rcf-lite 0.28.4 → 0.30.0

package/rcf/test-suites/ts-225.json

@@ -0,0 +1,78 @@
+{
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z",
+  "purpose": "Cover US-205 (engineer jumps to any document or AC by id): id-first ranking (exact / prefix / contains), word-match title above snippet, single-char ids-only, hash pick lands and expands the entity, mount URL round-trip, embed/theme preservation, empty-state on fetch failure, no outbound postMessage / storage / cookies. Points at the 22 new unit tests under test/view/id-lookup.test.js.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-205-1",
+    "AC-205-2",
+    "AC-205-3",
+    "AC-205-4",
+    "AC-205-5",
+    "AC-205-6",
+    "AC-205-7",
+    "AC-205-8"
+  ],
+  "id": "TS-225",
+  "usId": "US-205",
+  "title": "ID lookup: ranking, hash pick, embed/theme round-trip, empty state, no outbound side effects",
+  "testCases": [
+    {
+      "id": "TC-225-id-exact-prefix-first",
+      "acId": "AC-205-1",
+      "description": "rankLookupRows ranks an exact id match first, a prefix match second and a contains match third; the first ranked row is pre-highlighted in the LookupModal shell.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::rankLookupRows: exact id ranks first (AC-205-1)"
+    },
+    {
+      "id": "TC-225-word-title-above-snippet",
+      "acId": "AC-205-2",
+      "description": "rankLookupRows ranks a word match in the title above a word match in the snippet when the id does not match; every query word must match title or snippet.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::rankLookupRows: a title match ranks above a snippet-only match (AC-205-2)"
+    },
+    {
+      "id": "TC-225-single-char-ids-only",
+      "acId": "AC-205-3",
+      "description": "rankLookupRows with a one-character query returns only id matches; the title / snippet word-match pass is skipped.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::rankLookupRows: single-character queries search ids only (AC-205-3)"
+    },
+    {
+      "id": "TC-225-pick-writes-hash",
+      "acId": "AC-205-4",
+      "description": "wireLookup pick writes `#tab=<tab>&entity=<id>` through writeHash; the Router activates the tab, opens every ancestor DocRow and the entity, scrolls into view and flashes the target.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::page-init.js carries the wireLookup contract: Cmd/Ctrl+F binding, lazy fetch, up/down/Enter/Esc"
+    },
+    {
+      "id": "TC-225-mount-url-round-trip",
+      "acId": "AC-205-5",
+      "description": "A mount URL of `?tab=requirements&entity=US-304` lands on the same position at first paint via the Router (PR 1 contract), independent of the LookupModal.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::page-init.js urlWithHash preserves ?tab=&entity= + any other query at mount (AC-205-5)"
+    },
+    {
+      "id": "TC-225-embed-theme-preserved",
+      "acId": "AC-205-6",
+      "description": "A pick with `?embed=1&theme=dark` on the URL leaves both query params in place; only the hash fragment changes. Verified against writeHash + the hash-preservation helpers.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::page-init.js writeHash preserves ?embed= and ?theme= through every pick (AC-205-6)"
+    },
+    {
+      "id": "TC-225-empty-state-on-fetch-failure",
+      "acId": "AC-205-7",
+      "description": "A non-2xx / malformed `./index.json` response renders the empty state (The index could not be loaded.) with a visible Reload index button; no result rows show; the reload affordance re-fetches on click.",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::renderLookupModal carries the empty-state + reload affordance markers (AC-205-7)"
+    },
+    {
+      "id": "TC-225-no-outbound-side-effects",
+      "acId": "AC-205-8",
+      "description": "wireLookup never calls window.postMessage, never writes to localStorage / sessionStorage / document.cookie, and makes no outbound fetch other than `./index.json`; asserted by a source-level scan of page-init.js (no postMessage, no storage, no cookie writes in wireLookup).",
+      "status": "pending",
+      "testPointer": "test/view/id-lookup.test.js::page-init.js does not add outbound postMessage, localStorage, sessionStorage or cookies in the lookup wiring (AC-205-8)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-226.json

@@ -0,0 +1,158 @@
+{
