rcf-lite 0.28.4 → 0.30.0

package/rcf/tacs/tac-4127-readiness-view.json

@@ -0,0 +1,49 @@
+{
+  "createdAt": "2026-10-01T18:00:00Z",
+  "updatedAt": "2026-10-01T18:00:00Z",
+  "tacId": "TAC-4127-readiness-view",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "Readiness viewer tab and shared pill, findings-list and diff components",
+  "purpose": "Render the computeReadiness object as tab 1 of the HTML review surface so the viewer and `rcf define readiness --json` share one source of truth. Factor the three visual roles the tab needs (status pill, items list, before-after) into stable modules every tab can call. The tab is pure: it never recomputes readiness; the renderer takes the result object and the profile and emits one HTML string.",
+  "responsibilities": [
+    "src/view/readiness.js: renderReadinessPanel(result, { profile }) returns the eleven ordered blocks in spec section 5 as one HTML string: tree line (formatTreeLine), two verdict pills with formatVerdictLines strings as labels, two per-persona next-action lines, D1..D8 state chips with reason/acknowledgement text on hover, blockers grouped by persona (register orders the pair; non-register group collapses with count visible, never omitted), delta list grouped by REQ ancestor with document-level diff on changed items, per-stage check detail with persona pill and findings list when not ok, coverage tree-versus-delta with re-verify and re-execute counts, decisions outstanding in the #241 numbered format, a Freeze now control enabled iff levels.readyToBuild.ok, and the loaded freeze record.",
+    "src/view/readiness.js: deliberately imports nothing from src/query/ that is not already exported from src/query/index.js (formatVerdictLines, formatTreeLine, shortHash); the renderer never calls computeReadiness and never loads anything from disk.",
+    "src/view/components/pill.js: pill({ value, variant, title?, href? }) returns `<span class=\"rcf-pill rcf-pill--<variant> rcf-pill--<normalisedValue>\" title?>{value}</span>` or an anchor when href is set; the normalisedValue is lowercased and `/` or spaces are collapsed to `-`.",
+    "src/view/components/findings-list.js: findingsList({ heading, count, items }) returns `<div class=\"rcf-findings-list\"><h4>{heading} <span class=\"rcf-findings-list__count\">{count}</span></h4><ul>...<li><a href={anchor}>{id}</a>: {why}</li>...</ul></div>` with ids capped at 20 and a `... N more suppressed` line beyond.",
+    "src/view/components/diff.js: diff(before, after) returns a two-column rendering of two document bodies for the delta list; criterion-level before-and-after is deferred per ADR-4127.",
+    "src/view/html-page.js: Readiness button and tabpanel are the first entries; the former Overview button and panel are relabelled PRD; the data-tab=overview and id=tab-overview identifiers are preserved so existing hash anchors still resolve; the inline-script TABS array gains 'readiness' as the first entry (default active tab) and keeps the existing four entries in order.",
+    "src/view/index.js: renderModelToPage loads the freeze record, ledgers, test pointers and profile text once, invokes computeReadiness via the pure src/query/ seam, and threads the result into the model so renderPage and renderContent carry one computed object; the SSE tree-update broadcast rewalks and recomputes on every change under rcf/."
+  ],
+  "internalStructure": "readiness.js is a sequence of eleven small block builders calling the three shared components; each block consumes exactly one top-level field of the readiness result so a wire-level JSON diff ties to a visible block. The register ordering is picked once at the top via pickRegister (same helper the CLI uses) and threaded down. Hash anchors are built with the same `#<docId>` convention the existing tabs use so blocker-id links open the right tab and expand the right <details> through the existing resolveHash routine.",
+  "interfaces": [
+    {
+      "name": "renderReadinessPanel",
+      "kind": "other",
+      "description": "[draft] Build the Readiness tab inner HTML from the readiness result and the operator profile; pure, no I/O, no recompute."
+    },
+    {
+      "name": "pill",
+      "kind": "other",
+      "description": "[draft] Render one rcf-pill span (or anchor) with a vocabulary class per value."
+    },
+    {
+      "name": "findingsList",
+      "kind": "other",
+      "description": "[draft] Render a heading plus id-anchor list with per-id why strings; ids capped at 20."
+    },
+    {
+      "name": "diff",
+      "kind": "other",
+      "description": "[draft] Render two document bodies side by side; document-level only in 0.29.0."
+    },
+    {
+      "name": "pickRegister",
+      "kind": "other",
+      "description": "[draft] Decide persona ordering from profile.md text; same contract as the CLI helper (productOwner | engineer | unstated)."
+    }
+  ],
+  "notes": "The 0.29.0 scope keeps the diff component document-level only; criterion-level before-and-after is deferred to the UX review per ADR-4127. The pill component is additive and never changes the Product Map `pm-mini` or Requirements `status-chip` markup in this PR; those swaps are follow-ups once a mechanical mapping is established."
+}

