rcf-lite 0.29.0 → 0.30.0

package/rcf/tacs/tac-4126-define-validate-findings.json

@@ -0,0 +1,32 @@
+{
+  "createdAt": "2026-10-03T18:30:00Z",
+  "updatedAt": "2026-10-03T20:30:00Z",
+  "tacId": "TAC-4126-define-validate-findings",
+  "prdId": "PRD-001",
+  "tadId": "TAD-001",
+  "version": "0.1.1",
+  "status": "draft",
+  "name": "rcf define validate findings for interface kind, AC class prefix, tacIds and ownerRef or deliveredBy",
+  "purpose": "0.30.0 PR 8 (spec section 4 validate row, section 11.7 US-17802). `rcf define validate` reports a finding and exits non-zero for an interface kind outside the closed vocabulary (`INTERFACE_KINDS`), a bracketed AC prefix on an AC `description` outside the known classes (`AC_CLASS_RE`), a `tacIds` naming a non-TAC, and an unresolving `ownerRef` or `deliveredBy`. The absence of a class marker on an AC is NOT a validate finding (decision 10, kept): absence is D4's floor; a validate finding here would fail the dogfood tree and every legacy tree's CI.",
+  "responsibilities": [
+    "interface kind outside vocabulary: for every TAC in the tree, each `interfaces[].kind` that is not in `INTERFACE_KINDS` is reported as a finding `defineValidate:interfaceKind` naming the TAC id, interface name and the unknown kind.",
+    "bracketed AC class prefix outside known classes: for every AC in the tree whose description's leading bracketed prefix is not one of {happy, edge, failure, must-not, non-functional}, report `defineValidate:acClassPrefix` with the US id, AC id and the unknown prefix. An AC description with NO leading bracketed prefix is NOT reported (decision 10).",
+    "tacIds naming a non-TAC: for every US in the tree, each `tacIds[]` entry that does not resolve to a TAC in `tree.byId` is reported as `defineValidate:tacIdsResolves` with the US id and the unresolved id.",
+    "unresolving ownerRef or deliveredBy (R11 grammar, spec section 17, PR 9): for every AC with ownerRef `{ tacId | adrId, field }` whose field does NOT resolve on the owning TAC/ADR under R11 (`interfaces[<name>]`, `responsibilities[<n>]`, `dependencies[<name>]`, `alternativesConsidered[<n>]`, or a bare schema field name), and for every REQ whose deliveredBy is the OBJECT form `{ tacId | adrId, field }` with a dotted or dead field, report `defineValidate:ownerRefResolves` or `defineValidate:deliveredByResolves` with the owning id and the dangling pointer. String-form deliveredBy (pre-DEFINE back-compat) still resolves against `tree.byId`. The object-form `deliveredBy` was silently skipped before PR 9 (review 2026-10-03).",
+    "clean on the dogfood tree: every finding is scoped so the rcf-lite dogfood tree passes with exit 0; where the dogfood tree surfaces a real defect in a chain document, the fix is made in the chain document, not in the finding."
+  ],
+  "internalStructure": "A new module `src/define/validate-findings.js` exports `collectDefineValidateFindings(tree)` returning an array of walker-shaped error entries ({ kind, rule, documentId, filePath, field, message }). `src/cli/validate.js` runs the module after the Code Node resolution pass and the companions check, folds the findings into the `errors` array it already exits on (exit 3), and reports them in the same `--json` envelope. Each finding reuses the walker error shape so `formatErrors` prints them exactly as a schema or broken-reference error. Interface kinds reuse `INTERFACE_KINDS` from `src/query/gates.js`; AC class classification reuses `parseAcClass`; `ownerRef` resolution reuses the existing D4 helper (`AC_OWNER_REF_FIELD_RE`) so the two code paths cannot diverge.",
+  "interfaces": [
+    {
+      "name": "collectDefineValidateFindings",
+      "kind": "other",
+      "description": "`moduleApi` (`src/define/validate-findings.js`). Signature: (tree) -> Array<{ kind: 'defineValidate', rule: string, documentId: string|null, filePath: string|null, field: string|null, message: string }>. Pure over the walker tree model; no filesystem I/O. authoredAt: D3."
+    },
+    {
+      "name": "rcf define validate",
+      "kind": "cliCommand",
+      "description": "`cliCommand` (`rcf define validate`). Usage unchanged from 0.29.0; the exit path now also exits 3 on any finding returned by `collectDefineValidateFindings`. authoredAt: D3."
+    }
+  ],
+  "notes": "Decision 10 is binding: the dogfood tree and every legacy tree would fail CI if the absence-of-class-marker became a validate finding. The dogfood tree is checked clean by the AC-17802-3 test; a mechanical correction of a chain document is recorded in report.md's dogfood section when PR 8 fires. The brief named this TAC as `tac-4126*.json`; the file name follows the dash-prefixed naming convention of neighbouring TACs."