+  "createdAt": "2026-10-02T18:00:00Z",
+  "updatedAt": "2026-10-02T18:00:00Z",
+  "purpose": "Cover US-18601 (the question set), US-18602 (the verb and the tools) and US-18603 (write-back and termination): computeQuestions turns every failing PO item into a question carrying its write-back; the CLI verb and the MCP tool emit the same object; the scripted loop converges; engineer edits never re-open the PO loop.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-18601-1",
+    "AC-18601-2",
+    "AC-18601-3",
+    "AC-18601-4",
+    "AC-18601-5",
+    "AC-18601-6",
+    "AC-18601-7",
+    "AC-18602-1",
+    "AC-18602-2",
+    "AC-18602-3",
+    "AC-18602-4",
+    "AC-18602-5",
+    "AC-18602-6",
+    "AC-18603-1",
+    "AC-18603-2",
+    "AC-18603-3",
+    "AC-18603-4",
+    "AC-18603-5"
+  ],
+  "id": "TS-226",
+  "usId": "US-18601",
+  "title": "DEFINE step 3 PR 2: computeQuestions, the questions verb, MCP tools and loop convergence",
+  "testCases": [
+    {
+      "id": "TC-226-q-shape",
+      "acId": "AC-18601-1",
+      "description": "On a fixture failing brief:openQuestions, skeleton:resolvedBy and stories:reqHasUs, computeQuestions(persona=productOwner) returns one entry per failing item with id, stage, check, itemId, heading, ask, answerKinds, writeBack and blocks intent.",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-1: openQuestions + resolvedBy + reqHasUs failing items each produce one question with the full shape"
+    },
+    {
+      "id": "TC-226-q-deterministic",
+      "acId": "AC-18601-2",
+      "description": "Two consecutive computeQuestions runs on the same tree return deep-equal questions[] ordered D1, D2, D4, D7 then by source span.",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-2: two runs are deep-equal and ordered D1, D2, D4, D7 then by source span"
+    },
+    {
+      "id": "TC-226-q-optional-decisions",
+      "acId": "AC-18601-3",
+      "description": "An open decision with two options and a default appears in optional[] with blocks build and not in questions[].",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-3: a two-option decision with a default appears in optional[], not questions[]"
+    },
+    {
+      "id": "TC-226-q-empty-when-ok",
+      "acId": "AC-18601-4",
+      "description": "On a tree where levels.intentComplete.ok, computeQuestions(persona=productOwner) returns ok:true and empty questions[].",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-4: ok tree returns ok:true and empty questions[]"
+    },
+    {
+      "id": "TC-226-q-engineer-persona",
+      "acId": "AC-18601-5",
+      "description": "computeQuestions(persona=engineer) returns one entry per failing engineer item in failing stages with blocks build.",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-5: persona engineer returns engineer blockers in failing stages, blocks: build"
+    },
+    {
+      "id": "TC-226-q-usage-error",
+      "acId": "AC-18601-6",
+      "description": "computeQuestions throws a usage error naming productOwner and engineer when given any other persona value.",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-6: unknown persona throws naming the accepted values"
+    },
+    {
+      "id": "TC-226-q-writes-nothing",
+      "acId": "AC-18601-7",
+      "description": "computeQuestions never creates or modifies a file under rcf/ (mtime guard); every writeBack.command names a verb registered in the CLI help.",
+      "status": "pending",
+      "testPointer": "test/query/questions.test.js::AC-18601-7: computeQuestions is pure; every writeBack.command names a registered verb"
+    },
+    {
+      "id": "TC-226-cli-json",
+      "acId": "AC-18602-1",
+      "description": "rcf define questions --json on a failing tree prints the computeQuestions object to stdout and exits 0.",
+      "status": "pending",
+      "testPointer": "test/cli/questions.test.js::AC-18602-1: --json on a failing tree prints the questions object and exits 0"
+    },
+    {
+      "id": "TC-226-cli-persona-default",
+      "acId": "AC-18602-2",
+      "description": "Without --persona, the verb picks engineer on a profile whose register is engineer, else productOwner.",
+      "status": "pending",
+      "testPointer": "test/cli/questions.test.js::AC-18602-2: persona defaults from profile register"
+    },
+    {
+      "id": "TC-226-cli-stage-limit",
+      "acId": "AC-18602-3",