package/rcf/tacs/tac-4128-define-guidance.json

@@ -0,0 +1,59 @@
+{
+  "createdAt": "2026-10-02T18:00:00Z",
+  "updatedAt": "2026-10-03T16:10:00Z",
+  "tacId": "TAC-4128-define-guidance",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "DEFINE-stage guidance, prompts and managed rules",
+  "purpose": "serve the DEFINE-stage guidance pages, the argument-free MCP prompts and the managed-block rules that steer the harness through intake and the question loop.",
+  "responsibilities": [
+    "guidance/define-intent.md: the PO-register loop content from spec section 1.1, 1.2 and 1.4 as operator prose; wording rules for the PO register; what to print at the end.",
+    "guidance/elicitation-playbook.md: the L-sized restructure named in spec section 6 (sections 2 to 8 around D1 to D8 over the delta, the PO loop as the first worked example and the CSV feature as the second).",
+    "guidance/managed/agent-instructions-block.md: the two rules of spec section 6 last row - the PO-session rule and the prototype rule. The managed block regeneration never removes an existing rule.",
+    "guidance/manifest.json: register the new slug `define-intent`, the `rcf://docs/define-intent` resource, and the two new argument-free prompts `rcf_define_intent` and `rcf_define_intake`.",
+    "serves `rcf_define_intent` and `rcf_define_intake` prompts and the two managed-block rules of REQ-186 and REQ-187.",
+    "serves `rcf_define_draft_shapes` and `rcf_discover_prototype` prompts and `guidance/discovery-prototypes.md` (REQ-188, REQ-182 amended): the draft-shapes prompt walks the agent through pre-populating `[draft]` core entities, TAC stubs and interfaces after L1; the discovery-prototype prompt walks the agent through recording a prototype in DISCOVERY as evidence; `guidance/discovery-prototypes.md` carries the doctrine and the ledger conventions and is also served as `rcf://docs/discovery-prototypes`; the managed block gains one prototype rule (ADR-4132) stating that a statement sourced to `prototype:` is evidence and a document citing prototype code as its implementation is a D2 finding the engineer resolves by re-deriving.",
+    "serves `rcf_define_litmus` prompt (0.30.0 PR 7, spec section 6 row): the argument-free markdown walks the harness through spawning n fresh-context readers and landing their readings as probe-ledger entries whose `finding` begins `litmus:<reader>:` and whose text includes the current `hash`. Registered through `guidance/manifest.json` and served through the existing MCP prompt plumbing. No new resource URI."
+  ],
+  "internalStructure": "The MCP prompt and resource plumbing (src/mcp/prompts.js, src/mcp/resources.js) already serves manifest-registered entries byte-faithfully; this TAC only adds entries and markdown files. The managed block is regenerated by `rcf doctor` from the fragment in guidance/harness-template.md; the two new rules append to that fragment, and the regeneration pass preserves rules the project authored outside the managed markers.",
+  "interfaces": [
+    {
+      "name": "rcf_define_intent",
+      "kind": "other",
+      "description": "Argument-free MCP prompt served from guidance/define-intent.md."
+    },
+    {
+      "name": "rcf_define_intake",
+      "kind": "other",
+      "description": "Argument-free MCP prompt served from the intake prompt markdown."
+    },
+    {
+      "name": "rcf://docs/define-intent",
+      "kind": "other",
+      "description": "Resource URI backed by guidance/define-intent.md."
+    },
+    {
+      "name": "rcf_define_draft_shapes",
+      "kind": "other",
+      "description": "Argument-free MCP prompt served from guidance/define-draft-shapes.md: walks the agent through pre-populating [draft] core entities, TAC stubs and interfaces after L1 is green."
+    },
+    {
+      "name": "rcf_discover_prototype",
+      "kind": "other",
+      "description": "Argument-free MCP prompt served from guidance/discover-prototype.md: walks the agent through recording a prototype in DISCOVERY as evidence (classification, brief statements with prototype: source spans, the burn statement, the salvage-by-re-derivation path)."
+    },
+    {
+      "name": "rcf://docs/discovery-prototypes",
+      "kind": "other",
+      "description": "Resource URI backed by guidance/discovery-prototypes.md: the doctrine and the ledger conventions for prototypes in DISCOVERY (ADR-4132)."
+    },
+    {
+      "name": "rcf_define_litmus",
+      "kind": "other",
+      "description": "Argument-free MCP prompt served from guidance/define-litmus.md: walks the harness through spawning n fresh-context readers at the current tree hash and landing their readings as probe-ledger entries whose `finding` begins `litmus:<reader>:` and whose text includes the hash (0.30.0 PR 7)."
+    }
+  ],
+  "notes": "This TAC was authored by PR 2 after the guidance slice did not land on origin/main under its reserved id ADR-4128 / TAC-4128; the shift is recorded in the PR 2 report. Later DEFINE PRs may expand it with further prompts and managed rules."
+}

package/rcf/tacs/tac-4129-define-questions.json

@@ -0,0 +1,45 @@
+{
+  "createdAt": "2026-10-02T18:00:00Z",
+  "updatedAt": "2026-10-03T18:30:00Z",
+  "tacId": "TAC-4129-define-questions",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "the questions compute and the questions verb",
+  "purpose": "compute and print the persona question set.",
+  "responsibilities": [
+    "src/query/questions.js exposes computeQuestions(readiness, { tree, ledgers, profileText, persona }). It reads levels.intentComplete.blockedBy for persona productOwner or personas.engineer.blockers for persona engineer, expands each blocker's failing items into one question each via a per-check template, orders them D1 then D2 then D4 then D7 then by source span, carries one writeBack entry per `when` case the template defines, groups by source span, and never creates or modifies a file under rcf/.",
+    "src/cli/questions.js registers `rcf define questions [--json] [--persona productOwner|engineer] [--stage <D|short>] [--limit <n>]`. Persona default comes from the profile register, else productOwner. Text mode prints groups and asks; --json emits the computeQuestions object. Exit 0 always; unknown persona exits 2 with usage naming productOwner and engineer. Writes nothing under rcf/.",
+    "src/mcp/tools.js adds `rcf_define_questions` (same object as the verb's --json), `rcf_define_readiness` (the readiness object), and `rcf_define_ledger` (thin wrapper over the ledger handler). All three share the envelope the existing query and write tools use."
+  ],
+  "internalStructure": "computeQuestions is a pure function: it folds the readiness blockers into questions through a per-check template table, deterministically ids each question from (stage, check, itemId), carries writeBack commands verbatim, and groups by source span (the trailing `(source: path:line-span)` marker on brief statements, else `tree`). The CLI verb runs the same walkTree + loadAllLedgers + loadFreezeRecord + readProfileText path readiness.js uses, calls computeReadiness, then computeQuestions. The MCP tools reuse the handler shape of the existing query tools (walkTree, okResult, usageErrorResult).",
+  "interfaces": [
+    {
+      "name": "computeQuestions",
+      "kind": "other",
+      "description": "Compute the persona question set from a readiness result, a tree, the four ledgers and the profile text. Returns an object with treeHash, persona, level, ok, remaining, groups[], questions[], optional[] and engineer (collapsed count on the PO return). [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
+    },
+    {
+      "name": "rcf define questions",
+      "kind": "cliCommand",
+      "description": "Print or JSON-emit the persona question set. --persona defaults to the profile register. --stage narrows to one stage; --limit caps the questions array. Writes nothing under rcf/."
+    },
+    {
+      "name": "rcf_define_questions",
+      "kind": "other",
+      "description": "MCP tool: same structuredContent as the verb's --json output."
+    },
+    {
+      "name": "rcf_define_readiness",
+      "kind": "other",
+      "description": "MCP tool: the readiness object."
+    },
+    {
+      "name": "rcf_define_ledger",
+      "kind": "other",
+      "description": "MCP tool: thin wrapper over the ledger handler, taking { name, verb, ...flags }."
+    }
+  ],
+  "notes": "The viewer owns the Readiness tab PO-facing surface (viewer refresh PR 8); this TAC supplies only the data shape and the verb. Prompts and guidance land under TAC-4128."
+}

