rcf-lite 0.30.0 → 0.31.0

package/rcf/test-suites/ts-007.json

@@ -15,7 +15,7 @@
       "acId": "AC-302-2",
       "description": "create with a conflicting id returns a clear conflict error and writes nothing",
       "status": "pending",
-      "testPointer": "test/core/store/writer.test.js::createDocument refuses on id collision (exit 2) and writes nothing (AC-302-2)"
+      "testPointer": "test/core/store/writer.test.js::createDocument refuses on id collision with different content (exit 3 conflict) and writes nothing (AC-302-2 / R1 extension 2026-10-05)"
     },
     {
       "id": "TC-007-create-writes-validating-child",

package/rcf/test-suites/ts-215.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-24T12:00:00Z",
-  "updatedAt": "2026-10-02T16:40:00Z",
+  "updatedAt": "2026-10-05T19:00:00Z",
   "purpose": "Cover the four sidecar ledgers, the rcf define ledger CLI (add / resolve / list with --json) and the walker-invisibility invariant on rcf/define/ (AC-17301-1..4 on US-17301), the update subverb and the closed resolvedBy pointer grammar (AC-17302-1..6 on US-17302), the statement-file markers (AC-18701-1..6 on US-18701) and the scan wiring (AC-18702-1..6 on US-18702).",
   "testLevel": "integration",
   "acIds": [
@@ -14,6 +14,13 @@
     "AC-17302-4",
     "AC-17302-5",
     "AC-17302-6",
+    "AC-17302-7",
+    "AC-17302-8",
+    "AC-17302-9",
+    "AC-17302-10",
+    "AC-17302-11",
+    "AC-17302-12",
+    "AC-17302-13",
     "AC-18701-1",
     "AC-18701-2",
     "AC-18701-3",
@@ -205,6 +212,62 @@
       "description": "brief add --text runs no scan and appends no openQuestion statement.",
       "status": "pending",
       "testPointer": "test/cli/ledger.test.js::ledger CLI (AC-18702-6): --text runs no scan and appends no openQuestion"
+    },
+    {
+      "id": "TC-215-r1-add-same-id-same-content-unchanged",
+      "acId": "AC-17302-7",
+      "description": "brief add --id 3 with identical content on a ledger whose entry 3 already matches exits 0 and prints 'unchanged'; --json emits {status:unchanged,id:3}; the ledger is not rewritten.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (R1, AC-17302-7): add --id on same-content is unchanged exit 0"
+    },
+    {
+      "id": "TC-215-r1-add-same-id-diff-content-exit-3",
+      "acId": "AC-17302-8",
+      "description": "brief add --id 3 with different content exits 3; stderr names the id and the differing fields; the ledger is not rewritten.",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (R1, AC-17302-8): add --id on different-content exits 3 naming fields"
+    },
+    {
+      "id": "TC-215-r1-add-no-id-mints-next",
+      "acId": "AC-17302-9",
+      "description": "brief add --text with no --id mints the next id (idempotency opt-in is id-carried; the harness threads --id back on replay).",
+      "status": "pending",
+      "testPointer": "test/cli/ledger.test.js::ledger CLI (R1, AC-17302-9): add without --id mints next id"
+    },
+    {
+      "id": "TC-215-r1-create-ac-id-unchanged-and-conflict",
+      "acId": "AC-17302-10",
+      "description": "rcf define create ac --parent US-101 --id AC-101-1 replayed with identical content exits 0 printing 'AC-101-1: unchanged (rcf/user-stories/us-101.json)' and leaves the US file byte-identical; the same verb with a different --description exits 3 naming AC-101-1 and description and leaves the file byte-identical.",
+      "status": "pending",
+      "testPointer": "test/cli/create.test.js::create CLI (R1 extension, AC-17302-10): create ac --id replay is unchanged exit 0, different content exits 3"
+    },
+    {
+      "id": "TC-215-r1-create-tc-id-unchanged-and-conflict",
+      "acId": "AC-17302-11",
+      "description": "rcf define create tc --id replayed with identical content exits 0 printing the unchanged line and leaves the TS file byte-identical; a different --description exits 3 naming description; a derived-slug collision without --id still exits 2.",
+      "status": "pending",
+      "testPointer": "test/cli/create.test.js::create CLI (R1 extension, AC-17302-11): create tc --id replay is unchanged exit 0, different content exits 3"
+    },
+    {
+      "id": "TC-215-r1-create-cn-id-unchanged-and-conflict",
+      "acId": "AC-17302-12",
+      "description": "rcf define create cn --id replayed with identical content exits 0 printing the unchanged line and leaves the CN file byte-identical; a different --path exits 3 naming path.",
+      "status": "pending",
+      "testPointer": "test/cli/create.test.js::create CLI (R1 extension, AC-17302-12): create cn --id replay is unchanged exit 0, different content exits 3"
+    },
+    {
+      "id": "TC-215-r1-create-req-verbatim-replay-unchanged",
+      "acId": "AC-17302-13",
+      "description": "rcf define create req --id REQ-050 replayed verbatim after the classifier stamped shapeClassification exits 0 printing the unchanged line; a different --description exits 3 naming description.",
+      "status": "pending",
+      "testPointer": "test/cli/create.test.js::create CLI (R1 extension, AC-17302-13): create req --id verbatim replay is unchanged despite classifier stamp"
+    },
+    {
+      "id": "TC-215-r1-create-tac-id-unchanged-and-conflict",
+      "acId": "AC-17302-13",
+      "description": "rcf define create tac --id replayed with identical content exits 0 printing the unchanged line; a different --purpose exits 3 naming purpose (document-kind path, no post-create side effect).",
+      "status": "pending",
+      "testPointer": "test/cli/create.test.js::create CLI (R1 extension, AC-17302-13): create tac --id replay is unchanged exit 0, different content exits 3"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-216.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-09-24T14:30:00Z",
-  "updatedAt": "2026-10-01T13:12:16Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover the DEFINE stage-gate check functions D1..D8 (AC-17401-1..8) with unit tests over hand-built TreeModel and ledger fixtures.",
   "testLevel": "unit",
   "acIds": [
@@ -13,7 +13,9 @@
     "AC-17401-7",
     "AC-17401-8",
     "AC-17401-9",
-    "AC-17401-10"
+    "AC-17401-10",
+    "AC-17401-11",
+    "AC-17401-12"
   ],
   "id": "TS-216",
   "usId": "US-17401",
@@ -88,6 +90,20 @@
       "description": "IDENTITY_TEMPLATE carries a '## Surface' section between '## Register' and '## Project-scoped notes' naming viewer/runningApp/prDiff and seeded to 'prDiff'; writeIdentityTemplate on a fresh dir seeds a profile that satisfies checkD1Brief surface markers; an existing profile.md is left byte-identical (slice-1 'kept' contract).",
       "status": "pending",
       "testPointer": "test/setup/identity-register.test.js::IDENTITY_TEMPLATE carries a ## Surface heading between ## Register and ## Project-scoped notes"
