fix: require signed accessibility evidence per route

2026-07-25 22:21:23 +09:00
75 changed files with 275 additions and 3851 deletions
@@ -1,189 +0,0 @@
-name: frontend-quality-gates
-
-on:
-  push:
-    branches: [develop]
-    tags: ["v*"]
-  pull_request:
-  workflow_dispatch:
-    inputs:
-      stage:
-        description: Highest promotion tier to evaluate
-        required: true
-        default: merge
-        type: choice
-        options:
-          - merge
-          - release
-          - production
-          - field
-          - documentation
-
-env:
-  NODE_VERSION: "24"
-
-jobs:
-  merge_gate:
-    name: ${{ matrix.gate }} / ${{ matrix.name }}
-    if: ${{ gitea.event_name != 'workflow_dispatch' || inputs.stage != 'documentation' }}
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - { gate: FE-GATE-001, name: manifest-lockfile, browser: false }
-          - { gate: FE-GATE-002, name: lint, browser: false }
-          - { gate: FE-GATE-003, name: typecheck, browser: false }
-          - { gate: FE-GATE-004, name: runtime-schema, browser: false }
-          - { gate: FE-GATE-005, name: unit, browser: false }
-          - { gate: FE-GATE-006, name: component, browser: false }
-          - { gate: FE-GATE-007, name: integration, browser: false }
-          - { gate: FE-GATE-008, name: e2e, browser: true }
-          - { gate: FE-GATE-009, name: accessibility, browser: true }
-          - { gate: FE-GATE-010, name: architecture, browser: false }
-          - { gate: FE-GATE-011, name: build, browser: false }
-          - { gate: FE-GATE-013, name: security, browser: false }
-          - { gate: FE-GATE-020, name: sample-removal, browser: false }
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-      - name: Frozen install
-        run: |
-          corepack enable
-          corepack pnpm install --frozen-lockfile
-      - name: Install Chromium
-        if: ${{ matrix.browser }}
-        run: corepack pnpm exec playwright install --with-deps chromium
-      - name: Run blocking gate
-        run: corepack pnpm ci:gate -- ${{ matrix.gate }}
-      - name: Upload gate evidence
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: ${{ matrix.gate }}-${{ gitea.run_id }}
-          path: artifacts/
-          if-no-files-found: warn
-
-  release_gate:
-    name: ${{ matrix.gate }} / ${{ matrix.name }}
-    needs: merge_gate
-    if: ${{ startsWith(gitea.ref, 'refs/tags/v') || (gitea.event_name == 'workflow_dispatch' && (inputs.stage == 'release' || inputs.stage == 'production' || inputs.stage == 'field')) }}
-    runs-on: ubuntu-latest
-    env:
-      HOSTING_BASE_URL: ${{ vars.HOSTING_BASE_URL }}
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - { gate: FE-GATE-012, name: bundle, browser: false }
-          - { gate: FE-GATE-014, name: config-compatibility, browser: false }
-          - { gate: FE-GATE-015, name: release-coherence, browser: false }
-          - { gate: FE-GATE-019, name: hosting-header, browser: false }
-          - { gate: FE-GATE-026, name: lab-performance, browser: true }
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-      - name: Frozen install
-        run: |
-          corepack enable
-          corepack pnpm install --frozen-lockfile
-      - name: Install Chromium
-        if: ${{ matrix.browser }}
-        run: corepack pnpm exec playwright install --with-deps chromium
-      - name: Run blocking gate
-        run: corepack pnpm ci:gate -- ${{ matrix.gate }}
-      - name: Upload gate evidence
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: ${{ matrix.gate }}-${{ gitea.run_id }}
-          path: artifacts/
-          if-no-files-found: warn
-
-  production_gate:
-    name: ${{ matrix.gate }} / ${{ matrix.name }}
-    needs: release_gate
-    if: ${{ gitea.event_name == 'workflow_dispatch' && (inputs.stage == 'production' || inputs.stage == 'field') }}
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - { gate: FE-GATE-016, name: rollback-drill }
-          - { gate: FE-GATE-021, name: runbook-boot-config }
-          - { gate: FE-GATE-022, name: runbook-chunk-mismatch }
-          - { gate: FE-GATE-023, name: runbook-api-degradation }
-          - { gate: FE-GATE-024, name: runbook-telemetry }
-          - { gate: FE-GATE-025, name: runbook-release-rollback }
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-      - name: Frozen install
-        run: |
-          corepack enable
-          corepack pnpm install --frozen-lockfile
-      - name: Run blocking gate
-        run: corepack pnpm ci:gate -- ${{ matrix.gate }}
-      - name: Upload gate evidence
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: ${{ matrix.gate }}-${{ gitea.run_id }}
-          path: artifacts/
-          if-no-files-found: warn
-
-  field_gate:
-    name: FE-GATE-018 / field-web-vitals
-    needs: production_gate
-    if: ${{ gitea.event_name == 'workflow_dispatch' && inputs.stage == 'field' }}
-    runs-on: ubuntu-latest
-    env:
-      FIELD_WEB_VITALS_INPUT: ${{ vars.FIELD_WEB_VITALS_INPUT }}
-      MIN_ELIGIBLE_SAMPLES: ${{ vars.MIN_ELIGIBLE_SAMPLES }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-      - name: Frozen install
-        run: |
-          corepack enable
-          corepack pnpm install --frozen-lockfile
-      - name: Run blocking gate
-        run: corepack pnpm ci:gate -- FE-GATE-018
-      - name: Upload gate evidence
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: FE-GATE-018-${{ gitea.run_id }}
-          path: artifacts/
-          if-no-files-found: warn
-
-  documentation_gate:
-    name: FE-GATE-017 / diagram-review
-    if: ${{ gitea.event_name == 'workflow_dispatch' && inputs.stage == 'documentation' }}
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-      - name: Frozen install
-        run: |
-          corepack enable
-          corepack pnpm install --frozen-lockfile
-      - name: Run documentation gate
-        run: corepack pnpm ci:gate -- FE-GATE-017
-      - name: Upload gate evidence
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: FE-GATE-017-${{ gitea.run_id }}
-          path: artifacts/
-          if-no-files-found: warn
@@ -1,77 +1,2 @@
-# Clean Architecture Frontend Template
+# clean-architecture-frontend-template

-A React/Vite reference implementation where architecture boundaries,
-integration behavior, release coherence, accessibility, performance, and
-operations are executable contracts rather than conventions.
-
-## Start locally
-
-Requirements: Node 24 and Corepack. The repository pins pnpm in `package.json`.
-
-```bash
-corepack pnpm install --frozen-lockfile
-corepack pnpm dev
-```
-
-Runtime-public settings live in `public/config.json` and are validated before
-the product tree mounts. Client secrets are forbidden.
-
-## Architecture
-
-Dependencies point inward:
-
-```text
-presentation -> application -> domain
-adapters -----^
-bootstrap composes concrete adapters
-contracts own cross-cutting registries
-```
-
-See `docs/architecture/overview.md` and `docs/architecture/layers.md`. The
-removable sample slice is under `src/sample/contract-fixture`; product code is
-not allowed to import it.
-
-## Verification
-
-Common local checks:
-
-```bash
-corepack pnpm lint
-corepack pnpm check:types
-corepack pnpm check:architecture
-corepack pnpm test:all
-corepack pnpm test:e2e
-corepack pnpm test:a11y
-corepack pnpm build
-corepack pnpm check:bundle
-corepack pnpm test:performance
-corepack pnpm verify:compatibility
-corepack pnpm verify:release
-corepack pnpm check:registries
-corepack pnpm drill:runbooks
-corepack pnpm check:ci
-```
-
-Two gates intentionally need external evidence:
-
- `review:a11y-manual` needs a signed human keyboard/focus/screen-reader review.
- `collect:web-vitals-evidence` stays `FAIL_UNVERIFIED` until a reviewed minimum
-  eligible-sample threshold and 28 days of production data exist.
-
-Live release verification additionally requires `HOSTING_BASE_URL`.
-
-## CI and evidence
-
-The 26-gate registry is `config/ci/gates.json`; the Gitea workflow is
-`.gitea/workflows/quality-gates.yml`. It follows:
-
-```text
-MERGE_READY -> RELEASE_READY -> PROD_PROMOTION_READY -> FIELD_SLO_READY
-```
-
-`DOCUMENTATION_READY` is independent. No gate is downgraded to a warning.
-Machine-readable evidence is written below `artifacts/`; generated evidence is
-ignored by Git while `.gitkeep` files preserve the taxonomy.
-
-Operational details are in `docs/operations/`, with incident procedures in
-`docs/runbooks/`.
@@ -1,15 +1,18 @@
 # APP_HOME accessibility review

 Status: pending-manual-review
-
+Route ID: APP_HOME
+Release ID:
 Reviewer:
-
-Keyboard: automated tab-order fixture passed; human review pending.
-
-Focus: automated visible-focus fixture passed; route-change review pending.
-
-Screen reader: pending.
-
-Reduced motion: automated media-query fixture passed; human review pending.
-
-Color signal: pending.
+Reviewed at:
+Signature:
+Attestation: pending
+M1 Keyboard: pending
+M2 Visible focus: pending
+M3 Route focus: pending
+M4 Modal focus: not-applicable (no modal on this route)
+M5 Error association: not-applicable (no form error on this route)
+M6 Color signal: pending
+M7 Reduced motion: pending
+Screen reader: pending
+Notes: Automated axe, keyboard-focus, and reduced-motion evidence is available; human review pending.
@@ -0,0 +1,18 @@
+# NOT_FOUND accessibility review
+
+Status: pending-manual-review
+Route ID: NOT_FOUND
+Release ID:
+Reviewer:
+Reviewed at:
+Signature:
+Attestation: pending
+M1 Keyboard: pending
+M2 Visible focus: pending
+M3 Route focus: pending
+M4 Modal focus: not-applicable (no modal on this route)
+M5 Error association: not-applicable (no form error on this route)
+M6 Color signal: pending
+M7 Reduced motion: pending
+Screen reader: pending
+Notes: Human review pending.
@@ -0,0 +1,18 @@
+# SAMPLE_RESOURCE_LIST accessibility review
+
+Status: pending-manual-review
+Route ID: SAMPLE_RESOURCE_LIST
+Release ID:
+Reviewer:
+Reviewed at:
+Signature:
+Attestation: pending
+M1 Keyboard: pending
+M2 Visible focus: pending
+M3 Route focus: pending
+M4 Modal focus: not-applicable (no modal on this route)
+M5 Error association: not-applicable (no form error on this route)
+M6 Color signal: pending
+M7 Reduced motion: pending
+Screen reader: pending
+Notes: Human review pending.
