rcf-lite 0.29.0 → 0.31.0

package/rcf/test-suites/ts-216.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-24T14:30:00Z",
-  "updatedAt": "2026-10-01T13:12:16Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover the DEFINE stage-gate check functions D1..D8 (AC-17401-1..8) with unit tests over hand-built TreeModel and ledger fixtures.",
   "testLevel": "unit",
   "acIds": [
@@ -13,7 +13,9 @@
     "AC-17401-7",
     "AC-17401-8",
     "AC-17401-9",
-    "AC-17401-10"
+    "AC-17401-10",
+    "AC-17401-11",
+    "AC-17401-12"
   ],
   "id": "TS-216",
   "usId": "US-17401",
@@ -88,6 +90,20 @@
       "description": "IDENTITY_TEMPLATE carries a '## Surface' section between '## Register' and '## Project-scoped notes' naming viewer/runningApp/prDiff and seeded to 'prDiff'; writeIdentityTemplate on a fresh dir seeds a profile that satisfies checkD1Brief surface markers; an existing profile.md is left byte-identical (slice-1 'kept' contract).",
       "status": "pending",
       "testPointer": "test/setup/identity-register.test.js::IDENTITY_TEMPLATE carries a ## Surface heading between ## Register and ## Project-scoped notes"
+    },
+    {
+      "id": "TC-216-r13-crosscut-security-tree-wide",
+      "acId": "AC-17401-11",
+      "description": "A D5 scope narrowed so no REQ is in scope but the tree carries an auth or httpApi REQ with TAD.securityArchitecture empty still fails crosscut:securityArchitecture; stage state is failing (not notApplicable) via the ADR-4138 shared helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R13, AC-17401-11): crosscut:securityArchitecture runs tree-wide under narrowed D5 scope"
+    },
+    {
+      "id": "TC-216-r13-crosscut-operational-tree-wide",
+      "acId": "AC-17401-12",
+      "description": "A D5 scope narrowed so no REQ is in scope but the tree carries an AC with the '[deployed]' marker and TAD.operationalConcerns empty still fails crosscut:operationalConcerns; stage state is failing (not notApplicable) via the ADR-4138 shared helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R13, AC-17401-12): crosscut:operationalConcerns runs tree-wide under narrowed D5 scope"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-219.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-01T14:30:00Z",
-  "updatedAt": "2026-10-01T14:30:00Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover US-17402: every entry in stages[].checks[] carries persona (productOwner | engineer) and a non-empty question string; CHECK_PERSONA / CHECK_QUESTION / STAGE_FALLBACK_PERSONA maps are total; the notApplicable placeholder uses the stage fallback (ADR-4126).",
   "testLevel": "unit",
   "acIds": [
@@ -10,7 +10,8 @@
     "AC-17402-4",
     "AC-17402-5",
     "AC-17402-6",
-    "AC-17402-7"
+    "AC-17402-7",
+    "AC-17402-8"
   ],
   "id": "TS-219",
   "usId": "US-17402",
@@ -64,6 +65,13 @@
       "description": "A notApplicable stage emits one stage:<D>:scope placeholder check with ok true and persona equal to STAGE_FALLBACK_PERSONA[D].",
       "status": "pending",
       "testPointer": "test/query/gates.test.js::gates (ADR-4126, AC-17402-7): notApplicable placeholder carries stage fallback persona and ok true"
+    },
+    {
+      "id": "TC-219-r13-deploy-adr-tree-wide",
+      "acId": "AC-17402-8",
+      "description": "A D2 scope narrowed so no REQ, PRD, TAD or resolving brief statement is in scope but no Deploy ADR exists tree-wide still fails skeleton:deployAdr; stage state is failing (not notApplicable) via the ADR-4138 shared helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R13, AC-17402-8): skeleton:deployAdr runs tree-wide under narrowed D2 scope"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-220.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-01T14:30:00Z",
-  "updatedAt": "2026-10-01T14:30:00Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover US-17403: the skeleton:reqFields split into reqIntent + reqShape, the decisions:allAnswered split into wellFormed + allAnswered, and the new D3 shapes:draftSettled check for interface descriptions carrying the [draft] marker (ADR-4126).",
   "testLevel": "unit",
   "acIds": [
@@ -11,7 +11,9 @@
     "AC-17403-5",
     "AC-17403-6",
     "AC-17403-7",
-    "AC-17403-8"
+    "AC-17403-8",
+    "AC-17403-9",
+    "AC-17403-10"
   ],
   "id": "TS-220",
   "usId": "US-17403",
@@ -72,6 +74,20 @@
