rcf-lite 0.28.2 → 0.28.4

package/rcf/tacs/tac-4121-define-ledgers.json

@@ -0,0 +1,23 @@
+{
+  "createdAt": "2026-09-24T12:00:00Z",
+  "updatedAt": "2026-09-24T12:00:00Z",
+  "tacId": "TAC-4121-define-ledgers",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "define ledgers module and rcf define ledger CLI",
+  "purpose": "The four sidecar ledgers land under rcf/define/ as one JSON file each, with one numbered sequence per ledger for the life of the project. The pure module src/define/ledgers.js exposes LEDGER_NAMES (the four allowed values), BRIEF_KINDS, LedgerError, emptyLedger, ledgerRelPath, ledgerPath, loadLedger, saveLedger, validateLedger, addEntry, resolveEntry, nextIdFor, parseBriefFromFile and loadAllLedgers (returns a LedgerBundle for computeDelta). The CLI verb src/cli/ledger.js wraps the module with parseArgs, wires under bin/rcf.js's define group as GROUPS.define.ledger, and prints usage text also mounted in src/cli/help.js's HELP_MAP.define.ledger so `rcf help define ledger` and `rcf define ledger --help` render the same block by construction.",
+  "responsibilities": [
+    "src/define/ledgers.js: LEDGER_NAMES = ['brief','decisions','concerns','probes']; per-ledger config maps a name to its filename (brief-ledger.json, decisions-ledger.json, concern-ledger.json, probe-ledger.json) and its body array key (statements | decisions | concerns | probes).",
+    "loadLedger returns emptyLedger(name) on ENOENT; a malformed file raises LedgerError with a code ('parseFailure' | 'schemaFailure' | 'ioFailure' | 'usage') and a named field.",
+    "addEntry mints the next id (highest current + 1), stamps addedAt and defaults status open, validates the resulting body before returning it, refuses unknown BRIEF_KINDS at validation.",
+    "resolveEntry flips status to resolved, stamps resolvedAt, throws LedgerError code 'usage' when the id is unknown, is idempotent-ish (resolving twice refreshes resolvedAt).",
+    "parseBriefFromFile splits by non-empty lines, strips leading '- ', '* ' or '<n>. ' bullets, defaults kind to 'capability', and threads --source through to every draft.",
+    "src/cli/ledger.js: `rcf define ledger <name> <verb>` argv parsing; verbs add / resolve / list; ledger-specific flags for each; renderDecisionsList formats the #241 numbered layout; list --json emits { ledger, <arrayKey>: [...] }.",
+    "bin/rcf.js: register GROUPS.define.ledger; src/cli/help.js: import LEDGER_HELP and wire into HELP_MAP.define.ledger + DEFINE_HELP + top-level DEFINE listing so per-verb help stays single-sourced."
+  ],
+  "internalStructure": "The walker never reads under rcf/define/: subdirFor in src/core/store/loader.js returns null for anything that is not a known child kind (requirements, user-stories, tacs, adrs, fbs, test-suites, code-nodes, evals), so a ledger file sitting under rcf/define/ is never enumerated for schema validation. The walker-invisibility invariant is proved by a dedicated test that seeds the four ledger files plus a bug-bait req-shaped file under rcf/define/ and asserts zero walker error paths starting with rcf/define/ and no matching id in tree.byId. Validation is JSON-schema-shaped inline (no ajv, no @stravica-ai/rcf-schemas dependency) because the sidecars ride outside the shared schema until schemas 0.7 (ADR-4121).",
+  "interfaces": [],
+  "notes": "The intake-scan-against-frozen-statements hook on brief add --from is a named seam this slice leaves for a later one: 'rcf discover intake' is the intended caller in slice 2's D1 gate check, and this slice ensures the CLI has one place to inject that seam without a second refactor. `list --json` is a keep-alive for slice 5's viewer, which will render the same object over http."
+}