+    },
+    {
+      "id": "TC-216-r13-crosscut-security-tree-wide",
+      "acId": "AC-17401-11",
+      "description": "A D5 scope narrowed so no REQ is in scope but the tree carries an auth or httpApi REQ with TAD.securityArchitecture empty still fails crosscut:securityArchitecture; stage state is failing (not notApplicable) via the ADR-4138 shared helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R13, AC-17401-11): crosscut:securityArchitecture runs tree-wide under narrowed D5 scope"
+    },
+    {
+      "id": "TC-216-r13-crosscut-operational-tree-wide",
+      "acId": "AC-17401-12",
+      "description": "A D5 scope narrowed so no REQ is in scope but the tree carries an AC with the '[deployed]' marker and TAD.operationalConcerns empty still fails crosscut:operationalConcerns; stage state is failing (not notApplicable) via the ADR-4138 shared helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R13, AC-17401-12): crosscut:operationalConcerns runs tree-wide under narrowed D5 scope"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-219.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-01T14:30:00Z",
-  "updatedAt": "2026-10-01T14:30:00Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover US-17402: every entry in stages[].checks[] carries persona (productOwner | engineer) and a non-empty question string; CHECK_PERSONA / CHECK_QUESTION / STAGE_FALLBACK_PERSONA maps are total; the notApplicable placeholder uses the stage fallback (ADR-4126).",
   "testLevel": "unit",
   "acIds": [
@@ -10,7 +10,8 @@
     "AC-17402-4",
     "AC-17402-5",
     "AC-17402-6",
-    "AC-17402-7"
+    "AC-17402-7",
+    "AC-17402-8"
   ],
   "id": "TS-219",
   "usId": "US-17402",
@@ -64,6 +65,13 @@
       "description": "A notApplicable stage emits one stage:<D>:scope placeholder check with ok true and persona equal to STAGE_FALLBACK_PERSONA[D].",
       "status": "pending",
       "testPointer": "test/query/gates.test.js::gates (ADR-4126, AC-17402-7): notApplicable placeholder carries stage fallback persona and ok true"
+    },
+    {
+      "id": "TC-219-r13-deploy-adr-tree-wide",
+      "acId": "AC-17402-8",
+      "description": "A D2 scope narrowed so no REQ, PRD, TAD or resolving brief statement is in scope but no Deploy ADR exists tree-wide still fails skeleton:deployAdr; stage state is failing (not notApplicable) via the ADR-4138 shared helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R13, AC-17402-8): skeleton:deployAdr runs tree-wide under narrowed D2 scope"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-220.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-01T14:30:00Z",
-  "updatedAt": "2026-10-01T14:30:00Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover US-17403: the skeleton:reqFields split into reqIntent + reqShape, the decisions:allAnswered split into wellFormed + allAnswered, and the new D3 shapes:draftSettled check for interface descriptions carrying the [draft] marker (ADR-4126).",
   "testLevel": "unit",
   "acIds": [
@@ -11,7 +11,9 @@
     "AC-17403-5",
     "AC-17403-6",
     "AC-17403-7",
-    "AC-17403-8"
+    "AC-17403-8",
+    "AC-17403-9",
+    "AC-17403-10"
   ],
   "id": "TS-220",
   "usId": "US-17403",
@@ -72,6 +74,20 @@
       "description": "No check named skeleton:reqFields is emitted; the stage envelope shape (stage, gate, state, checks) is unchanged.",
       "status": "pending",
       "testPointer": "test/query/gates.test.js::gates (ADR-4126, AC-17403-8): no check named skeleton:reqFields is emitted"
+    },
+    {
+      "id": "TC-220-r2-draft-tree-wide-under-narrowed-scope",
+      "acId": "AC-17403-9",
+      "description": "A D3 scope that excludes every TAC and shaped REQ still reports a [draft] marker on a TAC OUTSIDE the narrowed scope through shapes:draftSettled (stage state failing, not notApplicable) via the ADR-4138 shared tree-wide-before-scope helper; the same test asserted against pre-R2 gates.js (origin/main d8adedff^) returns notApplicable instead.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R2, AC-17403-9): draftSettled runs tree-wide under narrowed D3 scope"
+    },
+    {
+      "id": "TC-220-r13-failing-envelope-reason-drops",
+      "acId": "AC-17403-10",
+      "description": "The ADR-4138 helper returns a failing envelope with no reason field; the readiness CLI prints 'D3 (define.shapes): failing' without a '(no TAC ... in scope)' trailer when a tree-wide check fails under a scope-empty stage.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 292 follow-up, AC-17403-10): failing envelope carries no notApplicable reason text"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-225.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-03T00:00:00Z",
-  "updatedAt": "2026-10-03T00:00:00Z",
+  "updatedAt": "2026-10-05T12:30:00Z",
   "purpose": "Cover US-205 (engineer jumps to any document or AC by id): id-first ranking (exact / prefix / contains), word-match title above snippet, single-char ids-only, hash pick lands and expands the entity, mount URL round-trip, embed/theme preservation, empty-state on fetch failure, no outbound postMessage / storage / cookies. Points at the 22 new unit tests under test/view/id-lookup.test.js.",
   "testLevel": "unit",
   "acIds": [
@@ -11,7 +11,8 @@
     "AC-205-5",
     "AC-205-6",
     "AC-205-7",
-    "AC-205-8"
+    "AC-205-8",
+    "AC-205-9"
   ],
   "id": "TS-225",
   "usId": "US-205",
@@ -72,6 +73,13 @@
       "description": "wireLookup never calls window.postMessage, never writes to localStorage / sessionStorage / document.cookie, and makes no outbound fetch other than `./index.json`; asserted by a source-level scan of page-init.js (no postMessage, no storage, no cookie writes in wireLookup).",
       "status": "pending",
       "testPointer": "test/view/id-lookup.test.js::page-init.js does not add outbound postMessage, localStorage, sessionStorage or cookies in the lookup wiring (AC-205-8)"
+    },
+    {
+      "id": "TC-225-search-button-contrast",
+      "acId": "AC-205-9",
+      "description": "The WCAG 2.1 AA contrast audit (test/view/contrast-aa.test.js) requires a `.rcf-search-btn` pair for each of hover, focus-visible and active (state rules merged over the base rule) in both the light and dark token sets and asserts >= 4.5:1 for the button text and >= 3:1 for the focus ring against the surface it sits on. A missing state pair fails the test (PR 291 landing review F3).",
+      "status": "pending",
+      "testPointer": "test/view/contrast-aa.test.js::.rcf-search-btn passes WCAG 2.1 AA in both themes across every state (AC-205-9)"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-229.json

