lifecycle events metadata only (TC-140-lifecycle-events-metadata-only)"
+      "testPointer": "test/blueprint/deploy-hetzner-server-anatomy.test.js::deploy-hetzner-server AC-11501-1 lifecycle events metadata only"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-150.json

@@ -23,63 +23,63 @@
       "acId": "AC-12001-1",
       "description": "Cover AC-12001-1 via anatomy test: fixture compose.yaml declares service-per-container, named networks and volumes, and a .env for non-secret config",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12001-1 compose layout shape valid (TC-150-compose-layout-shape-valid)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12001-1 compose layout shape valid"
     },
     {
       "id": "TC-150-secrets-file-mount-shape",
       "acId": "AC-12101-1",
       "description": "Cover AC-12101-1 via anatomy test: compose.yaml declares secrets under top-level secrets with a file source and mounts them into the web service; the mounted file is 0o400",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12101-1 secrets file mount shape (TC-150-secrets-file-mount-shape)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12101-1 secrets file mount shape"
     },
     {
       "id": "TC-150-secrets-scan-fails-on-plaintext",
       "acId": "AC-12102-1",
       "description": "Cover AC-12102-1 via anatomy test: secrets-as-files-scan probe passes on the canonical fixture and fails under SIMULATE_PLAINTEXT_SECRET naming the literal",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12102-1 secrets-as-files scan fails on plaintext (TC-150-secrets-scan-fails-on-plaintext)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12102-1 secrets-as-files scan fails on plaintext"
     },
     {
       "id": "TC-150-compose-config-lint-refuses-missing-healthcheck",
       "acId": "AC-12201-1",
       "description": "Cover AC-12201-1 via anatomy test: compose-config-lint probe passes on canonical fixture and fails under SIMULATE_MISSING_HEALTHCHECK naming the service",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12201-1 compose-config-lint refuses missing healthcheck (TC-150-compose-config-lint-refuses-missing-healthcheck)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12201-1 compose-config-lint refuses missing healthcheck"
     },
     {
       "id": "TC-150-real-account-minimal-stack-up-declared-and-skipped-shape",
       "acId": "AC-12202-1",
       "description": "Cover AC-12202-1 via anatomy test: real-account-minimal-stack-up probe declares accountBound true and records accountBoundSkipped when the env var is unset",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12202-1 real-account-minimal-stack-up declared and skipped shape (TC-150-real-account-minimal-stack-up-declared-and-skipped-shape)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12202-1 real-account-minimal-stack-up declared and skipped shape"
     },
     {
       "id": "TC-150-restart-discipline-lint-refuses-unclassified",
       "acId": "AC-12301-1",
       "description": "Cover AC-12301-1 via anatomy test: compose-config-lint enforces restart policy classification and fails under SIMULATE_UNCLASSIFIED_RESTART naming the service",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12301-1 restart discipline lint refuses unclassified (TC-150-restart-discipline-lint-refuses-unclassified)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12301-1 restart discipline lint refuses unclassified"
     },
     {
       "id": "TC-150-caddyfile-validate-refuses-invalid-directive",
       "acId": "AC-12401-1",
       "description": "Cover AC-12401-1 via anatomy test: caddyfile-validate probe passes on canonical Caddyfile and fails under SIMULATE_INVALID_CADDYFILE naming the line",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12401-1 caddyfile-validate refuses invalid directive (TC-150-caddyfile-validate-refuses-invalid-directive)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12401-1 caddyfile-validate refuses invalid directive"
     },
     {
       "id": "TC-150-real-account-reload-burst-declared-and-skipped-shape",
       "acId": "AC-12402-1",