package/rcf/tacs/tac-4122-define-gates.json

@@ -0,0 +1,25 @@
+{
+  "createdAt": "2026-09-24T14:30:00Z",
+  "updatedAt": "2026-09-24T15:48:40Z",
+  "tacId": "TAC-4122-define-gates",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "define stage gates D1..D8",
+  "purpose": "src/query/gates.js lands as a new pure module beside delta.js. Every stage has one exported check function that takes (tree, context) and returns the { stage, gate, state, checks[] } shape section 2.4 pins. computeReadiness (TAC-4123) is the composer; every gate function is otherwise consumable in isolation for tests and for future viewers that render one stage. No I/O, no state, no time: the caller supplies ledgers, profile, freeze, delta, validate errors, probe count and coverage rollups.",
+  "responsibilities": [
+    "src/query/gates.js: STAGE_ORDER = ['D1','D2','D3','D4','D5','D6','D7','D8']; STAGE_GATES map (D1 -> 'define.brief' etc.); INTERFACE_KINDS closed set matching proposal section 5.2; STAGE_SHORT_NAMES map (D1 -> 'brief' etc.).",
+    "checkD1Brief: intake acknowledged (brief-ledger has at least one statement since the freeze high-water mark), every statement kinded from BRIEF_KINDS, every openQuestion statement resolved or promoted to a decisions-ledger entry, profile.md carries surface (viewer | runningApp | prDiff) and register (productOwner | engineer | unstated) markers.",
+    "checkD2Skeleton: every 'capability' and 'constraint' statement in scope resolves to a REQ (via a REQ id in the statement's resolvedBy field OR by name-match against a REQ title, cheap check); every REQ in scope has non-TODO description, shapeClassification and domain; TAD dataStores and coreEntities non-empty when any persistence REQ exists; exactly one deploy or deferral ADR tree-wide (title prefix 'Deploy target:' or 'Deploy deferral:').",
+    "checkD3Shapes: every TAC in scope has at least one interface; every interface's kind is in INTERFACE_KINDS. Template markers, entity join, ownerRef resolution and path resolution are seams (0.30).",
+    "checkD4Stories: every REQ in scope has at least one US (fbsByAcId inversion via reqByUs is enough); every US in scope has a testable AC (ac.testable !== false and description non-empty), a failure AC or a project-scoped or req-scoped opt-out with baselineKey 'defineD4:failure', a must-not AC or an opt-out with baselineKey 'defineD4:mustNot', tacIds non-empty and every id resolving to a walker-known TAC, and no AC description containing the scaffold TODO placeholder pattern (case-sensitive uppercase 'TODO:' with a colon -- the literal shape src/core/store/init.js writes; incidental prose mentioning 'todo' does NOT trip the gate, and the validate CLI's broader whole-word notice stays separate).",
+    "checkD5Crosscut: TAD.securityArchitecture non-empty when tree carries any REQ with shape 'auth' or 'httpApi'; TAD.operationalConcerns non-empty when any AC description carries the '[deployed]' marker; every concern-ledger entry on a REQ in scope has disposition applied or waived (no status 'open').",
+    "checkD6Consistency: caller-supplied validateErrors is empty (tree-wide); caller-supplied probeOpenCount is zero.",
+    "checkD7Decisions: no decisions-ledger entry with status 'open'.",
+    "checkD8Freeze: prior stages passed | acknowledged at the current tree hash; every AC id owned by exactly one FBS (walker.fbsByAcId length 1); computeQueue.nextActionable is not null (queue head actionable) and the head's title is not 'TODO' or empty; validateErrors empty."
+  ],
+  "internalStructure": "Every stage function follows the same shape: 1) decide notApplicable per section 3.2 and return { state: 'notApplicable' } with a single-check summary; 2) build checks[] as a list of { name, ok, over, pass, total, failing: [{ id, why }] }; 3) fold to state: 'passed' if every ok is true; 'failing' otherwise, unless the stage is D3/D5/D6 AND freeze.gates[<gate>].state === 'acknowledged' AND freeze.gates[<gate>].at.hash === currentTreeHash, in which case state is 'acknowledged'. Blocking-vs-warn is a property of the stage, not of the state: D3/D5/D6 use the acknowledged fold, D1/D2/D4/D7/D8 do not. The caller (readiness) folds the array of stage results into freezeable and nextAction.",
+  "interfaces": [],
+  "notes": "Slice-3 hook (rcf define freeze): reads state to refuse on any 'failing'; --ack <gate> --reason <text> writes freeze.gates[<gate>] = { state: 'acknowledged', at: { hash: <currentTreeHash>, reason: <text>, by: <id> } } and re-runs computeReadiness to check freezeable. Slice-5 hook (viewer): reads the same object end-to-end."
+}