@@ -1,7 +1,7 @@
 {
   "createdAt": "2026-10-03T09:55:00Z",
-  "updatedAt": "2026-10-03T10:00:00Z",
-  "purpose": "Cover US-206 (wespa's embedding contract is proved by a CI host fixture): the fixture renders a 56px header + resizable sidebar around an iframe pointed at ./?embed=1&theme=light with no inline script (AC-206-1), theme flips via postMessage without a reload (AC-206-2, source invariants + Playwright live proof in the lane evidence), embed and theme survive a hash-only in-iframe navigation (AC-206-3, source invariants + Playwright live proof), cross-origin messages are ignored by the viewer listener (AC-206-4), the three lints keep framing headers, target=_top and localStorage namespace in place (AC-206-5), and no new outbound postMessage shape is introduced by the viewer or the fixture (AC-206-6). All TCs resolve to node tests under test/view/wespa-host-fixture.test.js.",
+  "updatedAt": "2026-10-05T12:30:00Z",
+  "purpose": "Cover US-206 (wespa's embedding contract is proved by a CI host fixture): the fixture renders a 56px header + resizable sidebar around an iframe pointed at ./?embed=1&theme=light with no inline script (AC-206-1), theme flips via postMessage without a reload (AC-206-2, source invariants + Playwright live proof in the lane evidence), embed and theme survive a hash-only in-iframe navigation (AC-206-3, source invariants + Playwright live proof), cross-origin messages are ignored by the viewer listener (AC-206-4), the three lints keep framing headers, target=_top and localStorage namespace in place (AC-206-5), and no new outbound postMessage shape is introduced by the viewer or the fixture (AC-206-6). 2026-10-04 (w-2026-10-04-dave-001): extends coverage to the in-viewer three-state theme control (AC-206-7..10 under ADR-4137). All TCs resolve to node tests under test/view/wespa-host-fixture.test.js and test/view/theme-control.test.js. 2026-10-05 (PR 291 landing review F1): the boot theme is applied once; a `rcfPage.init()` re-run after an SSE swap never overrides a host postMessage theme or a theme-control choice.",
   "testLevel": "unit",
   "acIds": [
     "AC-206-1",
@@ -9,7 +9,11 @@
     "AC-206-3",
     "AC-206-4",
     "AC-206-5",
-    "AC-206-6"
+    "AC-206-6",
+    "AC-206-7",
+    "AC-206-8",
+    "AC-206-9",
+    "AC-206-10"
   ],
   "id": "TS-229",
   "usId": "US-206",
@@ -77,6 +81,48 @@
       "description": "A grep over src/view/** (excluding test-host/embed-client.js, the sanctioned emitter) finds zero .postMessage( call sites; the embed-client itself posts exactly one shape, 'rcf-view-theme'.",
       "status": "pending",
       "testPointer": "test/view/wespa-host-fixture.test.js::AC-206-6: no outbound postMessage shape beyond rcf-view-theme is introduced by the viewer or the fixture"
+    },
+    {
+      "id": "TC-229-theme-control-renders-non-embed",
+      "acId": "AC-206-7",
+      "description": "renderPage renders a `[data-rcf-theme-control]` group with three buttons (Light, Dark, Auto; `aria-pressed`) right of the SearchButton in `.tools` when `data-embed` is absent; a click on a theme button sets `<html data-theme>` live and flips `aria-pressed` across the three.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-7: renderPage includes the three-state theme control in non-embed; applyThemeControl updates data-theme and aria-pressed on click"
+    },
+    {
+      "id": "TC-229-theme-control-persists",
+      "acId": "AC-206-8",
+      "description": "In non-embed mode, selecting a theme writes `rcf-view:v1:theme` as `light`/`dark`/`auto` and the stored value is reapplied on the next boot; a `rcf-view-theme` postMessage still applies live but does not write the stored key; the boot precedence is `?theme=` -> stored -> auto.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-8: non-embed persistence under rcf-view:v1:theme; postMessage path writes nothing"
+    },
+    {
+      "id": "TC-229-theme-control-absent-embed",
+      "acId": "AC-206-9",
+      "description": "renderPage with `data-embed=\"1\"` does not emit any `[data-rcf-theme-control]` markup; wireThemeControl under embed never reads or writes `rcf-view:v1:theme` on load, on a postMessage, or on any user action; the key is zero-touched (localStorage spy sees no setItem/getItem call for the key under embed).",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-9: embed=1 omits the control markup and does not touch rcf-view:v1:theme"
+    },
+    {
+      "id": "TC-229-theme-control-query-wins",
+      "acId": "AC-206-10",
+      "description": "In non-embed mode with a stored value `dark`, when the URL carries `?theme=light`, boot resolves to `light` (explicit wins), the Light button is pressed and the stored value is NOT overwritten (next load without a query reuses `dark`).",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::AC-206-10: explicit ?theme= beats the stored value and leaves the key as-is"
+    },
+    {
+      "id": "TC-229-reinit-keeps-host-theme",
+      "acId": "AC-206-2",
+      "description": "Boot `?embed=1` with no `?theme=`, post `{ type: \"rcf-view-theme\", theme: \"dark\" }`, then call `rcfPage.init()` (the live-client SSE re-run): `<html data-theme>` stays `dark` and no storage is touched.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::PR 291 F1 regression: embed=1 host theme survives an rcfPage.init() re-run"
+    },
+    {
+      "id": "TC-229-reinit-keeps-control-choice",
+      "acId": "AC-206-10",
+      "description": "Boot `?theme=light` in non-embed mode, click Dark, then call `rcfPage.init()`: `<html data-theme>` stays `dark` and the Dark button stays pressed.",
+      "status": "pending",
+      "testPointer": "test/view/theme-control.test.js::PR 291 F1 regression: standalone control choice survives an rcfPage.init() re-run with ?theme= in the URL"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-230.json

