rcf-lite 0.28.2 → 0.28.4

package/rcf/requirements/req-016.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-04T16:21:15.850Z",
-  "updatedAt": "2026-09-04T16:22:11.909Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z",
   "description": "rcf-schemas 0.6.0 lands the EVAL doc type and the AC-level determinism marker. rcf-lite consumes both: rcf audit eval coverage as a sibling of rcf audit coverage, EVAL-MISSING and EVAL-BELOW-THRESHOLD as per-AC verdicts on the verify report, finalise refusal with a mandatory-reason ship-without-eval opt-out, and a determinism flag on rcf define create ac plus the LLM-as-judge subprocess spawn wired to a runRecord entry on the EVAL doc. The eval-node discipline lives in the schema tier; rcf-lite is the first consumer to make it observable at every stage of the build cycle.",
   "reqId": "REQ-016",
   "prdId": "PRD-001",
@@ -33,5 +33,8 @@
         "match": "schema"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:requirements-authoring"
+  ]
 }

package/rcf/requirements/req-017.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-04T17:59:20.149Z",
-  "updatedAt": "2026-09-04T17:59:34.348Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-017",
   "prdId": "PRD-001",
   "title": "Blueprint-shipped browser-verify probe packs with FBS-scoped applicability",
@@ -14,5 +14,9 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-04T17:59:20.168Z"
-  }
+  },
+  "tags": [
+    "capability:verify",
+    "capability:blueprint-library"
+  ]
 }

package/rcf/requirements/req-018.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-04T20:05:06.758Z",
-  "updatedAt": "2026-09-04T20:05:16.473Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-018",
   "prdId": "PRD-001",
   "title": "Application-datatable v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-04T20:05:06.779Z"
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-019.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-04T21:08:13.117Z",
-  "updatedAt": "2026-09-04T21:08:13.139Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "The rcf-lite shelf ships the application-charts v1.0.0 blueprint (blueprints/application-charts/) with 15 contributions (4 REQs, 6 USs binding runtime-observable ACs, 2 TACs, 3 ADRs), a shipped Playwright probe pack (blueprints/application-charts/probe-packs/application-charts.pack.mjs) whose three checks (AC-18102-1 non-colour distinction, AC-18103-1 text-alternative table, AC-18104-1 keyboard traversal with reduced motion) are anchored to blueprint AC ids per T-0 AC-1701-3, and a dependency-free sample-app fixture (packages/rcf-lite/test/fixtures/probe-pack-application-charts/) the pack probes at the shelf gate. The blueprint is the ratification of the visual round T-2 (spec 2026-09-04 section 5.2), the second shipped consumer of T-0's probe-pack runner extension, and the leaf blueprint the application-dashboard T-3 consumes.",
   "category": "functional",
   "domain": "application",
@@ -34,5 +34,8 @@
         "match": "dashboard"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-020.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-04T22:10:00.000Z",
-  "updatedAt": "2026-09-04T22:10:00.000Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-020",
   "prdId": "PRD-001",
   "title": "Application-dashboard v1.0.0 blueprint on the shelf with its packaged design-guidance asset, Playwright probe pack and sample-app fixture",
@@ -9,5 +9,8 @@
   "domain": "application",
   "priority": "must",
   "version": "0.1.0",
-  "status": "draft"
+  "status": "draft",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-021.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-04T23:59:00.000Z",
-  "updatedAt": "2026-09-04T23:59:00.000Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-021",
   "prdId": "PRD-001",
   "title": "Application-notifications-in-app v1.0.0 blueprint on the shelf with its Playwright probe pack and sample-app fixture",
@@ -9,5 +9,8 @@
   "domain": "application",
   "priority": "must",
   "version": "0.1.0",
-  "status": "draft"
+  "status": "draft",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-022.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-05T01:30:00.000Z",
-  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-022",