package/rcf/tacs/tac-4123-define-readiness.json

@@ -0,0 +1,25 @@
+{
+  "createdAt": "2026-09-24T14:30:00Z",
+  "updatedAt": "2026-09-24T15:48:40Z",
+  "tacId": "TAC-4123-define-readiness",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "computeReadiness compute and rcf define readiness CLI",
+  "purpose": "src/query/readiness.js and src/cli/readiness.js land as a matched pair. The pure module composes computeDelta, computeImpact, the eight gate check functions from TAC-4122, computeCoverage, and the decisions ledger into the single-object contract section 2.4 pins; the CLI is its twin. Text output for readable status; --json for machine consumers and the viewer slice; --check <stage>|all for targeted inspection with the same 0-green / 4-red exit shape rcf audit coverage uses.",
+  "responsibilities": [
+    "src/query/readiness.js: computeReadiness(tree, { freeze, ledgers, profile, testPointers }) returns { tree, delta, stages, nextAction, coverage, decisions, freezeable } exactly as section 2.4 specifies; internal computeScope collects changed + added + impacted ids into a Set; internal composeStages calls each check function in D1..D8 order; internal computeNextAction picks the first failing stage and check; internal deriveTreeSummary shortens the tree hash to eight characters for the tree line.",
+    "src/query/readiness.js: computeImpact is called once per id in changed union added; impacted is the deduplicated union of every impact node id excluding the pivots; impactedFbs is the subset with kind 'fbs' AND actionNeeded === 're-execute'.",
+    "src/query/readiness.js: computeCoverage is called once tree-wide (strict per-AC, testPointers threaded through) for coverage.tree; coverage.delta is one CoverageResult per unique REQ ancestor of the delta ids (via tree.parentByChild walk to the reqId, or the doc's own reqId field).",
+    "src/query/readiness.js: freezeable is true when every stage state in ['passed', 'acknowledged', 'notApplicable'] and false otherwise; nextAction is null when freezeable is true.",
+    "src/cli/readiness.js: parseArgs on --json, --check, --help; findProjectRoot; walkTree; loadFreezeRecord; loadAllLedgers; resolveTestPointers; runWithAdmissibilityGate wraps a producer that invokes computeReadiness; on refuse the CLI prints an informational '[warn] readiness: chain admissibility refused (informational; the readiness compute still ran).' on stderr and STILL runs the compute so the diagnostic reports which stage blocks (readiness is a diagnostic, not a gate that hides its answer); the top-level exit stays 0 in that case and --check <stage> follows its normal per-stage exit rule; on ok the CLI renders text (default) or JSON.",
+    "src/cli/readiness.js: text output = tree line, next-action line, chip line (D1..D8 with state color words), stage-by-stage failing items (checks with failing ids); --check exits 4 for a blocking stage that is failing, 0 with a stderr [warn] for a warn-with-ack stage that is failing but not acknowledged, 0 otherwise.",
+    "src/define/ledgers.js (P3 resolution): loadAllLedgers checks each ledger file's existence with statPath and omits missing files from the returned bundle; loadLedger keeps returning an empty ledger on ENOENT so single-ledger callers retain the ergonomic default.",
+    "bin/rcf.js: register GROUPS.define.readiness -> readinessMain; src/cli/help.js: import READINESS_HELP and wire into HELP_MAP.define.readiness + DEFINE_HELP + top-level DEFINE listing.",
+    "src/query/index.js: export computeReadiness (plus its subhelpers where useful for tests) so downstream consumers (slice 3 freeze, slice 5 viewer) import through the same seam every other query verb does."
+  ],
+  "internalStructure": "readiness.js is a linear composer: 1) compute delta and its docHashes; 2) fan-out impacted / impactedFbs; 3) build stage context (freeze, delta, scope, ledgers, profile, validateErrors, probeOpenCount, coverageTree); 4) call the eight check functions; 5) fold freezeable and nextAction. The CLI parses flags, loads the tree once, loads the four ledgers and the freeze record once, computes the readiness, then routes to the text or JSON emitter. --check maps its argument to the STAGE_SHORT_NAMES map (brief -> D1 ... freeze -> D8) or accepts D1..D8 directly. The runWithAdmissibilityGate wrap sits inside main so refusals ride the same exit path as coverage's admissibility refusals.",
+  "interfaces": [],
+  "notes": "Slice-3 hook (rcf define freeze) reads freezeable and stages[].state; --ack <gate> writes into freeze.gates[<gate>] and re-computes readiness. Slice-5 hook (viewer) fetches the same JSON object over the existing tab wire and renders the pill vocabulary + findings-list + diff components. Performance seam: computeImpact per id on a whole-tree delta (before freeze) may be quadratic on very large trees; the compute stays fast on the dogfood chain (~700 documents, sub-second) but the CLI notes the wall time in text mode so an operator can spot regression."
+}