+      "description": "--stage skeleton --limit 2 caps questions[] to two D2 entries and reports remaining counting every D2 item.",
+      "status": "pending",
+      "testPointer": "test/cli/questions.test.js::AC-18602-3: --stage brief --limit 1 caps the output but keeps remaining honest"
+    },
+    {
+      "id": "TC-226-mcp-parity",
+      "acId": "AC-18602-4",
+      "description": "MCP tool rcf_define_questions returns structuredContent deep-equal to the verb's --json output on the same tree.",
+      "status": "pending",
+      "testPointer": "test/mcp/define-questions.test.js::AC-18602-4: rcf_define_questions structuredContent deep-equals the verb --json"
+    },
+    {
+      "id": "TC-226-cli-usage-persona",
+      "acId": "AC-18602-5",
+      "description": "--persona architect exits 2 with the usage line naming productOwner and engineer.",
+      "status": "pending",
+      "testPointer": "test/cli/questions.test.js::AC-18602-5: --persona architect exits 2 naming productOwner and engineer"
+    },
+    {
+      "id": "TC-226-cli-writes-nothing",
+      "acId": "AC-18602-6",
+      "description": "No file under rcf/ is created or modified during any invocation of rcf define questions.",
+      "status": "pending",
+      "testPointer": "test/cli/questions.test.js::AC-18602-6: questions writes nothing under rcf/"
+    },
+    {
+      "id": "TC-226-loop-convergence",
+      "acId": "AC-18603-1",
+      "description": "Scripted loop fixture: applying each writeBack and recomputing drives questions count strictly down each turn and to zero.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::AC-18603-1: scripted loop converges strictly to zero within a bounded number of turns"
+    },
+    {
+      "id": "TC-226-loop-new-req",
+      "acId": "AC-18603-2",
+      "description": "A statement resolved to a new REQ carrying description and domain passes skeleton:reqIntent and raises stories:reqHasUs once.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::AC-18603-2: a new REQ with description and domain passes reqIntent and asks reqHasUs once"
+    },
+    {
+      "id": "TC-226-loop-l1-draft-stable",
+      "acId": "AC-18603-3",
+      "description": "At L1, adding [draft] entities, TAC stubs and interfaces leaves intentComplete.ok true and the PO question set empty.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::AC-18603-3: at L1 adding engineer-only draft entities keeps the PO question set empty"
+    },
+    {
+      "id": "TC-226-loop-decision-wellformed",
+      "acId": "AC-18603-4",
+      "description": "An openQuestion promoted to a decision with one option and no default makes decisions:wellFormed ask once and brief:openQuestions pass.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::AC-18603-4: an openQuestion promoted to a one-option decision asks decisions:wellFormed once"
+    },
+    {
+      "id": "TC-226-loop-engineer-isolation",
+      "acId": "AC-18603-5",
+      "description": "No product-owner check changes from ok to failing after an engineer-only edit.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::AC-18603-5: an engineer-only edit never changes the PO question set"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-227.json

@@ -0,0 +1,38 @@
+{
+  "createdAt": "2026-10-03T09:30:00Z",
+  "updatedAt": "2026-10-03T09:30:00Z",
+  "purpose": "Cover US-18002 (the Readiness tab renders question cards grouped by source span): the questions block lists each group with its asks and every id is in the JSON (AC-18002-1), the empty questions set renders the intent-complete verdict line (AC-18002-2), and engineer blockers are never removed from the DOM in any register (AC-18002-3). Points at the three AC tests under test/view/readiness-po-layer.test.js.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-18002-1",
+    "AC-18002-2",
+    "AC-18002-3"
+  ],
+  "id": "TS-227",
+  "usId": "US-18002",
+  "title": "Readiness PO question cards: groups and asks, intent-complete empty state, engineer DOM preserved across registers",
+  "testCases": [
+    {
+      "id": "TC-227-groups-and-asks",
+      "acId": "AC-18002-1",
+      "description": "renderReadinessPO is given a readiness object with questions[] non-empty; every group label, every ask and every question id appears in the panel, and data-rcf-source=\"readiness.questions\" is stamped so the source path is unambiguous.",