       "description": "Cover AC-12402-1 via anatomy test: real-account-reload-burst probe declares accountBound true and records accountBoundSkipped when the env var is unset",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12402-1 real-account-reload-burst declared and skipped shape (TC-150-real-account-reload-burst-declared-and-skipped-shape)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12402-1 real-account-reload-burst declared and skipped shape"
     },
     {
       "id": "TC-150-log-driver-classification",
       "acId": "AC-12501-1",
       "description": "Cover AC-12501-1 via anatomy test: compose-config-lint asserts every service declares a logging driver and fails under SIMULATE_UNCLASSIFIED_LOG_DRIVER naming the service",
       "status": "pending",
-      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::T-2 platform-docker-compose-host AC-12501-1 log driver classification (TC-150-log-driver-classification)"
+      "testPointer": "test/blueprint/platform-docker-compose-host-anatomy.test.js::platform-docker-compose-host AC-12501-1 log driver classification"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-185.json

@@ -0,0 +1,54 @@
+{
+  "createdAt": "2026-09-16T14:25:30Z",
+  "updatedAt": "2026-09-16T14:25:30Z",
+  "purpose": "Cover AC-15501-1..5 (rcf feedback add): happy-path write and env stamp; gitignore refusal and --force bypass; blueprint destination-cannot-be-resolved exits 3 (design 3.1); enum and size validation on class, severity, title and body; blueprint-specific env stamps (blueprintVersion, libraryPrefix, libraryRef, resolvedSha/tarballSha256) sourced from the manifest record.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15501-1",
+    "AC-15501-2",
+    "AC-15501-3",
+    "AC-15501-4",
+    "AC-15501-5"
+  ],
+  "id": "TS-185",
+  "usId": "US-15501",
+  "title": "Slice 1 (FBS-180): rcf feedback add records one JSONL entry, honours the gitignore refusal, marks blueprint-unresolved with exit 3, validates enums and caps, and stamps blueprint-specific env fields",
+  "testCases": [
+    {
+      "id": "TC-185-add-writes-one-jsonl-line-and-stamps-env",
+      "acId": "AC-15501-1",
+      "description": "Cover AC-15501-1 via the CLI test: a fully-flagged add writes exactly one JSONL line, prints \"recorded <id> (<n> pending). Nothing sent.\", exit 0, and the entry environment carries harness, rcfLiteVersion, nodeVersion and platform.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-1: rcf feedback add writes one JSONL line and stamps env"
+    },
+    {
+      "id": "TC-185-add-refuses-without-gitignore",
+      "acId": "AC-15501-2",
+      "description": "Cover AC-15501-2 via the CLI test: add on a project whose .gitignore does not cover .rcf/feedback/ refuses with exit 2 and points at rcf doctor --fix; --force bypasses the refusal.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-2: add refuses when .gitignore does not cover .rcf/feedback/"
+    },
+    {
+      "id": "TC-185-add-blueprint-unresolved-exits-3",
+      "acId": "AC-15501-3",
+      "description": "Cover AC-15501-3 via the CLI test: --kind blueprint against a target absent from rcf/manifest.json:blueprints[] still records the entry, prints the recorded line on stdout, prints \"destination unresolved: <target>\" on stderr, exit 3.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-3: blueprint target that does not resolve exits 3 and records unresolved"
+    },
+    {
+      "id": "TC-185-add-rejects-bad-class",
+      "acId": "AC-15501-4",
+      "description": "Cover AC-15501-4 (enum arm) via the CLI test: --class not-a-real-class exits 2 and stderr names the enum.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-4: invalid --class exits 2 naming the enum"
+    },
+    {
+      "id": "TC-185-add-blueprint-stamps",
+      "acId": "AC-15501-5",
+      "description": "Cover AC-15501-5 via the CLI test: given a manifest with a git-pinned library blueprint, a shelf blueprint and a core entry, the recorded entries stamp blueprintVersion/libraryPrefix/libraryRef/resolvedSha appropriately; the core entry carries none of these fields.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-add.test.js::AC-15501-5: blueprint entries stamp version, libraryPrefix, libraryRef and resolvedSha from the manifest record"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-186.json

@@ -0,0 +1,58 @@
+{
+  "createdAt": "2026-09-16T14:25:30Z",
+  "updatedAt": "2026-09-16T14:25:30Z",