package/rcf/test-suites/ts-204.json

@@ -0,0 +1,30 @@
+{
+  "id": "TS-204",
+  "usId": "US-17001",
+  "title": "Product Map shape grouping",
+  "purpose": "Cover the shape-grouping renderer and its drill-down for AC-17001-1 and AC-17001-2.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17001-1",
+    "AC-17001-2"
+  ],
+  "testCases": [
+    {
+      "id": "TC-204-shape-buckets-present",
+      "acId": "AC-17001-1",
+      "description": "Rendering the tree emits a product-map tab with shape buckets covering every classified shape plus Unclassified and Business rules.",
+      "status": "passing",
+      "testPointer": "test/view/product-map.test.js::product-map shape grouping renders one bucket per shape plus Unclassified and Business rules"
+    },
+    {
+      "id": "TC-204-shape-drill-req-us-ac",
+      "acId": "AC-17001-2",
+      "description": "The shape grouping drills bucket -> REQ (status pill) -> US -> AC using the shared detailsWrap helper; every id inside the Product Map tab is bucket-scoped so the same REQ can appear under multiple buckets without duplicating ids.",
+      "status": "passing",
+      "testPointer": "test/view/product-map.test.js::product-map shape grouping drills bucket to REQ to US to AC with status pill, ids scoped to the bucket (P2-1)"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T18:02:10.540Z"
+}

package/rcf/test-suites/ts-205.json

@@ -0,0 +1,22 @@
+{
+  "id": "TS-205",
+  "usId": "US-17002",
+  "title": "Product Map status filter",
+  "purpose": "Cover AC-17002-1: status filter control and empty-bucket collapse.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17002-1"
+  ],
+  "testCases": [
+    {
+      "id": "TC-205-status-filter-control",
+      "acId": "AC-17002-1",
+      "description": "The tab renders a status filter with six options; server-rendered outer pm-req counts per status match a model-side prediction across every grouping (the same DOM the client-side applyPmStatusFilter reads).",
+      "status": "passing",
+      "testPointer": "test/view/product-map.test.js::product-map status filter markup + server-rendered per-bucket status counts match the model (P2-3 real assertion)"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T18:02:10.757Z"
+}

package/rcf/test-suites/ts-206.json

@@ -0,0 +1,22 @@
+{
+  "id": "TS-206",
+  "usId": "US-17003",
+  "title": "Product Map component grouping",
+  "purpose": "Cover AC-17003-1: TAD-rooted TAC hierarchy with Unmapped bucket.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17003-1"
+  ],
+  "testCases": [
+    {
+      "id": "TC-206-component-tad-root",
+      "acId": "AC-17003-1",
+      "description": "Component grouping shows TAD -> TAC (with dependencies) -> US -> REQ -> AC, with an Unmapped bucket for REQs no component reaches.",
+      "status": "passing",
+      "testPointer": "test/view/product-map.test.js::product-map component grouping roots at TAD and lists TAC to US to REQ to AC with an Unmapped bucket"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z"
+}

package/rcf/test-suites/ts-207.json

@@ -0,0 +1,22 @@
+{
+  "id": "TS-207",
+  "usId": "US-17004",
+  "title": "Product Map trace coverage",
+  "purpose": "Cover AC-17004-1: each REQ bucketed by trace completeness with a plain-text \"what is missing\" line.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17004-1"
+  ],
+  "testCases": [
+    {
+      "id": "TC-207-trace-coverage-buckets",
+      "acId": "AC-17004-1",
+      "description": "Trace coverage grouping buckets each REQ into the FIRST bucket whose rule it meets (missing-stories, missing-ac-scope, missing-component, missing-tests, complete); a synthetic fixture asserts the classification per REQ id, including the P1-4 dangling-TAC case landing in missing-component.",
+      "status": "passing",
+      "testPointer": "test/view/product-map.test.js::product-map trace coverage places each REQ in the FIRST bucket whose condition it meets, on a synthetic fixture (P2-3)"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T18:02:10.973Z"
+}