package/rcf/tacs/tac-4130-define-intake-brief.json

@@ -0,0 +1,35 @@
+{
+  "createdAt": "2026-10-02T16:40:00Z",
+  "updatedAt": "2026-10-02T16:40:00Z",
+  "tacId": "TAC-4130-define-intake-brief",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "document intake into the brief ledger",
+  "purpose": "marker parser, scan wiring, `--findings` to open-question statements for `brief add --from`.",
+  "responsibilities": [
+    "src/define/ledgers.js parseBriefFromFile parses a leading `[kind]` marker and a trailing `(source: ...)` marker on each non-empty line; a line without `[kind]` takes `--kind` (default `capability`); a line without `(source: ...)` takes `--source` or the file path; `?`-, `TBC`-, `TBD`-, `Open:`- and `Question:`-leading lines kind `openQuestion` unless a marker says otherwise; an unknown `[kind]` raises LedgerError code 'usage' before any write; a 0.29.0 line-per-statement file parses unchanged.",
+    "src/cli/ledger.js `brief add` wires `--scan` / `--no-scan` (default on with `--from`, off with `--text`); runs the mechanical scans in src/intake/orchestrator.js over new statements against existing ones; `--findings <path>` accepts the shape `rcf discover intake --input` takes and makes one `openQuestion` statement per finding with `source: scan:<name>:<ids>`; `--dry-run` prints added + findings and writes nothing; `--json` emits `{ added: [...], findings: [...] }`; `--no-scan` together with `--findings` exits 2.",
+    "On a frozen tree the comparison set is every existing statement. Two statement files added in sequence scan the second against the first and the finding's `scan:` source names ids from both."
+  ],
+  "internalStructure": "parseBriefFromFile returns drafts { text, kind, source } one per non-empty line. The CLI mints statements through addEntry; when scans are on it calls runIntakeScansOnDelta(newStatements, existingStatements) over the just-minted ids and the pre-existing body, then appends one openQuestion per finding whose source names the scan and the involved ids. `--findings` reads a JSON object with a `validationFindings[]` array (the same shape `rcf discover intake --input` accepts) and converts each entry to an openQuestion statement whose text is `detail` and whose source is `scan:<kind>`. `--dry-run` composes the full plan with every finding already converted and writes nothing.",
+  "interfaces": [
+    {
+      "name": "parseStatementFile",
+      "kind": "other",
+      "description": "[draft] Parse a statement file into drafts { text, kind, source } one per non-empty line, honouring the leading [kind] and trailing (source: ...) markers and the kind defaults the caller supplies."
+    },
+    {
+      "name": "runIntakeScansOnDelta",
+      "kind": "other",
+      "description": "[draft] Run the mechanical intake scans over the newly minted statements against every existing statement and return a flat findings array."
+    },
+    {
+      "name": "rcf define ledger brief add --from --scan --no-scan --findings --dry-run --json",
+      "kind": "cliCommand",
+      "description": "Add brief statements from a statement file, optionally running the intake scans and converting operator-supplied findings into openQuestion statements."
+    }
+  ],
+  "notes": "This TAC covers the writer-side intake wiring only. The question-computation surface and the Register-prompt replacement land in PR 2 and are not covered here."
+}