+      "status": "pending",
+      "testPointer": "test/view/readiness-po-layer.test.js::PO layer: AC-18002-1 given questions[] non-empty, the block lists each group with its asks and every id is in the JSON"
+    },
+    {
+      "id": "TC-227-empty-questions-verdict",
+      "acId": "AC-18002-2",
+      "description": "renderReadinessPO is given a clean readiness object with both levels ok and no blockers; the panel renders the exact intent-complete verdict line (formatVerdictLines(result).intentComplete) inside the questions block and marks the section data-rcf-empty=\"yes\".",
+      "status": "pending",
+      "testPointer": "test/view/readiness-po-layer.test.js::PO layer: AC-18002-2 given questions[] empty, the block shows the intent-complete verdict line"
+    },
+    {
+      "id": "TC-227-engineer-dom-preserved",
+      "acId": "AC-18002-3",
+      "description": "renderReadinessPanel across every register (null / productOwner / engineer) keeps every engineer blocker id in the DOM, keeps every PO blocker id in the DOM and renders the CLI verdict strings verbatim inside the For-engineers DocRow; the For-engineers DocRow is closed under productOwner / unstated and open under engineer.",
+      "status": "pending",
+      "testPointer": "test/view/readiness-po-layer.test.js::PO layer: AC-18002-3 engineer blockers are not removed from the DOM in any register"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-228.json

@@ -0,0 +1,86 @@
+{
+  "createdAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T00:00:00Z",
+  "purpose": "Cover US-18801 (the draft homes) and US-18202 (the DEFINE-stage guidance pack): parseInterfaceDraft and shapes:draftSettled extended to TAC.purpose, coreEntities[].description and TAC.interfaces[].description with the three id forms; a draft-only tree is L1-neutral; the guidance manifest advertises the two new slugs and five prompts; the register scan rejects an em-dash in any new guidance file; the managed block regeneration keeps every existing rule.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-18801-1",
+    "AC-18801-2",
+    "AC-18801-3",
+    "AC-18801-4",
+    "AC-18801-5",
+    "AC-18202-1",
+    "AC-18202-2",
+    "AC-18202-3",
+    "AC-18202-4"
+  ],
+  "id": "TS-228",
+  "usId": "US-18801",
+  "title": "DEFINE step 3 PR 3: draft marker extension, DISCOVERY prototypes guidance and prompts",
+  "testCases": [
+    {
+      "id": "TC-228-draft-coreentity",
+      "acId": "AC-18801-1",
+      "description": "A coreEntities entry whose description starts with [draft] fails shapes:draftSettled with id TAD.entity:<name>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-1): draft on coreEntity description fails draftSettled with TAD.entity:<name>"
+    },
+    {
+      "id": "TC-228-draft-tac-purpose",
+      "acId": "AC-18801-2",
+      "description": "A TAC whose purpose starts with [draft] fails shapes:draftSettled with id <tacId>; shapes:tacHasInterface counts the TAC as present.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-2): draft on TAC.purpose fails draftSettled with <tacId>, tacHasInterface counts it present"
+    },
+    {
+      "id": "TC-228-draft-cleared",
+      "acId": "AC-18801-3",
+      "description": "When every [draft] marker across the three homes is cleared, shapes:draftSettled passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-3): three draft homes cleared, draftSettled passes"
+    },
+    {
+      "id": "TC-228-draft-template-markers",
+      "acId": "AC-18801-4",
+      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one (lifted from pending by DEFINE step 3 PR 5 under ADR-4131).",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
+    },
+    {
+      "id": "TC-228-draft-no-po-read",
+      "acId": "AC-18801-5",
+      "description": "No productOwner check reads any [draft] content: every productOwner check on a draft-only tree is ok (L1-neutral).",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-5): draft-only tree keeps every productOwner check ok (L1-neutral)"
+    },
+    {
+      "id": "TC-228-guidance-prints",
+      "acId": "AC-18202-1",
+      "description": "rcf guidance define-intent and rcf guidance discovery-prototypes each print their file byte-faithfully.",
+      "status": "pending",
+      "testPointer": "test/guidance/verbs.test.js::guidance (REQ-182, AC-18202-1): rcf guidance define-intent and discovery-prototypes each print their file"