       "description": "No check named skeleton:reqFields is emitted; the stage envelope shape (stage, gate, state, checks) is unchanged.",
       "status": "pending",
       "testPointer": "test/query/gates.test.js::gates (ADR-4126, AC-17403-8): no check named skeleton:reqFields is emitted"
+    },
+    {
+      "id": "TC-220-r2-draft-tree-wide-under-narrowed-scope",
+      "acId": "AC-17403-9",
+      "description": "A D3 scope that excludes every TAC and shaped REQ still reports a [draft] marker on a TAC OUTSIDE the narrowed scope through shapes:draftSettled (stage state failing, not notApplicable) via the ADR-4138 shared tree-wide-before-scope helper; the same test asserted against pre-R2 gates.js (origin/main d8adedff^) returns notApplicable instead.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R2, AC-17403-9): draftSettled runs tree-wide under narrowed D3 scope"
+    },
+    {
+      "id": "TC-220-r13-failing-envelope-reason-drops",
+      "acId": "AC-17403-10",
+      "description": "The ADR-4138 helper returns a failing envelope with no reason field; the readiness CLI prints 'D3 (define.shapes): failing' without a '(no TAC ... in scope)' trailer when a tree-wide check fails under a scope-empty stage.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 292 follow-up, AC-17403-10): failing envelope carries no notApplicable reason text"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-222.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-01T16:00:00Z",
-  "updatedAt": "2026-10-01T16:00:00Z",
+  "updatedAt": "2026-10-03T12:10:00Z",
   "purpose": "Cover US-17503: --level and --persona flags, the exit matrix (section 3.2), the two verdict lines (section 2.3) and the persona-grouped text report (section 4) of the DEFINE step 2 persona-levels spec. Shares `formatVerdictLines` with the Readiness tab (PR C).",
   "testLevel": "unit",
   "acIds": [
@@ -23,7 +23,7 @@
       "acId": "AC-17503-1",
       "description": "Parameterised exit matrix across all rows of spec section 3.2 (no flag, --check <stage>, --check all, --level intent, --level build, --level + --check).",
       "status": "pending",
-      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-1 exit matrix (parameterised: --check + --level combinations)"
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-1 exit matrix (parameterised: --check + --level combinations; ADR-4131 D3 bite)"
     },
     {
       "id": "TC-222-level-intent-pass",
@@ -49,9 +49,9 @@
     {
       "id": "TC-222-check-all-unchanged",
       "acId": "AC-17503-5",
-      "description": "--check all exit behaviour unchanged on a warn-with-ack-only failure: 0 with a stderr [warn] line.",
+      "description": "--check all exits 4 on an unacknowledged D3 bite failure under ADR-4131 (0.30.0 PR 5 amends AC-17503-5 for this bite); warn-with-ack posture on D5/D6 preserved until PRs 6 and 7.",
       "status": "pending",
-      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-5 --check all unchanged on warn-with-ack"
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17503-5 --check all exits 4 on blocking failures (D3 bites in PR 5)"
     },
     {
       "id": "TC-222-persona-collapses-other",

package/rcf/test-suites/ts-225.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-03T00:00:00Z",
-  "updatedAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-05T12:30:00Z",
   "purpose": "Cover US-205 (engineer jumps to any document or AC by id): id-first ranking (exact / prefix / contains), word-match title above snippet, single-char ids-only, hash pick lands and expands the entity, mount URL round-trip, embed/theme preservation, empty-state on fetch failure, no outbound postMessage / storage / cookies. Points at the 22 new unit tests under test/view/id-lookup.test.js.",
   "testLevel": "unit",
   "acIds": [
@@ -11,7 +11,8 @@
     "AC-205-5",
     "AC-205-6",
     "AC-205-7",
-    "AC-205-8"
+    "AC-205-8",
+    "AC-205-9"
   ],
   "id": "TS-225",
   "usId": "US-205",
@@ -72,6 +73,13 @@
       "description": "wireLookup never calls window.postMessage, never writes to localStorage / sessionStorage / document.cookie, and makes no outbound fetch other than `./index.json`; asserted by a source-level scan of page-init.js (no postMessage, no storage, no cookie writes in wireLookup).",
       "status": "pending",
       "testPointer": "test/view/id-lookup.test.js::page-init.js does not add outbound postMessage, localStorage, sessionStorage or cookies in the lookup wiring (AC-205-8)"