package/rcf/tacs/tac-4131-build-dag-view.json

@@ -0,0 +1,39 @@
+{
+  "createdAt": "2026-10-02T18:00:00Z",
+  "updatedAt": "2026-10-02T18:00:00Z",
+  "tacId": "TAC-4131-build-dag-view",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "Build/DAG sub-tab: DagToolbar, DagCanvas, DagInspector and the unconnected lane",
+  "purpose": "Render the Build tab's DAG sub-tab as the dependency-depth layout the design doc section 7 names: a toolbar with Status / Area / Buildable-now / Critical-path / Show-unconnected filters, a scrollable canvas with HTML nodes and inline SVG edges laid by `dependsOnFbsIds` depth and `buildOrder` rows, an inspector with needs and waits-on links, and a toggled unconnected lane. The renderer is pure: it takes the built tree model, emits one HTML string, mounts no inline script and reads from no provider other than the model.",
+  "responsibilities": [
+    "src/view/doc-renderers/build.js (or an adjacent src/view/build-dag.js shared from it): renderBuildDag(model, { buildableIds, cycleIds }) returns the full DAG sub-panel HTML string - toolbar + grid + inspector shell + hidden unconnected lane - with every FBS node carrying `data-fbs-id`, `data-status`, `data-domain`, `data-depth`, `data-buildable`, `data-critical`, `data-unconnected` so the client wiring can filter and highlight without re-rendering.",
+    "Layout: columns are 0..maxDepth; depth is the longest chain length from `dependsOnFbsIds` to the root (0 for no dependency). Rows inside a column are `buildOrder` ascending with `fbsId` lexicographic tie-break. Nodes are fixed-width buttons; edges are cubic SVG paths with arrowheads from dependency to dependant. Cycle members are excluded from the depth layout and surfaced as a finding; non-cycle FBS still render.",
+    "Unconnected lane: FBS with no incoming and no outgoing dependency. Hidden by default; the toggle's count equals that set's size.",
+    "Critical path: longest chain by node count across the DAG (because `estimatedHours` is sparse per the gap in design doc section 7); members get `data-critical=1`.",
+    "src/view/page-init.js: wireBuildDag() mounts click-to-highlight (upstream outlines link, downstream outlines warning, rest dim), writes `#tab=build&sub=dag&entity=<id>` through the existing writeHash on select, reads `entity=` on load to restore the selection and auto-opens the unconnected lane when the selected id is unconnected; filter toggles mirror the toolbar state onto node data attrs and keep the current selection.",
+    "html-page.js: renderBuildPanel swaps the PR 5 placeholder for `renderBuildDag(model, ...)`; the Build/Specs sub-tab is unchanged, the SubTabStrip wiring from PR 5 is unchanged, the Build tab's BuildStats and page head stay in place.",
+    "style.css: adds `.rcf-dag-*` tokens (toolbar, grid, canvas, node, edge, inspector, unconnected lane) sized against the shared Stravica tokens so both light and dark themes work; the canvas owns its own vertical and horizontal overflow so the viewer never scrolls horizontally."
+  ],
+  "internalStructure": "Three composition seams. (1) a pure graph helper (buildDagLayout(fbsItems)) returns `{ nodes: [{ id, title, status, domain, depth, buildOrder, acCount, size, buildable, direct: { needs, waits }, closure: { upstream, downstream }, critical, unconnected }], edges: [{ from, to }], cycles: string[], unconnectedIds: string[], criticalPathIds: string[], maxDepth }`; (2) renderDagToolbar / renderDagCanvas / renderDagInspector compose one HTML string from the layout; (3) page-init.js's wireBuildDag reads from the DOM only (data attrs on nodes, aria-pressed on toggles) and never recomputes the layout. Needs and waits-on in the inspector resolve from the same closure sets the layout carries, so the two surfaces cannot disagree.",
+  "interfaces": [
+    {
+      "name": "renderBuildDag",
+      "kind": "other",
+      "description": "[draft] Build the Build/DAG sub-tab HTML - toolbar, canvas, inspector shell, unconnected lane - from the built tree model and the pre-computed buildable set."
+    },
+    {
+      "name": "buildDagLayout",
+      "kind": "other",
+      "description": "[draft] Pure projection of `fbsItems[].dependsOnFbsIds` into DAG nodes, edges, depth columns, closures, critical path and unconnected ids; cycles surface as a `cycles` list and their members are excluded from the depth layout."
+    },
+    {
+      "name": "wireBuildDag",
+      "kind": "other",
+      "description": "[draft] Client-side wiring for the DAG canvas: click-to-highlight, filters, `#tab=build&sub=dag&entity=` round-trip, hash-driven selection restore, Open-in-Specs navigation. Reads from the DOM; sends no outbound postMessage."
+    }
+  ],
+  "notes": "The v1 rcf-tools DAG is the reference: keep its tiers, click-to-highlight, filters and stats; fix its dark-only palette, missing inspector, orphan pile-up, missing deep links and two-direction scrolling. No new TS, FBS or CN entry is minted - viewer-code PRs do not grow the build-step graph. The pill component (REQ-181) renders every status pill in the inspector; the shared `findings-list` module reports the cycle finding so the toolbar carries the same vocabulary as the rest of the tabs."
+}

package/rcf/tacs/tac-4132-id-lookup.json

@@ -0,0 +1,42 @@
+{
+  "createdAt": "2026-10-02T19:00:00Z",
+  "updatedAt": "2026-10-02T19:00:00Z",