+  "purpose": "Cover AC-15502-1 (rcf feedback list default vs --all/--json) and AC-15502-2 (rcf feedback status counts, opt-out state and gh availability summary) with no file mutation and no network calls.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15502-1",
+    "AC-15502-2"
+  ],
+  "id": "TS-186",
+  "usId": "US-15502",
+  "title": "Slice 1 (FBS-180): rcf feedback list and rcf feedback status expose the pending set, every state under --all/--json, and the counts / opt-out / gh summary",
+  "testCases": [
+    {
+      "id": "TC-186-list-default-hides-non-pending",
+      "acId": "AC-15502-1",
+      "description": "Cover AC-15502-1 (default and --all rows) via the CLI test: default output shows only pending; --all shows every state with a [status] prefix column.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-1: rcf feedback list default shows only pending entries, --all includes every state"
+    },
+    {
+      "id": "TC-186-list-json-and-no-mutation",
+      "acId": "AC-15502-1",
+      "description": "Cover AC-15502-1 (--json shape and no file mutation) via the CLI test: --json emits an array whose length matches total in --all; sha-256 of entries.jsonl is invariant across list runs.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-1: list --json is machine-readable and length matches total in --all mode"
+    },
+    {
+      "id": "TC-186-status-json-shape",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (--json shape) via the CLI test: status --json returns counts by status, optOut boolean, optOutSource, and the gh / destinations summary keys.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: rcf feedback status --json emits counts, optOut and gh summary"
+    },
+    {
+      "id": "TC-186-status-optout-env-ask",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (env RCF_FEEDBACK_ASK=0 arm) via the CLI test: the env variable flips optOut to true and names its source.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: RCF_FEEDBACK_ASK=0 flips optOut in status"
+    },
+    {
+      "id": "TC-186-status-optout-env-disable",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (env RCF_FEEDBACK_DISABLE=1 arm) via the CLI test: the env variable flips optOut to true and names its source.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: RCF_FEEDBACK_DISABLE=1 flips optOut and names its source"
+    },
+    {
+      "id": "TC-186-status-text-summary",
+      "acId": "AC-15502-2",
+      "description": "Cover AC-15502-2 (text output) via the CLI test: the text status summarises counts on one line and opt-out state on another line, and never touches the network (store read only).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-list-status.test.js::AC-15502-2: text status summarises counts on one line and opt-out state on another"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-187.json

@@ -0,0 +1,44 @@
+{
+  "createdAt": "2026-09-16T14:25:30Z",
+  "updatedAt": "2026-09-16T14:25:30Z",
+  "purpose": "Cover AC-15503-1 (rcf feedback defer appends a deferredUntilSession state line per pending entry stamped with the current sessionId) and AC-15503-2 (rcf feedback discard marks only named entries or every pending under --all, hides them from list default, and refuses on an unknown id).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15503-1",
+    "AC-15503-2"
+  ],
+  "id": "TS-187",
+  "usId": "US-15503",
+  "title": "Slice 1 (FBS-180): rcf feedback defer and rcf feedback discard honour the fold-by-id state transitions and refuse on unknown ids",
+  "testCases": [
+    {
+      "id": "TC-187-defer-appends-state-lines",
+      "acId": "AC-15503-1",
+      "description": "Cover AC-15503-1 via the CLI test: defer appends one deferredUntilSession state line per pending entry, stamped with the current sessionId; the folded read reports both entries at status deferredUntilSession; no network call.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-1: defer appends a deferredUntilSession state line per pending entry"
+    },
+    {
+      "id": "TC-187-discard-by-id-hides-from-default",
+      "acId": "AC-15503-2",
+      "description": "Cover AC-15503-2 (named ids) via the CLI test: discard <id1> <id2> marks those entries discarded, list default hides them, --all shows their status.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-2: discard <id> marks only named entries and hides them from list default"