+    },
+    {
+      "id": "TC-228-manifest-prompts",
+      "acId": "AC-18202-2",
+      "description": "The manifest lists rcf_define_intent, rcf_define_intake, rcf_define_draft_shapes, rcf_discover_prototype and rcf_define_litmus (DEFINE step 3 PR 7) as argument-free DEFINE/DISCOVERY prompts.",
+      "status": "pending",
+      "testPointer": "test/guidance/inventory.test.js::guidance (REQ-182, AC-18202-2): the five argument-free DEFINE / DISCOVERY prompts are present"
+    },
+    {
+      "id": "TC-228-register-scan-em-dash",
+      "acId": "AC-18202-3",
+      "description": "A new guidance file containing an em-dash fails the register scan.",
+      "status": "pending",
+      "testPointer": "test/guidance/canonical-text-lint.test.js::guidance (REQ-182, AC-18202-3): em-dash in a new guidance file fails the register scan"
+    },
+    {
+      "id": "TC-228-managed-block-preserves-rules",
+      "acId": "AC-18202-4",
+      "description": "The managed block regeneration keeps every existing rule: regenerating never removes a line.",
+      "status": "pending",
+      "testPointer": "test/guidance/fragment.test.js::guidance (REQ-182, AC-18202-4): managed-block regeneration keeps every existing rule"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-229.json

@@ -0,0 +1,83 @@
+{
+  "createdAt": "2026-10-03T09:55:00Z",
+  "updatedAt": "2026-10-03T10:00:00Z",
+  "purpose": "Cover US-206 (wespa's embedding contract is proved by a CI host fixture): the fixture renders a 56px header + resizable sidebar around an iframe pointed at ./?embed=1&theme=light with no inline script (AC-206-1), theme flips via postMessage without a reload (AC-206-2, source invariants + Playwright live proof in the lane evidence), embed and theme survive a hash-only in-iframe navigation (AC-206-3, source invariants + Playwright live proof), cross-origin messages are ignored by the viewer listener (AC-206-4), the three lints keep framing headers, target=_top and localStorage namespace in place (AC-206-5), and no new outbound postMessage shape is introduced by the viewer or the fixture (AC-206-6). All TCs resolve to node tests under test/view/wespa-host-fixture.test.js.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-206-1",
+    "AC-206-2",
+    "AC-206-3",
+    "AC-206-4",
+    "AC-206-5",
+    "AC-206-6"
+  ],
+  "id": "TS-229",
+  "usId": "US-206",
+  "title": "Wespa host fixture: iframe shell, theme postMessage, hash-nav embed preservation, cross-origin refusal, three lints, no new outbound postMessage shape",
+  "testCases": [
+    {
+      "id": "TC-229-fixture-shell",
+      "acId": "AC-206-1",
+      "description": "renderTestHostPage returns an HTML5 document with a 56px wespa-header, data-rcf-host-sidebar + data-rcf-host-sidebar-drag markers, data-rcf-host-theme light/dark toggles, an iframe whose src is literally './?embed=1&theme=light' (HTML-entity encoded), a '<script src=./test-host.js defer>' line and zero inline <script> blocks.",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::renderTestHostPage: HTML5 document, no inline script, iframe src is ./?embed=1&theme=light"
+    },
+    {
+      "id": "TC-229-test-host-http-roundtrip",
+      "acId": "AC-206-1",
+      "description": "The router serves /test-host.html with the fixture body (iframe src + script tag) and /test-host.js with application/javascript when testHost: true; both routes return 404 by default so wespa's reverse-proxy allow-list is unaffected.",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::/test-host.html is served when testHost: true; iframe src and no inline script round-trip over HTTP"
+    },
+    {
+      "id": "TC-229-theme-postmessage-source",
+      "acId": "AC-206-2",
+      "description": "src/view/test-host/embed-client.js posts { type: 'rcf-view-theme', theme } to iframe.contentWindow targeting window.location.origin, and its code (comments stripped) contains no localStorage/sessionStorage write (ADR-4136 does-not-persist invariant). The live postMessage round-trip is captured in Playwright evidence (agents/dave/remote-lane/inbox/r-20261002-161325-e2a2/output/evidence/test-host-dark-iframe-flipped.png).",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::AC-206-2: embed-client posts { type: rcf-view-theme, theme } to the iframe targeting window.location.origin"
+    },
+    {
+      "id": "TC-229-hash-nav-embed-preserved",