+  "tacId": "TAC-4132-id-lookup",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "ID lookup: ./index.json route, LookupModal, Cmd/Ctrl+F keyboard binding",
+  "purpose": "Build `./index.json` from `BuiltTreeModel` on every rewalk - one row per document id plus one per AC, carrying `{ id, kind, title, snippet, parent, tab }` - and render the LookupModal that opens from the SearchButton or Cmd/Ctrl+F, ranks results per design doc section 6 and picks `#tab=<tab>&entity=<id>` through the existing writeHash so `embed` and `theme` survive. The index is a new route, fetched lazily on first open and refreshed when the SSE tree-changed event lands.",
+  "responsibilities": [
+    "src/view/view-index.js: buildViewIndex(model) returns `{ rows: Array<{ id, kind, title, snippet, parent, tab }> }` from a BuiltTreeModel. One row per PRD, REQ, US, TAD, TAC, ADR, BS, FBS, TS; one row per AC under each US; snippet is the first 110 chars of the document's description (or purpose / summary / context, the kind's prose field) with whitespace collapsed; parent is the walker-visible parent id (US for an AC, REQ for a US, PRD for a REQ, TAD for a TAC or ADR, BS for a FBS, US for a TS); tab is the viewer tab that owns the id (overview / requirements / architecture / build; TS carry the US's tab).",
+    "src/server/routes.js + src/server/index.js: new route `GET /index.json` returns `{ rows }` as application/json. Built once per rewalk (so the first fetch is served from an in-memory snapshot) and broadcast as part of the tree-update event version so the client knows to refetch.",
+    "src/view/html-page.js: a SearchButton (<button class=\"rcf-search-btn\" data-rcf-search>) renders inside the shell's `<div class=\"tools\">` right of the tabstrip, with the aria-label `Find any document or AC`. One hidden LookupModal (<div class=\"rcf-lookup\" data-rcf-lookup hidden>) renders outside #rcf-live-content (next to the toast) so the SSE innerHTML swap cannot blow it away. The modal shell carries an input, a results list, an empty state and the reload affordance; results are rendered client-side.",
+    "src/view/page-init.js: wireLookup() lazily fetches `./index.json` on first open (XMLHttpRequest, same relative-script policy as PR 1), caches the parsed rows, listens for `rcf-tree-update` and marks the cache dirty for the next open; binds `(ctrl|meta)+F` (but not Shift+F) on `keydown` with preventDefault; drives type-ahead ranking (id-first exact/prefix/contains; then word match on title above snippet; single character is id-only; 20 result cap; matches marked); keyboard navigation up/down/Enter/Esc; a pick calls writeHash so `?embed=` and `?theme=` are preserved per PR 1's Dex contract.",
+    "src/view/style.css: `.rcf-search-btn` and `.rcf-lookup*` tokens aligned with the Stravica brand palette; focus trap and visible focus ring; empty-state and reload affordance in both themes."
+  ],
+  "internalStructure": "Three composition seams. (1) `buildViewIndex(model)` is a pure projection of the model into a row list; it reads nothing beyond the model and returns a plain object. (2) The server snapshots the stringified index per rewalk alongside the content HTML; the route reads from the snapshot and never from disk. (3) `wireLookup` reads from the DOM only after the fetch resolves: the modal's input, the results list, up/down/Enter/Esc. The rank function is a pure function from (query, rows) to ordered results; the renderer paints one row per hit using the shared snippet-mark helper.",
+  "interfaces": [
+    {
+      "name": "GET /index.json",
+      "kind": "httpRoute",
+      "description": "[draft] Returns `{ rows: Array<{ id, kind, title, snippet, parent, tab }> }` for the current tree. Built once per rewalk; content-type application/json; relative to the viewer mount so wespa's reverse proxy sees `./index.json` under the mount point."
+    },
+    {
+      "name": "buildViewIndex",
+      "kind": "other",
+      "description": "[draft] Pure projection of BuiltTreeModel into the index row list used by the LookupModal; one row per document id plus one per AC."
+    },
+    {
+      "name": "renderLookupModal",
+      "kind": "other",
+      "description": "[draft] Emits the LookupModal shell HTML (input, results list, empty state, reload affordance) for the shell page; results are rendered client-side after the index fetch resolves."
+    },
+    {
+      "name": "wireLookup",
+      "kind": "other",
+      "description": "[draft] Client-side wiring for the LookupModal: Cmd/Ctrl+F keyboard binding (page-init), SearchButton open, lazy `./index.json` fetch, SSE-driven cache invalidation, type-ahead ranking per design doc section 6, up/down/Enter/Esc keyboard navigation, pick writes `#tab=<tab>&entity=<id>` through writeHash so `embed` and `theme` survive."
+    }
+  ],
+  "notes": "Depends on PR 1's Router (writeHash, resolveHash, parseHashParams, findByDocId, openAncestorDetails) and the relative-script policy (no leading slash, no inline script). The release notes name `./index.json` as a new route so wespa's proxy allow-list is extended before the version pin bump (Dex contract, design section 9). No outbound postMessage is added; the modal does not persist search terms. The route is the fourth or later such release-noted route (PR 1 landed `./page-init.js` as the first)."
+}