+    },
+    {
+      "id": "TC-225-search-button-contrast",
+      "acId": "AC-205-9",
+      "description": "The WCAG 2.1 AA contrast audit (test/view/contrast-aa.test.js) requires a `.rcf-search-btn` pair for each of hover, focus-visible and active (state rules merged over the base rule) in both the light and dark token sets and asserts >= 4.5:1 for the button text and >= 3:1 for the focus ring against the surface it sits on. A missing state pair fails the test (PR 291 landing review F3).",
+      "status": "pending",
+      "testPointer": "test/view/contrast-aa.test.js::.rcf-search-btn passes WCAG 2.1 AA in both themes across every state (AC-205-9)"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-228.json

@@ -42,9 +42,9 @@
     {
       "id": "TC-228-draft-template-markers",
       "acId": "AC-18801-4",
-      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one. (shapes:templateMarkers lands in PR 5; this TC is pending PR 5.)",
+      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one (lifted from pending by DEFINE step 3 PR 5 under ADR-4131).",
       "status": "pending",
-      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4 pending PR 5): draft recordShape without fields fails templateMarkers"
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
     },
     {
       "id": "TC-228-draft-no-po-read",
@@ -63,9 +63,9 @@
     {
       "id": "TC-228-manifest-prompts",
       "acId": "AC-18202-2",
-      "description": "The manifest lists rcf_define_intent, rcf_define_intake, rcf_define_draft_shapes and rcf_discover_prototype as argument-free; rcf_define_litmus is recorded as pending PR 7.",
+      "description": "The manifest lists rcf_define_intent, rcf_define_intake, rcf_define_draft_shapes, rcf_discover_prototype and rcf_define_litmus (DEFINE step 3 PR 7) as argument-free DEFINE/DISCOVERY prompts.",
       "status": "pending",
-      "testPointer": "test/guidance/inventory.test.js::guidance (REQ-182, AC-18202-2): four argument-free DEFINE prompts present, litmus pending PR 7"
+      "testPointer": "test/guidance/inventory.test.js::guidance (REQ-182, AC-18202-2): the five argument-free DEFINE / DISCOVERY prompts are present"
     },
     {
       "id": "TC-228-register-scan-em-dash",

package/rcf/test-suites/ts-229.json

@@ -1,7 +1,7 @@
 {
   "createdAt": "2026-10-03T09:55:00Z",
-  "updatedAt": "2026-10-03T10:00:00Z",
-  "purpose": "Cover US-206 (wespa's embedding contract is proved by a CI host fixture): the fixture renders a 56px header + resizable sidebar around an iframe pointed at ./?embed=1&theme=light with no inline script (AC-206-1), theme flips via postMessage without a reload (AC-206-2, source invariants + Playwright live proof in the lane evidence), embed and theme survive a hash-only in-iframe navigation (AC-206-3, source invariants + Playwright live proof), cross-origin messages are ignored by the viewer listener (AC-206-4), the three lints keep framing headers, target=_top and localStorage namespace in place (AC-206-5), and no new outbound postMessage shape is introduced by the viewer or the fixture (AC-206-6). All TCs resolve to node tests under test/view/wespa-host-fixture.test.js.",
+  "updatedAt": "2026-10-05T12:30:00Z",
+  "purpose": "Cover US-206 (wespa's embedding contract is proved by a CI host fixture): the fixture renders a 56px header + resizable sidebar around an iframe pointed at ./?embed=1&theme=light with no inline script (AC-206-1), theme flips via postMessage without a reload (AC-206-2, source invariants + Playwright live proof in the lane evidence), embed and theme survive a hash-only in-iframe navigation (AC-206-3, source invariants + Playwright live proof), cross-origin messages are ignored by the viewer listener (AC-206-4), the three lints keep framing headers, target=_top and localStorage namespace in place (AC-206-5), and no new outbound postMessage shape is introduced by the viewer or the fixture (AC-206-6). 2026-10-04 (w-2026-10-04-dave-001): extends coverage to the in-viewer three-state theme control (AC-206-7..10 under ADR-4137). All TCs resolve to node tests under test/view/wespa-host-fixture.test.js and test/view/theme-control.test.js. 2026-10-05 (PR 291 landing review F1): the boot theme is applied once; a `rcfPage.init()` re-run after an SSE swap never overrides a host postMessage theme or a theme-control choice.",