+}

package/rcf/tacs/tac-4128-define-guidance.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-02T18:00:00Z",
-  "updatedAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-03T16:10:00Z",
   "tacId": "TAC-4128-define-guidance",
   "prdId": "PRD-001",
   "tadId": "TAD-001",
@@ -14,7 +14,8 @@
     "guidance/managed/agent-instructions-block.md: the two rules of spec section 6 last row - the PO-session rule and the prototype rule. The managed block regeneration never removes an existing rule.",
     "guidance/manifest.json: register the new slug `define-intent`, the `rcf://docs/define-intent` resource, and the two new argument-free prompts `rcf_define_intent` and `rcf_define_intake`.",
     "serves `rcf_define_intent` and `rcf_define_intake` prompts and the two managed-block rules of REQ-186 and REQ-187.",
-    "serves `rcf_define_draft_shapes` and `rcf_discover_prototype` prompts and `guidance/discovery-prototypes.md` (REQ-188, REQ-182 amended): the draft-shapes prompt walks the agent through pre-populating `[draft]` core entities, TAC stubs and interfaces after L1; the discovery-prototype prompt walks the agent through recording a prototype in DISCOVERY as evidence; `guidance/discovery-prototypes.md` carries the doctrine and the ledger conventions and is also served as `rcf://docs/discovery-prototypes`; the managed block gains one prototype rule (ADR-4132) stating that a statement sourced to `prototype:` is evidence and a document citing prototype code as its implementation is a D2 finding the engineer resolves by re-deriving."
+    "serves `rcf_define_draft_shapes` and `rcf_discover_prototype` prompts and `guidance/discovery-prototypes.md` (REQ-188, REQ-182 amended): the draft-shapes prompt walks the agent through pre-populating `[draft]` core entities, TAC stubs and interfaces after L1; the discovery-prototype prompt walks the agent through recording a prototype in DISCOVERY as evidence; `guidance/discovery-prototypes.md` carries the doctrine and the ledger conventions and is also served as `rcf://docs/discovery-prototypes`; the managed block gains one prototype rule (ADR-4132) stating that a statement sourced to `prototype:` is evidence and a document citing prototype code as its implementation is a D2 finding the engineer resolves by re-deriving.",
+    "serves `rcf_define_litmus` prompt (0.30.0 PR 7, spec section 6 row): the argument-free markdown walks the harness through spawning n fresh-context readers and landing their readings as probe-ledger entries whose `finding` begins `litmus:<reader>:` and whose text includes the current `hash`. Registered through `guidance/manifest.json` and served through the existing MCP prompt plumbing. No new resource URI."
   ],
   "internalStructure": "The MCP prompt and resource plumbing (src/mcp/prompts.js, src/mcp/resources.js) already serves manifest-registered entries byte-faithfully; this TAC only adds entries and markdown files. The managed block is regenerated by `rcf doctor` from the fragment in guidance/harness-template.md; the two new rules append to that fragment, and the regeneration pass preserves rules the project authored outside the managed markers.",
   "interfaces": [
@@ -47,6 +48,11 @@
       "name": "rcf://docs/discovery-prototypes",
       "kind": "other",
       "description": "Resource URI backed by guidance/discovery-prototypes.md: the doctrine and the ledger conventions for prototypes in DISCOVERY (ADR-4132)."
+    },
+    {
+      "name": "rcf_define_litmus",
+      "kind": "other",
+      "description": "Argument-free MCP prompt served from guidance/define-litmus.md: walks the harness through spawning n fresh-context readers at the current tree hash and landing their readings as probe-ledger entries whose `finding` begins `litmus:<reader>:` and whose text includes the hash (0.30.0 PR 7)."
     }
   ],
   "notes": "This TAC was authored by PR 2 after the guidance slice did not land on origin/main under its reserved id ADR-4128 / TAC-4128; the shift is recorded in the PR 2 report. Later DEFINE PRs may expand it with further prompts and managed rules."

package/rcf/tacs/tac-4129-define-questions.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-02T18:00:00Z",
-  "updatedAt": "2026-10-02T18:00:00Z",
+  "updatedAt": "2026-10-03T18:30:00Z",
   "tacId": "TAC-4129-define-questions",
   "prdId": "PRD-001",
   "tadId": "TAD-001",
@@ -17,8 +17,8 @@
   "interfaces": [
     {
       "name": "computeQuestions",
-      "kind": "moduleApi",
-      "description": "Compute the persona question set from a readiness result, a tree, the four ledgers and the profile text. Returns an object with treeHash, persona, level, ok, remaining, groups[], questions[], optional[] and engineer (collapsed count on the PO return)."