@@ -1,6 +1,6 @@
 {
   "createdAt": "2026-10-03T10:50:00Z",
-  "updatedAt": "2026-10-03T10:50:00Z",
+  "updatedAt": "2026-10-05T18:00:00Z",
   "purpose": "Cover US-17404 (D3 bites): the three D3 bite checks shapes:templateMarkers, shapes:entityJoin and shapes:pathsResolve each have pass, fail, notApplicable, id and why strings; drafts are included in templateMarkers; the readiness CLI --check shapes exits 4 on an unacknowledged D3 failure and 0 when acked at the current hash; ackable() is exactly D3, D5, D6; --ack on D1, D2, D4, D7 or D8 exits 2 unchanged.",
   "testLevel": "unit",
   "acIds": [
@@ -9,7 +9,10 @@
     "AC-17404-3",
     "AC-17404-4",
     "AC-17404-5",
-    "AC-17404-6"
+    "AC-17404-6",
+    "AC-17404-7",
+    "AC-17404-8",
+    "AC-17404-9"
   ],
   "id": "TS-230",
   "usId": "US-17404",
@@ -70,6 +73,27 @@
       "description": "A [draft] recordShape without fields: fails shapes:templateMarkers exactly as a settled one; this completes AC-18801-4 from PR 3.",
       "status": "pending",
       "testPointer": "test/query/gates.test.js::gates (REQ-188, AC-18801-4): draft recordShape without fields fails templateMarkers (lifted by PR 5 ADR-4131)"
+    },
+    {
+      "id": "TC-230-r5-entityjoin-under-narrowed-scope",
+      "acId": "AC-17404-7",
+      "description": "A D3 scope narrowed so no TAC and no shaped REQ is in scope but a coreEntity has no record shape anywhere tree-wide still fails shapes:entityJoin (stage state failing, not notApplicable) via the ADR-4138 helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R5, AC-17404-7): entityJoin runs tree-wide under narrowed D3 scope"
+    },
+    {
+      "id": "TC-230-r6-bare-paths-whitelist",
+      "acId": "AC-17404-8",
+      "description": "extractInterfacePathTokens treats Dockerfile, Makefile, LICENSE, Procfile, Containerfile, Justfile, Rakefile, Gemfile and CODEOWNERS as candidate tokens; shapes:pathsResolve fails a path: Dockerfile when not in resolvedPaths and passes when resolved. The exported BARE_PATH_WHITELIST drives both.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R6, AC-17404-8): bare path whitelist is checked by pathsResolve"
+    },
+    {
+      "id": "TC-230-r13-helper-foldstate-delegation",
+      "acId": "AC-17404-9",
+      "description": "treeWideFailureEnvelope returns null when every tree-wide check passes under a scope-empty stage; on D3 with a failing tree-wide check and a freeze.gates ack at the currentTreeHash it folds through foldState to state 'acknowledged'; on D2 (blocking) with a failing tree-wide check it stays 'failing'.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (PR 292 follow-up, AC-17404-9): treeWideFailureEnvelope helper semantics"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-231.json