+    },
+    {
+      "id": "TC-187-discard-all-marks-every-pending",
+      "acId": "AC-15503-2",
+      "description": "Cover AC-15503-2 (--all arm) via the CLI test: discard --all marks every pending entry discarded and list default is empty.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-2: discard --all marks every pending entry discarded"
+    },
+    {
+      "id": "TC-187-discard-refuses-unknown-id",
+      "acId": "AC-15503-2",
+      "description": "Cover AC-15503-2 (unknown-id arm) via the CLI test: discard on an unknown id exits 2, no state line is written to the log.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-defer-discard.test.js::AC-15503-2: discard with an unknown id exits 2 and writes nothing"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-188.json

@@ -0,0 +1,166 @@
+{
+  "createdAt": "2026-09-16T15:27:35Z",
+  "updatedAt": "2026-09-17T01:30:00Z",
+  "purpose": "Cover AC-15601-1 (rcf feedback preview renders each pending entry as the title and body that would be filed, lists the destination, and prints the redaction ledger over the full eight-rule vocabulary), AC-15601-2 (preview marks residual-secret findings so the operator sees before consenting; the submit half of AC-15601-2 lands with slice 4), AC-15601-3 (preview never mutates the stored entries.jsonl), AC-15601-4 (a final whole-text residual-secret pass on the fully rendered and normalised issue body and each bundle refuses submit on any hit) and AC-15701-1 (a stable 12-hex fingerprint is attached per entry, folds across blueprint versions when the anchor+class match, and falls back to normalised-title tokens with a warning when the anchor is absent).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15601-1",
+    "AC-15601-2",
+    "AC-15601-3",
+    "AC-15601-4",
+    "AC-15701-1"
+  ],
+  "id": "TS-188",
+  "usId": "US-15601",
+  "title": "Slice 2 (FBS-181): rcf feedback preview renders redacted issue text, surfaces residual-secret markers, leaves the store byte-invariant, and attaches a stable fingerprint",
+  "testCases": [
+    {
+      "id": "TC-188-preview-renders-full-vocabulary-ledger",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 via the CLI test: --json emits titleRendered, bodyRendered, destination { repo, visibility } and a ledger whose rule names include project-root, absolute-path, email, hostname, private-ip, secret-token, operator-identity and size-shape; the rendered body carries none of the raw secret substrings, no private IP, no operator-name tokens, no em-dash, and stays under the byte cap.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15601-1: rcf feedback preview --json emits rendered title, body, destination and full-vocabulary ledger"
+    },
+    {
+      "id": "TC-188-preview-residual-secret-refusal",
+      "acId": "AC-15601-2",
+      "description": "Cover AC-15601-2 (preview half) via the CLI test: an obfuscated token embedded in a longer identifier is caught by the second-pass residual check and surfaced with the residual-secret marker on that entry, while a clean entry reports residual: []. The submit half of the AC lands with slice 4 once the submit path exists.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15601-2: preview surfaces a residual-secret line so the agent can rewrite before submit"
+    },
+    {
+      "id": "TC-188-preview-store-byte-invariant",
+      "acId": "AC-15601-3",
+      "description": "Cover AC-15601-3 via the CLI test: sha-256 of .rcf/feedback/entries.jsonl is invariant across two preview runs (text + --json).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15601-3: preview never mutates the stored entries.jsonl (sha-256 invariant)"
+    },
+    {
+      "id": "TC-188-preview-fingerprint-folds-across-entries",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 via the CLI test: two entries with the same kind, targetKey, anchor and symptomClass yield identical fingerprints.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15701-1: preview attaches a stable fingerprint per entry and it does not shift across blueprint versions"
+    },
+    {