package/rcf/test-suites/ts-208.json

@@ -0,0 +1,22 @@
+{
+  "id": "TS-208",
+  "usId": "US-17005",
+  "title": "Product Map capability grouping",
+  "purpose": "Cover AC-17005-1: capability:<slug> tag consumption and Unclassified bucket.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17005-1"
+  ],
+  "testCases": [
+    {
+      "id": "TC-208-capability-buckets",
+      "acId": "AC-17005-1",
+      "description": "Capability grouping enumerates one bucket per distinct capability:<slug> tag; multi-tag REQs appear in each bucket; untagged REQs go to Unclassified.",
+      "status": "passing",
+      "testPointer": "test/view/product-map.test.js::product-map capability grouping enumerates one bucket per capability slug with Unclassified for untagged REQs"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z"
+}

package/rcf/test-suites/ts-209.json

@@ -0,0 +1,22 @@
+{
+  "id": "TS-209",
+  "usId": "US-17101",
+  "title": "Dogfood REQs carry capability tags",
+  "purpose": "Cover AC-17101-1: every REQ file carries at least one capability:<slug> tag drawn from the documented taxonomy.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17101-1"
+  ],
+  "testCases": [
+    {
+      "id": "TC-209-every-req-has-capability-tag",
+      "acId": "AC-17101-1",
+      "description": "Every requirement file under packages/rcf-lite/rcf/requirements/ carries at least one capability:<slug> tag, and each slug is listed in docs/capability-tags.md.",
+      "status": "passing",
+      "testPointer": "test/view/capability-tags.test.js::every dogfood REQ carries at least one capability tag mapped to a documented slug"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z"
+}

package/rcf/test-suites/ts-210.json

@@ -0,0 +1,22 @@
+{
+  "id": "TS-210",
+  "usId": "US-17102",
+  "title": "Capability taxonomy documented",
+  "purpose": "Cover AC-17102-1: docs/capability-tags.md exists and is linked from docs/README.md.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17102-1"
+  ],
+  "testCases": [
+    {
+      "id": "TC-210-taxonomy-doc-present",
+      "acId": "AC-17102-1",
+      "description": "docs/capability-tags.md exists, lists every taxonomy slug with a one-line meaning, states the \"add a capability\" rule, and is linked from docs/README.md.",
+      "status": "passing",
+      "testPointer": "test/view/capability-tags.test.js::docs carry the capability taxonomy and link to it from the docs README"
+    }
+  ],
+  "status": "approved",
+  "createdAt": "2026-09-21T17:00:00.000Z",
+  "updatedAt": "2026-09-21T17:00:00.000Z"
+}

package/rcf/test-suites/ts-211.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-21T18:46:16.398Z",
+  "updatedAt": "2026-09-21T18:46:16.604Z",
+  "purpose": "Cover the collapsed-by-default buckets, jump-nav rail, per-status mini counts, expand/collapse-all and open-bucket hash restore for AC-17006-1.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17006-1"
+  ],
+  "id": "TS-211",
+  "usId": "US-17006",
+  "title": "Product Map interaction model",
+  "testCases": [
+    {
+      "id": "TC-211-interaction-model-buckets",
+      "acId": "AC-17006-1",
+      "description": "Every bucket renders as a collapsed <details class=pm-bucket> with a per-status mini row and a jump-nav chip row per grouping.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map buckets are <details class=\"pm-bucket\"> collapsed by default with a per-status mini row (AC-17006-1)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-212.json

@@ -0,0 +1,22 @@
+{
+  "createdAt": "2026-09-21T18:46:16.821Z",
+  "updatedAt": "2026-09-21T18:46:17.106Z",
+  "purpose": "Cover the initial-render skeletons and raw-JSON suppression the lazy render depends on for AC-17007-1.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17007-1"
+  ],
+  "id": "TS-212",
+  "usId": "US-17007",
+  "title": "Product Map lazy first-load payload",
+  "testCases": [
+    {
+      "id": "TC-212-lazy-skeletons",
+      "acId": "AC-17007-1",
+      "description": "Initial contentHtml emits data-pm-lazy=true skeletons for every grouping and never inlines a raw-JSON disclosure inside a pm-req card.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map lazy render: initial contentHtml emits skeletons for every grouping (AC-17007-1)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-213.json