@@ -9,7 +9,8 @@
     "AC-17405-3",
     "AC-17405-4",
     "AC-17405-5",
-    "AC-17405-6"
+    "AC-17405-6",
+    "AC-17405-9"
   ],
   "id": "TS-231",
   "usId": "US-17405",
@@ -98,6 +99,20 @@
       "description": "R11 refuses dotted grammar; rcf define validate reports the finding naming the dotted field.",
       "status": "passing",
       "testPointer": "test/define/validate-findings.test.js::validate findings (PR 9, R11): ownerRef uses the widened grammar; deliveredBy object form is checked"
+    },
+    {
+      "id": "TC-231-r8-standards-applied-waived-or-cited",
+      "acId": "AC-17405-5",
+      "description": "A concern-ledger entry concern 'standards:<pack>' with disposition 'applied' satisfies skeleton:standardsCited (R8 2026-10-05); 'waived' also satisfies it; neither nor cited, the pack fails standards:<pack>.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R8, AC-17405-5): applied disposition satisfies standardsCited alongside waived and citation"
+    },
+    {
+      "id": "TC-231-r7-standards-under-narrowed-d2-scope",
+      "acId": "AC-17405-9",
+      "description": "A D2 scope narrowed so no REQ, PRD, TAD or brief statement is in scope but a registered standards pack is neither cited nor waived tree-wide still fails skeleton:standardsCited (stage state failing, not notApplicable) via the ADR-4138 helper.",
+      "status": "pending",
+      "testPointer": "test/query/gates.test.js::gates (R7, AC-17405-9): standardsCited runs tree-wide under narrowed D2 scope"
     }
   ],
   "status": "draft"