package/rcf/tacs/tac-4133-readiness-po-layer.json

@@ -0,0 +1,37 @@
+{
+  "createdAt": "2026-10-02T19:30:00Z",
+  "updatedAt": "2026-10-02T19:30:00Z",
+  "tacId": "TAC-4133-readiness-po-layer",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "Readiness tab PO layer: VerdictCard, QuestionCard, NextStep, ReqWorkTable, StageLegend, phrasebook, For-engineers DocRow",
+  "purpose": "Render the Readiness tab PO layer: VerdictCard, QuestionCard, NextStep, ReqWorkTable, StageLegend, phrasebook, and the For-engineers DocRow. Four blocks for the product owner (two VerdictCards at equal height with the chain term muted beside the plain label; QuestionCards grouped by source span; a what-happens-next paragraph; a Requirements that still need work table) plus one DocRow at the foot that collapses the full engineer view inside without removing anything from the DOM. The adapter seam `toQuestions(readiness)` is a pure module that reads blockers and the phrasebook today and switches to `readiness.questions` when DEFINE step 3 PR 2 ships `computeQuestions`.",
+  "responsibilities": [
+    "src/view/readiness/phrasebook.js: a plain data module keyed by check id; every row of design doc section 8's PO question table has an entry carrying `{ heading, ask, hint }` and an `optional` flag for decisions-with-a-default. The strings are the PO wording verbatim; no em-dashes. The phrasebook never duplicates the stage-gate meanings those live in STAGE_GATES (section 4 of the design).",
+    "src/view/readiness/question-adapter.js: `toQuestions(readiness)` is a pure function that returns `{ groups: Array<{ label, items: Array<{ heading, ask, hint, detail, checkId }> }> }`. When `readiness.questions` exists (DEFINE step 3 PR 2 feature-detected via `preferReadinessQuestions(readiness)`), it reads from there; otherwise it reads `personas.productOwner.blockers`, groups by source span (`brief:<n>` for brief checks; the REQ id for stories/skeleton checks; otherwise the stage), and fills asks from the phrasebook. Decisions-with-a-default land in an optional group that never holds up the hand-over.",
+    "src/view/readiness/po-layer.js: `renderReadinessPO(readiness, { persona, phrasebook })` emits the four PO blocks plus the For-engineers DocRow. Two VerdictCards share a `rcf-po-verdicts` grid so the browser lays them out at equal height; each card carries the plain label and the chain term (`intent-complete`, `ready-to-build`) muted beside it. The For-engineers DocRow is closed when `persona === 'productOwner'` (and `unstated`); open when `persona === 'engineer'`.",
+    "src/view/readiness/stage-legend.js: `renderStageLegend(stages)` emits the StageLegend dialog with D1..D8 by name, one-line meaning and posture, read from STAGE_GATES and the readiness stages[].state. Every D-chip and D-prefixed check name carries a hover title and opens the legend on click; wiring in page-init.js.",
+    "src/view/readiness.js: `renderReadinessPanel` keeps its signature but now returns the PO layer followed by the For-engineers DocRow (whose body is the former engineer rendering structurally identical). The CLI verdict strings (`formatVerdictLines`) still render inside For-engineers so parity with `rcf define readiness --json` is unchanged (AC-18002-3)."
+  ],
+  "internalStructure": "Five composition seams. (1) phrasebook.js is a static data module. (2) question-adapter.js is a pure function: `(readiness) => { groups }`; `preferReadinessQuestions(readiness)` is the feature detect that flips the source when DEFINE step 3 lands. (3) po-layer.js is a server-rendered HTML string builder; no inline script added to the page. (4) stage-legend.js is a server-rendered dialog whose client wiring lives in page-init.js (`wireStageLegend`). (5) readiness.js wraps the engineer rendering in a `<details id=\"rcf-readiness-engineer\" class=\"rcf-po-engineer\">` that opens by default when the register is engineer; the body carries the full existing engineer view unchanged.",
+  "interfaces": [
+    {
+      "name": "renderReadinessPO",
+      "kind": "other",
+      "description": "[draft] renderReadinessPO(readiness, { persona, phrasebook }) returns the four PO blocks plus the For-engineers DocRow as one HTML string."
+    },
+    {
+      "name": "toQuestions",
+      "kind": "other",
+      "description": "[draft] toQuestions(readiness) is a pure function that returns `{ groups: Array<{ label, items: Array<{ heading, ask, hint, detail, checkId }> }> }` built from the phrasebook over blockers today and from readiness.questions tomorrow (feature-detected via preferReadinessQuestions)."
+    },
+    {
+      "name": "renderStageLegend",
+      "kind": "other",
+      "description": "[draft] renderStageLegend(stages) returns the StageLegend dialog HTML (D1..D8 by name, one-line meaning, posture)."
+    }
+  ],
+  "notes": "Depends on PR 2's DocRow component, PR 1's AppShell and relative-script policy, and PR 2's SubTabStrip (not used here but shared vocabulary). Amends TAC-4127-readiness-view: the old engineer rendering is kept but is now the body of the For-engineers DocRow at the foot of the panel; nothing is removed from the engineer-level DOM (AC-18002-3). The phrasebook ships now (design doc section 11 recommendation 4); when DEFINE step 3 PR 2 lands `readiness.questions`, the adapter switches source with a one-line feature detect and the call site is unchanged. No em-dash is ever written in the phrasebook strings."
+}