+      "kind": "other",
+      "description": "Compute the persona question set from a readiness result, a tree, the four ledgers and the profile text. Returns an object with treeHash, persona, level, ok, remaining, groups[], questions[], optional[] and engineer (collapsed count on the PO return). [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
     },
     {
       "name": "rcf define questions",

package/rcf/tacs/tac-4134-wespa-host-fixture.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-02T20:00:00Z",
-  "updatedAt": "2026-10-02T20:00:00Z",
+  "updatedAt": "2026-10-03T18:30:00Z",
   "tacId": "TAC-4134-wespa-host-fixture",
   "prdId": "PRD-001",
   "tadId": "TAD-001",
@@ -31,23 +31,23 @@
     },
     {
       "name": "assertFramingHeaders",
-      "kind": "moduleApi",
-      "description": "[draft] `assertFramingHeaders(response)` on a `GET /` response. Refuses if `X-Frame-Options` is present, if a CSP `frame-ancestors` directive forbids `self`, or if `X-Content-Type-Options: nosniff` is set in a way that breaks the fixture (today it does not; the lint still records absence). Returns `{ ok: true }` or throws with the first failure."
+      "kind": "other",
+      "description": "[draft] `assertFramingHeaders(response)` on a `GET /` response. Refuses if `X-Frame-Options` is present, if a CSP `frame-ancestors` directive forbids `self`, or if `X-Content-Type-Options: nosniff` is set in a way that breaks the fixture (today it does not; the lint still records absence). Returns `{ ok: true }` or throws with the first failure. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
     },
     {
       "name": "assertNoTargetTop",
-      "kind": "moduleApi",
-      "description": "[draft] `assertNoTargetTop(renderedHtml)` greps the server-rendered HTML for `target=\"_top\"` and `target='_top'` and refuses on any match. Returns `{ ok: true, count: 0 }` or `{ ok: false, count: n, matches: [...] }`."
+      "kind": "other",
+      "description": "[draft] `assertNoTargetTop(renderedHtml)` greps the server-rendered HTML for `target=\"_top\"` and `target='_top'` and refuses on any match. Returns `{ ok: true, count: 0 }` or `{ ok: false, count: n, matches: [...] }`. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
     },
     {
       "name": "assertLocalStorageNamespace",
-      "kind": "moduleApi",
-      "description": "[draft] `assertLocalStorageNamespace(sourceTreeRoot)` walks every `.js` file under `src/view/**` (excluding vendored and `.min.js`), finds every `localStorage.(setItem|getItem|removeItem)(KEY)` and `storage.(setItem|getItem|removeItem)(KEY)` call site, and asserts that the key literal starts with `rcf-view:v1:` (or references `STORAGE_NS` which equals `rcf-view:v1:`). Returns `{ ok: true, scanned: n }` or `{ ok: false, violations: [...] }`."
+      "kind": "other",
+      "description": "[draft] `assertLocalStorageNamespace(sourceTreeRoot)` walks every `.js` file under `src/view/**` (excluding vendored and `.min.js`), finds every `localStorage.(setItem|getItem|removeItem)(KEY)` and `storage.(setItem|getItem|removeItem)(KEY)` call site, and asserts that the key literal starts with `rcf-view:v1:` (or references `STORAGE_NS` which equals `rcf-view:v1:`). Returns `{ ok: true, scanned: n }` or `{ ok: false, violations: [...] }`. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
     },
     {
       "name": "renderTestHostPage",
-      "kind": "moduleApi",
-      "description": "[draft] Pure function that emits the fixture HTML (56px header, resizable 64/200-400px sidebar, iframe content pane). No inline script; references `./test-host.js` as the single client-side JS."
+      "kind": "other",
+      "description": "[draft] Pure function that emits the fixture HTML (56px header, resizable 64/200-400px sidebar, iframe content pane). No inline script; references `./test-host.js` as the single client-side JS. [legacy kind: moduleApi; mapped to other per DEFINE spec \u00a75.2 closed vocabulary, 0.30.0 PR 8]"
     }
   ],
   "notes": "Depends on PR 1's `embed` and `theme` contract (page-init.js stamping `<html data-embed=\"1\">` and `<html data-theme>`, origin-checked `rcf-view-theme` listener, hash navigation preserving the host query string), on PR 1's relative-script policy (no inline script, no leading-slash references) and on live-client.js's existing `STORAGE_NS = 'rcf-view:v1:'` namespace. The test-host route surface is behind `--test-host` / `RCF_VIEW_TEST_HOST=1`; the release notes mark it as a test-suite fixture, not a shipped UI, so wespa's proxy allow-list is unaffected. The three lints are called from the viewer's test suite; wespa smoke on the live wespa shell is Dex's side."