package/rcf/test-suites/ts-236.json

@@ -0,0 +1,44 @@
+{
+  "createdAt": "2026-10-04T14:00:00Z",
+  "updatedAt": "2026-10-05T12:30:00Z",
+  "purpose": "Cover US-207 (every viewer text and control colour pair meets WCAG 2.1 AA in both themes): a static CSS-contrast audit parses `src/view/style.css`, resolves the `--sv-*` tokens for the light (`:root`) and dark (`:root[data-theme=\"dark\"]`) blocks, enumerates every rule that sets `color` paired with a reachable background, walks state variants (default, :hover, :focus, :focus-visible, :active, [aria-pressed=true], [aria-selected=true], .is-active, :disabled) and asserts the WCAG 2.1 AA thresholds (>= 4.5:1 for text, >= 3:1 for large text and non-text UI boundaries); the test exits non-zero on any failure, naming selector, state, theme, foreground, background, computed ratio and threshold. Points at test/view/contrast-aa.test.js and the BEFORE/AFTER report at ./output/contrast-report.md captured during the lane work (w-2026-10-04-dave-001). 2026-10-05 (PR 291 landing review F2, F3): state rules are merged over their base selector before pairing, border and outline colours are enumerated against the adjacent surface at 3:1, and the SearchButton and theme-control states are required to exist and pass in both themes.",
+  "testLevel": "unit",
+  "acIds": [
+    "AC-207-1",
+    "AC-207-2"
+  ],
+  "id": "TS-236",
+  "usId": "US-207",
+  "title": "WCAG 2.1 AA contrast audit across the viewer stylesheet, both themes, every state",
+  "testCases": [
+    {
+      "id": "TC-236-aa-enumerates-all-pairs",
+      "acId": "AC-207-1",
+      "description": "The audit parses `src/view/style.css`, enumerates every selector that sets `color` with every reachable background (own rule, ancestor surface token, page background `--sv-canvas`) in each state (default, :hover, :focus, :focus-visible, :active, [aria-pressed=true], [aria-selected=true], .is-active, :disabled) in both the light and dark token sets, computes the WCAG relative-luminance ratio and asserts >= 4.5:1 for normal text and >= 3:1 for large text and non-text UI boundaries (WCAG 1.4.3 and 1.4.11).",
+      "status": "pending",
+      "testPointer": "test/view/contrast-aa.test.js::enumerates every color/background pair and asserts WCAG 2.1 AA in both themes (AC-207-1)"
+    },
+    {
+      "id": "TC-236-aa-failure-message",
+      "acId": "AC-207-2",
+      "description": "When a contrast pair is below the threshold, the test failure message names the selector, state, theme, foreground colour, background colour, computed ratio and applied threshold; the test exits non-zero so the suite blocks a merge that drops below AA.",
+      "status": "pending",
+      "testPointer": "test/view/contrast-aa.test.js::failure message names selector/state/theme/fg/bg/ratio/threshold and exits non-zero (AC-207-2)"
+    },
+    {
+      "id": "TC-236-state-merge-and-boundaries",
+      "acId": "AC-207-1",
+      "description": "A state rule that changes only the background (the original `.rcf-search-btn:hover` defect) is merged over its base selector and paired with the inherited colour; `border` / `border-color` and `outline` / `outline-color` are enumerated against the adjacent surface at the 3:1 non-text threshold; run against the pre-amendment stylesheet the helper reports the dark `.rcf-search-btn:hover` failure.",
+      "status": "pending",
+      "testPointer": "test/view/contrast-aa.test.js::state rules merge over their base; borders and outlines are enumerated as 3:1 pairs (AC-207-1)"
+    },
+    {
+      "id": "TC-236-theme-btn-states",
+      "acId": "AC-207-1",
+      "description": "`.rcf-theme-btn` hover, focus-visible and active pairs exist and pass in both themes, and its focus ring clears 3:1 against the surface it sits on.",
+      "status": "pending",
+      "testPointer": "test/view/contrast-aa.test.js::.rcf-theme-btn passes WCAG 2.1 AA in both themes across hover, focus-visible and active (AC-207-1)"
+    }
+  ],
+  "status": "draft"
+}

package/rcf/user-stories/us-17302.json

@@ -39,6 +39,41 @@
       "id": "AC-17302-6",
       "description": "[must-not] given a statement whose text contains an existing REQ title and no resolvedBy, when D2 runs in 0.30.0, then skeleton:resolvedBy does not pass it on the title hit.",
       "testable": true
+    },
+    {
+      "id": "AC-17302-7",
+      "description": "[happy] (R1 2026-10-05) given rcf define ledger brief add --id 3 --text \"foo\" --kind capability on a ledger whose entry 3 already carries kind capability and text foo, when the verb runs, then it exits 0 and stdout reads 'brief-ledger: unchanged 3' (with --json, {\"status\":\"unchanged\",\"id\":3}); the file is not rewritten.",
+      "testable": true
+    },
+    {
+      "id": "AC-17302-8",
+      "description": "[failure] (R1 2026-10-05) given rcf define ledger brief add --id 3 --text \"bar\" --kind constraint on a ledger whose entry 3 carries kind capability and text foo, when the verb runs, then it exits 3 and stderr names the id and the differing fields (text, kind); the file is not rewritten.",
+      "testable": true
+    },
+    {
+      "id": "AC-17302-9",
+      "description": "[happy] (R1 2026-10-05) given rcf define ledger brief add --text \"foo\" with no --id on an empty ledger, when the verb runs, then it mints id 1 as before (idempotency opt-in is id-carried; the harness threads --id back on replay).",
+      "testable": true
+    },
+    {
+      "id": "AC-17302-10",
+      "description": "[happy] (R1 create extension 2026-10-05, PR 292 follow-up; amended on the PR 293 landing review) given rcf define create ac --parent US-1 --id AC-1-1 --description \"foo\" on a tree where US-1 already carries AC-1-1 with description foo and testable true and no other fields, when the verb runs, then it exits 0 and stdout reads 'AC-1-1: unchanged (rcf/user-stories/us-1.json)'; the parent US file is not rewritten; and given the same verb with --description \"bar\" instead, it exits 3, stderr names the id and the differing field (description), and the file is not rewritten. rcf define create has no --json flag; the stdout line is the whole output (suppressed by --quiet).",
+      "testable": true
+    },
+    {
+      "id": "AC-17302-11",
+      "description": "[happy] (R1 create extension, PR 293 landing review) given rcf define create tc --parent TS-1 --id TC-1-foo --ac AC-1-1 --description \"foo\" --test-pointer t.test.js::foo on a tree where TS-1 already carries TC-1-foo with the same acId, description, testPointer and status pending, when the verb runs, then it exits 0 and stdout reads 'TC-1-foo: unchanged (rcf/test-suites/ts-1.json)' and the file is not rewritten; given the same verb with --description \"bar\", it exits 3 naming the id and the differing field (description) and the file is not rewritten. Idempotency is id-carried: without --id, a derived-slug collision still refuses with exit 2 and the 'supply --slug explicitly' message.",
+      "testable": true
+    },
+    {
+      "id": "AC-17302-12",
+      "description": "[happy] (R1 create extension, PR 293 landing review) given rcf define create cn --id CN-1 --path src/a.js --acs AC-1-1 on a tree where CN-1 already carries path src/a.js, implementsAcIds [AC-1-1], dependencies [], version 0.1.0 and status draft, when the verb runs, then it exits 0 and stdout reads 'CN-1: unchanged (rcf/code-nodes/cn-1.json)' and the file is not rewritten; given the same verb with --path src/b.js, it exits 3 naming the id and the differing field (path) and the file is not rewritten.",
+      "testable": true
+    },
+    {
+      "id": "AC-17302-13",
+      "description": "[happy] (R1 create extension, PR 293 landing review) given rcf define create req --parent PRD-001 --id REQ-050 --title T --description D whose first run persisted a classifier-owned shapeClassification block, when the identical command is replayed, then it exits 0 and stdout reads 'REQ-050: unchanged (rcf/requirements/req-050.json)' and the file is not rewritten: the replay compare ignores every writer- and classifier-owned field (createdAt, updatedAt, shapeClassification; one exported REPLAY_IGNORE_FIELDS list in src/core/store/writer.js); given the same verb with a different --description, it exits 3 naming description and the file is not rewritten.",
+      "testable": true
     }
   ],
   "tacIds": [
@@ -46,5 +81,5 @@
   ],
   "tags": [],
   "createdAt": "2026-10-02T16:40:00Z",
-  "updatedAt": "2026-10-02T16:40:00Z"
+  "updatedAt": "2026-10-05T19:00:00Z"
 }