@@ -0,0 +1,50 @@
+{
+  "createdAt": "2026-09-22T11:59:39Z",
+  "updatedAt": "2026-09-22T15:00:00Z",
+  "purpose": "Cover the blueprint badge on every REQ row and the by-blueprint grouping (bucket per applied blueprint plus Application bucket, capability second level, hash round-trip, /product-map/blueprint partial endpoint) for AC-17008-1.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17008-1"
+  ],
+  "id": "TS-213",
+  "usId": "US-17008",
+  "title": "Product Map by-blueprint grouping and blueprint badge",
+  "testCases": [
+    {
+      "id": "TC-213-badge",
+      "acId": "AC-17008-1",
+      "description": "In the shape grouping rendered over a fixture project that applies one blueprint contributing two REQs, both contributed REQ rows carry a pm-blueprint-badge in their summary while the non-blueprint (Application) REQ rows do not.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map: blueprint badge on every contributed REQ row across groupings (AC-17008-1)"
+    },
+    {
+      "id": "TC-213-buckets",
+      "acId": "AC-17008-1",
+      "description": "The by-blueprint grouping over a fixture with one applied blueprint (2 contributed REQs) and 2 non-blueprint REQs renders exactly two buckets: a blueprint bucket with count 2 and an Application bucket with count 2.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map: by-blueprint grouping yields one bucket per applied blueprint plus an Application bucket (AC-17008-1)"
+    },
+    {
+      "id": "TC-213-capability-second-level",
+      "acId": "AC-17008-1",
+      "description": "Inside each by-blueprint bucket the second level is capability (existing capability:<slug> tags), then requirement rows, then the usual drill-down.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map: by-blueprint bucket second level is capability then REQ (AC-17008-1)"
+    },
+    {
+      "id": "TC-213-hash-and-lazy-endpoint",
+      "acId": "AC-17008-1",
+      "description": "The inline script's PM_GROUPS constant lists 'blueprint', the lazy fetch endpoint /product-map/blueprint is exposed on the pre-rendered pmPartials, and renderProductMapGrouping(model, 'blueprint') returns a non-empty string.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map: by-blueprint grouping wired into PM_GROUPS, pmPartials and renderProductMapGrouping (AC-17008-1)"
+    },
+    {
+      "id": "TC-213-empty-blueprints",
+      "acId": "AC-17008-1",
+      "description": "A project with no applied blueprints (manifest.blueprints empty) renders the by-blueprint grouping with a single Application bucket and no error banner.",
+      "status": "pending",
+      "testPointer": "test/view/product-map.test.js::product-map: by-blueprint grouping on a project with no applied blueprints renders a single Application bucket (AC-17008-1)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-214.json