   "prdId": "PRD-001",
   "title": "Capability-declaration mechanism (capabilities[], elicits[], apply-time discovery, refusal and custom-auth elicitation) and four auth-blueprint 1.1.0 minors adopting it",
@@ -9,5 +9,8 @@
   "domain": "application",
   "priority": "must",
   "version": "0.1.0",
-  "status": "draft"
+  "status": "draft",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-023.json

@@ -1,14 +1,16 @@
 {
   "createdAt": "2026-09-05T01:30:00.000Z",
-  "updatedAt": "2026-09-05T01:30:00.000Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-023",
   "prdId": "PRD-001",
   "title": "Application-admin-console v1.0.0 blueprint on the shelf with capability-gated surfaces, a Playwright probe pack and a sample-app fixture",
-  "description": "The rcf-lite shelf ships the application-admin-console v1.0.0 blueprint (blueprints/application-admin-console/) with 23 contributions (6 REQs on the console shell with no dead links to unapplied capabilities, the users surface conditional on principalDirectory, the roles surface conditional on roleModel with Owner + Admin + Member + Viewer baseline, the orgs surface conditional on tenancy, the audit-log surface conditional on the auditLog logging companion, and the access-denied and request-access states per WCAG; 9 USs 21101-21109 binding runtime-observable ACs plus the conditional-refusal apply-time behaviour; 4 TACs 2201-2204 on the console shell reading the surface manifest, the apply-time capability discovery, the permission matrix as an ARIA APG grid, and the audit view consuming application-datatable; 4 ADRs 2201-2204 on the capability vocabulary, baseline roles with elicited additions, invite transport with email default delegated to the email sibling and elicited, and audit-log retention window elicited). The blueprint declares requiresAppliedCapabilities: [principalDirectory] and allowSkipFlag: allow-no-auth-yet so a bare-SPA apply refuses with exit 3 and the spec 5.5.1 verbatim message naming security-auth-*; the override records a note on the applied record. Declares elicits[] gating baselineRoles (only when roleModel is applied), tenancyShape (only when tenancy is applied), inviteTransport, and auditRetentionDays (only when auditLog is applied). Declares suggestedCompanions logging and errorHandling with the ratified spec section 5.5 reasons; providesRoles absent per spec 5.5.3 (the console is a consumer of principalDirectory, never a provider). Ships a Playwright probe pack under blueprints/application-admin-console/probe-packs/application-admin-console.pack.mjs whose four checks (AC-21102-1 users directory, AC-21103-1 permission matrix, AC-21104-1 org switcher, AC-21105-1 audit-log surface) each carry an appliesTo predicate that reads manifest.blueprints[] and the read-back capabilities so an inapplicable check records applicable: false and the aggregate verdict treats it as neither pass nor fail. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-admin-console/ with a CAPS env or query switch selecting which surfaces exist (mirrors the applied capability set so the sample app plays every fixture), a console shell whose nav only links applied surfaces, a users directory table with per-row invite and deactivate controls enumerated by data-user-id, a permission matrix rendered as an ARIA APG grid with role=grid, role=row, role=gridcell, role=rowheader on role rows and role=columnheader on permission columns announcing the exact permission string on focus (WCAG 4.1.3), an org switcher (only under tenancy), an audit-log table with actor / target / before / after / timestamp / correlation id enumerated by data-audit-id, an access-denied route with a request-access control, request log on window.__adminFetches and /__requests, and break switches for the negative runs (matrix-grid, denied, audit-fields). Reads applied capabilities from the rcf/blueprints/application-admin-console.applied.json sidecar or from an ADMIN_CONSOLE_CAPS env override so the fixture can play fixtures (b) SPA + magic-link, (c) SPA + clerk + logging, and (d) custom-auth elicited capabilities. Fifth shipped consumer of T-0's probe-pack runner extension; consumes application-datatable (T-1) for the users directory and audit views."