+      "id": "TC-188-preview-fingerprint-fallback-warns",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 (fallback arm) via the CLI test: an entry with no anchor triggers the fingerprintFallback flag in --json and a warning banner in text mode so the agent learns to supply an anchor.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-preview.test.js::AC-15701-1 (fallback): missing anchor triggers the fingerprintFallback flag and a warning banner in text mode"
+    },
+    {
+      "id": "TC-188-redact-eight-rule-corpus",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fixture corpus for the redactor's rule vocabulary) via the unit test: every rule name in the design section 5 ledger (project-root, absolute-path, email, hostname, private-ip, secret-token, operator-identity, size-shape) fires against the corresponding fixture and the ledger is deterministic across two calls.",
+      "status": "pending",
+      "testPointer": "test/feedback/redact.test.js::redact rule 1: project root becomes <project> and paths under it keep their tail"
+    },
+    {
+      "id": "TC-188-fingerprint-canonical-input",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 (canonical input) via the unit test: fingerprintInput uses <kind>|<targetKey>|<anchor>|<symptomClass>, upper-cases the anchor, excludes blueprint version, and switches to the <kind>|<targetKey>|<symptomClass>|<normalisedTitle> fallback when the anchor is absent.",
+      "status": "pending",
+      "testPointer": "test/feedback/fingerprint.test.js::missing anchor uses the title-fallback canonical input"
+    },
+    {
+      "id": "TC-188-render-fingerprint-twin-and-labels",
+      "acId": "AC-15701-1",
+      "description": "Cover AC-15701-1 (render surface) via the unit test: renderIssue writes the fingerprint twice (visible line and HTML comment) and requests the six-label bootstrap subset for the entry's severity and kind.",
+      "status": "pending",
+      "testPointer": "test/feedback/render.test.js::renderIssue body carries the fingerprint twice and the Environment table"
+    },
+    {
+      "id": "TC-188-safeguard-whole-text-residual",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (safeguard, per-entry) via the unit test: findResidualSecrets detects a multiline PEM shape in a rendered-body-shaped string, which a per-line scan could not see. Binds the whole-text/multiline shape of the residual pass introduced in fix round 2 (R-P0-2 root fix + defence).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-2.test.js::AC-15601-4 safeguard: whole-text residual scan detects a multiline PEM in the rendered surface"
+    },
+    {
+      "id": "TC-188-safeguard-submit-refuses-residual",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (safeguard, submit half) via the CLI test: an entry whose stealth token slips the first-pass but is caught by the loose-pattern residual scan in the rendered body causes submit --yes --dry-run to exit 3 (entry stays pending; no create/comment path runs).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-2.test.js::AC-15601-4 safeguard: submit refuses (exit 3) when a title-embedded token survives to the rendered body"
+    },
+    {
+      "id": "TC-188-vocab-shared-constant",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-A) via the unit test: SECRET_KEY_VOCABULARY carries every shortname the HQ gate probes named as leaking (pw, pwd, pass, key, auth) and its regex source is right-bounded at a word edge so `keyword` and `authors` do not fold.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A (round 4): SECRET_KEY_VOCABULARY carries every shortname the HQ gate probes named as leaking"
+    },
+    {
+      "id": "TC-188-vocab-shortname-probes",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-A) via the probe suite: each of the ten HQ-gate leak inputs (pw=, pwd=, pass=, key=, auth= plus quoted / tab / caps / hyphen / JSON variants) folds under the kv-secret pass and leaves nothing on the residual scan.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A (round 4): all ten shortname kv probes fold cleanly and leave nothing residual"
+    },
+    {
+      "id": "TC-188-vocab-keyword-authors-negative",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-A negative case) via the unit test: keyword=X and authors=X are NOT folded (right-bound word-edge guard on the vocabulary alternation) so false-positive redactions do not swallow benign prose.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A (round 4): keyword and authors kv pairs are NOT folded by the right-bound word-edge guard"