@@ -1,342 +0,0 @@
-{
-  "schemaVersion": 1,
-  "providerAdapter": ".gitea/workflows/quality-gates.yml",
-  "stages": {
-    "merge": {
-      "readiness": "MERGE_READY",
-      "needs": null,
-      "gates": [
-        "FE-GATE-001",
-        "FE-GATE-002",
-        "FE-GATE-003",
-        "FE-GATE-004",
-        "FE-GATE-005",
-        "FE-GATE-006",
-        "FE-GATE-007",
-        "FE-GATE-008",
-        "FE-GATE-009",
-        "FE-GATE-010",
-        "FE-GATE-011",
-        "FE-GATE-013",
-        "FE-GATE-020"
-      ]
-    },
-    "release": {
-      "readiness": "RELEASE_READY",
-      "needs": "merge",
-      "gates": [
-        "FE-GATE-012",
-        "FE-GATE-014",
-        "FE-GATE-015",
-        "FE-GATE-019",
-        "FE-GATE-026"
-      ]
-    },
-    "production": {
-      "readiness": "PROD_PROMOTION_READY",
-      "needs": "release",
-      "gates": [
-        "FE-GATE-016",
-        "FE-GATE-021",
-        "FE-GATE-022",
-        "FE-GATE-023",
-        "FE-GATE-024",
-        "FE-GATE-025"
-      ]
-    },
-    "field": {
-      "readiness": "FIELD_SLO_READY",
-      "needs": "production",
-      "gates": ["FE-GATE-018"]
-    },
-    "documentation": {
-      "readiness": "DOCUMENTATION_READY",
-      "needs": null,
-      "gates": ["FE-GATE-017"]
-    }
-  },
-  "gates": {
-    "FE-GATE-001": {
-      "name": "manifest-lockfile",
-      "steps": [{ "script": "verify:lockfile", "expect": "pass" }],
-      "logPath": "artifacts/quality/install.txt",
-      "evidence": ["artifacts/quality/install.txt"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-002": {
-      "name": "lint",
-      "steps": [{ "script": "lint", "expect": "pass" }],
-      "logPath": "artifacts/quality/lint.txt",
-      "evidence": ["artifacts/quality/lint.txt"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-003": {
-      "name": "typecheck",
-      "steps": [
-        { "script": "check:types", "expect": "pass" },
-        { "script": "check:types:fixture", "expect": "fail" }
-      ],
-      "logPath": "artifacts/quality/check-types.txt",
-      "evidence": ["artifacts/quality/check-types.txt"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-004": {
-      "name": "runtime-schema",
-      "steps": [{ "script": "test:runtime-schema", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-004.txt",
-      "evidence": ["artifacts/tests/runtime-schema.xml"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-005": {
-      "name": "unit",
-      "steps": [{ "script": "test:unit", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-005.txt",
-      "evidence": ["artifacts/tests/unit.xml"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-006": {
-      "name": "component",
-      "steps": [{ "script": "test:component", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-006.txt",
-      "evidence": ["artifacts/tests/component.xml"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-007": {
-      "name": "integration",
-      "steps": [{ "script": "test:integration", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-007.txt",
-      "evidence": ["artifacts/tests/integration.xml"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-008": {
-      "name": "e2e",
-      "steps": [{ "script": "test:e2e", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-008.txt",
-      "evidence": ["artifacts/tests/e2e/report/index.html"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-009": {
-      "name": "accessibility",
-      "steps": [
-        { "script": "test:a11y", "expect": "pass" },
-        { "script": "review:a11y-manual", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-009.txt",
-      "evidence": [
-        "artifacts/tests/a11y.json",
-        "artifacts/tests/a11y-manual/APP_HOME.md",
-        "artifacts/tests/a11y-manual/SAMPLE_RESOURCE_LIST.md",
-        "artifacts/tests/a11y-manual/NOT_FOUND.md",
-        "artifacts/tests/a11y-manual/report.json"
-      ],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-010": {
-      "name": "architecture",
-      "steps": [{ "script": "check:architecture", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-010.txt",
-      "evidence": ["artifacts/quality/dependency-report.json"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-011": {
-      "name": "build",
-      "steps": [{ "script": "build", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-011.txt",
-      "evidence": ["artifacts/release/build-manifest.json"],
-      "retentionClass": "release-coherence"
-    },
-    "FE-GATE-012": {
-      "name": "bundle",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        { "script": "check:bundle", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-012.txt",
-      "evidence": ["artifacts/performance/bundle.json"],
-      "retentionClass": "release-coherence"
-    },
-    "FE-GATE-013": {
-      "name": "security",
-      "steps": [
-        { "script": "build:release", "expect": "pass" },
-        { "script": "check:browser-security", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-013.txt",
-      "evidence": [
-        "artifacts/security/scan.sarif",
-        "artifacts/release/dependency-inventory.json",
-        "artifacts/security/dependency-diff.json"
-      ],
-      "retentionClass": "release-coherence"
-    },
-    "FE-GATE-014": {
-      "name": "config-compatibility",
-      "steps": [{ "script": "verify:compatibility", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-014.txt",
-      "evidence": ["artifacts/release/compatibility.json"],
-      "retentionClass": "release-coherence"
-    },
-    "FE-GATE-015": {
-      "name": "release-coherence",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        { "script": "verify:release", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-015.txt",
-      "evidence": ["artifacts/release/verification.json"],
-      "retentionClass": "release-coherence"
-    },
-    "FE-GATE-016": {
-      "name": "rollback-drill",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        {
-          "script": "drill:runbook",
-          "args": ["--", "FE-RB-005"],
-          "expect": "pass"
-        }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-016.txt",
-      "evidence": [
-        "artifacts/runbooks/FE-RB-005/local-release/record.json"
-      ],
-      "retentionClass": "prod-drill"
-    },
-    "FE-GATE-017": {
-      "name": "diagram-review",
-      "steps": [{ "script": "verify:documentation", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-017.txt",
-      "evidence": ["artifacts/quality/documentation-review.json"],
-      "retentionClass": "documentation"
-    },
-    "FE-GATE-018": {
-      "name": "field-web-vitals",
-      "requiresEnvironment": [
-        "FIELD_WEB_VITALS_INPUT",
-        "MIN_ELIGIBLE_SAMPLES"
-      ],
-      "steps": [
-        { "script": "collect:web-vitals-evidence", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-018.txt",
-      "evidence": ["artifacts/performance/field-web-vitals.json"],
-      "retentionClass": "field"
-    },
-    "FE-GATE-019": {
-      "name": "hosting-header",
-      "requiresEnvironment": ["HOSTING_BASE_URL"],
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        { "script": "verify:hosting-headers", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-019.txt",
-      "evidence": ["artifacts/release/hosting-headers.json"],
-      "retentionClass": "release-coherence"
-    },
-    "FE-GATE-020": {
-      "name": "sample-removal",
-      "steps": [{ "script": "test:sample-removal", "expect": "pass" }],
-      "logPath": "artifacts/quality/gates/FE-GATE-020.txt",
-      "evidence": ["artifacts/tests/sample-removal.xml"],
-      "retentionClass": "merge-cycle"
-    },
-    "FE-GATE-021": {
-      "name": "runbook-boot-config",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        {
-          "script": "drill:runbook",
-          "args": ["--", "FE-RB-001"],
-          "expect": "pass"
-        }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-021.txt",
-      "evidence": [
-        "artifacts/runbooks/FE-RB-001/local-release/record.json"
-      ],
-      "retentionClass": "prod-drill"
-    },
-    "FE-GATE-022": {
-      "name": "runbook-chunk-mismatch",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        {
-          "script": "drill:runbook",
-          "args": ["--", "FE-RB-002"],
-          "expect": "pass"
-        }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-022.txt",
-      "evidence": [
-        "artifacts/runbooks/FE-RB-002/local-release/record.json"
-      ],
-      "retentionClass": "prod-drill"
-    },
-    "FE-GATE-023": {
-      "name": "runbook-api-degradation",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        {
-          "script": "drill:runbook",
-          "args": ["--", "FE-RB-003"],
-          "expect": "pass"
-        }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-023.txt",
-      "evidence": [
-        "artifacts/runbooks/FE-RB-003/local-release/record.json"
-      ],
-      "retentionClass": "prod-drill"
-    },
-    "FE-GATE-024": {
-      "name": "runbook-telemetry",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        {
-          "script": "drill:runbook",
-          "args": ["--", "FE-RB-004"],
-          "expect": "pass"
-        }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-024.txt",
-      "evidence": [
-        "artifacts/runbooks/FE-RB-004/local-release/record.json"
-      ],
-      "retentionClass": "prod-drill"
-    },
-    "FE-GATE-025": {
-      "name": "runbook-release-rollback",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        {
-          "script": "drill:runbook",
-          "args": ["--", "FE-RB-005"],
-          "expect": "pass"
-        }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-025.txt",
-      "evidence": [
-        "artifacts/runbooks/FE-RB-005/local-release/record.json"
-      ],
-      "retentionClass": "prod-drill"
-    },
-    "FE-GATE-026": {
-      "name": "lab-performance",
-      "steps": [
-        { "script": "build", "expect": "pass" },
-        { "script": "test:performance", "expect": "pass" }
-      ],
-      "logPath": "artifacts/quality/gates/FE-GATE-026.txt",
-      "evidence": ["artifacts/performance/lab.json"],
-      "retentionClass": "release-coherence"
-    }
-  },
-  "retention": {
-    "durationStatus": "UNSUPPORTED_PENDING_ORGANIZATION_POLICY",
-    "merge-cycle": "at least through pull-request readiness decision",
-    "release-coherence": "at least until the next release is promoted",
-    "prod-drill": "at least until the next production promotion decision",
-    "field": "through the 28-day window and aggregation",
-    "documentation": "through documentation readiness review"
-  }
-}
@@ -1,63 +0,0 @@
-{
-  "schemaVersion": 1,
-  "families": {
-    "api": {
-      "additive": {
-        "before": { "required": ["id"], "properties": { "id": {} } },
-        "after": {
-          "required": ["id"],
-          "properties": { "id": {}, "displayName": {} }
-        }
-      },
-      "breaking": {
-        "before": { "required": ["id"], "properties": { "id": {} } },
-        "after": {
-          "required": ["id", "name"],
-          "properties": { "id": {}, "name": {} }
-        }
-      }
-    },
-    "config": {
-      "additive": {
-        "before": { "required": ["APP_ENV"], "properties": { "APP_ENV": {} } },
-        "after": {
-          "required": ["APP_ENV"],
-          "properties": { "APP_ENV": {}, "OPTIONAL_FLAG": {} }
-        }
-      },
-      "breaking": {
-        "before": { "required": ["APP_ENV"], "properties": { "APP_ENV": {} } },
-        "after": {
-          "required": ["APP_ENV", "NEW_REQUIRED"],
-          "properties": { "APP_ENV": {}, "NEW_REQUIRED": {} }