-,
+  "description": "The rcf-lite shelf ships the application-admin-console v1.0.0 blueprint (blueprints/application-admin-console/) with 23 contributions (6 REQs on the console shell with no dead links to unapplied capabilities, the users surface conditional on principalDirectory, the roles surface conditional on roleModel with Owner + Admin + Member + Viewer baseline, the orgs surface conditional on tenancy, the audit-log surface conditional on the auditLog logging companion, and the access-denied and request-access states per WCAG; 9 USs 21101-21109 binding runtime-observable ACs plus the conditional-refusal apply-time behaviour; 4 TACs 2201-2204 on the console shell reading the surface manifest, the apply-time capability discovery, the permission matrix as an ARIA APG grid, and the audit view consuming application-datatable; 4 ADRs 2201-2204 on the capability vocabulary, baseline roles with elicited additions, invite transport with email default delegated to the email sibling and elicited, and audit-log retention window elicited). The blueprint declares requiresAppliedCapabilities: [principalDirectory] and allowSkipFlag: allow-no-auth-yet so a bare-SPA apply refuses with exit 3 and the spec 5.5.1 verbatim message naming security-auth-*; the override records a note on the applied record. Declares elicits[] gating baselineRoles (only when roleModel is applied), tenancyShape (only when tenancy is applied), inviteTransport, and auditRetentionDays (only when auditLog is applied). Declares suggestedCompanions logging and errorHandling with the ratified spec section 5.5 reasons; providesRoles absent per spec 5.5.3 (the console is a consumer of principalDirectory, never a provider). Ships a Playwright probe pack under blueprints/application-admin-console/probe-packs/application-admin-console.pack.mjs whose four checks (AC-21102-1 users directory, AC-21103-1 permission matrix, AC-21104-1 org switcher, AC-21105-1 audit-log surface) each carry an appliesTo predicate that reads manifest.blueprints[] and the read-back capabilities so an inapplicable check records applicable: false and the aggregate verdict treats it as neither pass nor fail. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-admin-console/ with a CAPS env or query switch selecting which surfaces exist (mirrors the applied capability set so the sample app plays every fixture), a console shell whose nav only links applied surfaces, a users directory table with per-row invite and deactivate controls enumerated by data-user-id, a permission matrix rendered as an ARIA APG grid with role=grid, role=row, role=gridcell, role=rowheader on role rows and role=columnheader on permission columns announcing the exact permission string on focus (WCAG 4.1.3), an org switcher (only under tenancy), an audit-log table with actor / target / before / after / timestamp / correlation id enumerated by data-audit-id, an access-denied route with a request-access control, request log on window.__adminFetches and /__requests, and break switches for the negative runs (matrix-grid, denied, audit-fields). Reads applied capabilities from the rcf/blueprints/application-admin-console.applied.json sidecar or from an ADMIN_CONSOLE_CAPS env override so the fixture can play fixtures (b) SPA + magic-link, (c) SPA + clerk + logging, and (d) custom-auth elicited capabilities. Fifth shipped consumer of T-0's probe-pack runner extension; consumes application-datatable (T-1) for the users directory and audit views.",
   "category": "functional",
   "domain": "application",
   "priority": "must",
   "version": "0.1.0",
-  "status": "draft"
+  "status": "draft",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-024.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T15:38:14.226Z",
-  "updatedAt": "2026-09-06T15:38:14.250Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "category": "functional",
   "domain": "application",
   "priority": "must",
@@ -65,5 +65,8 @@
         "match": "form"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-025.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T16:55:02.404Z",
-  "updatedAt": "2026-09-06T16:56:22.580Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "The rcf-lite shelf ships the application-file-upload v1.0.0 blueprint (blueprints/application-file-upload/) with 18 to 22 contributions (5 REQs on the input contract with a labelled file input plus drop-zone plus keyboard alternative per WCAG 2.5.7, the progress contract with per-file percent plus aggregate percent plus polite live-region tick, the refusal contract with MIME-type refusal and size-limit refusal and virus-scan hit and aria-describedby error binding and focus-to-retry, the transport contract with chunked-and-resumable and multipart POST default and tus.io elicited alternative, and the completion contract with an assertive-slot announcement on success per WCAG 4.1.3 and per-file remove and retry; 7 USs 23101 to 23107 one per REQ plus two cross-cutting cases network-interruption resumption and background-tab progress; 3 TACs 2401 input surface, 2402 transport contract, 2403 progress announcer; 3 ADRs 2401 transport across multipart POST and tus.io and per-vendor SDK with recommendedDefault true on multipart and elicited true, 2402 accepted MIME set and per-file size cap with elicited true, 2403 virus-scan integration via operator-supplied verifier through a capability plus elicit with elicited true). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.2; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-file-upload/probe-packs/application-file-upload.pack.mjs with four surface-observable checks anchored to TAC-2401 or an operator-configured upload-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-file-upload/ realising both transport branches multipart POST and tus.io honestly plus break switches so each check refuses on its own defect. Seventh shipped consumer of T-0's probe-pack runner extension.",
   "reqId": "REQ-025",
   "prdId": "PRD-001",
@@ -55,5 +55,8 @@
       }
     ]
   },
-  "rationale": "Per visual round 4 spec section 5.2 (2026-09-06)."