package/rcf/user-stories/us-17401.json

@@ -59,6 +59,16 @@
       "id": "AC-17401-10",
       "description": "src/setup/identity-seed.js IDENTITY_TEMPLATE seeds a '## Surface' section containing one line that is one of 'viewer' | 'runningApp' | 'prDiff' (default 'prDiff' with explanatory text matching the Register section's style) so that a project immediately after 'rcf init' passes checkD1Brief's profile:surface check without further operator action. The seed stays idempotent (an existing profile.md is left byte-identical, per the slice-1 'kept' contract).",
       "testable": true
+    },
+    {
+      "id": "AC-17401-11",
+      "description": "[happy] (R13 2026-10-05) given a D5 scope narrowed so no REQ is in scope but the tree has an auth or httpApi REQ and TAD.securityArchitecture is empty, when D5 runs, then crosscut:securityArchitecture still fails TAD.securityArchitecture and the stage state is failing (not notApplicable) through the shared tree-wide-before-scope helper (ADR-4138 extended).",
+      "testable": true
+    },
+    {
+      "id": "AC-17401-12",
+      "description": "[happy] (R13 2026-10-05) given a D5 scope narrowed so no REQ is in scope but the tree carries a US with an AC description that contains the '[deployed]' marker and TAD.operationalConcerns is empty, when D5 runs, then crosscut:operationalConcerns still fails TAD.operationalConcerns and the stage state is failing (not notApplicable) through the shared tree-wide-before-scope helper (ADR-4138 extended).",
+      "testable": true
     }
   ],
   "tacIds": [
@@ -66,5 +76,5 @@
   ],
   "tags": [],
   "createdAt": "2026-09-24T14:30:00Z",
-  "updatedAt": "2026-10-01T13:03:38Z"
+  "updatedAt": "2026-10-05T18:00:00Z"
 }

package/rcf/user-stories/us-17402.json

@@ -44,6 +44,11 @@
       "id": "AC-17402-7",
       "description": "[failure] Given a notApplicable stage, when readiness is computed, then its stage:<D>:scope placeholder check carries the stage's STAGE_FALLBACK_PERSONA and ok true.",
       "testable": true
+    },
+    {
+      "id": "AC-17402-8",
+      "description": "[happy] (R13 2026-10-05) given a D2 scope narrowed so no REQ, PRD, TAD or resolving brief statement is in scope but the tree has zero Deploy target or Deploy deferral ADRs (or two or more), when D2 runs, then skeleton:deployAdr still fails ADR:deploy and the stage state is failing (not notApplicable) through the shared tree-wide-before-scope helper (ADR-4138 extended).",
+      "testable": true
     }
   ],
   "tacIds": [
@@ -51,5 +56,5 @@
   ],
   "tags": [],
   "createdAt": "2026-10-01T14:30:00Z",
-  "updatedAt": "2026-10-01T14:30:00Z"
+  "updatedAt": "2026-10-05T18:00:00Z"
 }