package/rcf/test-suites/ts-222.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-01T16:00:00Z",
-  "updatedAt": "2026-10-01T16:00:00Z",
+  "updatedAt": "2026-10-03T12:10:00Z",
   "purpose": "Cover US-17503: --level and --persona flags, the exit matrix (section 3.2), the two verdict lines (section 2.3) and the persona-grouped text report (section 4) of the DEFINE step 2 persona-levels spec. Shares `formatVerdictLines` with the Readiness tab (PR C).",
   "testLevel": "unit",
   "acIds": [
@@ -23,7 +23,7 @@
       "acId": "AC-17503-1",
       "description": "Parameterised exit matrix across all rows of spec section 3.2 (no flag, --check <stage>, --check all, --level intent, --level build, --level + --check).",
       "status": "pending",
-      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-1 exit matrix (parameterised: --check + --level combinations)"
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-1 exit matrix (parameterised: --check + --level combinations; ADR-4131 D3 bite)"
     },
     {
       "id": "TC-222-level-intent-pass",
@@ -49,9 +49,9 @@
     {
       "id": "TC-222-check-all-unchanged",
       "acId": "AC-17503-5",
-      "description": "--check all exit behaviour unchanged on a warn-with-ack-only failure: 0 with a stderr [warn] line.",
+      "description": "--check all exits 4 on an unacknowledged D3 bite failure under ADR-4131 (0.30.0 PR 5 amends AC-17503-5 for this bite); warn-with-ack posture on D5/D6 preserved until PRs 6 and 7.",
       "status": "pending",
-      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-5 --check all unchanged on warn-with-ack"
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-5 --check all exits 4 on blocking failures (D3 bites in PR 5)"
     },
     {
       "id": "TC-222-persona-collapses-other",

package/rcf/test-suites/ts-228.json

@@ -42,9 +42,9 @@
     {
       "id": "TC-228-draft-template-markers",
       "acId": "AC-18801-4",
-      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one. (shapes:templateMarkers lands in PR 5; this TC is pending PR 5.)",
+      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one (lifted from pending by DEFINE step 3 PR 5 under ADR-4131).",
       "status": "pending",
-      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4 pending PR 5): draft recordShape without fields fails templateMarkers"
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
     },
     {
       "id": "TC-228-draft-no-po-read",
@@ -63,9 +63,9 @@
     {
       "id": "TC-228-manifest-prompts",
       "acId": "AC-18202-2",
-      "description": "The manifest lists rcf_define_intent, rcf_define_intake, rcf_define_draft_shapes and rcf_discover_prototype as argument-free; rcf_define_litmus is recorded as pending PR 7.",
+      "description": "The manifest lists rcf_define_intent, rcf_define_intake, rcf_define_draft_shapes, rcf_discover_prototype and rcf_define_litmus (DEFINE step 3 PR 7) as argument-free DEFINE/DISCOVERY prompts.",
       "status": "pending",
-      "testPointer": "test/guidance/inventory.test.js::guidance (REQ-182, AC-18202-2): four argument-free DEFINE prompts present, litmus pending PR 7"
+      "testPointer": "test/guidance/inventory.test.js::guidance (REQ-182, AC-18202-2): the five argument-free DEFINE / DISCOVERY prompts are present"
     },
     {
       "id": "TC-228-register-scan-em-dash",

package/rcf/test-suites/ts-230.json

@@ -0,0 +1,76 @@
+{
+  "createdAt": "2026-10-03T10:50:00Z",
+  "updatedAt": "2026-10-03T10:50:00Z",
+  "purpose": "Cover US-17404 (D3 bites): the three D3 bite checks shapes:templateMarkers, shapes:entityJoin and shapes:pathsResolve each have pass, fail, notApplicable, id and why strings; drafts are included in templateMarkers; the readiness CLI --check shapes exits 4 on an unacknowledged D3 failure and 0 when acked at the current hash; ackable() is exactly D3, D5, D6; --ack on D1, D2, D4, D7 or D8 exits 2 unchanged.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17404-1",
+    "AC-17404-2",
+    "AC-17404-3",
+    "AC-17404-4",
+    "AC-17404-5",
+    "AC-17404-6"
+  ],
+  "id": "TS-230",
+  "usId": "US-17404",
+  "title": "DEFINE step 3 PR 5: D3 bite checks, ackable, --check exit 4 policy",
+  "testCases": [
+    {
+      "id": "TC-230-templatemarkers-happy",
+      "acId": "AC-17404-1",
+      "description": "A recordShape with fields: and an httpRoute with method, path, request, response and errors each pass shapes:templateMarkers.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-1): recordShape+fields and httpRoute+5 markers each pass shapes:templateMarkers"
+    },
+    {
+      "id": "TC-230-templatemarkers-missing",
+      "acId": "AC-17404-2",
+      "description": "An httpRoute description missing errors fails shapes:templateMarkers with id <tacId>:<name> and why 'missing marker errors'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-2): httpRoute missing errors fails templateMarkers with <tacId>:<name> and \"missing marker errors\""
+    },
+    {
+      "id": "TC-230-entityjoin-ok-and-twice",
+      "acId": "AC-17404-3",