   "testLevel": "unit",
   "acIds": [
     "AC-206-1",
@@ -9,7 +9,11 @@
     "AC-206-3",
     "AC-206-4",
     "AC-206-5",
-    "AC-206-6"
+    "AC-206-6",
+    "AC-206-7",
+    "AC-206-8",
+    "AC-206-9",
+    "AC-206-10"
   ],
   "id": "TS-229",
   "usId": "US-206",
@@ -77,6 +81,48 @@
       "description": "A grep over src/view/** (excluding test-host/embed-client.js, the sanctioned emitter) finds zero .postMessage( call sites; the embed-client itself posts exactly one shape, 'rcf-view-theme'.",
       "status": "pending",
       "testPointer": "test/view/wespa-host-fixture.test.js::AC-206-6: no outbound postMessage shape beyond rcf-view-theme is introduced by the viewer or the fixture"
+    },
+    {
+      "id": "TC-229-theme-control-renders-non-embed",
+      "acId": "AC-206-7",
+      "description": "renderPage renders a `[data-rcf-theme-control]` group with three buttons (Light, Dark, Auto; `aria-pressed`) right of the SearchButton in `.tools` when `data-embed` is absent; a click on a theme button sets `<html data-theme>` live and flips `aria-pressed` across the three.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-7: renderPage includes the three-state theme control in non-embed; applyThemeControl updates data-theme and aria-pressed on click"
+    },
+    {
+      "id": "TC-229-theme-control-persists",
+      "acId": "AC-206-8",
+      "description": "In non-embed mode, selecting a theme writes `rcf-view:v1:theme` as `light`/`dark`/`auto` and the stored value is reapplied on the next boot; a `rcf-view-theme` postMessage still applies live but does not write the stored key; the boot precedence is `?theme=` -> stored -> auto.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-8: non-embed persistence under rcf-view:v1:theme; postMessage path writes nothing"
+    },
+    {
+      "id": "TC-229-theme-control-absent-embed",
+      "acId": "AC-206-9",
+      "description": "renderPage with `data-embed=\"1\"` does not emit any `[data-rcf-theme-control]` markup; wireThemeControl under embed never reads or writes `rcf-view:v1:theme` on load, on a postMessage, or on any user action; the key is zero-touched (localStorage spy sees no setItem/getItem call for the key under embed).",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-9: embed=1 omits the control markup and does not touch rcf-view:v1:theme"
+    },
+    {
+      "id": "TC-229-theme-control-query-wins",
+      "acId": "AC-206-10",
+      "description": "In non-embed mode with a stored value `dark`, when the URL carries `?theme=light`, boot resolves to `light` (explicit wins), the Light button is pressed and the stored value is NOT overwritten (next load without a query reuses `dark`).",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-10: explicit ?theme= beats the stored value and leaves the key as-is"
+    },
+    {
+      "id": "TC-229-reinit-keeps-host-theme",
+      "acId": "AC-206-2",
+      "description": "Boot `?embed=1` with no `?theme=`, post `{ type: \"rcf-view-theme\", theme: \"dark\" }`, then call `rcfPage.init()` (the live-client SSE re-run): `<html data-theme>` stays `dark` and no storage is touched.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::PR 291 F1 regression: embed=1 host theme survives an rcfPage.init() re-run"
+    },
+    {
+      "id": "TC-229-reinit-keeps-control-choice",
+      "acId": "AC-206-10",
+      "description": "Boot `?theme=light` in non-embed mode, click Dark, then call `rcfPage.init()`: `<html data-theme>` stays `dark` and the Dark button stays pressed.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::PR 291 F1 regression: standalone control choice survives an rcfPage.init() re-run with ?theme= in the URL"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-230.json

@@ -0,0 +1,100 @@
+{
+  "createdAt": "2026-10-03T10:50:00Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
+  "purpose": "Cover US-17404 (D3 bites): the three D3 bite checks shapes:templateMarkers, shapes:entityJoin and shapes:pathsResolve each have pass, fail, notApplicable, id and why strings; drafts are included in templateMarkers; the readiness CLI --check shapes exits 4 on an unacknowledged D3 failure and 0 when acked at the current hash; ackable() is exactly D3, D5, D6; --ack on D1, D2, D4, D7 or D8 exits 2 unchanged.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17404-1",
+    "AC-17404-2",
+    "AC-17404-3",
+    "AC-17404-4",