+    },
+    {
+      "id": "TC-188-url-credential-webhook",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-B) via the unit test: rule 9 (url-credential) folds the Slack webhook path segment to <url-credential> before the rule-4 hostname pass folds the host to <host>, so a webhook URL in prose loses the token but keeps the surrounding text intact.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-B (round 4): Slack webhook path is folded before hostname folding (P07 from the gate)"
+    },
+    {
+      "id": "TC-188-url-credential-userinfo",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-B) via the unit test: user:pass@host userinfo is dropped by rule 9 so the rule-4 hostname pass still sees a well-formed URL and folds a non-allowlisted host to <host>. The credential does not leak on the wire.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-B (round 4): userinfo (user:pass@host) is dropped and the host still folds via rule 4"
+    },
+    {
+      "id": "TC-188-url-credential-query",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 4, F-P0-B) via the unit test: URL query parameters whose name matches the shared vocabulary (`?token=`, `?api_key=`) or the presigned-URL set (`?X-Amz-Signature=`) have their values folded to <url-credential>, and a benign allowlisted URL (github.com/foo/bar) has no url-credential ledger row.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-B (round 4): presigned URL query parameter value is redacted"
+    },
+    {
+      "id": "TC-188-safeguard-shortname-webhook",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (fix round 4, safeguard) via the unit test: findResidualSecrets catches both a shortname-key kv shape (pw=...) and a webhook-path shape (/services/.../ or /api/webhooks/.../) in one pass, proving the safeguard shares the same vocabulary as the first-pass redactor.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-P0-A/B (round 4): findResidualSecrets catches shortname kv AND webhook-path shapes in one pass"
+    },
+    {
+      "id": "TC-188-dryrun-writes-nothing",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (fix round 4, F-01, design R3c) via the CLI test: `rcf feedback submit --yes --dry-run` writes no files under .rcf/feedback/outbox/ even for the unresolved-destination and whole-destination-fallback branches (previously the dry-run gate on the create/comment path let the bundle write run unconditionally).",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-4.test.js::F-01 (round 4, R3c): submit --dry-run --yes writes no outbox bundle for an unresolved destination"
+    },
+    {
+      "id": "TC-188-r4-separator-probes",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 5, F-05, design amendment R4) via the unit test: every re-gate R4 probe (markdown table pipes, whitespace runs, tabs, hyphens, em-dashes, HTML numeric entities, prose is / was / set to bridges, arrows) folds a vocabulary key labelling a value-shape token, the raw value never survives, and the residual scan is clean.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-5.test.js::F-05 (round 5, R4): every re-gate R4 probe folds under the primary pass and leaves nothing residual"
+    },
+    {
+      "id": "TC-188-r4-residual-safeguard",
+      "acId": "AC-15601-4",
+      "description": "Cover AC-15601-4 (fix round 5, R4 safeguard) via the unit test: findResidualSecrets flags a raw R4 shape (markdown table, prose bridge, HTML entity, em-dash separator) as kv-secret-r4 so submit refuses fail-closed on any R4 leak the first-pass missed.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-5.test.js::F-05 (round 5, R4): findResidualSecrets flags a raw R4 shape as kv-secret-r4"
+    },
+    {
+      "id": "TC-188-r4-overredaction-guard",
+      "acId": "AC-15601-1",
+      "description": "Cover AC-15601-1 (fix round 5, R4 negative case) via the unit test: ordinary prose that carries a vocabulary word (`the password field is required`, `the password is required`, `see commit abc1234 at HEAD`, `keyword=abcdef`, `authors=joe,jane`) does NOT fold because the value-shape gate rejects single-class values and values under 8 characters.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-fix-round-5.test.js::F-05 (round 5, R4 guard): a vocabulary word in ordinary prose (single-class value, or short value) does NOT fold"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-189.json