@@ -0,0 +1,74 @@
+{
+  "createdAt": "2026-09-24T12:00:00Z",
+  "updatedAt": "2026-09-24T12:00:00Z",
+  "purpose": "Cover the delta-detection primitives (hashDocument, computeTreeHash, computeDelta) and the freeze record I/O (load, save, validate) against AC-17201-1..4 on US-17201.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17201-1",
+    "AC-17201-2",
+    "AC-17201-3",
+    "AC-17201-4"
+  ],
+  "id": "TS-214",
+  "usId": "US-17201",
+  "title": "Delta detection and freeze record primitives",
+  "testCases": [
+    {
+      "id": "TC-214-delta-shape",
+      "acId": "AC-17201-1",
+      "description": "computeDelta returns the shape proposal section 2.2 pins: frozen / frozenAt / treeHash / currentTreeHash / changed / added / removed / briefSince / unchanged, and classifies changed / added / removed correctly against a divergent freeze record.",
+      "status": "pending",
+      "testPointer": "test/query/delta.test.js::delta: changed / added / removed classify against the freeze record"
+    },
+    {
+      "id": "TC-214-unchanged",
+      "acId": "AC-17201-1",
+      "description": "A tree that matches the freeze record produces empty changed / added / removed lists and unchanged equal to the docHashes count.",
+      "status": "pending",
+      "testPointer": "test/query/delta.test.js::delta: an unchanged tree against a matching freeze reports empty changed/added/removed"
+    },
+    {
+      "id": "TC-214-canonical",
+      "acId": "AC-17201-2",
+      "description": "hashDocument is invariant under a whitespace-only reformat: two documents that parse to the same object hash identically and produce zero changed entries in the delta.",
+      "status": "pending",
+      "testPointer": "test/query/delta.test.js::delta: a whitespace-only reformat of a document produces zero changed ids"
+    },
+    {
+      "id": "TC-214-hash-shape",
+      "acId": "AC-17201-2",
+      "description": "hashDocument returns a sha256:<64-hex> string over the canonical JSON form of the parsed document.",
+      "status": "pending",
+      "testPointer": "test/query/delta.test.js::delta: hashDocument returns a sha256:<64-hex> string over the canonical form"
+    },
+    {
+      "id": "TC-214-freeze-missing",
+      "acId": "AC-17201-3",
+      "description": "loadFreezeRecord returns null when rcf/define/freeze.json is absent; a malformed body raises FreezeRecordError with the parseFailure code.",
+      "status": "pending",
+      "testPointer": "test/define/freeze-record.test.js::freeze-record: a malformed JSON body raises FreezeRecordError with parseFailure code"
+    },
+    {
+      "id": "TC-214-freeze-schema",
+      "acId": "AC-17201-3",
+      "description": "A body with a non-sha256 docHashes value is refused with a FreezeRecordError naming the failing docHashes.<id> field.",
+      "status": "pending",
+      "testPointer": "test/define/freeze-record.test.js::freeze-record: docHashes with a non-sha256 value is refused"
+    },
+    {
+      "id": "TC-214-roundtrip",
+      "acId": "AC-17201-4",
+      "description": "saveFreezeRecord followed by loadFreezeRecord round-trips every field including unknown extension fields (counts, litmus, versions, note).",
+      "status": "pending",
+      "testPointer": "test/define/freeze-record.test.js::freeze-record: unknown top-level fields survive a save/load round trip"
+    },
+    {
+      "id": "TC-214-refuse-invalid-write",
+      "acId": "AC-17201-4",
+      "description": "saveFreezeRecord refuses an invalid record and writes nothing to disk.",
+      "status": "pending",
+      "testPointer": "test/define/freeze-record.test.js::freeze-record: saveFreezeRecord refuses to write an invalid record"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-215.json

@@ -0,0 +1,67 @@
+{
+  "createdAt": "2026-09-24T12:00:00Z",
+  "updatedAt": "2026-09-24T12:00:00Z",
+  "purpose": "Cover the four sidecar ledgers, the rcf define ledger CLI (add / resolve / list with --json) and the walker-invisibility invariant on rcf/define/ against AC-17301-1..4 on US-17301.",
+  "testLevel": "integration",
+  "acIds": [
+    "AC-17301-1",
+    "AC-17301-2",
+    "AC-17301-3",
+    "AC-17301-4"
+  ],
+  "id": "TS-215",
+  "usId": "US-17301",
+  "title": "Sidecar ledgers, rcf define ledger and walker invisibility",
+  "testCases": [
+    {
+      "id": "TC-215-brief-add-text",
+      "acId": "AC-17301-1",
+      "description": "rcf define ledger brief add --text mints id 1 with status open, kind capability by default, and writes rcf/define/brief-ledger.json.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI: brief add --text appends a numbered statement"
+    },
+    {
+      "id": "TC-215-brief-refuse-mixed",
+      "acId": "AC-17301-1",
+      "description": "rcf define ledger brief add refuses conflicting --text and --from with a usage-class error (exit 2).",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI: brief add refuses conflicting --text and --from with a usage error"
+    },
+    {
+      "id": "TC-215-decisions-list-241",
+      "acId": "AC-17301-2",
+      "description": "rcf define ledger decisions list prints the numbered #241 format: question, options as 'letter) text', default and blocks labelled on their own lines.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI: decisions list prints the numbered #241 format"
+    },
+    {
+      "id": "TC-215-list-json",
+      "acId": "AC-17301-2",
+      "description": "rcf define ledger <name> list --json emits { ledger, <arrayKey>: [...] } with the same body loadLedger returns.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI: list --json emits the machine-readable envelope"
+    },
+    {
+      "id": "TC-215-brief-from-file",
+      "acId": "AC-17301-3",
+      "description": "rcf define ledger brief add --from <file> splits by non-empty lines, mints sequential ids and writes every statement with the resolved kind.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI: brief add --from <file> splits by non-empty line"
+    },
+    {
+      "id": "TC-215-parse-brief-bullets",
+      "acId": "AC-17301-3",
+      "description": "parseBriefFromFile strips leading '- ', '* ' and '<n>. ' bullets so drafts match the raw statement text.",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::ledgers: parseBriefFromFile splits by non-empty lines and strips bullets"
+    },
+    {
+      "id": "TC-215-walker-invisible",
+      "acId": "AC-17301-4",
+      "description": "walkTree run over a project seeded with rcf/define/freeze.json, the four ledger files and a bug-bait req-999.json under rcf/define/ never surfaces any rcf/define/ path in errors or byId.",
+      "status": "pending",
+      "testPointer": "test/store/walker-invisible-define.test.js::walkTree never surfaces rcf/define/ files as documents in byId"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-216.json