+    "AC-17404-5",
+    "AC-17404-6",
+    "AC-17404-7",
+    "AC-17404-8",
+    "AC-17404-9"
+  ],
+  "id": "TS-230",
+  "usId": "US-17404",
+  "title": "DEFINE step 3 PR 5: D3 bite checks, ackable, --check exit 4 policy",
+  "testCases": [
+    {
+      "id": "TC-230-templatemarkers-happy",
+      "acId": "AC-17404-1",
+      "description": "A recordShape with fields: and an httpRoute with method, path, request, response and errors each pass shapes:templateMarkers.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-1): recordShape+fields and httpRoute+5 markers each pass shapes:templateMarkers"
+    },
+    {
+      "id": "TC-230-templatemarkers-missing",
+      "acId": "AC-17404-2",
+      "description": "An httpRoute description missing errors fails shapes:templateMarkers with id <tacId>:<name> and why 'missing marker errors'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-2): httpRoute missing errors fails templateMarkers with <tacId>:<name> and \"missing marker errors\""
+    },
+    {
+      "id": "TC-230-entityjoin-ok-and-twice",
+      "acId": "AC-17404-3",
+      "description": "Every coreEntity named by exactly one recordShape passes shapes:entityJoin; one named twice fails TAD.entity:<name> with '2 record shapes'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-3): entityJoin passes 1:1 and fails TAD.entity:<name> with \"2 record shapes\" when twice"
+    },
+    {
+      "id": "TC-230-pathsresolve-resolved-and-authored",
+      "acId": "AC-17404-4",
+      "description": "An interface description naming a path present in resolvedPaths passes shapes:pathsResolve; a missing path on an interface marked authoredAt: D3 in the description also passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131, AC-17404-4): pathsResolve passes a resolved path and passes a missing path when authoredAt D3 is in the description"
+    },
+    {
+      "id": "TC-230-cli-check-shapes-exit-matrix",
+      "acId": "AC-17404-5",
+      "description": "rcf define readiness --check shapes exits 4 on an unacknowledged D3 failure and 0 when the freeze record acknowledges define.shapes at the current tree hash.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17404-5 --check shapes exits 4 unacked and 0 acked at current hash"
+    },
+    {
+      "id": "TC-230-freeze-ack-blocking-stages-exit-2",
+      "acId": "AC-17404-6",
+      "description": "rcf define freeze --ack <gate> --reason <text> on D1, D2, D4, D7 or D8 exits 2 unchanged from 0.29.0.",
+      "status": "pending",
+      "testPointer": "test/cli/freeze.test.js::freeze cli: AC-17404-6 --ack on D1, D2, D4, D7 or D8 exits 2 unchanged"
+    },
+    {
+      "id": "TC-230-ackable-exactly-d3-d5-d6",
+      "acId": "AC-17404-5",
+      "description": "ackable(stage) returns true for D3, D5 and D6 and false for D1, D2, D4, D7 and D8.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (ADR-4131): ackable(stage) is exactly D3, D5 and D6; stagePolicy keeps saying blocking"
+    },
+    {
+      "id": "TC-230-templatemarkers-draft-recordshape",
+      "acId": "AC-17404-1",
+      "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one; this completes AC-18801-4 from PR 3.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
+    },
+    {
+      "id": "TC-230-r5-entityjoin-under-narrowed-scope",
+      "acId": "AC-17404-7",
+      "description": "A D3 scope narrowed so no TAC and no shaped REQ is in scope but a coreEntity has no record shape anywhere tree-wide still fails shapes:entityJoin (stage state failing, not notApplicable) via the ADR-4138 helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R5, AC-17404-7): entityJoin runs tree-wide under narrowed D3 scope"
+    },
+    {
+      "id": "TC-230-r6-bare-paths-whitelist",
+      "acId": "AC-17404-8",
+      "description": "extractInterfacePathTokens treats Dockerfile, Makefile, LICENSE, Procfile, Containerfile, Justfile, Rakefile, Gemfile and CODEOWNERS as candidate tokens; shapes:pathsResolve fails a path: Dockerfile when not in resolvedPaths and passes when resolved. The exported BARE_PATH_WHITELIST drives both.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R6, AC-17404-8): bare path whitelist is checked by pathsResolve"
+    },
+    {
+      "id": "TC-230-r13-helper-foldstate-delegation",
+      "acId": "AC-17404-9",