@@ -0,0 +1,38 @@
+{
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T16:20:01Z",
+  "purpose": "Cover AC-15801-1 (library.json:issues object snapshotted onto rcf/blueprint-libraries.json:entries[] as issuesRepo and issuesVisibility on rcf library add; the review-on-add card prints the Feedback destination line naming repo and visibility), AC-15801-2 (destination.resolve walks entry -> manifest -> registry issuesRepo, falls back to sourceRef derivation for github URLs with derived:true, returns unresolved when neither is available; shelf and core route to Stravica/rcf-lite) and AC-15801-3 (rcf doctor --check feedback-destinations lists every registered library with no resolvable destination as a warn-only row with refusedByFix:true; exit stays 0).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15801-1",
+    "AC-15801-2",
+    "AC-15801-3"
+  ],
+  "id": "TS-189",
+  "usId": "US-15801",
+  "title": "Slice 3 (FBS-182): library.json issues field snapshotted on library add, destination resolver walks the manifest/registry chain, and rcf doctor feedback-destinations warns on libraries with no resolvable destination",
+  "testCases": [
+    {
+      "id": "TC-189-library-add-snapshots-issues-and-prints-review-line",
+      "acId": "AC-15801-1",
+      "description": "Cover AC-15801-1 via the CLI test: a library.json with an issues object of { repo, visibility: 'private' } is added to a fresh project; rcf/blueprint-libraries.json carries issuesRepo and issuesVisibility on the entry, the review-on-add stdout matches 'Feedback destination: OWNER/REPO (private)', and a second library without an issues field neither prints the line nor writes the fields on the registry entry.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-destinations.test.js::AC-15801-1: library.json issues is snapshotted onto the registry entry and the review card prints the Feedback destination line"
+    },
+    {
+      "id": "TC-189-resolver-four-fixture-walk",
+      "acId": "AC-15801-2",
+      "description": "Cover AC-15801-2 via the unit test: destination.resolve returns the expected shape for each of the four fixture cases from the AC given: a shelf blueprint routes to CORE_REPO with derived:false; a library entry with explicit issues wins over derivation and reports source: library-manifest; a library entry with no issues but a github git+https sourceRef derives OWNER/REPO with derived:true and source: sourceRef-derivation; a library entry with neither issues nor a github source returns unresolved with reason no-github-source; a library entry that is completely absent returns unresolved with reason unknown-target.",
+      "status": "pending",
+      "testPointer": "test/feedback/destination.test.js::AC-15801-2 shelf fixture: a blueprint with no libraryPrefix routes to CORE_REPO"
+    },
+    {
+      "id": "TC-189-doctor-feedback-destinations-warn-only",
+      "acId": "AC-15801-3",
+      "description": "Cover AC-15801-3 via the CLI test: rcf doctor --check feedback-destinations --json against a project with two registered libraries (one with issues, one without) returns exactly one drift row of item unresolved-library naming the second library, whose message includes the publisher.contact from the registry entry and whose refusedByFix flag is true; the overall doctor exit code stays 0 because the check is warn-only.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-destinations.test.js::AC-15801-3: rcf doctor --check feedback-destinations warns on a library without a resolvable destination and exits 0"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-190.json

@@ -0,0 +1,30 @@
+{
+  "createdAt": "2026-09-16T16:20:01Z",
+  "updatedAt": "2026-09-16T16:20:01Z",
+  "purpose": "Cover AC-15802-1 (rcf feedback preview on a shelf blueprint entry prints Stravica/rcf-lite as the destination and the CORE_REPO constant is pinned to packages/rcf-lite/package.json:bugs.url) and AC-15802-2 (a --kind core entry routes to Stravica/rcf-lite regardless of any library manifest content, including a library that names 'define validate' as a target).",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15802-1",
+    "AC-15802-2"
+  ],
+  "id": "TS-190",
+  "usId": "US-15802",