+  "rationale": "Per visual round 4 spec section 5.2 (2026-09-06).",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-026.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T19:03:15.348Z",
-  "updatedAt": "2026-09-06T19:07:15.107Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "The rcf-lite shelf ships the application-forms-wizard v1.0.0 blueprint (blueprints/application-forms-wizard/) with 19 contributions (5 REQs on the task-list contract with the closed GOV.UK vocabulary Cannot start yet plus Not started plus In progress plus Completed with an ARIA progressbar wrapper, the per-step validation timing rule on-blur before first submit then on-change after first failure and a full pass on submit reusing SPA forms-engine TAC-205 per WCAG 2.2 SC 3.3.1 and 3.3.3, the error-summary contract with a top-of-page summary and skip links per failed field with aria-invalid true on the field and aria-describedby to the per-field error message and focus moved to the summary heading on submit failure, the summary-review contract with a summary-list rendering per step with Change links returning to each step and every other answer retained on save per WCAG 2.2 SC 3.3.4, the save-and-return contract with a server-side draft table or a client-side local buffer with a per-write ISO-8601 sync tick with the pack refusing to ship if neither is wired per WCAG 2.2 SC 3.3.7; 8 USs 24101 to 24108 one per REQ plus three cross-cutting cases linear-vs-free navigation, in-progress list and no-in-progress empty state delegated to application-empty-error-states; 3 TACs 2501 task-list shell and 2502 error-summary contract and 2503 draft store; 3 ADRs 2501 navigation posture linear default with elicited free branch, 2502 save-and-return transport across server-draft-table and client-local-buffer elicited with NO recommendedDefault because the abandoned-draft loss class does not ship silently, 2503 step indicator across task-list ARIA progressbar and breadcrumb with recommendedDefault true on task-list). Declares suggestedCompanions logging and errorHandling with reasons from spec section 5.3; providesRoles absent; capabilities absent; requiresAppliedCapabilities absent. Ships a Playwright probe pack under blueprints/application-forms-wizard/probe-packs/application-forms-wizard.pack.mjs with four surface-observable checks anchored to TAC-2501 or an operator-configured wizard-route glob. Ships a dependency-free sample-app fixture at packages/rcf-lite/test/fixtures/probe-pack-application-forms-wizard/ realising the four wizard surfaces honestly plus both save-and-return transports server default and local elicited plus four break switches so each check refuses on its own defect. Eighth shipped consumer of T-0 probe-pack runner extension. Consumes application-empty-error-states for the no-in-progress empty state on the /in-progress list surface.",
   "reqId": "REQ-026",
   "prdId": "PRD-001",
@@ -150,5 +150,8 @@
         "match": "form"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-027.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T21:11:33.252Z",
-  "updatedAt": "2026-09-06T21:11:33.281Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-4 shelf-blueprint track: application-account-settings v1.0.0 with 24 contributions 6 REQs 10 USs 25101 to 25110 4 TACs 2601 to 2604 4 ADRs 2601 to 2604; requiresAppliedCapabilities principalDirectory with allow-no-auth-yet override; 8 elicits; probe pack with 5 capability-gated checks anchored to AC-25101-1 AC-25102-1 AC-25105-1 AC-25106-1 AC-25108-1; sample-app fixture with 5 conditional surfaces and 4 break switches; rides with clerk 1.3.0 keycloak 1.2.0 oauth2 1.2.0 magic-link 1.2.0 doc-only observability-logging 1.2.0; mechanism minor for Q3 refusal and refusal template. Ninth shipped consumer of T-0 probe-pack runner.",
   "reqId": "REQ-027",
   "prdId": "PRD-001",
@@ -29,5 +29,8 @@
         "match": "template"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-028.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T23:02:59.779Z",