package/rcf/tacs/tac-4134-wespa-host-fixture.json

@@ -0,0 +1,54 @@
+{
+  "createdAt": "2026-10-02T20:00:00Z",
+  "updatedAt": "2026-10-03T18:30:00Z",
+  "tacId": "TAC-4134-wespa-host-fixture",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.0",
+  "status": "draft",
+  "name": "Wespa host fixture: /test-host.html and the three embedding lints",
+  "purpose": "Serve a same-origin test-host fixture page that mimics the wespa shell (a 56px header, a resizable 64/200-400px sidebar, a content pane carrying `<iframe src=\"./?embed=1&theme=light\">`) and ship three CI lints (framing headers, `target=\"_top\"` grep, localStorage namespace grep) that keep wespa's embedding contract honest over time. The fixture is off the default route surface so wespa's reverse-proxy allow-list is unaffected; it is gated on a `--test-host` CLI flag or the `RCF_VIEW_TEST_HOST=1` env var and never served under production use.",
+  "responsibilities": [
+    "src/view/test-host/fixture.js: `renderTestHostPage()` returns the HTML for the fixture (56px header with Light/Dark/Auto theme toggle buttons, a resizable sidebar with a drag handle and a Collapse/Expand control, a content pane containing the single `<iframe id=\"rcf-test-host-iframe\" src=\"./?embed=1&theme=light\">` sized to 100% of its box). No inline script; the page references `./test-host.js` as a relative script.",
+    "src/view/test-host/embed-client.js: classic (non-module) browser script that wires the theme toggle buttons to `iframe.contentWindow.postMessage({ type: \"rcf-view-theme\", theme }, window.location.origin)`, the sidebar drag handle to a live width update (clamped to 64-400px) and the Collapse/Expand button to a 64px <-> 200px snap. The script posts nothing beyond `rcf-view-theme`, does not read event.origin itself (the viewer does), and writes nothing to localStorage so a passing run proves the iframe honours the message.",
+    "src/view/test-host/lints.js: `assertFramingHeaders(response)` scans a GET / response for `X-Frame-Options`, CSP `frame-ancestors` and `X-Content-Type-Options` oddities (any present or any `frame-ancestors` directive forbidding `self` fails); `assertNoTargetTop(renderedHtml)` scans the HTML for any `target=\"_top\"` or `target='_top'` occurrence and refuses on a non-zero count; `assertLocalStorageNamespace(sourceTree)` scans every `.js` file under `src/view/**` (not vendored, not `.min.js`) for `localStorage.(setItem|getItem|removeItem)(` and `storage.(setItem|getItem|removeItem)(` call sites and refuses on any key literal that does not start with `rcf-view:v1:`.",
+    "src/server/routes.js: when `deps.testHost === true`, register `GET /test-host.html` returning `renderTestHostPage()` with `content-type: text/html` and no framing-blocking header; register `GET /test-host.js` returning the embed-client script as `application/javascript` with no framing-blocking header. Off the default route surface: both routes 404 unless `testHost` is on.",
+    "src/server/index.js: plumb an optional `testHost: boolean` option through `startServer(args)` into the router; default false. Wire the embed-client asset at startup via `loadStaticAsset`, same discipline as `./live-client.js`.",
+    "src/cli/view.js: parse `--test-host` into `opts.testHost`; precedence is flag beats `RCF_VIEW_TEST_HOST=1` env beats default (false). Pass `testHost` through to `startServer`. Help text names the flag and marks it a test-suite fixture, not a shipped UI.",
+    "test/view/wespa-host-fixture.test.js: end-to-end node-level checks that boot the router with `testHost: true` over `http.createServer`, GET /, GET /test-host.html, GET /test-host.js, assert the three lints green, parse the iframe `src` from the fixture HTML and assert `./?embed=1&theme=light` exactly, assert the fixture carries no inline `<script>` block, assert the viewer's rendered HTML carries `<html data-embed=\"1\">` wiring (via page-init.js) and that the fixture page does not persist theme to localStorage."
+  ],
+  "internalStructure": "Three composition seams. (1) `renderTestHostPage()` is a pure function (no reads, no I/O) that emits the host HTML and references the relative embed-client script; swap the host markup in one place. (2) The embed-client script is served as a snapshotted asset at startup; it is the only client-side JS the fixture carries. (3) `src/view/test-host/lints.js` exports three pure assertions keyed on their inputs (response object, HTML string, source tree root) so each lint composes into any test that needs it and the test file is the sole caller.",
+  "interfaces": [
+    {
+      "name": "GET /test-host.html",
+      "kind": "httpRoute",
+      "description": "[draft] Returns the host fixture HTML (`renderTestHostPage()`). Served only when `startServer({ testHost: true })` is on (CLI `--test-host` or env `RCF_VIEW_TEST_HOST=1`); 404 otherwise. No `X-Frame-Options`, no CSP `frame-ancestors` directive. Relative script `./test-host.js` is the only client-side JS. Not under the production root; the viewer's `/` surface is untouched."
+    },
+    {
+      "name": "GET /test-host.js",
+      "kind": "httpRoute",
+      "description": "[draft] Returns the embed-client script that wires the theme toggle, sidebar drag and Collapse/Expand to postMessage and sidebar width updates. `application/javascript`; snapshotted at startup. Same `testHost` gate as the HTML route."
+    },
+    {
+      "name": "assertFramingHeaders",
+      "kind": "other",
+      "description": "[draft] `assertFramingHeaders(response)` on a `GET /` response. Refuses if `X-Frame-Options` is present, if a CSP `frame-ancestors` directive forbids `self`, or if `X-Content-Type-Options: nosniff` is set in a way that breaks the fixture (today it does not; the lint still records absence). Returns `{ ok: true }` or throws with the first failure. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
+    },
+    {
+      "name": "assertNoTargetTop",
+      "kind": "other",
+      "description": "[draft] `assertNoTargetTop(renderedHtml)` greps the server-rendered HTML for `target=\"_top\"` and `target='_top'` and refuses on any match. Returns `{ ok: true, count: 0 }` or `{ ok: false, count: n, matches: [...] }`. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
+    },
+    {
+      "name": "assertLocalStorageNamespace",
+      "kind": "other",
+      "description": "[draft] `assertLocalStorageNamespace(sourceTreeRoot)` walks every `.js` file under `src/view/**` (excluding vendored and `.min.js`), finds every `localStorage.(setItem|getItem|removeItem)(KEY)` and `storage.(setItem|getItem|removeItem)(KEY)` call site, and asserts that the key literal starts with `rcf-view:v1:` (or references `STORAGE_NS` which equals `rcf-view:v1:`). Returns `{ ok: true, scanned: n }` or `{ ok: false, violations: [...] }`. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
+    },
+    {
+      "name": "renderTestHostPage",
+      "kind": "other",
+      "description": "[draft] Pure function that emits the fixture HTML (56px header, resizable 64/200-400px sidebar, iframe content pane). No inline script; references `./test-host.js` as the single client-side JS. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
+    }
+  ],
+  "notes": "Depends on PR 1's `embed` and `theme` contract (page-init.js stamping `<html data-embed=\"1\">` and `<html data-theme>`, origin-checked `rcf-view-theme` listener, hash navigation preserving the host query string), on PR 1's relative-script policy (no inline script, no leading-slash references) and on live-client.js's existing `STORAGE_NS = 'rcf-view:v1:'` namespace. The test-host route surface is behind `--test-host` / `RCF_VIEW_TEST_HOST=1`; the release notes mark it as a test-suite fixture, not a shipped UI, so wespa's proxy allow-list is unaffected. The three lints are called from the viewer's test suite; wespa smoke on the live wespa shell is Dex's side."
+}