+      "acId": "AC-206-3",
+      "description": "src/view/page-init.js exposes writeHash (reassigns location.hash only, preserving the search string by construction) and stamps data-embed + data-theme on load. Live hash-nav proof lives in Playwright evidence (hash-nav-proof.txt + test-host-iframe-hash-nav-embed-preserved.png).",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::AC-206-3: page-init preserves embed=1 and theme= across hash writes (urlWithHash + writeHash)"
+    },
+    {
+      "id": "TC-229-cross-origin-ignored",
+      "acId": "AC-206-4",
+      "description": "src/view/page-init.js registers an addEventListener('message', ...) whose first guard returns early when ev.origin !== window.location.origin; cross-origin messages never reach the applyTheme path and <html data-theme> is unchanged.",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::AC-206-4: page-init theme message listener rejects messages whose origin differs from window.location.origin"
+    },
+    {
+      "id": "TC-229-lint-framing",
+      "acId": "AC-206-5",
+      "description": "assertFramingHeaders over GET / returns ok: true (no X-Frame-Options; no CSP frame-ancestors forbidding same-origin). Positive + negative unit cases also pass (refuses on X-Frame-Options present, refuses on frame-ancestors 'none', accepts frame-ancestors 'self').",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::lint 1 (framing): GET / carries no X-Frame-Options and no CSP frame-ancestors that forbids same-origin"
+    },
+    {
+      "id": "TC-229-lint-no-target-top",
+      "acId": "AC-206-5",
+      "description": "assertNoTargetTop returns count: 0 across every rendered page (renderPage shell, renderComponentsFixturePage, renderTestHostPage). Also lints the populated dogfood tree render (renderModelToPage) so per-document conditional output cannot smuggle a target=\"_top\" past the test. Positive + negative unit cases cover target=\"_top\" / target='_top' / target=_top.",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::lint 2 (target=\"_top\"): zero occurrences across every rendered page (shell, components fixture, test-host fixture, populated dogfood tree)"
+    },
+    {
+      "id": "TC-229-lint-localstorage-namespace",
+      "acId": "AC-206-5",
+      "description": "assertLocalStorageNamespace over the src/view tree returns ok: true; every localStorage/sessionStorage call site resolves to a key starting with 'rcf-view:v1:'.",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::lint 3 (localStorage namespace): every storage call site under src/view uses an rcf-view:v1: key"
+    },
+    {
+      "id": "TC-229-no-new-outbound-postmessage-shape",
+      "acId": "AC-206-6",
+      "description": "A grep over src/view/** (excluding test-host/embed-client.js, the sanctioned emitter) finds zero .postMessage( call sites; the embed-client itself posts exactly one shape, 'rcf-view-theme'.",
+      "status": "pending",
+      "testPointer": "test/view/wespa-host-fixture.test.js::AC-206-6: no outbound postMessage shape beyond rcf-view-theme is introduced by the viewer or the fixture"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-230.json

@@ -0,0 +1,76 @@
+{
+  "createdAt": "2026-10-03T10:50:00Z",
+  "updatedAt": "2026-10-03T10:50:00Z",
+  "purpose": "Cover US-17404 (D3 bites): the three D3 bite checks shapes:templateMarkers, shapes:entityJoin and shapes:pathsResolve each have pass, fail, notApplicable, id and why strings; drafts are included in templateMarkers; the readiness CLI --check shapes exits 4 on an unacknowledged D3 failure and 0 when acked at the current hash; ackable() is exactly D3, D5, D6; --ack on D1, D2, D4, D7 or D8 exits 2 unchanged.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17404-1",
+    "AC-17404-2",
+    "AC-17404-3",
+    "AC-17404-4",
+    "AC-17404-5",
+    "AC-17404-6"
+  ],
+  "id": "TS-230",
+  "usId": "US-17404",
+  "title": "DEFINE step 3 PR 5: D3 bite checks, ackable, --check exit 4 policy",
+  "testCases": [
+    {
+      "id": "TC-230-templatemarkers-happy",
+      "acId": "AC-17404-1",
+      "description": "A recordShape with fields: and an httpRoute with method, path, request, response and errors each pass shapes:templateMarkers.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-1): recordShape+fields and httpRoute+5 markers each pass shapes:templateMarkers"
+    },
+    {