-  "updatedAt": "2026-09-06T23:21:56.789Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-5 shelf-blueprint track of the ratified visual round 4 spec (2026-09-06 section 5.5): the application-onboarding-tour v1.0.0 blueprint on the shelf with 17 contributions (4 REQs step-manifest + tooltip-as-dialog + checklist-slot + completion-state; 7 USs 26101 to 26107; 3 TACs 2701 step-runner / 2702 checklist-slot / 2703 completion-store; 3 ADRs 2701 dismissal-policy / 2702 completion-store-shape / 2703 checklist-anchor). No requiresAppliedCapabilities (composes on SPA, dashboard, notifications-in-app, account-settings, any auth without hard dependency; documented fallback per Q4 spa-local-storage). Ships a Playwright probe pack with four surface-observable checks anchored to AC-26101-1 AC-26102-1 AC-26103-1 AC-26104-1, and a dependency-free sample-app fixture with the three-to-five step tour honestly realised plus four break switches (no-role, focus-escape, no-collapse, no-persist). Composes on application-dashboard for the dashboard-top anchor slot (with settings-page fallback), application-notifications-in-app for the checklist-completion announcement, application-account-settings for the restart-tour control home, application-spa for routing and iconography. suggestedCompanions logging and errorHandling; providesRoles absent; capabilities absent. Tenth shipped consumer of the T-0 probe-pack runner extension.",
   "reqId": "REQ-028",
   "prdId": "PRD-001",
@@ -9,5 +9,8 @@
   "domain": "application",
   "priority": "must",
   "version": "0.1.0",
-  "status": "draft"
+  "status": "draft",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-029.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T09:09:31.207Z",
-  "updatedAt": "2026-09-07T09:09:31.236Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-0 track of the ratified Cloudflare round 6 spec (2026-09-06 section 5.0). The rcf-lite shelf bumps the deploy-cloudflare-workers blueprint from v1.1.0 to v1.2.0 with an additive-minor delta that blesses the Workers-with-static-assets shape as the SPA-on-Workers deploy shape. The blueprint gains two new REQ contributions (deploy-cloudflare-workers-REQ-013 for the Workers-with-static-assets shape and deploy-cloudflare-workers-REQ-014 for the SPA fallback discipline via run_worker_first), three new US contributions in the existing 12xx band (deploy-cloudflare-workers-US-12113 SPA-on-Workers deploy; deploy-cloudflare-workers-US-12114 assets-directory elicitation; deploy-cloudflare-workers-US-12115 migrate-from-Pages guidance), one new ADR contribution (ADR-1306-deploy-cloudflare-workers-spa-shape carrying the verbatim Cloudflare Pages landing-page recommendation, standardsTraceClause Cloudflare Pages landing-page recommendation 2026-09-06, recommendedDefault true), one new source-tree scan probe module (assets-manifest-scan.mjs, accountBound false, anchorAcId matching the assetsBlockEmitted AC) that parses the applied fixture wrangler.toml and asserts the [assets] block presence, the run_worker_first presence and absence of any Pages-only pages_build_output_dir field, and two new elicited parameters on blueprint.json elicits[] (assets-directory kind string default empty for the bare-Worker shape; run-worker-first kind boolean default false). The shipped v1.1.0 contribution set (REQs 001 through 012, USs 12101 through 12112, TACs 1301 through 1306, ADRs 1301 through 1305, deploymentTarget global topic, suggestedCompanions logging and errorHandling) carries through unchanged. No capability minted, no new global topic, no runtime dependency added. Ships packages/rcf-lite/test/fixtures/cf-platform/ as the shared sample-app fixture that T-1 through T-3 and T-5 extend. HQ sequential chain-id block: REQ-029 / US-2901 / US-2902 / TS-073 / TS-074 / FBS-063 / CN-209 minted via --id after HQ round-4 T-5 landed at REQ-028 and Dex round-5 T-3 landed at REQ-042 per HQ mid-flight ruling on repo-chain id blocks per train.",
   "category": "functional",
   "domain": "deploy",
@@ -53,5 +53,8 @@
         "match": "page"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:deploy"
+  ]
 }

package/rcf/requirements/req-030.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T09:09:31.409Z",
-  "updatedAt": "2026-09-07T09:09:31.438Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-0 SPA fallback discipline half of the Cloudflare round 6 T-0 delta (2026-09-06 section 5.0). The blueprint gains one new REQ contribution (deploy-cloudflare-workers-REQ-014 SPA fallback discipline via elicited run_worker_first: when true, the Worker script runs before asset lookup for arbitrary routing; when false or unanswered, static asset lookup runs first and the Worker handles only unmatched paths), one new US contribution (deploy-cloudflare-workers-US-12115 migrate-from-Pages guidance in the guide section) that links the Cloudflare migrate-from-Pages guide from the ADR-1306 verbatim landing-page quote, one new elicit (run-worker-first kind boolean default false; the spec's intended when-predicate {elicitedNonEmpty: [assets-directory]} is NOT shipped this round