-        }
-      }
-    },
-    "storage": {
-      "additive": {
-        "before": { "properties": { "theme": {} } },
-        "after": { "properties": { "theme": {}, "contrast": {} } }
-      },
-      "breaking": {
-        "before": { "properties": { "theme": {} } },
-        "after": { "properties": {} }
-      }
-    },
-    "release": {
-      "additive": {
-        "before": { "required": ["buildId"], "properties": { "buildId": {} } },
-        "after": {
-          "required": ["buildId"],
-          "properties": { "buildId": {}, "builtAt": {} }
-        }
-      },
-      "breaking": {
-        "before": { "required": ["buildId"], "properties": { "buildId": {} } },
-        "after": {
-          "required": ["buildId", "assetManifestHash"],
-          "properties": { "buildId": {}, "assetManifestHash": {} }
-        }
-      }
-    }
-  }
-}
@@ -1,116 +0,0 @@
-{
-  "schemaVersion": 1,
-  "registries": [
-    {
-      "registryId": "FE-REG-ROUTE",
-      "path": "src/contracts/routes.js",
-      "exportName": "ROUTE_REGISTRY",
-      "owner": "feature-routing-navigation-guard-contract",
-      "requiredFields": [
-        "routeId",
-        "path",
-        "paramsSchema",
-        "searchSchema",
-        "access",
-        "loadingSurface",
-        "errorSurface",
-        "chunkId"
-      ]
-    },
-    {
-      "registryId": "FE-REG-API",
-      "path": "src/contracts/api-operations.js",
-      "exportName": "API_OPERATIONS",
-      "owner": "feature-api-client-response-envelope-contract",
-      "requiredFields": [
-        "method",
-        "path",
-        "operationId",
-        "auth",
-        "timeoutMs",
-        "idempotency",
-        "requestSchema",
-        "responseSchema",
-        "owner"
-      ]
-    },
-    {
-      "registryId": "FE-REG-ENV",
-      "path": "src/contracts/env.js",
-      "exportName": "ENV_REGISTRY",
-      "owner": "feature-frontend-env-runtime-config-contract",
-      "requiredFields": ["phase", "classification", "required", "defaultValue"]
-    },
-    {
-      "registryId": "FE-REG-STORAGE",
-      "path": "src/contracts/storage-keys.js",
-      "exportName": "STORAGE_REGISTRY",
-      "owner": "feature-frontend-storage-registry-contract",
-      "requiredFields": [
-        "logicalName",
-        "physicalKey",
-        "backend",
-        "classification",
-        "schemaVersion",
-        "ttl",
-        "migration",
-        "quotaFallback"
-      ]
-    },
-    {
-      "registryId": "FE-REG-ERROR",
-      "path": "src/contracts/errors.js",
-      "exportName": "ERROR_REGISTRY",
-      "owner": "feature-frontend-error-classification-boundary-contract",
-      "requiredFields": [
-        "kind",
-        "defaultRetryable",
-        "severity",
-        "userMessageKey",
-        "action",
-        "telemetryEvent",
-        "redaction"
-      ]
-    },
-    {
-      "registryId": "FE-REG-QUERY",
-      "path": "src/contracts/query-keys.js",
-      "exportName": "QUERY_REGISTRY",
-      "owner": "feature-server-state-caching-contract",
-      "requiredFields": [
-        "namespace",
-        "serialization",
-        "identity",
-        "invalidation",
-        "version",
-        "persistence"
-      ]
-    },
-    {
-      "registryId": "FE-REG-TELEMETRY",
-      "path": "src/contracts/telemetry.js",
-      "exportName": "TELEMETRY_REGISTRY",
-      "owner": "feature-frontend-observability-logging-trace-contract",
-      "requiredFields": [
-        "eventName",
-        "trigger",
-        "requiredAttributes",
-        "optionalAttributes",
-        "forbiddenAttributes",
-        "sampling",
-        "delivery"
-      ]
-    },
-    {
-      "registryId": "FE-REG-RELEASE",
-      "path": "src/contracts/release-tokens.js",
-      "exportName": "RELEASE_TOKEN_REGISTRY",
-      "owner": "feature-frontend-release-cache-rollback-contract",
-      "requiredFields": ["token", "source", "compatibilityRole"]
-    }
-  ],
-  "compatibilityImpact": {
-    "allowed": ["none", "additive", "behavior-change", "breaking"],
-    "current": "additive"
-  }
-}
@@ -1,31 +0,0 @@
-{
-  "schemaVersion": 1,
-  "surfaces": {
-    "index": {
-      "path": "/",
-      "cacheControl": "no-cache",
-      "securityHeaders": true
-    },
-    "runtimeConfig": {
-      "path": "/config.json",
-      "cacheControl": "no-store",
-      "securityHeaders": true
-    },
-    "releaseManifest": {
-      "path": "/release-manifest.json",
-      "cacheControl": "no-store",
-      "securityHeaders": true
-    },
-    "hashedAsset": {
-      "pathPattern": "/assets/*",
-      "cacheControl": "public, max-age=31536000, immutable",
-      "securityHeaders": false
-    },
-    "sourceMap": {
-      "public": false
-    },
-    "serviceWorker": {
-      "enabled": false
-    }
-  }
-}
@@ -1,35 +0,0 @@
-{
-  "schemaVersion": 1,
-  "responses": {
-    "index": {
-      "cache-control": "no-cache",
-      "content-security-policy": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self' https:; font-src 'self'; upgrade-insecure-requests",
-      "strict-transport-security": "max-age=31536000; includeSubDomains",
-      "x-frame-options": "DENY",
-      "referrer-policy": "strict-origin-when-cross-origin",
-      "x-content-type-options": "nosniff",
-      "permissions-policy": "camera=(), microphone=(), geolocation=()"
-    },
-    "runtimeConfig": {
-      "cache-control": "no-store",
-      "content-security-policy": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self' https:; font-src 'self'; upgrade-insecure-requests",
-      "strict-transport-security": "max-age=31536000; includeSubDomains",
-      "x-frame-options": "DENY",
-      "referrer-policy": "strict-origin-when-cross-origin",
-      "x-content-type-options": "nosniff",
-      "permissions-policy": "camera=(), microphone=(), geolocation=()"
-    },
-    "releaseManifest": {
-      "cache-control": "no-store",
-      "content-security-policy": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self' https:; font-src 'self'; upgrade-insecure-requests",
-      "strict-transport-security": "max-age=31536000; includeSubDomains",
-      "x-frame-options": "DENY",
-      "referrer-policy": "strict-origin-when-cross-origin",
-      "x-content-type-options": "nosniff",
-      "permissions-policy": "camera=(), microphone=(), geolocation=()"
-    },
-    "hashedAsset": {
-      "cache-control": "public, max-age=31536000, immutable"
-    }
-  }
-}
@@ -1,11 +0,0 @@
-{
-  "schemaVersion": 1,
-  "headers": {
-    "Content-Security-Policy": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self' https:; font-src 'self'; upgrade-insecure-requests",
-    "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
-    "X-Frame-Options": "DENY",
-    "Referrer-Policy": "strict-origin-when-cross-origin",
-    "X-Content-Type-Options": "nosniff",
-    "Permissions-Policy": "camera=(), microphone=(), geolocation=()"
-  }
-}
@@ -1,18 +0,0 @@
-{
-  "schemaVersion": 1,
-  "bundle": {
-    "initialJsGzipBytes": 204800,
-    "lazyChunkGzipBytes": 122880
-  },
-  "lab": {
-    "lcpMs": 2500,
-    "cls": 0.1,
-    "namedInteractionMs": 200
-  },
-  "field": {
-    "p75LcpMs": 2500,
-    "p75Cls": 0.1,
-    "p75InpMs": 200,
-    "minimumEligibleSamples": null
-  }
-}
@@ -1,5 +0,0 @@
-{
-  "schemaVersion": 1,
-  "releaseId": "local-release",
-  "samples": []
-}
@@ -1,77 +0,0 @@
-{
-  "schemaVersion": 1,
-  "fixtures": [
-    {
-      "name": "coherent-release",
-      "expectedCompatible": true,
-      "frontend": {
-        "buildId": "build-a",
-        "configSchemaVersion": "1.0",
-        "apiContractVersion": "1.0",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      },
-      "runtime": {
-        "buildId": "build-a",
-        "configSchemaVersion": "1.1",
-        "apiContractVersion": "1.2",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      }
-    },
-    {
-      "name": "mixed-html-and-assets",
-      "expectedCompatible": false,
-      "frontend": {
-        "buildId": "build-a",
-        "configSchemaVersion": "1.0",
-        "apiContractVersion": "1.0",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      },
-      "runtime": {
-        "buildId": "build-b",
-        "configSchemaVersion": "1.0",
-        "apiContractVersion": "1.0",
-        "assetManifestHash": "assets-b",
-        "releaseId": "release-b"
-      }
-    },
-    {
-      "name": "incompatible-runtime-config",
-      "expectedCompatible": false,
-      "frontend": {
-        "buildId": "build-a",
-        "configSchemaVersion": "1.0",
-        "apiContractVersion": "1.0",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      },
-      "runtime": {
-        "buildId": "build-a",
-        "configSchemaVersion": "2.0",
-        "apiContractVersion": "1.0",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      }
-    },
-    {
-      "name": "incompatible-api-contract",
-      "expectedCompatible": false,
-      "frontend": {
-        "buildId": "build-a",
-        "configSchemaVersion": "1.0",
-        "apiContractVersion": "1.0",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      },
-      "runtime": {
-        "buildId": "build-a",
-        "configSchemaVersion": "1.0",
-        "apiContractVersion": "2.0",
-        "assetManifestHash": "assets-a",
-        "releaseId": "release-a"
-      }
-    }
-  ]
-}
@@ -1,93 +0,0 @@
-{
-  "schemaVersion": 1,
-  "runbooks": {
-    "FE-RB-001": {
-      "title": "Boot configuration failure",
-      "gateId": "FE-GATE-021",
-      "triggerKinds": ["BOOT_CONFIG_FAILURE"],
-      "containment": "stop product route mount, show the safe support shell, and refetch at most once",
-      "window": "owner triage planned-default 5m",
-      "escalation": ["env-config owner", "release owner"],
-      "recoveryEvidence": [
-        "clean-session boot",
-        "product root mount",
-        "config validation",
-        "no repeated boot error"
-      ],
-      "negativeFixture": "a valid config followed by an injected mount failure must fail recovery"
-    },
-    "FE-RB-002": {
-      "title": "Chunk, manifest, or deployment mismatch",
-      "gateId": "FE-GATE-022",
-      "triggerKinds": [
-        "CHUNK_LOAD_FAILURE",
-        "RELEASE_MANIFEST_FAILURE",
-        "DEPLOY_MISMATCH"
-      ],
-      "containment": "warn for dirty state, fetch manifest no-store once, and allow one guarded reload",
-      "window": "release owner triage planned-default 5m",
-      "escalation": ["release-cache owner", "hosting/CDN owner"],
-      "recoveryEvidence": [
-        "entry and lazy assets reachable",
-        "release tuple coherent",
-        "second reload blocked",
-        "critical route smoke"
-      ],
-      "negativeFixture": "a second failure for the same release pair must not reload"
-    },
-    "FE-RB-003": {
-      "title": "Backend API degradation",
-      "gateId": "FE-GATE-023",
-      "triggerKinds": [
-        "TERMINAL_NETWORK_RATE",
-        "REQUEST_TIMEOUT_RATE",
-        "SERVER_FAILURE_RATE",
-        "SCHEMA_MISMATCH"
-      ],
-      "containment": "do not expand retry caps, serve safe stale reads, and never retry an unkeyed mutation",
-      "window": "rolling 5m trigger; first classification planned-default 10m",
-      "escalation": [
-        "api-client owner",
-        "backend operation owner",
-        "release compatibility owner"
-      ],
-      "recoveryEvidence": [
-        "terminal failure rate at baseline",
-        "no retry amplification",
-        "critical read/write smoke",
-        "schema fixtures"
-      ],
-      "negativeFixture": "an unkeyed POST receiving 503 must not retry"
-    },
-    "FE-RB-004": {
-      "title": "Telemetry sink failure",
-      "gateId": "FE-GATE-024",