+      "id": "TC-230-templatemarkers-missing",
+      "acId": "AC-17404-2",
+      "description": "An httpRoute description missing errors fails shapes:templateMarkers with id <tacId>:<name> and why 'missing marker errors'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-2): httpRoute missing errors fails templateMarkers with <tacId>:<name> and \"missing marker errors\""
+    },
+    {
+      "id": "TC-230-entityjoin-ok-and-twice",
+      "acId": "AC-17404-3",
+      "description": "Every coreEntity named by exactly one recordShape passes shapes:entityJoin; one named twice fails TAD.entity:<name> with '2 record shapes'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-3): entityJoin passes 1:1 and fails TAD.entity:<name> with \"2 record shapes\" when twice"
+    },
+    {
+      "id": "TC-230-pathsresolve-resolved-and-authored",
+      "acId": "AC-17404-4",
+      "description": "An interface description naming a path present in resolvedPaths passes shapes:pathsResolve; a missing path on an interface marked authoredAt: D3 in the description also passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-4): pathsResolve passes a resolved path and passes a missing path when authoredAt D3 is in the description"
+    },
+    {
+      "id": "TC-230-cli-check-shapes-exit-matrix",
+      "acId": "AC-17404-5",
+      "description": "rcf define readiness --check shapes exits 4 on an unacknowledged D3 failure and 0 when the freeze record acknowledges define.shapes at the current tree hash.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17404-5 --check shapes exits 4 unacked and 0 acked at current hash"
+    },
+    {
+      "id": "TC-230-freeze-ack-blocking-stages-exit-2",
+      "acId": "AC-17404-6",
+      "description": "rcf define freeze --ack <gate> --reason <text> on D1, D2, D4, D7 or D8 exits 2 unchanged from 0.29.0.",
+      "status": "pending",
+      "testPointer": "test/cli/freeze.test.js::freeze cli: AC-17404-6 --ack on D1, D2, D4, D7 or D8 exits 2 unchanged"
+    },
+    {
+      "id": "TC-230-ackable-exactly-d3-d5-d6",
+      "acId": "AC-17404-5",
+      "description": "ackable(stage) returns true for D3, D5 and D6 and false for D1, D2, D4, D7 and D8.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131): ackable(stage) is exactly D3, D5 and D6; stagePolicy keeps saying blocking"
+    },
+    {
+      "id": "TC-230-templatemarkers-draft-recordshape",
+      "acId": "AC-17404-1",
+      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one; this completes AC-18801-4 from PR 3.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-231.json

@@ -0,0 +1,104 @@
+{
+  "createdAt": "2026-10-03T13:30:00Z",
+  "updatedAt": "2026-10-03T13:30:00Z",
+  "purpose": "Cover US-17405 (D4/D5/D2 bites, PR 6): the four new checks stories:closedSets, stories:ownerRefResolves, crosscut:catalogue and skeleton:standardsCited each have pass, fail, notApplicable, id and why strings; the concern-catalogue applicability table is validated; --check crosscut exits 4 on an unacknowledged D5 failure and 0 when the freeze record acknowledges define.crosscut at the current tree hash; validate adds no finding for a missing AC class marker.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17405-1",
+    "AC-17405-2",
+    "AC-17405-3",
+    "AC-17405-4",
+    "AC-17405-5",
+    "AC-17405-6"
+  ],
+  "id": "TS-231",
+  "usId": "US-17405",
+  "title": "DEFINE step 3 PR 6: D4 closed sets and ownerRef findings, D5 concern catalogue, standards citation",
+  "testCases": [
+    {
+      "id": "TC-231-closedsets-cue-without-list",
+      "acId": "AC-17405-1",
+      "description": "An AC description with an enumeration cue (status is one of the following) and no bracketed list or ownerRef fails stories:closedSets with the AC id and why 'enumeration cue without a closed set'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-1): closedSets fails an AC with an enumeration cue and no bracketed list or ownerRef"
+    },
+    {
+      "id": "TC-231-closedsets-quoted-cue-guard",
+      "acId": "AC-17405-1",
+      "description": "An AC description that quotes an enumeration cue (e.g. the user types \"status is\" into the search box) does not fail stories:closedSets.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-1): closedSets honours the quoted-cue guard shared with D6"
+    },
+    {
+      "id": "TC-231-ownerref-resolves-and-missing",