because the loader's supported when block only accepts requiresCapability arrays per src/blueprint/loader.js validateElicits, and the elicit fires unconditionally with the guide teaching that a non-empty assets-directory is what makes run_worker_first meaningful; the loader extension is captured under CONCERNS on the PR, not blocking T-0). The T-0 probe module assets-manifest-scan.mjs anchors AC-2902-1 (the spaFallbackShape canonical AC) via a Node-only source-tree scan of the applied fixture wrangler.toml. The one new ADR ADR-1306-deploy-cloudflare-workers-spa-shape carries the verbatim Cloudflare Pages landing-page quote (Workers supports most Pages use cases and offers a broader feature set. It is Cloudflare's primary platform for building applications. Start new projects with Workers.), standardsTraceClause Cloudflare Pages landing-page recommendation 2026-09-06, recommendedDefault true. HQ sequential chain-id block: REQ-030 / US-3001 / TS-075 minted via --id.",
   "category": "functional",
   "domain": "deploy",
@@ -63,5 +63,8 @@
         "match": "page"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:deploy"
+  ]
 }

package/rcf/requirements/req-040.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T16:59:00.000Z",
-  "updatedAt": "2026-09-06T16:59:00.000Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-040",
   "prdId": "PRD-001",
   "title": "Persistence-data-postgres v1.0.0 blueprint on the shelf with six Node-only probes proven against a postgres:17-alpine container",
@@ -9,5 +9,8 @@
   "domain": "application",
   "priority": "must",
   "version": "0.1.0",
-  "status": "draft"
+  "status": "draft",
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-041.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T17:49:13.077Z",
-  "updatedAt": "2026-09-06T17:49:13.110Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "The rcf-lite shelf ships the object-storage-s3 v1.0.0 blueprint (blueprints/object-storage-s3/) with 21 contributions per the ratified infra round 5 spec section 5.2: 6 REQs (facade sole-reader over the S3 client; put / get / delete / list on typed keys; presigned GET URL with bounded TTL; multipart-upload above elicited threshold; four lifecycle events with metadata-only fields; credential-pair discipline via security-secrets-management), 8 USs 28101-28108 binding runtime-observable ACs, 3 TACs (2901 facade, 2902 multipart uploader, 2903 event sink), 4 ADRs (2901 adapter elicited between @aws-sdk/client-s3 and aws4fetch, 2902 presigned TTL default 15 minutes floor 1 minute, 2903 multipart threshold default 8 MiB, 2904 objectStorageContract scope global). The blueprint declares suggestedCompanions logging and errorHandling with spec section 5.2 reasons, providesRoles absent, capabilities [objectStorage], requiresAppliedCapabilities absent. Contributes ADR-2904 as scope:global on new topic objectStorageContract so future non-S3-shape siblings (object-storage-native-gcs, object-storage-native-azure) conflict here by design. Ships six Node-only probes under blueprints/object-storage-s3/contributions/probes/ (facade-round-trip, put-get-round-trip, presigned-url, multipart-upload, event-secrecy, r2-real-account-smoke) each exporting the spec section 3.2 verdict envelope with an anchorAcId matching a contributed AC id, and matching run-<probe-name>.mjs shims writing per-blueprint reports at .rcf/reports/blueprints/object-storage-s3/<probe-name>.json per spec section 3.4. Five probes are local-first (accountBound false); r2-real-account-smoke carries accountBound:true and records the accountBoundSkipped shape per spec section 3.5 without CI_HAS_CLOUDFLARE_ACCOUNT. Ships the T-2 side of the shared sample-app fixture at packages/rcf-lite/test/fixtures/infra-s3-and-queue/ (T-3 shares the fixture and adds its own wrangler-dev src branch) with MinIO under docker compose, @aws-sdk/client-s3 as the fixture's own runtime dep, an S3 facade over MinIO, a security-secrets-management shim realising the secretRef opaque-string contract from a project-local .rcf/secrets/dev.env file, and a README naming docker and podman incantations plus four wired induced-failure switches. Extends packages/rcf-lite/docs/blueprint-authoring.md section 6a capability-declaration table with one row for objectStorage per spec section 5.6. Appends one row for object-storage-s3 at US band 28101-28899 / ADR-TAC suffix block 29xx to the shelf-wide id-band registry table under docs/topics.md on every shipped blueprint. Refuses composition when security-secrets-management is not applied with exit 3 and stable message id object-storage-s3-no-secrets on stderr; --allow-no-secrets-yet override records a note on source.notes for later reconciliation. Minted with HQ's reserved round-5 chain-id block via --id (REQ-041 / US-4101 / TS-071 / FBS-061 / CN-203..205) after T-1 minted at 040 / 4001 / 070 / 060 / 200..202; the block reservation avoids next-id racing with HQ's train while T-1 sits open.",