+      "description": "Every coreEntity named by exactly one recordShape passes shapes:entityJoin; one named twice fails TAD.entity:<name> with '2 record shapes'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-3): entityJoin passes 1:1 and fails TAD.entity:<name> with \"2 record shapes\" when twice"
+    },
+    {
+      "id": "TC-230-pathsresolve-resolved-and-authored",
+      "acId": "AC-17404-4",
+      "description": "An interface description naming a path present in resolvedPaths passes shapes:pathsResolve; a missing path on an interface marked authoredAt: D3 in the description also passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-4): pathsResolve passes a resolved path and passes a missing path when authoredAt D3 is in the description"
+    },
+    {
+      "id": "TC-230-cli-check-shapes-exit-matrix",
+      "acId": "AC-17404-5",
+      "description": "rcf define readiness --check shapes exits 4 on an unacknowledged D3 failure and 0 when the freeze record acknowledges define.shapes at the current tree hash.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17404-5 --check shapes exits 4 unacked and 0 acked at current hash"
+    },
+    {
+      "id": "TC-230-freeze-ack-blocking-stages-exit-2",
+      "acId": "AC-17404-6",
+      "description": "rcf define freeze --ack <gate> --reason <text> on D1, D2, D4, D7 or D8 exits 2 unchanged from 0.29.0.",
+      "status": "pending",
+      "testPointer": "test/cli/freeze.test.js::freeze cli: AC-17404-6 --ack on D1, D2, D4, D7 or D8 exits 2 unchanged"
+    },
+    {
+      "id": "TC-230-ackable-exactly-d3-d5-d6",
+      "acId": "AC-17404-5",
+      "description": "ackable(stage) returns true for D3, D5 and D6 and false for D1, D2, D4, D7 and D8.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131): ackable(stage) is exactly D3, D5 and D6; stagePolicy keeps saying blocking"
+    },
+    {
+      "id": "TC-230-templatemarkers-draft-recordshape",
+      "acId": "AC-17404-1",
+      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one; this completes AC-18801-4 from PR 3.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-231.json

@@ -0,0 +1,104 @@
+{
+  "createdAt": "2026-10-03T13:30:00Z",
+  "updatedAt": "2026-10-03T13:30:00Z",
+  "purpose": "Cover US-17405 (D4/D5/D2 bites, PR 6): the four new checks stories:closedSets, stories:ownerRefResolves, crosscut:catalogue and skeleton:standardsCited each have pass, fail, notApplicable, id and why strings; the concern-catalogue applicability table is validated; --check crosscut exits 4 on an unacknowledged D5 failure and 0 when the freeze record acknowledges define.crosscut at the current tree hash; validate adds no finding for a missing AC class marker.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17405-1",
+    "AC-17405-2",
+    "AC-17405-3",
+    "AC-17405-4",
+    "AC-17405-5",
+    "AC-17405-6"
+  ],
+  "id": "TS-231",
+  "usId": "US-17405",
+  "title": "DEFINE step 3 PR 6: D4 closed sets and ownerRef findings, D5 concern catalogue, standards citation",
+  "testCases": [
+    {
+      "id": "TC-231-closedsets-cue-without-list",
+      "acId": "AC-17405-1",
+      "description": "An AC description with an enumeration cue (status is one of the following) and no bracketed list or ownerRef fails stories:closedSets with the AC id and why 'enumeration cue without a closed set'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-1): closedSets fails an AC with an enumeration cue and no bracketed list or ownerRef"
+    },
+    {
+      "id": "TC-231-closedsets-quoted-cue-guard",
+      "acId": "AC-17405-1",
+      "description": "An AC description that quotes an enumeration cue (e.g. the user types \"status is\" into the search box) does not fail stories:closedSets.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-1): closedSets honours the quoted-cue guard shared with D6"
+    },
+    {
+      "id": "TC-231-ownerref-resolves-and-missing",
+      "acId": "AC-17405-2",
+      "description": "An ownerRef { tacId, field: interfaces[loan] } that resolves on that TAC passes stories:ownerRefResolves; interfaces[missing] fails with 'ownerRef does not resolve'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-2): ownerRefResolves passes a resolving pointer and fails a missing one"
+    },
+    {
+      "id": "TC-231-crosscut-catalogue-applied-and-waived",
+      "acId": "AC-17405-3",
+      "description": "A persistence REQ with retention applied and timeAndTimezone waived (with a reason) passes crosscut:catalogue; the pair totals cover the full applicability map.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-3): crosscut:catalogue passes a persistence REQ with retention applied and timeAndTimezone waived"
+    },
+    {
+      "id": "TC-231-crosscut-catalogue-missing-pair",
+      "acId": "AC-17405-4",
+      "description": "An httpApi REQ with no errorEnvelope entry fails crosscut:catalogue with id <REQ>:errorEnvelope and a why naming the missing pair.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-4): crosscut:catalogue fails <REQ>:errorEnvelope when the httpApi REQ has no concern-ledger entry"