+      "description": "treeWideFailureEnvelope returns null when every tree-wide check passes under a scope-empty stage; on D3 with a failing tree-wide check and a freeze.gates ack at the currentTreeHash it folds through foldState to state 'acknowledged'; on D2 (blocking) with a failing tree-wide check it stays 'failing'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 292 follow-up, AC-17404-9): treeWideFailureEnvelope helper semantics"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-231.json

@@ -0,0 +1,119 @@
+{
+  "createdAt": "2026-10-03T13:30:00Z",
+  "updatedAt": "2026-10-03T13:30:00Z",
+  "purpose": "Cover US-17405 (D4/D5/D2 bites, PR 6): the four new checks stories:closedSets, stories:ownerRefResolves, crosscut:catalogue and skeleton:standardsCited each have pass, fail, notApplicable, id and why strings; the concern-catalogue applicability table is validated; --check crosscut exits 4 on an unacknowledged D5 failure and 0 when the freeze record acknowledges define.crosscut at the current tree hash; validate adds no finding for a missing AC class marker.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17405-1",
+    "AC-17405-2",
+    "AC-17405-3",
+    "AC-17405-4",
+    "AC-17405-5",
+    "AC-17405-6",
+    "AC-17405-9"
+  ],
+  "id": "TS-231",
+  "usId": "US-17405",
+  "title": "DEFINE step 3 PR 6: D4 closed sets and ownerRef findings, D5 concern catalogue, standards citation",
+  "testCases": [
+    {
+      "id": "TC-231-closedsets-cue-without-list",
+      "acId": "AC-17405-1",
+      "description": "An AC description with an enumeration cue (status is one of the following) and no bracketed list or ownerRef fails stories:closedSets with the AC id and why 'enumeration cue without a closed set'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-1): closedSets fails an AC with an enumeration cue and no bracketed list or ownerRef"
+    },
+    {
+      "id": "TC-231-closedsets-quoted-cue-guard",
+      "acId": "AC-17405-1",
+      "description": "An AC description that quotes an enumeration cue (e.g. the user types \"status is\" into the search box) does not fail stories:closedSets.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-1): closedSets honours the quoted-cue guard shared with D6"
+    },
+    {
+      "id": "TC-231-ownerref-resolves-and-missing",
+      "acId": "AC-17405-2",
+      "description": "An ownerRef { tacId, field: interfaces[loan] } that resolves on that TAC passes stories:ownerRefResolves; interfaces[missing] fails with 'ownerRef does not resolve'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-2): ownerRefResolves passes a resolving pointer and fails a missing one"
+    },
+    {
+      "id": "TC-231-crosscut-catalogue-applied-and-waived",
+      "acId": "AC-17405-3",
+      "description": "A persistence REQ with retention applied and timeAndTimezone waived (with a reason) passes crosscut:catalogue; the pair totals cover the full applicability map.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-3): crosscut:catalogue passes a persistence REQ with retention applied and timeAndTimezone waived"
+    },
+    {
+      "id": "TC-231-crosscut-catalogue-missing-pair",
+      "acId": "AC-17405-4",
+      "description": "An httpApi REQ with no errorEnvelope entry fails crosscut:catalogue with id <REQ>:errorEnvelope and a why naming the missing pair.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-4): crosscut:catalogue fails <REQ>:errorEnvelope when the httpApi REQ has no concern-ledger entry"
+    },
+    {
+      "id": "TC-231-standards-cited-and-waived",
+      "acId": "AC-17405-5",
+      "description": "A registered standards pack cited in an ADR passes skeleton:standardsCited; uncited and unwaived, it fails standards:<pack> with 'uncited and unwaived'; waiver via a concern-ledger entry keyed standards:<pack> also passes.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 6, AC-17405-5): standardsCited passes when cited or waived; fails when neither"
+    },
+    {
+      "id": "TC-231-validate-no-missing-marker-finding",
+      "acId": "AC-17405-6",
+      "description": "rcf define validate (as it stands in this PR) raises no finding for a story whose ACs carry no class marker; decision 10 preserved.",
+      "status": "pending",
+      "testPointer": "test/cli/validate.test.js::validate cli (PR 6, AC-17405-6): no finding is raised for a missing AC class marker"
+    },
+    {
+      "id": "TC-231-cli-check-crosscut-exit-matrix",
+      "acId": "AC-17405-3",