   "category": "functional",
   "domain": "application",
@@ -121,5 +121,8 @@
         "match": "storage"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-042.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T19:16:55.365Z",
-  "updatedAt": "2026-09-06T19:16:55.402Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "category": "functional",
   "domain": "application",
   "priority": "must",
@@ -55,5 +55,8 @@
         "match": "page"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-043.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-06T20:28:34.000Z",
-  "updatedAt": "2026-09-07T10:18:08.299Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "category": "functional",
   "domain": "application",
   "priority": "must",
@@ -35,5 +35,8 @@
         "match": "endpoint"
       }
     ]
-  }
+  },
+  "tags": [
+    "capability:applications-shelf"
+  ]
 }

package/rcf/requirements/req-050.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T10:18:25.168Z",
-  "updatedAt": "2026-09-07T10:20:10.276Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-050",
   "prdId": "PRD-001",
   "title": "T-1 platform-cloudflare-kv v1.0.0 blueprint: the KV facade module is the sole reader of the KV binding and opens on boot with facadeReady",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T10:18:25.198Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-051.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T10:18:25.373Z",
-  "updatedAt": "2026-09-07T10:20:10.276Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-051",
   "prdId": "PRD-001",
   "title": "T-1 typed put get delete list verbs with metadata field pattern realise the Workers KV binding shape behind the facade",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T10:18:25.402Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-052.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T10:18:25.579Z",
-  "updatedAt": "2026-09-07T10:20:10.276Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-052",
   "prdId": "PRD-001",
   "title": "T-1 cache-aside helper reads local first falls back to origin and writes back with elicited TTL floor 1 second",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T10:18:25.608Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-053.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T10:18:25.784Z",
-  "updatedAt": "2026-09-07T10:20:10.276Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-053",
   "prdId": "PRD-001",
   "title": "T-1 lifecycle events facadeReady kvHit kvMiss kvWrite carry metadata-only fields key size ttl timestamp",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T10:18:25.813Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-054.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T10:18:25.999Z",
-  "updatedAt": "2026-09-07T10:20:10.276Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-054",
   "prdId": "PRD-001",
   "title": "T-1 eventual-consistency note in the guide: a write may not appear on a global read within the same request and the elicited TTL sets the staleness ceiling",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T10:18:26.039Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-060.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T12:26:47.779Z",
-  "updatedAt": "2026-09-07T12:26:47.813Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-2 platform-cloudflare-cron-triggers v1.0.0: one scheduled() handler in the applied project source tree is the SOLE reader of the Cloudflare Workers Cron Trigger event (the event handler shape documented at https://developers.cloudflare.com/workers/configuration/cron-triggers/). The handler binds on boot, wires the dispatcher (REQ-061) and the event sink (per TAC-3303), and emits a cronReady lifecycle event on the injected sink with a metadata-only payload. Chain: HQ round-6 T-2 reserved-block per HQ chain-block ruling 2026-09-07T12:25Z.",
   "category": "functional",
   "domain": "platform",
@@ -16,5 +16,8 @@
     ],
     "reason": "keyword-scan",
     "classifiedAt": "2026-09-07T12:26:47.812Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-061.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T12:26:47.991Z",