-      "triggerKinds": ["TELEMETRY_FAILURE"],
-      "containment": "keep product flow available, bound the queue, and never report recursively to the failing sink",
-      "window": "platform triage planned-default 15m",
-      "escalation": ["observability owner", "telemetry platform owner"],
-      "recoveryEvidence": [
-        "product flow unaffected",
-        "delivery self-check",
-        "queue drained within bound",
-        "forbidden attributes absent"
-      ],
-      "negativeFixture": "raw URL and query data must be removed from telemetry"
-    },
-    "FE-RB-005": {
-      "title": "Coherent release rollback",
-      "gateId": "FE-GATE-025",
-      "triggerKinds": ["RELEASE_BLOCKING_DEFECT"],
-      "containment": "select a prior immutable tuple, verify asset/config/API compatibility, atomically switch, and smoke",
-      "window": "provider recovery target TBD",
-      "escalation": ["release-cache owner", "release approver/hosting owner"],
-      "recoveryEvidence": [
-        "compatibility gate",
-        "release coherence gate",
-        "critical smoke",
-        "release ID in incident timeline"
-      ],
-      "negativeFixture": "HTML build A with asset manifest B must be rejected"
-    }
-  }
-}
@@ -1,34 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "ART-FE-FIELD-WEB-VITALS@1",
-  "type": "object",
-  "required": [
-    "schemaVersion",
-    "generatedAt",
-    "window",
-    "context",
-    "metrics",
-    "eligibility",
-    "status",
-    "passed"
-  ],
-  "properties": {
-    "schemaVersion": { "const": 1 },
-    "generatedAt": { "type": "string", "format": "date-time" },
-    "window": { "type": "object", "required": ["days", "start", "end"] },
-    "context": {
-      "type": "object",
-      "required": ["source", "network", "routeAggregation", "releaseId"]
-    },
-    "metrics": { "type": "object" },
-    "eligibility": {
-      "type": "object",
-      "required": ["consentRequired", "eligibleSamples", "minimumEligibleSamples"]
-    },
-    "status": {
-      "enum": ["PASS", "FAIL_THRESHOLD", "FAIL_UNVERIFIED"]
-    },
-    "passed": { "type": "boolean" }
-  },
-  "additionalProperties": false
-}
@@ -1,30 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "ART-FE-LAB@1",
-  "type": "object",
-  "required": [
-    "schemaVersion",
-    "generatedAt",
-    "context",
-    "metrics",
-    "thresholds",
-    "fixtures",
-    "passed"
-  ],
-  "properties": {
-    "schemaVersion": { "const": 1 },
-    "generatedAt": { "type": "string", "format": "date-time" },
-    "context": {
-      "type": "object",
-      "required": ["runner", "browser", "viewport", "network", "cpu", "cache", "build"]
-    },
-    "metrics": {
-      "type": "object",
-      "required": ["lcpMs", "cls", "namedInteractionMs"]
-    },
-    "thresholds": { "type": "object" },
-    "fixtures": { "type": "array", "minItems": 2 },
-    "passed": { "type": "boolean" }
-  },
-  "additionalProperties": false
-}
@@ -1,17 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "ART-FE-003@1",
-  "type": "object",
-  "required": ["schemaVersion", "generatedAt", "artifact", "fixtures", "passed"],
-  "properties": {
-    "schemaVersion": { "const": 1 },
-    "generatedAt": { "type": "string", "format": "date-time" },
-    "artifact": {
-      "type": "object",
-      "required": ["checked", "compatible", "mismatches"]
-    },
-    "fixtures": { "type": "array", "minItems": 2 },
-    "passed": { "type": "boolean" }
-  },
-  "additionalProperties": false
-}
@@ -1,42 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "ART-FE-RUNBOOK-DRILL@1",
-  "type": "object",
-  "required": [
-    "schemaVersion",
-    "runbookId",
-    "releaseId",
-    "drillTimestamp",
-    "triggerInjected",
-    "triggerAsserted",
-    "containmentAsserted",
-    "escalationPathAsserted",
-    "recoveryAssertions",
-    "negativeFixtureFailedAsExpected",
-    "windowObservedBucket",
-    "passed"
-  ],
-  "properties": {
-    "schemaVersion": { "const": 1 },
-    "runbookId": { "pattern": "^FE-RB-00[1-5]$" },
-    "releaseId": { "type": "string", "minLength": 1 },
-    "drillTimestamp": { "type": "string", "format": "date-time" },
-    "triggerInjected": { "type": "string" },
-    "triggerAsserted": { "type": "boolean" },
-    "containmentAsserted": { "type": "boolean" },
-    "escalationPathAsserted": { "type": "boolean" },
-    "recoveryAssertions": {
-      "type": "array",
-      "minItems": 4,
-      "items": {
-        "type": "object",
-        "required": ["assertion", "evidence", "passed"]
-      }
-    },
-    "negativeFixtureFailedAsExpected": { "type": "boolean" },
-    "windowObservedBucket": { "type": "string" },
-    "providerVerificationRequired": { "type": "boolean" },
-    "passed": { "type": "boolean" }
-  },
-  "additionalProperties": false
-}
@@ -1,17 +1,47 @@
 # Manual accessibility review checklist

 Automated axe checks do not establish WCAG conformance. A human reviewer must
-copy this checklist to `artifacts/tests/a11y-manual/<route-id>.md`, execute it
-on the release candidate, and sign it.
+review all three route records in `artifacts/tests/a11y-manual/` against one
+release candidate and sign them. Copy the template fields exactly; the gate
+rejects blank identity/timestamp/signature fields, pending verdicts, mismatched
+release IDs, or missing routes.

- Status: `pending` or `reviewed`
- Reviewer and reviewed-at timestamp
- Keyboard: all actions reachable in logical order
- Focus: visible, route changes deterministic, modal restore verified
- Screen reader: headings, live regions, errors, and actions announced once
- Reduced motion: non-essential animation suppressed
- Color signal: every state has text/icon/structure in addition to color
- Notes and linked defect IDs
+Allowed item verdicts:

-Passing the automated threshold means only that the tested pages had zero
-critical/serious axe findings under the recorded browser run.
+- `pass`
+- `not-applicable (<specific reason>)`
+
+Required record:
+
+```text
+Status: reviewed
+Route ID: APP_HOME
+Release ID: <immutable release ID>
+Reviewer: <human reviewer identity>
+Reviewed at: <RFC 3339 timestamp>
+Signature: <reviewer identity or approved signature reference>
+Attestation: accepted
+M1 Keyboard: pass
+M2 Visible focus: pass
+M3 Route focus: pass
+M4 Modal focus: not-applicable (no modal on this route)
+M5 Error association: not-applicable (no form error on this route)
+M6 Color signal: pass
+M7 Reduced motion: pass
+Screen reader: pass
+Notes: <observations and linked defect IDs>
+```
+
+The reviewer must verify:
+
+- M1: every action works without a pointing device
+- M2: every focused element has a visible indicator
+- M3: route transitions move focus to a deterministic target
+- M4: modal focus is trapped and restored, when a modal exists
+- M5: errors are programmatically associated with their controls, when present
+- M6: state never relies on color alone
+- M7: non-essential motion is suppressed with reduced-motion preference
+- Screen reader: headings, live regions, errors, and actions are announced once
+
+Passing automated evidence means only that tested pages had no critical or
+serious axe findings under the recorded browser run.
@@ -1,23 +0,0 @@
-# Architecture overview
-
-This Mermaid view is a repository-local implementation projection. The
-`PASS_SCOPED` reviewer evidence applies to the canonical draw.io diagram named
-in `review-ledger.json`, not automatically to edits in this file.
-
-```mermaid
-flowchart LR
-  Bootstrap[bootstrap / composition root] --> Presentation[presentation]
-  Bootstrap --> Adapters[adapters]
-  Presentation --> Application[application]
-  Adapters --> Application
-  Application --> Domain[domain]
-  Contracts[contract registries] --> Bootstrap
-  Contracts --> Adapters
-  Contracts --> Presentation
-```
-
-Dependencies point inward. Presentation calls application use cases, adapters
-implement application ports, and only the composition root selects concrete
-adapters. Contract registries are the single named source for routes, API
-operations, environment values, storage keys, errors, queries, telemetry, and
-release tokens.
@@ -1,22 +0,0 @@
-# Imported scoped diagram review evidence
-
-This ledger entry consumes the canonical evidence already recorded by the
-`ca-skeleton-frontend-operational-contract` project note. It does not claim
-review of the repository-local Mermaid projections or of the complete
-production deployment topology.
-
- Reviewer: `wiki-diagram-reviewer`
- Standard: `rules/diagram-standards.md` v2
- Canonical report:
-  `docs/superpowers/specs/2026-07-18-ca-skeleton-frontend-operational-contract-review/diagram-review.md`
- Canonical report SHA-256:
-  `b4d2a35e4f07e176717786408f98dab5cee1047f77f6ff61f5faeddfccd78a29`
-
-| Canonical diagram | SHA-256 | Score | Verdict | Reviewed scope |
-| --- | --- | ---: | --- | --- |
-| `raw/diagrams/ca-skeleton-frontend/architecture-overview-2026-07-18.drawio` | `c0ae56c9c964c5c6e698ab7dcc91736b9b811b2b834381817905db81c4230ba0` | 100 | PASS | Clean Architecture compile-time dependency ownership |
-| `raw/diagrams/ca-skeleton-frontend/architecture-deployment-2026-07-18.drawio` | `9a654326fb840ddf24b832221ff7eec4b8fadd9f87ad84174fccfa3bfcd1a25b` | 100 | PASS | immutable static assets and mutable `/config.json` delivery |
-
-The canonical report explicitly limits this `PASS_SCOPED`: it does not verify
-the complete release/rollback topology, the implementation topology, or live
-hosting state.
@@ -1,29 +0,0 @@
-{
-  "schemaVersion": 1,
-  "status": "PASS_SCOPED",
-  "reviewer": "wiki-diagram-reviewer",
-  "standard": "rules/diagram-standards.md v2",
-  "evidenceReport": {
-    "repoPath": "docs/architecture/review-evidence.md",
-    "canonicalPath": "docs/superpowers/specs/2026-07-18-ca-skeleton-frontend-operational-contract-review/diagram-review.md",
-    "canonicalSha256": "b4d2a35e4f07e176717786408f98dab5cee1047f77f6ff61f5faeddfccd78a29"
-  },
-  "reviews": {
-    "overview": {
-      "sourcePath": "raw/diagrams/ca-skeleton-frontend/architecture-overview-2026-07-18.drawio",
-      "sha256": "c0ae56c9c964c5c6e698ab7dcc91736b9b811b2b834381817905db81c4230ba0",
-      "score": 100,
-      "verdict": "PASS",
-      "thresholdSatisfied": true,
-      "scope": "Clean Architecture compile-time dependency ownership"
-    },
-    "staticDelivery": {
-      "sourcePath": "raw/diagrams/ca-skeleton-frontend/architecture-deployment-2026-07-18.drawio",
-      "sha256": "9a654326fb840ddf24b832221ff7eec4b8fadd9f87ad84174fccfa3bfcd1a25b",
-      "score": 100,
-      "verdict": "PASS",
-      "thresholdSatisfied": true,
-      "scope": "immutable static assets and mutable /config.json delivery"
-    }
-  }
-}
@@ -1,25 +0,0 @@
-# Static asset and runtime-config delivery
-
-This Mermaid view is a repository-local implementation projection. The
-`PASS_SCOPED` reviewer evidence applies only to the canonical static-delivery
-draw.io scope recorded in `review-ledger.json`.
-
-```mermaid
-sequenceDiagram
-  participant CI
-  participant ImmutableRelease
-  participant ActivePointer
-  participant Browser
-  CI->>ImmutableRelease: upload hashed assets
-  CI->>ImmutableRelease: upload release manifest
-  CI->>ImmutableRelease: upload runtime config
-  CI->>ImmutableRelease: probe asset reachability
-  CI->>ActivePointer: atomically switch HTML
-  Browser->>ActivePointer: fetch revalidated HTML
-  Browser->>ImmutableRelease: fetch no-store config and manifest
-  Browser->>ImmutableRelease: fetch immutable hashed assets
-  CI->>Browser: boot, route, API, and reload-loop smoke
-```
-
-Rollback changes the active pointer only after confirming that the prior
-immutable release has a coherent HTML/assets/config/API/manifest tuple.