+  "title": "Slice 3 (FBS-182): shelf blueprints and --kind core entries route to Stravica/rcf-lite via the package.json:bugs.url constant",
+  "testCases": [
+    {
+      "id": "TC-190-core-repo-pinned-to-bugs-url",
+      "acId": "AC-15802-1",
+      "description": "Cover AC-15802-1 via the unit test: CORE_REPO equals parseBugsRepo(package.json), which today is Stravica/rcf-lite; the parser accepts the bare URL, the URL with the /issues suffix and the object form { bugs: { url } } so a rename ripples through the single package.json field.",
+      "status": "pending",
+      "testPointer": "test/feedback/destination.test.js::AC-15802-1: CORE_REPO is pinned to packages/rcf-lite/package.json:bugs.url"
+    },
+    {
+      "id": "TC-190-core-kind-ignores-library-manifest-content",
+      "acId": "AC-15802-2",
+      "description": "Cover AC-15802-2 via the CLI test: a project with a registered library that declares a good issuesRepo, followed by a rcf feedback add --kind core --target 'define validate' entry; rcf feedback preview --json reports destination.repo Stravica/rcf-lite (kind: core, visibility: public) for that entry, ignoring the library declaration entirely.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-destinations.test.js::AC-15802-1: rcf feedback preview prints Stravica/rcf-lite (public) as the destination for a --kind core entry, and no library manifest content overrides it"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-191.json

@@ -0,0 +1,51 @@
+{
+  "createdAt": "2026-09-16T17:23:12Z",
+  "updatedAt": "2026-09-16T17:23:12Z",
+  "purpose": "Cover AC-15701-2 (submit calls gh search + create/comment per the zero/one/many hit table) and AC-15701-3 (search unavailable falls through to create with dedupe: unchecked; closed-state hit stamps a previously reported reference into the create body). Slice 4 arm of US-15701.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-15701-2",
+    "AC-15701-3"
+  ],
+  "id": "TS-191",
+  "usId": "US-15701",
+  "title": "Slice 4 (FBS-183): dedupe search folds zero/one/many hits into create or +1 comment; search unavailable falls through with dedupe: unchecked and closed hits stamp a previously reported reference",
+  "testCases": [
+    {
+      "id": "TC-191-submit-zero-hit-creates",
+      "acId": "AC-15701-2",
+      "description": "Cover AC-15701-2 (zero-hit arm) via the CLI test: with the configurable gh fake returning { matches: [] }, submit --yes calls ghIssueCreate for each entry and stamps dedupe: new.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15901-1: submit --yes with zero-hit search creates each entry, marks submitted, prints URL"
+    },
+    {
+      "id": "TC-191-submit-one-hit-comments",
+      "acId": "AC-15701-2",
+      "description": "Cover AC-15701-2 (one-hit arm) via the CLI test: with matches returning one issue, submit calls ghIssueComment on that number and no ghIssueCreate.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-2: one-hit search calls gh issue comment on that number"
+    },
+    {
+      "id": "TC-191-submit-many-hit-comment-lowest",
+      "acId": "AC-15701-2",
+      "description": "Cover AC-15701-2 (many-hit arm) via the CLI test: with three matches returning numbers 30/12/47, submit comments on #12 (lowest) and the body mentions #30 and #47.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-2: many-hit search comments on the lowest number and names the others"
+    },
+    {
+      "id": "TC-191-submit-search-unchecked",
+      "acId": "AC-15701-3",
+      "description": "Cover AC-15701-3 (search failure arm) via the CLI test: with search returning { error: 'search-unavailable' }, submit falls through to create and stamps dedupe: unchecked on the entry state.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-3: search error falls through to create with dedupe:unchecked"
+    },
+    {
+      "id": "TC-191-submit-closed-reference",
+      "acId": "AC-15701-3",
+      "description": "Cover AC-15701-3 (closed-hit arm) via the CLI test: with open search empty and closed search returning #88, submit creates a new issue whose body carries 'Previously reported and closed as #88'.",
+      "status": "pending",
+      "testPointer": "test/cli/feedback-submit.test.js::AC-15701-3: closed-state hit produces a create with previously reported reference"
+    }
+  ],
+  "status": "draft"
+}