+      "description": "rcf define readiness --check crosscut exits 4 on an unacknowledged D5 failure and 0 when the freeze record acknowledges define.crosscut at the current tree hash.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli: AC-17405 --check crosscut exits 4 unacked and 0 acked at current hash"
+    },
+    {
+      "id": "TC-231-concern-catalogue-table",
+      "acId": "AC-17405-3",
+      "description": "applicableConcernsFor returns the exact spec section 4 D5 catalogue row: auth for auth/httpApi; errorEnvelope for httpApi/cliCommand; loggingAudit for every shape but other; retention for persistence; performance for httpApi/batch; secrets for auth/externalIntegration; timeAndTimezone for persistence/batch; concurrencyIdempotency for httpApi/persistence.",
+      "status": "pending",
+      "testPointer": "test/define/concern-catalogue.test.js::concern-catalogue (PR 6): applicability table matches spec section 4 D5"
+    },
+    {
+      "id": "TC-231-loop-convergence-engineer-no-po",
+      "acId": "AC-17405-1",
+      "description": "The engineer checks stories:closedSets, stories:ownerRefResolves, crosscut:catalogue and skeleton:standardsCited surface no product-owner failures on the loop fixture from PR 2.",
+      "status": "pending",
+      "testPointer": "test/query/questions-loop.test.js::PR 6 engineer checks surface no product-owner failures on the scripted fixture"
+    },
+    {
+      "id": "TC-231-ownerref-r11-widened",
+      "acId": "AC-17405-7",
+      "description": "R11 widens stories:ownerRefResolves beyond interfaces[<name>] to responsibilities[<n>] and bare schema fields (purpose, decision).",
+      "status": "passing",
+      "testPointer": "test/query/gates.test.js::gates (PR 9, AC-17405-2 R11): ownerRefResolves accepts bracket-grammar paths beyond interfaces (responsibilities[<n>], purpose, decision)"
+    },
+    {
+      "id": "TC-231-ownerref-dotted-refused",
+      "acId": "AC-17405-8",
+      "description": "R11 refuses dotted grammar; rcf define validate reports the finding naming the dotted field.",
+      "status": "passing",
+      "testPointer": "test/define/validate-findings.test.js::validate findings (PR 9, R11): ownerRef uses the widened grammar; deliveredBy object form is checked"
+    },
+    {
+      "id": "TC-231-r8-standards-applied-waived-or-cited",
+      "acId": "AC-17405-5",
+      "description": "A concern-ledger entry concern 'standards:<pack>' with disposition 'applied' satisfies skeleton:standardsCited (R8 2026-10-05); 'waived' also satisfies it; neither nor cited, the pack fails standards:<pack>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R8, AC-17405-5): applied disposition satisfies standardsCited alongside waived and citation"
+    },
+    {
+      "id": "TC-231-r7-standards-under-narrowed-d2-scope",
+      "acId": "AC-17405-9",
+      "description": "A D2 scope narrowed so no REQ, PRD, TAD or brief statement is in scope but a registered standards pack is neither cited nor waived tree-wide still fails skeleton:standardsCited (stage state failing, not notApplicable) via the ADR-4138 helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R7, AC-17405-9): standardsCited runs tree-wide under narrowed D2 scope"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/test-suites/ts-232.json

@@ -0,0 +1,109 @@
+{
+  "createdAt": "2026-10-03T16:10:00Z",
+  "updatedAt": "2026-10-03T16:10:00Z",
+  "purpose": "Cover US-17406 (D6 bites) and US-17504 (probe seam and litmus): the four new consistency scans each have pass, fail and the named false-positive guards; countLitmusReadersAtHash reads distinct readers from probe-ledger entries at the current hash; parseLitmusFlag validates input; the readiness CLI --litmus flag exits 4 on a shortfall and documents the flag in --help; computeReadiness returns the pre-PR result when no probeRunner is passed and merges injected findings into open probe entries when one is.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-17406-1",
+    "AC-17406-2",
+    "AC-17406-3",
+    "AC-17406-4",
+    "AC-17406-5",
+    "AC-17406-6",
+    "AC-17504-1",
+    "AC-17504-2",
+    "AC-17504-3",
+    "AC-17504-4",
+    "AC-17504-5"
+  ],
+  "id": "TS-232",
+  "usId": "US-17406",
+  "title": "DEFINE step 3 PR 7: D6 consistency scans, probe seam, --litmus and rcf_define_litmus",
+  "testCases": [
+    {
+      "id": "TC-232-contradictions-same-when-negated-then",