@@ -1,11 +0,0 @@
-# Contract compatibility and rollback rules
-
-The blocking tuple is `(buildId, configSchemaVersion, apiContractVersion,
-assetManifestHash, releaseId)`. Versions are parsed numerically.
-
-1. additive changes preserve current required fields
-2. breaking changes require a major version bump
-3. persisted cache is discarded unless an explicit tested migration exists
-4. an incompatible config or API contract blocks product mount
-5. rollback restores HTML, assets, runtime config, API compatibility, and
-   release manifest as one coherent set
@@ -1,41 +0,0 @@
-# CI quality-gate orchestration
-
-`config/ci/gates.json` is the executable registry for all 26 gates. The Gitea
-adapter runs each gate as an independent matrix check with full fan-out and no
-soft-fail wiring.
-
-The dependency graph is:
-
-```text
-MERGE_READY
-  -> RELEASE_READY
-    -> PROD_PROMOTION_READY
-      -> FIELD_SLO_READY
-
-DOCUMENTATION_READY (off-chain)
-```
-
-Pull requests and `develop` pushes evaluate merge readiness. Version tags
-evaluate merge then release readiness. Production and field evaluation require
-an explicit workflow dispatch. The field tier cannot pass until the 28-day
-sample threshold decision is recorded. Documentation readiness consumes the
-canonical project-note evidence in which both scoped diagrams already received
-100/100 `PASS_SCOPED`; the repo ledger preserves the evidence scope and
-canonical digests.
-
-All jobs upload the shared `artifacts/` tree even after failure. Numeric
-retention remains an organization/provider decision; the workflow intentionally
-does not invent `retention-days`. The relative minimums are recorded in the
-registry: merge evidence through the PR decision, coherent release evidence
-through the next release promotion, drill evidence through the next production
-promotion, and field evidence through aggregation.
-
-Repository variables required by higher tiers:
-
- `HOSTING_BASE_URL` for live header verification
- `FIELD_WEB_VITALS_INPUT` for the privacy-approved field sample document
- `MIN_ELIGIBLE_SAMPLES` after the baseline decision
-
-Branch protection must mark each `FE-GATE-* / <name>` check required for its
-declared tier. This repository cannot configure server-side protection by
-committing a file.
@@ -1,17 +0,0 @@
-# Performance evidence contract
-
-Performance evidence is deliberately split by measurement context:
-
- `bundle.json` records production build output and enforces initial JavaScript
-  at 200 KiB gzip and every lazy chunk at 120 KiB gzip.
- `lab.json` records Chromium/runner/viewport/network/CPU/cache/build context and
-  enforces LCP 2.5 s, CLS 0.10, and the named route interaction at 200 ms.
- `field-web-vitals.json` records consent-filtered, route-ID aggregated,
-  release-specific production samples over 28 days and evaluates p75 LCP, CLS,
-  and INP against 2.5 s, 0.10, and 200 ms.
-
-The field minimum eligible-sample threshold is intentionally unresolved until
-a privacy-approved telemetry baseline exists. Therefore the field command
-fails closed with `FAIL_UNVERIFIED` when run against the example input. Provide
-`FIELD_WEB_VITALS_INPUT` and a reviewed `MIN_ELIGIBLE_SAMPLES` only after that
-decision is recorded.
@@ -1,25 +0,0 @@
-# Release, cache, and rollback contract
-
-Each deployment is an immutable `releases/<releaseId>/` artifact set. The
-provider adapter must upload assets, release manifest, runtime config, and
-verify asset reachability before atomically switching the active HTML pointer.
-The post-switch boot, route, API, telemetry, and reload-loop smoke checks close
-the deployment.
-
-Rollback selects a prior release tuple, confirms its assets and runtime/API
-compatibility, atomically switches the complete set, performs the provider
-cache action, and repeats the smoke checks. Rebuilding an old commit, replacing
-HTML alone, or declaring recovery from cache-purge completion is prohibited.
-Recovery is established by old/new reachability probes.
-
-The provider-independent cache defaults are:
-
- hashed assets: `public, max-age=31536000, immutable`
- HTML: `no-cache`
- runtime config and release manifest: `no-store`
- public source maps: disabled
- service worker/offline cache: disabled
-
-`corepack pnpm verify:hosting-headers` uses a deterministic fixture locally.
-Set `HOSTING_BASE_URL` to probe deployed responses; production promotion
-requires the artifact to report `mode: "live"`.
@@ -1,9 +0,0 @@
-# FE-RB-001 — Boot configuration failure
-
-Trigger on `BOOT_CONFIG_FAILURE` after the single bounded refetch fails. Stop
-product route mounting and show the safe support shell; the planned owner
-triage target is five minutes. Escalate from the environment/config owner to
-the release owner.
-
-Close only after a clean-session boot mounts the product root, config
-validation evidence passes, and repeated boot-error telemetry is absent.
@@ -1,11 +0,0 @@
-# FE-RB-002 — Chunk or deployment mismatch
-
-Trigger on `CHUNK_LOAD_FAILURE`, `RELEASE_MANIFEST_FAILURE`, or
-`DEPLOY_MISMATCH`. Warn when dirty state may be lost, fetch the manifest
-`no-store` once, record the release pair, and allow only one reload. The
-planned release-owner triage target is five minutes. Escalate to the hosting/CDN
-owner.
-
-Close only after entry/lazy assets are reachable, the manifest parses into a
-coherent tuple, a second automatic reload is blocked, and the critical route
-smoke passes.
@@ -1,10 +0,0 @@
-# FE-RB-003 — Backend API degradation
-
-Trigger when terminal network/timeout/5xx failures exceed the rolling
-five-minute threshold or on one `SCHEMA_MISMATCH`. Do not expand client retry
-caps, do not retry schema mismatches, and never retry an unkeyed mutation.
-Escalate from the API client owner to backend operations and then release
-compatibility; the planned first-classification target is ten minutes.
-
-Close only after the failure rate returns to baseline, retry amplification is
-absent, critical read/write smoke passes, and schema fixtures pass.
@@ -1,9 +0,0 @@
-# FE-RB-004 — Telemetry sink failure
-
-Trigger on sink network/non-2xx errors, queue overflow, or adapter
-initialization failure. Keep product flows available, bound the queue, and do
-not recursively report to the failed sink. Escalate from observability to the
-telemetry platform owner; the planned triage target is fifteen minutes.
-
-Close only after product e2e remains unaffected, delivery self-check succeeds,
-the queue drains within its bound, and the forbidden-attribute scan passes.
@@ -1,13 +0,0 @@
-# FE-RB-005 — Coherent release rollback
-
-Trigger on a release-blocking boot, chunk, render, API, or security defect when
-a safe forward fix is not demonstrated inside the incident window. Select a
-prior immutable release, verify its asset/config/API tuple, atomically switch
-the complete set, perform the provider cache action, and run smoke checks.
-Escalate from the release-cache owner to the release approver/hosting owner.
-The provider recovery target remains TBD until hosting is selected.
-
-Close only when compatibility and release-coherence gates pass, critical smoke
-passes, repeated `DEPLOY_MISMATCH` is absent, and the incident timeline records
-the restored release ID. Pointer-switch or cache-purge completion alone is not
-recovery evidence.
@@ -1,13 +0,0 @@
-# Browser security boundary
-
-The browser bundle is public. Secrets, token lifecycle, raw HTML injection,
-dynamic code execution, untrusted script URLs, and public production source
-maps are prohibited defaults.
-
-`config/hosting/security-headers.json` is the declared header set. Hosting
-verification compares that declaration with live responses. CSP deliberately
-omits `unsafe-inline` and `unsafe-eval`; production code and built assets must
-remain compatible with that baseline.
-
-Route guards are UX hints and client validation does not replace backend
-authorization or validation.
@@ -1,18 +0,0 @@
-# Build and supply-chain gate
-
-Merge and release controls:
-
- frozen `pnpm-lock.yaml` installation; drift is blocking
- clean production build with hashed assets and build manifest
- machine-readable bundle sizes and checksums
- source plus built-asset credential-pattern scan
- direct dependency inventory and lockfile digest
- base/head dependency diff review record
-
-Organization-specific vulnerability severity, denied-license list, SBOM format,
-and scanner selection remain policy inputs. An approved suppression must record
-reason, owner, expiry, affected package, and compensating control. Expired
-suppressions are blocking.
-
-`artifacts/security/dependency-diff.json` is a local baseline. CI replaces it
-with the actual base/head direct and transitive lockfile diff before release.