@@ -0,0 +1,78 @@
+{
+  "createdAt": "2026-09-24T14:30:00Z",
+  "updatedAt": "2026-09-24T14:30:00Z",
+  "purpose": "Cover the DEFINE stage-gate check functions D1..D8 (AC-17401-1..8) with unit tests over hand-built TreeModel and ledger fixtures.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17401-1",
+    "AC-17401-2",
+    "AC-17401-3",
+    "AC-17401-4",
+    "AC-17401-5",
+    "AC-17401-6",
+    "AC-17401-7",
+    "AC-17401-8"
+  ],
+  "id": "TS-216",
+  "usId": "US-17401",
+  "title": "Stage gates D1..D8 check functions",
+  "testCases": [
+    {
+      "id": "TC-216-shape",
+      "acId": "AC-17401-1",
+      "description": "Every check function returns { stage, gate, state, checks[] } and every entry in checks[] is { name, ok, over: 'delta'|'tree', pass, total, failing }; failing is empty when ok is true.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: every check function returns the section 2.4 shape"
+    },
+    {
+      "id": "TC-216-blocking-vs-warn",
+      "acId": "AC-17401-2",
+      "description": "Blocking stages fold to failing on any check.ok false; warn-with-ack stages (D3, D5, D6) also fold to failing on any check.ok false unless freeze.gates[<gate>].state === 'acknowledged' AND at.hash === currentTreeHash.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: warn-with-ack fold honours freeze.gates acknowledgement at the current hash"
+    },
+    {
+      "id": "TC-216-not-applicable",
+      "acId": "AC-17401-3",
+      "description": "notApplicable is decided per stage per section 3.2: D2 with no statement of a resolving kind and no REQ/PRD/TAD in scope; D3 with no TAC and no shaped REQ in scope; D5 with no REQ in scope; D7 with no open decisions and profile.skipReviewFor 'singleDocument' and one-document delta.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: notApplicable decision per stage"
+    },
+    {
+      "id": "TC-216-d4-floors",
+      "acId": "AC-17401-4",
+      "description": "checkD4Stories enforces every REQ has US, every US has testable AC + failure AC (parsed by [failure] prefix or opt-out with baselineKey 'defineD4:failure') + must-not AC (or opt-out with 'defineD4:mustNot'), tacIds non-empty and resolving, no TODO placeholder in AC.description.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: D4 floors and per-class opt-outs"
+    },
+    {
+      "id": "TC-216-d3-shapes",
+      "acId": "AC-17401-5",
+      "description": "checkD3Shapes runs only the cheap data-backed checks: every TAC in scope has at least one interface, and every interface kind is in the closed vocabulary. Unknown kinds show up in failing[].",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: D3 interface presence and kind vocabulary"
+    },
+    {
+      "id": "TC-216-d5-crosscut",
+      "acId": "AC-17401-6",
+      "description": "checkD5Crosscut checks TAD.securityArchitecture presence when any REQ has shape 'auth' or 'httpApi'; TAD.operationalConcerns when any AC has '[deployed]' marker; no dangling 'open' concerns on in-scope REQs.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: D5 crosscut cheap checks"
+    },
+    {
+      "id": "TC-216-d6-consistency",
+      "acId": "AC-17401-7",
+      "description": "checkD6Consistency asserts validateErrors is empty tree-wide and probeOpenCount is zero; the richer scans are named seams (0.30).",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: D6 consistency validate + probe count"
+    },
+    {
+      "id": "TC-216-d8-freeze",
+      "acId": "AC-17401-8",
+      "description": "checkD8Freeze asserts prior stages passed/acknowledged, every AC owned by exactly one FBS, computeQueue nextActionable not null, validateErrors empty.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates: D8 tree-wide freeze checks"
+    }
+  ],
+  "status": "draft"
+}