+      "acId": "AC-17406-1",
+      "description": "Two ACs on one story sharing a when clause and a negated then fail consistency:contradictions with the story id and both AC ids in the why.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-1): contradictions fails a story with two ACs sharing a when and a negated then"
+    },
+    {
+      "id": "TC-232-contradictions-quoted-negation-guard",
+      "acId": "AC-17406-6",
+      "description": "A negation inside a double-quoted substring in a then does not fire consistency:contradictions on the story.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-6): contradictions does not fire on a negation inside a quoted substring"
+    },
+    {
+      "id": "TC-232-unsatisfiable-undefined-field",
+      "acId": "AC-17406-2",
+      "description": "A then naming a field no recordShape defines fails consistency:unsatisfiable with id <acId>:<field>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-2): unsatisfiable fails an AC naming a field no recordShape defines"
+    },
+    {
+      "id": "TC-232-unsatisfiable-draft-recordshape",
+      "acId": "AC-17406-3",
+      "description": "A field defined in a [draft] recordShape counts as defined; consistency:unsatisfiable passes the AC.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-3): unsatisfiable passes when the field lives in a [draft] recordShape"
+    },
+    {
+      "id": "TC-232-duplicates-across-stories",
+      "acId": "AC-17406-4",
+      "description": "Identical AC descriptions on two stories fail consistency:duplicates with both AC ids.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-4): duplicates fails identical AC descriptions across stories"
+    },
+    {
+      "id": "TC-232-orphan-interfaces",
+      "acId": "AC-17406-5",
+      "description": "An interface no ownerRef and no deliveredBy reaches fails consistency:orphanInterfaces with id <tacId>:<name>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 7, AC-17406-5): orphanInterfaces fails an interface no ownerRef and no deliveredBy reaches"
+    },
+    {
+      "id": "TC-232-probe-runner-injects-findings",
+      "acId": "AC-17504-1",
+      "description": "A probeRunner returning two findings for REQ-003 causes consistency:probeCount to fail; the injected findings appear as open probe entries.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7, AC-17504-1): probeRunner findings land as open probe entries that fail consistency:probeCount"
+    },
+    {
+      "id": "TC-232-no-probe-runner-matches-pre-pr",
+      "acId": "AC-17504-2",
+      "description": "No probeRunner yields the pre-PR result on the same fixture; consistency:probeCount passes.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7, AC-17504-2): no probeRunner yields the pre-PR result"
+    },
+    {
+      "id": "TC-232-litmus-reader-count",
+      "acId": "AC-17504-3",
+      "description": "countLitmusReadersAtHash reads distinct readers from probe-ledger entries whose finding begins litmus:<reader>: and whose text includes the hash; readings from the same reader are counted once.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7): countLitmusReadersAtHash reads distinct readers from probe entries"
+    },
+    {
+      "id": "TC-232-parse-litmus-flag",
+      "acId": "AC-17504-4",
+      "description": "parseLitmusFlag parses a positive integer, returns null when absent, and throws a usage error on a non-positive or non-integer value.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7): parseLitmusFlag validates its input"
+    },
+    {
+      "id": "TC-232-cli-litmus-shortfall-exits-4",
+      "acId": "AC-17504-4",
+      "description": "rcf define readiness --litmus 2 with no readers exits 4 and prints the shortfall on stderr.",
+      "status": "pending",
+      "testPointer": "test/cli/readiness.test.js::readiness cli (PR 7, AC-17504-4): --litmus 2 with no readers exits 4 naming the shortfall"
+    },
+    {
+      "id": "TC-232-cli-litmus-no-process-spawn",
+      "acId": "AC-17504-5",
+      "description": "The --litmus flag triggers no process spawn and no network call; globalThis.fetch is left untouched by the compute and the counter.",
+      "status": "pending",
+      "testPointer": "test/query/readiness.test.js::readiness (PR 7, AC-17504-5): --litmus triggers no process spawn and no network call"
+    }
+  ],
+  "status": "draft"
+}