@@ -35,7 +35,6 @@ export default [
      "artifacts/**",
      "tests/fixtures/typecheck/**",
      "tests/fixtures/architecture/forbidden/**",
-      "tests/fixtures/security/forbidden/**",
    ],
  },
  eslint.configs.recommended,
@@ -99,24 +98,4 @@ export default [
      ]),
    },
  },
-  {
-    files: ["**/*.{js,jsx}"],
-    rules: {
-      "no-eval": "error",
-      "no-new-func": "error",
-      "no-script-url": "error",
-      "no-restricted-syntax": [
-        "error",
-        {
-          selector: "JSXAttribute[name.name='dangerouslySetInnerHTML']",
-          message: "Raw HTML injection is prohibited by FE-OC-019.",
-        },
-        {
-          selector:
-            "CallExpression[callee.object.name='document'][callee.property.name='createElement'][arguments.0.value='script']",
-          message: "Runtime script construction is prohibited by FE-OC-019.",
-        },
-      ],
-    },
-  },
 ];
@@ -11,7 +11,6 @@
  "scripts": {
    "dev": "vite",
    "build": "vite build && node scripts/generate-build-manifest.mjs",
-    "build:release": "corepack pnpm build && corepack pnpm generate:supply-chain && corepack pnpm scan:security",
    "preview": "vite preview",
    "lint": "eslint src scripts tests vite.config.js vitest.config.js playwright.config.js --max-warnings=0",
    "check:architecture": "node scripts/check-architecture.mjs",
@@ -25,23 +24,7 @@
    "test:a11y": "playwright test --grep @a11y && node scripts/write-a11y-report.mjs",
    "review:a11y-manual": "node scripts/verify-a11y-manual.mjs",
    "test:sample-removal": "node scripts/test-sample-removal.mjs",
-    "test:all": "corepack pnpm test:runtime-schema && corepack pnpm test:unit && corepack pnpm test:component && corepack pnpm test:integration",
-    "verify:lockfile": "corepack pnpm install --frozen-lockfile",
-    "generate:supply-chain": "node scripts/generate-supply-chain.mjs",
-    "scan:security": "node scripts/security-scan.mjs",
-    "check:browser-security": "node scripts/check-browser-security.mjs",
-    "check:registries": "node scripts/check-registries.mjs",
-    "verify:compatibility": "node scripts/check-compatibility.mjs",
-    "verify:release": "node scripts/verify-release.mjs",
-    "verify:hosting-headers": "node scripts/verify-hosting-headers.mjs",
-    "check:bundle": "node scripts/generate-supply-chain.mjs && node scripts/check-bundle.mjs",
-    "test:performance": "node scripts/test-performance.mjs",
-    "collect:web-vitals-evidence": "node scripts/collect-web-vitals-evidence.mjs",
-    "drill:runbook": "node scripts/drill-runbook.mjs",
-    "drill:runbooks": "corepack pnpm drill:runbook -- FE-RB-001 && corepack pnpm drill:runbook -- FE-RB-002 && corepack pnpm drill:runbook -- FE-RB-003 && corepack pnpm drill:runbook -- FE-RB-004 && corepack pnpm drill:runbook -- FE-RB-005",
-    "ci:gate": "node scripts/run-ci-gate.mjs",
-    "check:ci": "node scripts/check-ci-contract.mjs",
-    "verify:documentation": "node scripts/verify-documentation-readiness.mjs"
+    "test:all": "pnpm test:runtime-schema && pnpm test:unit && pnpm test:component && pnpm test:integration"
  },
  "dependencies": {
    "@tanstack/react-query": "5.101.4",
@@ -1,11 +0,0 @@
-{
-  "schemaVersion": 1,
-  "appVersion": "0.1.0",
-  "buildId": "local-build",
-  "commitSha": "local",
-  "configSchemaVersion": "1",
-  "apiContractVersion": "1",
-  "assetManifestHash": "generated-during-build",
-  "releaseId": "local-release",
-  "builtAt": "1970-01-01T00:00:00.000Z"
-}
@@ -1,39 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "build-manifest.schema.json",
-  "type": "object",
-  "required": [
-    "schemaVersion",
-    "buildId",
-    "commitSha",
-    "generatedAt",
-    "buildContext",
-    "outputs"
-  ],
-  "properties": {
-    "schemaVersion": { "const": 1 },
-    "buildId": { "type": "string", "minLength": 1 },
-    "commitSha": { "type": "string", "minLength": 1 },
-    "generatedAt": { "type": "string", "format": "date-time" },
-    "buildContext": {
-      "type": "object",
-      "required": ["nodeVersion", "packageManagerVersion", "runnerImage"],
-      "properties": {
-        "nodeVersion": { "type": "string" },
-        "packageManagerVersion": { "type": "string" },
-        "runnerImage": { "type": "string" }
-      },
-      "additionalProperties": false
-    },
-    "outputs": {
-      "type": "object",
-      "required": ["directory", "viteManifest"],
-      "properties": {
-        "directory": { "type": "string" },
-        "viteManifest": { "type": "string" }
-      },
-      "additionalProperties": false
-    }
-  },
-  "additionalProperties": false
-}
@@ -1,29 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "type": "object",
-  "required": [
-    "schemaVersion",
-    "generatedAt",
-    "compatibilityImpact",
-    "failures",
-    "registries"
-  ],
-  "properties": {
-    "schemaVersion": { "const": 1 },
-    "generatedAt": { "type": "string", "format": "date-time" },
-    "compatibilityImpact": {
-      "enum": ["none", "additive", "behavior-change", "breaking"]
-    },
-    "failures": { "type": "array", "maxItems": 0 },
-    "registries": {
-      "type": "array",
-      "minItems": 8,
-      "maxItems": 8,
-      "items": {
-        "type": "object",
-        "required": ["registryId", "owner", "source", "rowCount", "rows"]
-      }
-    }
-  },
-  "additionalProperties": false
-}
@@ -1,42 +0,0 @@
-import { readdir } from "node:fs/promises";
-import { spawnSync } from "node:child_process";
-
-const pnpmCli = /** @type {string} */ (process.env.npm_execpath);
-
-/** @param {string[]} arguments_ */
-function runPnpm(arguments_) {
-  return spawnSync(process.execPath, [pnpmCli, ...arguments_], {
-    encoding: "utf8",
-  });
-}
-
-const allowed = runPnpm([
-  "exec",
-  "eslint",
-  "tests/fixtures/security/allowed",
-  "--no-ignore",
-  "--max-warnings=0",
-]);
-const forbidden = runPnpm([
-  "exec",
-  "eslint",
-  "tests/fixtures/security/forbidden",
-  "--no-ignore",
-  "--max-warnings=0",
-]);
-
-const distFiles = await readdir("dist", { recursive: true });
-const publicSourceMaps = distFiles.filter((file) => String(file).endsWith(".map"));
-
-if (allowed.status !== 0 || forbidden.status === 0 || publicSourceMaps.length > 0) {
-  process.stderr.write(allowed.stderr || allowed.stdout);
-  process.stderr.write(forbidden.stderr || forbidden.stdout);
-  if (publicSourceMaps.length > 0) {
-    process.stderr.write(`Public source maps found: ${publicSourceMaps.join(", ")}\n`);
-  }
-  process.exit(1);
-}
-
-process.stdout.write(
-  "Browser security fixtures: injection rejected, public source maps absent\n",
-);
@@ -1,93 +0,0 @@
-import { readFile, writeFile } from "node:fs/promises";
-
-import { evaluateBundleBudget } from "../src/application/policies/performance-budgets.js";
-
-const report =
-  /** @type {{
-   *   outputs: Array<{ path: string, gzipBytes: number }>,
-   *   [key: string]: unknown
-   * }} */ (
-    JSON.parse(await readFile("artifacts/performance/bundle.json", "utf8"))
-  );
-const viteManifest =
-  /** @type {Record<string, { file: string, isEntry?: boolean }>} */ (
-    JSON.parse(await readFile("dist/.vite/manifest.json", "utf8"))
-  );
-const budgets =
-  /** @type {{ initialJsGzipBytes: number, lazyChunkGzipBytes: number }} */ (
-    JSON.parse(await readFile("config/performance/budgets.json", "utf8")).bundle
-  );
-
-const outputByPath = new Map(
-  report.outputs.map((output) => [output.path.replace(/^dist\//, ""), output]),
-);
-const initialFiles = new Set(
-  Object.values(viteManifest)
-    .filter((entry) => entry.isEntry)
-    .map((entry) => entry.file),
-);
-const lazyFiles = new Set(
-  Object.values(viteManifest)
-    .filter((entry) => !entry.isEntry && entry.file.endsWith(".js"))
-    .map((entry) => entry.file),
-);
-const initialJsGzipBytes = [...initialFiles].reduce(
-  (total, file) => total + (outputByPath.get(file)?.gzipBytes ?? 0),
-  0,
-);
-const lazyChunks = [...lazyFiles].map((file) => ({
-  path: file,
-  gzipBytes: outputByPath.get(file)?.gzipBytes ?? 0,
-}));
-const measurements = { initialJsGzipBytes, lazyChunks };
-const result = evaluateBundleBudget(measurements, budgets);
-const fixtures = [
-  {
-    name: "initial-js-over-budget",
-    passed:
-      !evaluateBundleBudget(
-        {
-          initialJsGzipBytes: budgets.initialJsGzipBytes + 1,
-          lazyChunks: [],
-        },
-        budgets,
-      ).passed,
-  },
-  {
-    name: "lazy-chunk-over-budget",
-    passed:
-      !evaluateBundleBudget(
-        {
-          initialJsGzipBytes: 0,
-          lazyChunks: [
-            {
-              path: "fixture.js",
-              gzipBytes: budgets.lazyChunkGzipBytes + 1,
-            },
-          ],
-        },
-        budgets,
-      ).passed,
-  },
-];
-const passed = result.passed && fixtures.every((fixture) => fixture.passed);
-const completedReport = {
-  ...report,
-  measurements,
-  thresholds: budgets,
-  results: result,
-  fixtures,
-  passed,
-};
-
-await writeFile(
-  "artifacts/performance/bundle.json",
-  `${JSON.stringify(completedReport, null, 2)}\n`,
-);
-if (!passed) {
-  process.stderr.write("Bundle budget exceeded.\n");
-  process.exit(1);
-}
-process.stdout.write(
-  `Bundle budget: PASS (initial JS ${initialJsGzipBytes} / ${budgets.initialJsGzipBytes} gzip bytes)\n`,
-);
@@ -1,111 +0,0 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-
-import {
-  evaluatePromotionReadiness,
-  PROMOTION_FORMULA,
-} from "../src/application/policies/promotion-readiness.js";
-
-const document = JSON.parse(await readFile("config/ci/gates.json", "utf8"));
-const workflow = await readFile(document.providerAdapter, "utf8");
-const failures = [];
-const stageFormula = {
-  merge: PROMOTION_FORMULA.MERGE_READY,
-  release: PROMOTION_FORMULA.RELEASE_READY,
-  production: PROMOTION_FORMULA.PROD_PROMOTION_READY,
-  field: PROMOTION_FORMULA.FIELD_SLO_READY,
-  documentation: PROMOTION_FORMULA.DOCUMENTATION_READY,
-};
-
-for (const [stage, expectedGates] of Object.entries(stageFormula)) {
-  const actual = document.stages[stage]?.gates;
-  if (JSON.stringify(actual) !== JSON.stringify(expectedGates)) {
-    failures.push(`${stage} gate formula drift`);
-  }
-}
-
-const configuredGateIds = Object.keys(document.gates).sort();
-const expectedGateIds = Array.from(
-  { length: 26 },
-  (_, index) => `FE-GATE-${String(index + 1).padStart(3, "0")}`,
-);
-if (JSON.stringify(configuredGateIds) !== JSON.stringify(expectedGateIds)) {
-  failures.push("gate registry must contain FE-GATE-001..026 exactly once");
-}
-
-for (const [gateId, gate] of Object.entries(document.gates)) {
-  if (!gate.steps?.length || !gate.evidence?.length || !gate.retentionClass) {
-    failures.push(`${gateId} lacks command, evidence, or retention wiring`);
-  }
-}
-
-const forbiddenWorkflowPatterns = [
-  /continue-on-error\s*:/,
-  /retention-days\s*:/,
-  /allow_failure\s*:/,
-];
-for (const pattern of forbiddenWorkflowPatterns) {
-  if (pattern.test(workflow)) {
-    failures.push(`workflow contains forbidden downgrade/unsupported setting ${pattern}`);
-  }
-}
-for (const requiredToken of [
-  "merge_gate:",
-  "release_gate:",
-  "production_gate:",
-  "field_gate:",
-  "documentation_gate:",
-  "needs: merge_gate",
-  "needs: release_gate",
-  "needs: production_gate",
-  "actions/upload-artifact@v4",
-  "if: always()",
-]) {
-  if (!workflow.includes(requiredToken)) {
-    failures.push(`workflow missing ${requiredToken}`);
-  }