+    },
+    {
+      "id": "TC-231-standards-cited-and-waived",
+      "acId": "AC-17405-5",
+      "description": "A registered standards pack cited in an ADR passes skeleton:standardsCited; uncited and unwaived, it fails standards:<pack> with 'uncited and unwaived'; waiver via a concern-ledger entry keyed standards:<pack> also passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-5): standardsCited passes when cited or waived; fails when neither"
+    },
+    {
+      "id": "TC-231-validate-no-missing-marker-finding",
+      "acId": "AC-17405-6",
+      "description": "rcf define validate (as it stands in this PR) raises no finding for a story whose ACs carry no class marker; decision 10 preserved.",
+      "status": "pending",
+      "testPointer": "test/cli/validate.test.js::validate cli (PR 6, AC-17405-6): no finding is raised for a missing AC class marker"
+    },
+    {
+      "id": "TC-231-cli-check-crosscut-exit-matrix",
+      "acId": "AC-17405-3",
+      "description": "rcf define readiness --check crosscut exits 4 on an unacknowledged D5 failure and 0 when the freeze record acknowledges define.crosscut at the current tree hash.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17405 --check crosscut exits 4 unacked and 0 acked at current hash"
+    },
+    {
+      "id": "TC-231-concern-catalogue-table",
+      "acId": "AC-17405-3",
+      "description": "applicableConcernsFor returns the exact spec section 4 D5 catalogue row: auth for auth/httpApi; errorEnvelope for httpApi/cliCommand; loggingAudit for every shape but other; retention for persistence; performance for httpApi/batch; secrets for auth/externalIntegration; timeAndTimezone for persistence/batch; concurrencyIdempotency for httpApi/persistence.",
+      "status": "pending",
+      "testPointer": "test/define/concern-catalogue.test.js::concern-catalogue (PR 6): applicability table matches spec section 4 D5"
+    },
+    {
+      "id": "TC-231-loop-convergence-engineer-no-po",
+      "acId": "AC-17405-1",
+      "description": "The engineer checks stories:closedSets, stories:ownerRefResolves, crosscut:catalogue and skeleton:standardsCited surface no product-owner failures on the loop fixture from PR 2.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::PR 6 engineer checks surface no product-owner failures on the scripted fixture"
+    },
+    {
+      "id": "TC-231-ownerref-r11-widened",
+      "acId": "AC-17405-7",
+      "description": "R11 widens stories:ownerRefResolves beyond interfaces[<name>] to responsibilities[<n>] and bare schema fields (purpose, decision).",
+      "status": "passing",
+      "testPointer": "test/query/gates.test.js::gates (PR 9, AC-17405-2 R11): ownerRefResolves accepts bracket-grammar paths beyond interfaces (responsibilities[<n>], purpose, decision)"
+    },
+    {
+      "id": "TC-231-ownerref-dotted-refused",
+      "acId": "AC-17405-8",
+      "description": "R11 refuses dotted grammar; rcf define validate reports the finding naming the dotted field.",
+      "status": "passing",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 9, R11): ownerRef uses the widened grammar; deliveredBy object form is checked"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-232.json

@@ -0,0 +1,109 @@
+{
+  "createdAt": "2026-10-03T16:10:00Z",
+  "updatedAt": "2026-10-03T16:10:00Z",
+  "purpose": "Cover US-17406 (D6 bites) and US-17504 (probe seam and litmus): the four new consistency scans each have pass, fail and the named false-positive guards; countLitmusReadersAtHash reads distinct readers from probe-ledger entries at the current hash; parseLitmusFlag validates input; the readiness CLI --litmus flag exits 4 on a shortfall and documents the flag in --help; computeReadiness returns the pre-PR result when no probeRunner is passed and merges injected findings into open probe entries when one is.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17406-1",
+    "AC-17406-2",
+    "AC-17406-3",
+    "AC-17406-4",
+    "AC-17406-5",
+    "AC-17406-6",
+    "AC-17504-1",
+    "AC-17504-2",
+    "AC-17504-3",
+    "AC-17504-4",
+    "AC-17504-5"
+  ],
+  "id": "TS-232",
+  "usId": "US-17406",
+  "title": "DEFINE step 3 PR 7: D6 consistency scans, probe seam, --litmus and rcf_define_litmus",
+  "testCases": [
+    {
+      "id": "TC-232-contradictions-same-when-negated-then",
+      "acId": "AC-17406-1",
+      "description": "Two ACs on one story sharing a when clause and a negated then fail consistency:contradictions with the story id and both AC ids in the why.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-1): contradictions fails a story with two ACs sharing a when and a negated then"
+    },
+    {
+      "id": "TC-232-contradictions-quoted-negation-guard",
+      "acId": "AC-17406-6",
+      "description": "A negation inside a double-quoted substring in a then does not fire consistency:contradictions on the story.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-6): contradictions does not fire on a negation inside a quoted substring"