-  "updatedAt": "2026-09-07T12:28:41.280Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-2 platform-cloudflare-cron-triggers v1.0.0: the dispatcher module accepts an ordered map of cron-expression to handler pairs and, on every scheduled() invocation, matches the incoming Cron Trigger event's cron expression against the map and routes exactly to the matched handler. An unmatched expression records an unmatchedExpression event on the sink and the scheduled invocation returns without side effect. The routed handler receives a bounded context {expression, scheduledTime, sink} so its own emissions can be attributed. Chain: HQ round-6 T-2 reserved-block per HQ chain-block ruling 2026-09-07T12:25Z.",
   "category": "functional",
   "domain": "platform",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T12:29:00.000Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-062.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T12:26:48.199Z",
-  "updatedAt": "2026-09-07T12:26:48.232Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-2 platform-cloudflare-cron-triggers v1.0.0: an elicited skew-tolerance window (default 30 seconds per ADR-3303; floor 5s, ceiling 5 minutes) governs how the dispatcher classifies a fire. If the observed handler start time is within the window of the event's scheduledTime, the fire's outcome is onTime and a cronFired event carries {expression, scheduledTime, outcome: onTime, duration}. If the observed start is outside the window, a cronSkewed event fires with the delta (observed minus scheduled, in milliseconds) and the outcome is skewed; the handler still runs. Chain: HQ round-6 T-2 reserved-block per HQ chain-block ruling 2026-09-07T12:25Z.",
   "category": "functional",
   "domain": "platform",
@@ -16,5 +16,8 @@
     ],
     "reason": "keyword-scan",
     "classifiedAt": "2026-09-07T12:26:48.230Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-063.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T12:26:48.409Z",
-  "updatedAt": "2026-09-07T12:26:48.442Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "description": "T-2 platform-cloudflare-cron-triggers v1.0.0: an elicited soft-budget duration (default 30 seconds per elicited answer, no floor) governs when a running handler is flagged as stalled. The dispatcher never terminates a handler on soft-budget breach (Cloudflare's platform concern is the sole terminator); it fires a cronStalled event with metadata-only payload {expression, scheduledTime, outcome: stalled, duration, softBudgetMs} at the moment the observed duration crosses the budget and lets the handler continue. Every scheduled-side event record on the sink carries only {expression, scheduledTime, outcome, duration} plus the event tag; handler input closures, PII fields and body bytes never cross the sink boundary. Chain: HQ round-6 T-2 reserved-block per HQ chain-block ruling 2026-09-07T12:25Z.",
   "category": "functional",
   "domain": "platform",
@@ -16,5 +16,8 @@
     ],
     "reason": "keyword-scan",
     "classifiedAt": "2026-09-07T12:26:48.441Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-070.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T14:11:36.742Z",
-  "updatedAt": "2026-09-07T14:13:26.508Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-070",
   "prdId": "PRD-001",
   "title": "T-3 platform-cloudflare-durable-objects v1.0.0 blueprint: the DO facade is the sole reader of env.CELL and env.HUB and opens on boot with namespaceReady",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T14:11:36.775Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-071.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T14:11:36.953Z",
-  "updatedAt": "2026-09-07T14:13:26.508Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-071",
   "prdId": "PRD-001",
   "title": "T-3 single-cell shape exposes typed domain verbs and serialises concurrent invocations per instance",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T14:11:36.986Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }

package/rcf/requirements/req-072.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-07T14:11:37.164Z",
-  "updatedAt": "2026-09-07T14:13:26.508Z",
+  "updatedAt": "2026-09-22T13:47:34.538Z",
   "reqId": "REQ-072",
   "prdId": "PRD-001",
   "title": "T-3 storage API provides typed put/get/delete on the object with an elicited backend (SQL or KV)",
@@ -14,5 +14,8 @@
     "shapes": [],
     "reason": "content-pending",
     "classifiedAt": "2026-09-07T14:11:37.197Z"
-  }
+  },
+  "tags": [
+    "capability:platform-integrations"
+  ]
 }