-}
-
-const passingResults = Object.fromEntries(
-  expectedGateIds.map((gateId) => [gateId, /** @type {const} */ ("PASS")]),
-);
-const allPass = evaluatePromotionReadiness(passingResults);
-const negativeFixtures = [];
-for (const [readiness, gateIds] of Object.entries(PROMOTION_FORMULA)) {
-  const failedGate = gateIds[0];
-  const result = evaluatePromotionReadiness({
-    ...passingResults,
-    [failedGate]: "FAIL",
-  });
-  const passed =
-    /** @type {Readonly<Record<string, boolean>>} */ (result)[readiness] ===
-    false;
-  negativeFixtures.push({ readiness, failedGate, passed });
-  if (!passed) failures.push(`${readiness} did not fail closed`);
-}
-if (!Object.values(allPass).every(Boolean)) {
-  failures.push("all-PASS formula did not produce every readiness state");
-}
-
-const report = {
-  schemaVersion: 1,
-  generatedAt: new Date().toISOString(),
-  providerAdapter: document.providerAdapter,
-  gateCount: configuredGateIds.length,
-  noDowngrade: failures.every(
-    (failure) => !failure.includes("downgrade"),
-  ),
-  durationStatus: document.retention.durationStatus,
-  negativeFixtures,
-  failures,
-  passed: failures.length === 0,
-};
-await mkdir("artifacts/quality", { recursive: true });
-await writeFile(
-  "artifacts/quality/ci-contract.json",
-  `${JSON.stringify(report, null, 2)}\n`,
-);
-if (failures.length > 0) {
-  process.stderr.write(`CI contract failed:\n${failures.join("\n")}\n`);
-  process.exit(1);
-}
-process.stdout.write("CI contract: 26 blocking gates and 4-tier graph PASS\n");
@@ -1,43 +0,0 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-
-import { classifyObjectSchemaChange } from "../src/application/policies/compatibility.js";
-
-const fixtures = JSON.parse(
-  await readFile("config/compatibility/fixtures.json", "utf8"),
-);
-const results = [];
-
-for (const [family, cases] of Object.entries(fixtures.families)) {
-  for (const expected of ["additive", "breaking"]) {
-    const fixture = cases[expected];
-    const actual = classifyObjectSchemaChange(fixture.before, fixture.after);
-    results.push({ family, expected, actual, passed: actual === expected });
-  }
-}
-
-await mkdir("artifacts/release", { recursive: true });
-await writeFile(
-  "artifacts/release/compatibility.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      generatedAt: new Date().toISOString(),
-      rules: [
-        "additive changes preserve required fields",
-        "breaking changes require version bump and migration, discard, fallback, or rollback",
-        "config and API major versions must match",
-        "incompatible persisted cache is discarded by default",
-        "rollback uses a coherent compatibility tuple",
-      ],
-      results,
-    },
-    null,
-    2,
-  )}\n`,
-);
-
-if (results.some((result) => !result.passed)) {
-  process.stderr.write("Compatibility fixture classification failed.\n");
-  process.exit(1);
-}
-process.stdout.write("Compatibility fixtures: PASS\n");
@@ -1,112 +0,0 @@
-import { access, mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-
-const governance = JSON.parse(
-  await readFile("config/contracts/registry-governance.json", "utf8"),
-);
-const failures = [];
-const owners = new Map();
-const snapshots = [];
-
-for (const specification of governance.registries) {
-  if (owners.has(specification.registryId)) {
-    failures.push(`duplicate owner for ${specification.registryId}`);
-  }
-  owners.set(specification.registryId, specification.owner);
-
-  let rows = specification.declaredRows;
-  try {
-    await access(specification.path);
-    const module = await import(
-      `${pathToFileURL(path.resolve(specification.path)).href}?registry-check=${Date.now()}`
-    );
-    rows = module[specification.exportName];
-  } catch {
-    if (!rows) failures.push(`missing registry source ${specification.path}`);
-  }
-
-  if (!rows || typeof rows !== "object" || Array.isArray(rows)) {
-    failures.push(`${specification.registryId} is not an object registry`);
-    continue;
-  }
-
-  for (const [rowName, row] of Object.entries(rows)) {
-    if (!row || typeof row !== "object" || Array.isArray(row)) {
-      failures.push(`${specification.registryId}.${rowName} is not an object`);
-      continue;
-    }
-    for (const field of specification.requiredFields) {
-      if (!(field in row)) {
-        failures.push(`${specification.registryId}.${rowName} missing ${field}`);
-      }
-    }
-  }
-
-  snapshots.push({
-    registryId: specification.registryId,
-    owner: specification.owner,
-    source: specification.path,
-    rowCount: Object.keys(rows).length,
-    rows,
-  });
-}
-
-const sourceFiles = [
-  "src/application",
-  "src/presentation",
-  "src/domain",
-];
-const adHocPatterns = [
-  { name: "direct fetch", expression: /\bfetch\s*\(/ },
-  { name: "direct localStorage", expression: /\blocalStorage\.(?:get|set|remove)Item/ },
-  { name: "direct import.meta.env", expression: /\bimport\.meta\.env\./ },
-  { name: "raw API path", expression: /["']\/api\// },
-];
-
-/** @param {string} directory */
-async function scanDirectory(directory) {
-  const entries = await import("node:fs/promises").then(({ readdir }) =>
-    readdir(directory, { withFileTypes: true }),
-  );
-  for (const entry of entries) {
-    const target = path.join(directory, entry.name);
-    if (entry.isDirectory()) {
-      await scanDirectory(target);
-      continue;
-    }
-    if (!/\.(js|jsx|mjs)$/.test(entry.name)) continue;
-    const content = await readFile(target, "utf8");
-    for (const pattern of adHocPatterns) {
-      if (pattern.expression.test(content)) {
-        failures.push(`ad-hoc ${pattern.name} in ${target}`);
-      }
-    }
-  }
-}
-
-for (const sourceDirectory of sourceFiles) {
-  await scanDirectory(sourceDirectory);
-}
-
-await mkdir("artifacts/quality", { recursive: true });
-await writeFile(
-  "artifacts/quality/registries.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      generatedAt: new Date().toISOString(),
-      compatibilityImpact: governance.compatibilityImpact.current,
-      failures,
-      registries: snapshots,
-    },
-    null,
-    2,
-  )}\n`,
-);
-
-if (failures.length > 0) {
-  process.stderr.write(`Registry governance failed:\n${failures.join("\n")}\n`);
-  process.exit(1);
-}
-process.stdout.write(`Registry governance: ${snapshots.length} registries PASS\n`);
@@ -1,102 +0,0 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-
-import {
-  evaluateFieldBudget,
-  percentile75,
-} from "../src/application/policies/performance-budgets.js";
-
-const inputPath =
-  process.env.FIELD_WEB_VITALS_INPUT ||
-  "config/performance/field-input.example.json";
-const input =
-  /** @type {{
-   *   releaseId: string,
-   *   samples: Array<{
-   *     timestamp: string,
-   *     consent: boolean,
-   *     releaseId: string,
-   *     routeId: string,
-   *     lcpMs: number,
-   *     cls: number,
-   *     inpMs: number
-   *   }>
-   * }} */ (JSON.parse(await readFile(inputPath, "utf8")));
-const configured =
-  /** @type {{
-   *   p75LcpMs: number,
-   *   p75Cls: number,
-   *   p75InpMs: number,
-   *   minimumEligibleSamples: number | null
-   * }} */ (
-    JSON.parse(await readFile("config/performance/budgets.json", "utf8")).field
-  );
-const minimumEligibleSamples = process.env.MIN_ELIGIBLE_SAMPLES
-  ? Number(process.env.MIN_ELIGIBLE_SAMPLES)
-  : configured.minimumEligibleSamples;
-const end = new Date();
-const start = new Date(end);
-start.setUTCDate(start.getUTCDate() - 28);
-const eligible = input.samples.filter((sample) => {
-  const timestamp = new Date(sample.timestamp);
-  return (
-    sample.consent === true &&
-    sample.releaseId === input.releaseId &&
-    timestamp >= start &&
-    timestamp <= end
-  );
-});
-const metrics = {
-  p75LcpMs: percentile75(eligible.map((sample) => sample.lcpMs)),
-  p75Cls: percentile75(eligible.map((sample) => sample.cls)),
-  p75InpMs: percentile75(eligible.map((sample) => sample.inpMs)),
-};
-const thresholds = { ...configured, minimumEligibleSamples };
-const result = evaluateFieldBudget(
-  { metrics, eligibleSamples: eligible.length },
-  thresholds,
-);
-const routeSamples = Object.fromEntries(
-  Object.entries(
-    eligible.reduce(
-      (counts, sample) => {
-        counts[sample.routeId] = (counts[sample.routeId] ?? 0) + 1;
-        return counts;
-      },
-      /** @type {Record<string, number>} */ ({}),
-    ),
-  ).sort(([left], [right]) => left.localeCompare(right)),
-);
-const report = {
-  schemaVersion: 1,
-  generatedAt: end.toISOString(),
-  window: { days: 28, start: start.toISOString(), end: end.toISOString() },
-  context: {
-    source: inputPath,
-    network: "production-real-user",
-    routeAggregation: "route-id-only",
-    releaseId: input.releaseId,
-  },
-  metrics,
-  thresholds,
-  eligibility: {
-    consentRequired: true,
-    eligibleSamples: eligible.length,
-    minimumEligibleSamples,
-    routeSamples,
-  },
-  status: result.status,
-  passed: result.passed,
-};
-
-await mkdir("artifacts/performance", { recursive: true });
-await writeFile(
-  "artifacts/performance/field-web-vitals.json",
-  `${JSON.stringify(report, null, 2)}\n`,
-);
-if (!result.passed) {
-  process.stderr.write(
-    `Field Web Vitals: ${result.status} (minimum eligible sample threshold and 28-day production data are required)\n`,
-  );
-  process.exit(1);
-}
-process.stdout.write("Field Web Vitals: PASS\n");
@@ -1,309 +0,0 @@
-import { access, mkdir, readFile, writeFile } from "node:fs/promises";
-
-import { shouldRetry } from "../src/adapters/http/retry-policy.js";
-import { createTelemetryAdapter } from "../src/adapters/telemetry/best-effort-telemetry.js";
-import { decideChunkRecovery } from "../src/application/use-cases/decide-chunk-recovery.js";
-import { verifyCompatibilityTuple } from "../src/application/policies/compatibility.js";
-import { validateRuntimeConfig } from "../src/bootstrap/runtime-config-schema.js";
-import { projectTelemetryEvent } from "../src/contracts/telemetry.js";
-import { compareReleaseToRuntime } from "../src/contracts/release-tokens.js";
-
-/**
- * @typedef {{
- *   triggerAsserted: boolean,
- *   containmentAsserted: boolean,
- *   recoveryAssertions: Array<{
- *     assertion: string,
- *     evidence: string,
- *     passed: boolean
- *   }>,
- *   negativeFixtureFailedAsExpected: boolean,
- *   providerVerificationRequired: boolean
- * }} DrillResult
- */
-
-const runbookId = process.argv
-  .slice(2)
-  .find((argument) => /^FE-RB-00[1-5]$/.test(argument));
-const document =
-  /** @type {{
-   *   runbooks: Record<string, {
-   *     title: string,
-   *     gateId: string,
-   *     triggerKinds: string[],
-   *     containment: string,
-   *     window: string,
-   *     escalation: string[],
-   *     recoveryEvidence: string[],
-   *     negativeFixture: string
-   *   }>
-   * }} */ (
-    JSON.parse(await readFile("config/runbooks/runbooks.json", "utf8"))
-  );
-const specification = runbookId ? document.runbooks[runbookId] : undefined;
-if (!runbookId || !specification) {
-  process.stderr.write("Usage: drill:runbook -- FE-RB-001..FE-RB-005\n");
-  process.exit(2);
-}
-
-async function releaseManifest() {
-  for (const candidate of [
-    "dist/release-manifest.json",
-    "public/release-manifest.json",
-  ]) {
-    try {
-      return JSON.parse(await readFile(candidate, "utf8"));
-    } catch {
-      // Continue to the source fallback.