package/rcf/test-suites/ts-016.json

@@ -14,9 +14,9 @@
     {
       "id": "TC-016-tools-list-structured-schemas",
       "acId": "AC-601-1",
-      "description": "an MCP client listing tools sees all eleven rcf tools with input and output schemas",
+      "description": "an MCP client listing tools sees all fourteen rcf tools with input and output schemas",
       "status": "pending",
-      "testPointer": "test/mcp/stdio.e2e.test.js::e2e: tools/list returns all eleven tools with schemas"
+      "testPointer": "test/mcp/stdio.e2e.test.js::e2e: tools/list returns all fourteen tools with schemas"
     },
     {
       "id": "TC-016-mcp-coverage-cli-parity",
@@ -34,4 +34,4 @@
     }
   ],
   "status": "draft"
-}
+}

package/rcf/test-suites/ts-215.json

@@ -1,17 +1,35 @@
 {
   "createdAt": "2026-09-24T12:00:00Z",
-  "updatedAt": "2026-09-24T12:00:00Z",
-  "purpose": "Cover the four sidecar ledgers, the rcf define ledger CLI (add / resolve / list with --json) and the walker-invisibility invariant on rcf/define/ against AC-17301-1..4 on US-17301.",
+  "updatedAt": "2026-10-02T16:40:00Z",
+  "purpose": "Cover the four sidecar ledgers, the rcf define ledger CLI (add / resolve / list with --json) and the walker-invisibility invariant on rcf/define/ (AC-17301-1..4 on US-17301), the update subverb and the closed resolvedBy pointer grammar (AC-17302-1..6 on US-17302), the statement-file markers (AC-18701-1..6 on US-18701) and the scan wiring (AC-18702-1..6 on US-18702).",
   "testLevel": "integration",
   "acIds": [
     "AC-17301-1",
     "AC-17301-2",
     "AC-17301-3",
-    "AC-17301-4"
+    "AC-17301-4",
+    "AC-17302-1",
+    "AC-17302-2",
+    "AC-17302-3",
+    "AC-17302-4",
+    "AC-17302-5",
+    "AC-17302-6",
+    "AC-18701-1",
+    "AC-18701-2",
+    "AC-18701-3",
+    "AC-18701-4",
+    "AC-18701-5",
+    "AC-18701-6",
+    "AC-18702-1",
+    "AC-18702-2",
+    "AC-18702-3",
+    "AC-18702-4",
+    "AC-18702-5",
+    "AC-18702-6"
   ],
   "id": "TS-215",
   "usId": "US-17301",
-  "title": "Sidecar ledgers, rcf define ledger and walker invisibility",
+  "title": "Sidecar ledgers, rcf define ledger and walker invisibility (extended for update + intake markers + scans)",
   "testCases": [
     {
       "id": "TC-215-brief-add-text",
@@ -61,6 +79,132 @@
       "description": "walkTree run over a project seeded with rcf/define/freeze.json, the four ledger files and a bug-bait req-999.json under rcf/define/ never surfaces any rcf/define/ path in errors or byId.",
       "status": "pending",
       "testPointer": "test/store/walker-invisible-define.test.js::walkTree never surfaces rcf/define/ files as documents in byId"
+    },
+    {
+      "id": "TC-215-brief-update-fields-and-preserve-id",
+      "acId": "AC-17302-1",
+      "description": "updateEntry patches brief fields (kind, resolvedBy) and preserves id and addedAt; the CLI brief update subverb returns 0 and the write lands on the ledger with the patched fields.",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::updateEntry (AC-17302-1): patches brief fields and preserves id / addedAt"
+    },
+    {
+      "id": "TC-215-decisions-update-wellformed",
+      "acId": "AC-17302-2",
+      "description": "decisions update patches options and default so decisions:wellFormed shape passes (two options + a default).",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::updateEntry (AC-17302-2): decisions update patches options and default and passes wellFormed shape"
+    },
+    {
+      "id": "TC-215-resolvedby-grammar-each-form",
+      "acId": "AC-17302-3",
+      "description": "Each resolvedBy pointer form (REQ-nnn, TAD.entity:<name>, PRD.user:<name>, TAD.system:<name>, TAC-nnnn, omitted:<reason>) resolves on the fixture and D2's skeleton:resolvedBy passes it.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-173, AC-17302-3): each pointer form resolves on the fixture"
+    },
+    {
+      "id": "TC-215-update-refuses-nongrammar",
+      "acId": "AC-17302-4",
+      "description": "brief update --resolved-by with a free-text pointer exits 2 naming the grammar and the ledger is unchanged.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-17302-4): brief update --resolved-by outside the grammar exits 2 and writes nothing"
+    },
+    {
+      "id": "TC-215-d2-dangling-pointer-fails",
+      "acId": "AC-17302-5",
+      "description": "A statement with resolvedBy REQ-999 on a tree with no REQ-999 fails skeleton:resolvedBy with 'pointer does not resolve'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-173, AC-17302-5): REQ-999 fails with \"pointer does not resolve\""
+    },
+    {
+      "id": "TC-215-d2-title-hit-dropped",
+      "acId": "AC-17302-6",
+      "description": "In 0.30.0 skeleton:resolvedBy no longer passes a statement on a REQ-title text hit alone; a resolvedBy pointer is required.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-173, AC-17302-6): a text-title hit alone does NOT pass in 0.30.0"
+    },
+    {
+      "id": "TC-215-markers-kind-and-source",
+      "acId": "AC-18701-1",
+      "description": "parseBriefFromFile parses a leading [kind] and a trailing (source: ...) marker; the CLI brief add --from mints a statement with that kind, text and source.",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::parseBriefFromFile (AC-18701-1): leading [kind] and trailing (source: ...) markers mint one statement"
+    },
+    {
+      "id": "TC-215-defaults-from-flags",
+      "acId": "AC-18701-2",
+      "description": "A line without markers inherits --kind and --source from CLI flags.",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::parseBriefFromFile (AC-18701-2): a line without markers inherits --kind and --source"
+    },
+    {
+      "id": "TC-215-question-heuristic",
+      "acId": "AC-18701-3",
+      "description": "A trailing '?' or a TBC/TBD/Open:/Question: prefix with no [kind] marker kinds the statement openQuestion.",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::parseBriefFromFile (AC-18701-3): a question-mark trailing line is kinded openQuestion"
+    },
+    {
+      "id": "TC-215-029-line-per-statement-unchanged",
+      "acId": "AC-18701-4",
+      "description": "A 0.29.0 line-per-statement file (no markers) parses to the same drafts as the 0.29.0 code path produced.",
+      "status": "pending",
+      "testPointer": "test/define/ledgers.test.js::parseBriefFromFile (AC-18701-4): a 0.29.0 line-per-statement file parses unchanged"
+    },
+    {
+      "id": "TC-215-unknown-kind-exits-2",
+      "acId": "AC-18701-5",
+      "description": "A line with an unknown [kind] exits 2 naming the accepted kinds and writes nothing to the ledger.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18701-5): brief add --from with an unknown [kind] exits 2 before writing"
+    },
+    {
+      "id": "TC-215-dry-run-no-write",
+      "acId": "AC-18701-6",
+      "description": "brief add --from --dry-run never creates or modifies rcf/define/brief-ledger.json.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18701-6, --dry-run): writes nothing"
+    },
+    {
+      "id": "TC-215-scan-mints-openquestion",
+      "acId": "AC-18702-1",
+      "description": "A new statement that the contradiction scan flags against an existing statement adds one openQuestion statement with source scan:contradiction:<id>,<id>.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18702-1): mechanical scan on brief add mints an openQuestion with scan: source"
+    },
+    {
+      "id": "TC-215-findings-mints-openquestions",
+      "acId": "AC-18702-2",
+      "description": "--findings <path> accepts rcf discover intake --input shape and mints one openQuestion per finding with source scan:<name>.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18702-2): --findings file mints one openQuestion per finding with scan: source"
+    },
+    {
+      "id": "TC-215-scans-compare-every-existing",
+      "acId": "AC-18702-3",
+      "description": "runIntakeScansOnDelta compares every new statement against every existing statement (the frozen set is every statement).",
+      "status": "pending",
+      "testPointer": "test/intake/validate.test.js::runIntakeScansOnDelta (AC-18702-3): on a frozen set the comparison set is every existing statement"
+    },
+    {
+      "id": "TC-215-json-emits-added-and-findings",
+      "acId": "AC-18702-4",
+      "description": "brief add --json emits { added: [...], findings: [...] } on stdout.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18702-4, --json): emits { added, findings }"
+    },
+    {
+      "id": "TC-215-no-scan-plus-findings-exits-2",
+      "acId": "AC-18702-5",
+      "description": "--no-scan combined with --findings exits 2 naming the conflict.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18702-5): --no-scan with --findings exits 2"
+    },
+    {
+      "id": "TC-215-text-runs-no-scan",
+      "acId": "AC-18702-6",
+      "description": "brief add --text runs no scan and appends no openQuestion statement.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18702-6): --text runs no scan and appends no openQuestion"
     }
   ],
   "status": "draft"