package/rcf/user-stories/us-17403.json

@@ -49,6 +49,16 @@
       "id": "AC-17403-8",
       "description": "[must-not] Given any tree, when D2 or D7 runs, then no check named skeleton:reqFields is emitted and the stage envelope shape (stage, gate, state, checks) is unchanged.",
       "testable": true
+    },
+    {
+      "id": "AC-17403-9",
+      "description": "[happy] (R2 2026-10-05) given a D3 scope that excludes every TAC and shaped REQ (no TAC, no httpApi/persistence/auth REQ in scope) but a [draft] marker exists on a TAC OUTSIDE the narrowed scope, when D3 runs, then shapes:draftSettled still fails the <tacId>:<name> finding and the stage state is failing (not notApplicable) through the shared tree-wide-before-scope helper (ADR-4138); the same test asserted against pre-R2 gates.js (origin/main d8adedff^) returns notApplicable instead.",
+      "testable": true
+    },
+    {
+      "id": "AC-17403-10",
+      "description": "[happy] (PR 292 follow-up 2026-10-05) given a scope-empty D3 with a failing shapes:draftSettled tree-wide, when the failing envelope the ADR-4138 helper returns is rendered by src/cli/readiness.js, then the printed D3 line reads 'D3 (define.shapes): failing' without the pre-R13 '(no TAC ... in scope)' notApplicable reason trailer; the envelope omits the reason field (foldState delegation inside the helper carries no reason text).",
+      "testable": true
     }
   ],
   "tacIds": [
@@ -56,5 +66,5 @@
   ],
   "tags": [],
   "createdAt": "2026-10-01T14:30:00Z",
-  "updatedAt": "2026-10-01T14:30:00Z"
+  "updatedAt": "2026-10-05T18:00:00Z"
 }

package/rcf/user-stories/us-17404.json

@@ -39,6 +39,21 @@
       "id": "AC-17404-6",
       "description": "[must-not] given --ack on D1, D2, D4, D7 or D8, when freeze runs, then it exits 2 unchanged from 0.29.0.",
       "testable": true
+    },
+    {
+      "id": "AC-17404-7",
+      "description": "[happy] (R5 2026-10-05) given a D3 scope narrowed so no recordShape is in scope but a coreEntity has no record shape anywhere tree-wide, when D3 runs, then shapes:entityJoin fails TAD.entity:<name> and the stage state is failing (not notApplicable); the shared tree-wide-before-scope helper (ADR-4138) governs the ordering.",
+      "testable": true
+    },
+    {
+      "id": "AC-17404-8",
+      "description": "[happy] (R6 2026-10-05) given an interface description with path: Dockerfile and no entry for Dockerfile in resolvedPaths, when D3 runs, then shapes:pathsResolve fails it; given resolvedPaths contains Dockerfile, then it passes. The whitelist exported from gates.js names Dockerfile, Makefile, LICENSE, Procfile, Containerfile, Justfile, Rakefile, Gemfile and CODEOWNERS; a bare word outside the list (foo) still skips as before.",
+      "testable": true
+    },
+    {
+      "id": "AC-17404-9",
+      "description": "[happy] (PR 292 follow-up 2026-10-05) given treeWideFailureEnvelope invoked on a scope-empty stage with every tree-wide check passing, when the helper runs, then it returns null (the stage proceeds to its own notApplicable envelope); given at least one failing tree-wide check on an ackable stage (D3) with a freeze.gates acknowledgement whose at.hash equals the currentTreeHash, then the helper returns an envelope with state 'acknowledged' through foldState delegation (the helper does not re-implement ack-at-current-hash); given the same shape on D2 (blocking), then the helper never folds to acknowledged.",
+      "testable": true
     }
   ],
   "tacIds": [
@@ -47,5 +62,5 @@
   ],
   "tags": [],
   "createdAt": "2026-10-03T10:50:00Z",
-  "updatedAt": "2026-10-03T10:50:00Z"
+  "updatedAt": "2026-10-05T18:00:00Z"
 }

package/rcf/user-stories/us-17405.json

@@ -32,7 +32,7 @@
     },
     {
       "id": "AC-17405-5",
-      "description": "[happy] given a registered standards pack cited in an ADR, when D2 runs, then skeleton:standardsCited passes; uncited and unwaived, it fails standards:<pack>.",
+      "description": "[happy] (R8 2026-10-05) given a registered standards pack cited in an ADR, when D2 runs, then skeleton:standardsCited passes; uncited and unwaived, it fails standards:<pack>; given a concern-ledger entry concern 'standards:<pack>' with disposition 'applied' or 'waived', it passes (the check question reads 'cited, applied or waived').",
       "testable": true
     },
     {
@@ -49,6 +49,11 @@
       "id": "AC-17405-8",
       "description": "[must-not] (PR 9 R11) given an ownerRef whose field uses dotted grammar (interfaces.loan, responsibilities.audit), when D4 or rcf define validate runs, then it fails with the finding naming the dotted field so the author can rewrite to bracket grammar.",
       "testable": true
+    },
+    {
+      "id": "AC-17405-9",
+      "description": "[happy] (R7 2026-10-05) given a D2 scope narrowed so no REQ, PRD, TAD or brief statement is in scope but a registered standards pack is neither cited nor waived tree-wide, when D2 runs, then skeleton:standardsCited fails standards:<pack> and the stage state is failing (not notApplicable); the shared tree-wide-before-scope helper (ADR-4138) governs the ordering.",
+      "testable": true
     }
   ],
   "tacIds": [
@@ -57,5 +62,5 @@
   ],
   "tags": [],
   "createdAt": "2026-10-03T13:30:00Z",
-  "updatedAt": "2026-10-03T20:30:00Z"
+  "updatedAt": "2026-10-05T12:00:00Z"
 }