+      "acId": "AC-17405-2",
+      "description": "An ownerRef { tacId, field: interfaces[loan] } that resolves on that TAC passes stories:ownerRefResolves; interfaces[missing] fails with 'ownerRef does not resolve'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-2): ownerRefResolves passes a resolving pointer and fails a missing one"
+    },
+    {
+      "id": "TC-231-crosscut-catalogue-applied-and-waived",
+      "acId": "AC-17405-3",
+      "description": "A persistence REQ with retention applied and timeAndTimezone waived (with a reason) passes crosscut:catalogue; the pair totals cover the full applicability map.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-3): crosscut:catalogue passes a persistence REQ with retention applied and timeAndTimezone waived"
+    },
+    {
+      "id": "TC-231-crosscut-catalogue-missing-pair",
+      "acId": "AC-17405-4",
+      "description": "An httpApi REQ with no errorEnvelope entry fails crosscut:catalogue with id <REQ>:errorEnvelope and a why naming the missing pair.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-4): crosscut:catalogue fails <REQ>:errorEnvelope when the httpApi REQ has no concern-ledger entry"
+    },
+    {
+      "id": "TC-231-standards-cited-and-waived",
+      "acId": "AC-17405-5",
+      "description": "A registered standards pack cited in an ADR passes skeleton:standardsCited; uncited and unwaived, it fails standards:<pack> with 'uncited and unwaived'; waiver via a concern-ledger entry keyed standards:<pack> also passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-5): standardsCited passes when cited or waived; fails when neither"
+    },
+    {
+      "id": "TC-231-validate-no-missing-marker-finding",
+      "acId": "AC-17405-6",
+      "description": "rcf define validate (as it stands in this PR) raises no finding for a story whose ACs carry no class marker; decision 10 preserved.",
+      "status": "pending",
+      "testPointer": "test/cli/validate.test.js::validate cli (PR 6, AC-17405-6): no finding is raised for a missing AC class marker"
+    },
+    {
+      "id": "TC-231-cli-check-crosscut-exit-matrix",
+      "acId": "AC-17405-3",
+      "description": "rcf define readiness --check crosscut exits 4 on an unacknowledged D5 failure and 0 when the freeze record acknowledges define.crosscut at the current tree hash.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17405 --check crosscut exits 4 unacked and 0 acked at current hash"
+    },
+    {
+      "id": "TC-231-concern-catalogue-table",
+      "acId": "AC-17405-3",
+      "description": "applicableConcernsFor returns the exact spec section 4 D5 catalogue row: auth for auth/httpApi; errorEnvelope for httpApi/cliCommand; loggingAudit for every shape but other; retention for persistence; performance for httpApi/batch; secrets for auth/externalIntegration; timeAndTimezone for persistence/batch; concurrencyIdempotency for httpApi/persistence.",
+      "status": "pending",
+      "testPointer": "test/define/concern-catalogue.test.js::concern-catalogue (PR 6): applicability table matches spec section 4 D5"
+    },
+    {
+      "id": "TC-231-loop-convergence-engineer-no-po",
+      "acId": "AC-17405-1",
+      "description": "The engineer checks stories:closedSets, stories:ownerRefResolves, crosscut:catalogue and skeleton:standardsCited surface no product-owner failures on the loop fixture from PR 2.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::PR 6 engineer checks surface no product-owner failures on the scripted fixture"
+    },
+    {
+      "id": "TC-231-ownerref-r11-widened",
+      "acId": "AC-17405-7",
+      "description": "R11 widens stories:ownerRefResolves beyond interfaces[<name>] to responsibilities[<n>] and bare schema fields (purpose, decision).",
+      "status": "passing",
+      "testPointer": "test/query/gates.test.js::gates (PR 9, AC-17405-2 R11): ownerRefResolves accepts bracket-grammar paths beyond interfaces (responsibilities[<n>], purpose, decision)"
+    },
+    {
+      "id": "TC-231-ownerref-dotted-refused",
+      "acId": "AC-17405-8",
+      "description": "R11 refuses dotted grammar; rcf define validate reports the finding naming the dotted field.",
+      "status": "passing",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 9, R11): ownerRef uses the widened grammar; deliveredBy object form is checked"
+    }
+  ],
+  "status": "draft"
+}