+    },
+    {
+      "id": "TC-232-unsatisfiable-undefined-field",
+      "acId": "AC-17406-2",
+      "description": "A then naming a field no recordShape defines fails consistency:unsatisfiable with id <acId>:<field>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-2): unsatisfiable fails an AC naming a field no recordShape defines"
+    },
+    {
+      "id": "TC-232-unsatisfiable-draft-recordshape",
+      "acId": "AC-17406-3",
+      "description": "A field defined in a [draft] recordShape counts as defined; consistency:unsatisfiable passes the AC.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-3): unsatisfiable passes when the field lives in a [draft] recordShape"
+    },
+    {
+      "id": "TC-232-duplicates-across-stories",
+      "acId": "AC-17406-4",
+      "description": "Identical AC descriptions on two stories fail consistency:duplicates with both AC ids.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-4): duplicates fails identical AC descriptions across stories"
+    },
+    {
+      "id": "TC-232-orphan-interfaces",
+      "acId": "AC-17406-5",
+      "description": "An interface no ownerRef and no deliveredBy reaches fails consistency:orphanInterfaces with id <tacId>:<name>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-5): orphanInterfaces fails an interface no ownerRef and no deliveredBy reaches"
+    },
+    {
+      "id": "TC-232-probe-runner-injects-findings",
+      "acId": "AC-17504-1",
+      "description": "A probeRunner returning two findings for REQ-003 causes consistency:probeCount to fail; the injected findings appear as open probe entries.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7, AC-17504-1): probeRunner findings land as open probe entries that fail consistency:probeCount"
+    },
+    {
+      "id": "TC-232-no-probe-runner-matches-pre-pr",
+      "acId": "AC-17504-2",
+      "description": "No probeRunner yields the pre-PR result on the same fixture; consistency:probeCount passes.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7, AC-17504-2): no probeRunner yields the pre-PR result"
+    },
+    {
+      "id": "TC-232-litmus-reader-count",
+      "acId": "AC-17504-3",
+      "description": "countLitmusReadersAtHash reads distinct readers from probe-ledger entries whose finding begins litmus:<reader>: and whose text includes the hash; readings from the same reader are counted once.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7): countLitmusReadersAtHash reads distinct readers from probe entries"
+    },
+    {
+      "id": "TC-232-parse-litmus-flag",
+      "acId": "AC-17504-4",
+      "description": "parseLitmusFlag parses a positive integer, returns null when absent, and throws a usage error on a non-positive or non-integer value.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7): parseLitmusFlag validates its input"
+    },
+    {
+      "id": "TC-232-cli-litmus-shortfall-exits-4",
+      "acId": "AC-17504-4",
+      "description": "rcf define readiness --litmus 2 with no readers exits 4 and prints the shortfall on stderr.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli (PR 7, AC-17504-4): --litmus 2 with no readers exits 4 naming the shortfall"
+    },
+    {
+      "id": "TC-232-cli-litmus-no-process-spawn",
+      "acId": "AC-17504-5",
+      "description": "The --litmus flag triggers no process spawn and no network call; globalThis.fetch is left untouched by the compute and the counter.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7, AC-17504-5): --litmus triggers no process spawn and no network call"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-233.json

@@ -0,0 +1,61 @@
+{
+  "createdAt": "2026-10-03T18:30:00Z",
+  "updatedAt": "2026-10-03T18:30:00Z",
+  "purpose": "Cover US-17702 (bundle refuses and skips): the refusal on an unfrozen tree, the --override write of freeze.override, the delta-impacted skip and the all-impacted refusal; the empty-delta frozen-tree case is byte-for-byte unchanged from 0.29.0.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17702-1",
+    "AC-17702-2",
+    "AC-17702-3",
+    "AC-17702-4",
+    "AC-17702-5"
+  ],
+  "id": "TS-233",
+  "usId": "US-17702",
+  "title": "DEFINE step 3 PR 8: rcf build bundle --next refuses, overrides and skips",
+  "testCases": [
+    {
+      "id": "TC-233-bundle-refuses-without-freeze",
+      "acId": "AC-17702-1",
+      "description": "rcf build bundle --next on an unfrozen tree exits 4 and the stderr line names rcf define readiness.",
+      "status": "pending",
+      "testPointer": "test/cli/build-bundle-next-freeze-gate.test.js::bundle --next (PR 8, AC-17702-1): refuses without a freeze record naming rcf define readiness"
+    },
+    {
+      "id": "TC-233-bundle-override-writes-freeze-override",
+      "acId": "AC-17702-2",
+      "description": "rcf build bundle --next --override \"hotfix\" on an unfrozen tree writes freeze.override { reason, by, at } through saveFreezeRecord and emits a bundle (exit 0).",
+      "status": "pending",
+      "testPointer": "test/cli/build-bundle-next-freeze-gate.test.js::bundle --next (PR 8, AC-17702-2): --override writes freeze.override and proceeds"
+    },
+    {
+      "id": "TC-233-bundle-skips-impacted-fbs",
+      "acId": "AC-17702-3",
+      "description": "On a non-empty delta impacting FBS-018, bundle --next skips FBS-018 with the reason on stderr and hands out the next unimpacted actionable FBS.",
+      "status": "pending",
+      "testPointer": "test/cli/build-bundle-next-freeze-gate.test.js::bundle --next (PR 9, AC-17702-3): skips the impacted FBS and hands out the next unimpacted FBS (exit 0)"
+    },
+    {
+      "id": "TC-233-bundle-all-impacted-refuses",
+      "acId": "AC-17702-4",
+      "description": "When every actionable FBS is impacted by the delta and no --override is given, bundle --next refuses with exit 4 and the same message pointing at --override.",
+      "status": "pending",
+      "testPointer": "test/cli/build-bundle-next-freeze-gate.test.js::bundle --next (PR 9, AC-17702-4): refuses with exit 4 when every actionable FBS is impacted and no override"
+    },
+    {
+      "id": "TC-233-bundle-empty-delta-unchanged",
+      "acId": "AC-17702-5",
+      "description": "On a frozen tree with an empty delta the bundle --next output and exit code are byte-for-byte unchanged from 0.29.0 (compared against a captured fixture).",
+      "status": "pending",
+      "testPointer": "test/cli/build-bundle-next-freeze-gate.test.js::bundle --next (PR 9, AC-17702-5): empty delta on a frozen tree matches the 0.29.0 golden bundle byte-for-byte"
+    },
+    {
+      "id": "TC-233-override-by-order",
+      "acId": "AC-17702-6",
+      "description": "freeze.override.by resolves via the git config -> GITHUB_ACTOR -> USER -> USERNAME -> operator preference order.",
+      "status": "passing",
+      "testPointer": "test/cli/build-bundle-next-freeze-gate.test.js::bundle --next (PR 9, AC-17702-6): freeze.override.by resolves via git config user.email first, then GITHUB_ACTOR, then USER/USERNAME, then operator"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-234.json

@@ -0,0 +1,53 @@
+{
+  "createdAt": "2026-10-03T18:30:00Z",
+  "updatedAt": "2026-10-03T18:30:00Z",
+  "purpose": "Cover US-17802 (validate findings): the four new findings on an interface kind outside the vocabulary, a bracketed AC prefix outside the known classes, a tacIds naming a non-TAC and an unresolving ownerRef or deliveredBy; the dogfood tree is clean; and absence of a class marker is NOT a finding (decision 10, kept).",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17802-1",
+    "AC-17802-2",
+    "AC-17802-3",
+    "AC-17802-4"
+  ],
+  "id": "TS-234",
+  "usId": "US-17802",
+  "title": "DEFINE step 3 PR 8: rcf define validate findings",
+  "testCases": [
+    {
+      "id": "TC-234-validate-interface-kind-finding",
+      "acId": "AC-17802-1",
+      "description": "A TAC with an interface { kind: 'widget' } fails rcf define validate with a defineValidate:interfaceKind finding naming the TAC id, the interface name and the unknown kind; the exit code is 3.",
+      "status": "pending",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 8, AC-17802-1): interface kind outside the vocabulary is a finding"
+    },
+    {
+      "id": "TC-234-validate-ac-class-prefix-finding",
+      "acId": "AC-17802-2",
+      "description": "An AC with description '[sometimes] ...' fails rcf define validate with a defineValidate:acClassPrefix finding naming the US id, the AC id and the unknown prefix.",
+      "status": "pending",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 8, AC-17802-2): bracketed AC prefix outside the known classes is a finding"
+    },
+    {
+      "id": "TC-234-validate-tacids-and-ownerref-findings",
+      "acId": "AC-17802-1",
+      "description": "A US with tacIds naming a non-TAC fires defineValidate:tacIdsResolves; an AC with ownerRef { tacId, field } that does not resolve fires defineValidate:ownerRefResolves; a REQ with deliveredBy pointing at a dangling id fires defineValidate:deliveredByResolves. Each exits 3.",
+      "status": "pending",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 8): tacIds, ownerRef and deliveredBy each produce a finding"
+    },
+    {
+      "id": "TC-234-validate-dogfood-clean",
+      "acId": "AC-17802-3",
+      "description": "rcf define validate on the rcf-lite dogfood tree exits 0 (no new findings; no legacy finding is widened).",
+      "status": "pending",
+      "testPointer": "test/define/validate-dogfood.test.js::validate (PR 8, AC-17802-3): dogfood tree is clean"
+    },
+    {
+      "id": "TC-234-validate-no-finding-for-missing-class",
+      "acId": "AC-17802-4",
+      "description": "An AC description with no leading bracketed prefix fires no defineValidate:acClassPrefix finding (decision 10, kept); the exit code depends on other errors only.",
+      "status": "pending",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 8, AC-17802-4): absence of class marker is NOT a finding"
+    }
+  ],
+  "status": "draft"
+}