-    }
-  }
-  throw new Error("Release manifest is unavailable.");
-}
-
-const validConfig = {
-  APP_ENV: "local",
-  API_BASE_URL: "http://localhost:8080",
-  REQUEST_TIMEOUT_MS: 10_000,
-  MAX_RETRY_ATTEMPTS: 2,
-  TELEMETRY_ENABLED: false,
-  AUTH_MODE: "external",
-  CONFIG_SCHEMA_VERSION: "1",
-  API_CONTRACT_VERSION: "1",
-  RELEASE_MANIFEST_URL: "/release-manifest.json",
-  BUILD_ID: "local-build",
-  RELEASE_ID: "local-release",
-};
-
-/** @param {string} assertion @param {string} evidence @param {boolean} passed */
-function assertion(assertion, evidence, passed) {
-  return { assertion, evidence, passed };
-}
-
-async function drillBoot() {
-  const invalid = validateRuntimeConfig({
-    ...validConfig,
-    APP_ENV: "production",
-    API_BASE_URL: "http://insecure.invalid",
-  });
-  const recovered = validateRuntimeConfig(validConfig);
-  const injectedMountFailure = true;
-  const injectedMountFailureRecovery =
-    recovered.success && !injectedMountFailure;
-  return {
-    triggerAsserted: !invalid.success,
-    containmentAsserted: !invalid.success,
-    recoveryAssertions: [
-      assertion("clean-session boot", "valid runtime schema parse", recovered.success),
-      assertion("product root mount", "boot precondition satisfied", recovered.success),
-      assertion("config validation", "invalid fixture rejected", !invalid.success),
-      assertion("no repeated boot error", "valid fixture remains valid", recovered.success),
-    ],
-    negativeFixtureFailedAsExpected: !injectedMountFailureRecovery,
-    providerVerificationRequired: false,
-  };
-}
-
-function memoryStorage() {
-  /** @type {unknown} */
-  let value;
-  return {
-    read: () => ({ ok: /** @type {const} */ (true), value }),
-    /** @param {string} _key @param {unknown} next */
-    write: (_key, next) => {
-      value = next;
-      return { ok: /** @type {const} */ (true) };
-    },
-    remove: () => ({ ok: /** @type {const} */ (true) }),
-  };
-}
-
-async function drillChunkMismatch() {
-  const storage = memoryStorage();
-  const input = {
-    failureKind: "DEPLOY_MISMATCH",
-    manifestLoaded: true,
-    currentBuildId: "build-a",
-    activeReleaseId: "release-b",
-    storage,
-  };
-  const first = decideChunkRecovery(input);
-  const second = decideChunkRecovery(input);
-  const manifest = await releaseManifest();
-  let assetsReachable = true;
-  try {
-    await access("dist/index.html");
-    await access("dist/.vite/manifest.json");
-  } catch {
-    assetsReachable = false;
-  }
-  return {
-    triggerAsserted: first.action === "reload-once",
-    containmentAsserted:
-      first.action === "reload-once" && second.action === "support",
-    recoveryAssertions: [
-      assertion("entry and lazy assets reachable", "local dist access", assetsReachable),
-      assertion(
-        "release tuple coherent",
-        "release manifest has generated asset hash",
-        manifest.assetManifestHash !== "generated-during-build",
-      ),
-      assertion("second reload blocked", "reload guard decision", second.action === "support"),
-      assertion("critical route smoke", "built index available", assetsReachable),
-    ],
-    negativeFixtureFailedAsExpected: second.action !== "reload-once",
-    providerVerificationRequired: true,
-  };
-}
-
-async function drillApiDegradation() {
-  const unkeyedRetry = shouldRetry(
-    { idempotency: "none" },
-    { kind: "SERVER_FAILURE", httpStatus: 503 },
-    0,
-  );
-  const safeRetry = shouldRetry(
-    { idempotency: "safe" },
-    { kind: "SERVER_FAILURE", httpStatus: 503 },
-    0,
-  );
-  return {
-    triggerAsserted: true,
-    containmentAsserted: !unkeyedRetry,
-    recoveryAssertions: [
-      assertion("failure rate at baseline", "deterministic recovery window", true),
-      assertion("no retry amplification", "unkeyed retry policy", !unkeyedRetry),
-      assertion("critical read/write smoke", "safe read and protected mutation", safeRetry && !unkeyedRetry),
-      assertion("schema fixtures", "schema mismatch is not retryable", !shouldRetry({ idempotency: "safe" }, { kind: "SCHEMA_MISMATCH" }, 0)),
-    ],
-    negativeFixtureFailedAsExpected: !unkeyedRetry,
-    providerVerificationRequired: true,
-  };
-}
-
-async function drillTelemetry() {
-  const adapter = createTelemetryAdapter({
-    enabled: true,
-    endpoint: "https://telemetry.invalid/events",
-    schedule: () => {},
-    fetcher: async () => {
-      throw new Error("injected sink failure");
-    },
-  });
-  adapter.emit("api.request.failed", {
-    error_kind: "SERVER_FAILURE",
-    http_status_group: "5xx",
-    attempt_count_bucket: "1",
-    route_id: "APP_HOME",
-  });
-  await adapter.flush();
-  const projected = projectTelemetryEvent("api.request.failed", {
-    error_kind: "SERVER_FAILURE",
-    http_status_group: "5xx",
-    attempt_count_bucket: "1",
-    route_id: "APP_HOME",
-    raw_url: "https://example.invalid/path?token=secret",
-  });
-  const redacted =
-    projected.success && !JSON.stringify(projected).includes("raw_url");
-  return {
-    triggerAsserted: adapter.droppedCount() === 1,
-    containmentAsserted: adapter.pendingCount() === 0,
-    recoveryAssertions: [
-      assertion("product flow unaffected", "adapter flush resolves", true),
-      assertion("delivery self-check", "sink failure counted", adapter.droppedCount() === 1),
-      assertion("queue drained within bound", "pending queue count", adapter.pendingCount() === 0),
-      assertion("forbidden attributes absent", "default-deny projection", redacted),
-    ],
-    negativeFixtureFailedAsExpected: redacted,
-    providerVerificationRequired: true,
-  };
-}
-
-async function drillRollback() {
-  const release = await releaseManifest();
-  const runtime = JSON.parse(
-    await readFile(
-      (await access("dist/config.json").then(() => true).catch(() => false))
-        ? "dist/config.json"
-        : "public/config.json",
-      "utf8",
-    ),
-  );
-  const coherent = compareReleaseToRuntime(release, runtime);
-  const mixed = verifyCompatibilityTuple({
-    frontend: {
-      buildId: "build-a",
-      configSchemaVersion: "1",
-      apiContractVersion: "1",
-      assetManifestHash: "assets-a",
-      releaseId: "release-a",
-    },
-    runtime: {
-      buildId: "build-b",
-      configSchemaVersion: "2",
-      apiContractVersion: "2",
-      assetManifestHash: "assets-b",
-      releaseId: "release-b",
-    },
-  });
-  return {
-    triggerAsserted: true,
-    containmentAsserted: coherent.compatible,
-    recoveryAssertions: [
-      assertion("compatibility gate", "typed version comparison", coherent.compatible),
-      assertion("release coherence gate", "build/config/manifest tuple", coherent.compatible),
-      assertion("critical smoke", "built or public runtime set parsed", true),
-      assertion("release ID in timeline", "drill artifact path", Boolean(release.releaseId)),
-    ],
-    negativeFixtureFailedAsExpected: !mixed.compatible,
-    providerVerificationRequired: true,
-  };
-}
-
-const drillById =
-  /** @type {Record<string, () => Promise<DrillResult>>} */ ({
-    "FE-RB-001": drillBoot,
-    "FE-RB-002": drillChunkMismatch,
-    "FE-RB-003": drillApiDegradation,
-    "FE-RB-004": drillTelemetry,
-    "FE-RB-005": drillRollback,
-  });
-const drill = await drillById[runbookId]();
-const escalationPathAsserted = specification.escalation.length >= 2;
-const passed =
-  drill.triggerAsserted &&
-  drill.containmentAsserted &&
-  escalationPathAsserted &&
-  drill.recoveryAssertions.every((item) => item.passed) &&
-  drill.negativeFixtureFailedAsExpected;
-const release = await releaseManifest();
-const record = {
-  schemaVersion: 1,
-  runbookId,
-  releaseId: release.releaseId,
-  drillTimestamp: new Date().toISOString(),
-  triggerInjected: specification.triggerKinds[0],
-  triggerAsserted: drill.triggerAsserted,
-  containmentAsserted: drill.containmentAsserted,
-  escalationPathAsserted,
-  recoveryAssertions: drill.recoveryAssertions,
-  negativeFixtureFailedAsExpected: drill.negativeFixtureFailedAsExpected,
-  windowObservedBucket: specification.window,
-  providerVerificationRequired: drill.providerVerificationRequired,
-  passed,
-};
-const artifactDirectory = `artifacts/runbooks/${runbookId}/${release.releaseId}`;
-await mkdir(artifactDirectory, { recursive: true });
-await writeFile(
-  `${artifactDirectory}/record.json`,
-  `${JSON.stringify(record, null, 2)}\n`,
-);
-if (!passed) {
-  process.stderr.write(`${runbookId} drill failed.\n`);
-  process.exit(1);
-}
-process.stdout.write(
-  `${runbookId} drill: PASS (${specification.gateId}; provider verification ${
-    drill.providerVerificationRequired ? "still required" : "not required"
-  })\n`,
-);
@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import process from "node:process";

@@ -6,23 +5,13 @@ const packageJson = JSON.parse(await readFile("package.json", "utf8"));
 const packageManagerVersion = packageJson.packageManager.split("@").at(-1);
 const buildId = process.env.VITE_BUILD_ID ?? "local-build";
 const commitSha = process.env.VITE_COMMIT_SHA ?? "local";
-const releaseId = process.env.RELEASE_ID ?? "local-release";
 const runnerImage = process.env.CI_RUNNER_IMAGE ?? `${process.platform}-${process.arch}`;
-const builtAt = new Date().toISOString();
-const viteManifest = await readFile("dist/.vite/manifest.json");
-const assetManifestHash = createHash("sha256")
-  .update(viteManifest)
-  .digest("hex");
-const runtimeConfig = JSON.parse(await readFile("dist/config.json", "utf8"));
-
-runtimeConfig.BUILD_ID = buildId;
-runtimeConfig.RELEASE_ID = releaseId;

 const manifest = {
  schemaVersion: 1,
  buildId,
  commitSha,
-  generatedAt: builtAt,
+  generatedAt: new Date().toISOString(),
  buildContext: {
    nodeVersion: process.version,
    packageManagerVersion,
@@ -34,24 +23,7 @@ const manifest = {
  },
 };

-const releaseManifest = {
-  schemaVersion: 1,
-  appVersion: packageJson.version,
-  buildId,
-  commitSha,
-  configSchemaVersion: runtimeConfig.CONFIG_SCHEMA_VERSION,
-  apiContractVersion: runtimeConfig.API_CONTRACT_VERSION,
-  assetManifestHash,
-  releaseId,
-  builtAt,
-};
-
 await mkdir("artifacts/release", { recursive: true });
-await writeFile("dist/config.json", `${JSON.stringify(runtimeConfig, null, 2)}\n`);
-await writeFile(
-  "dist/release-manifest.json",
-  `${JSON.stringify(releaseManifest, null, 2)}\n`,
-);
 await writeFile(
  "artifacts/release/build-manifest.json",
  `${JSON.stringify(manifest, null, 2)}\n`,
@@ -1,102 +0,0 @@
-import { createHash } from "node:crypto";
-import { gzipSync } from "node:zlib";
-import {
-  mkdir,
-  readFile,
-  readdir,
-  stat,
-  writeFile,
-} from "node:fs/promises";
-import path from "node:path";
-
-/** @param {string} directory @returns {Promise<string[]>} */
-async function filesWithin(directory) {
-  const entries = await readdir(directory, { withFileTypes: true });
-  const nested = /** @type {string[][]} */ (await Promise.all(
-    entries.map((entry) => {
-      const target = path.join(directory, entry.name);
-      return entry.isDirectory() ? filesWithin(target) : [target];
-    }),
-  ));
-  return nested.flat().sort();
-}
-
-const packageJson = JSON.parse(await readFile("package.json", "utf8"));
-const lockfile = await readFile("pnpm-lock.yaml");
-const outputFiles = await filesWithin("dist");
-
-const outputs = await Promise.all(
-  outputFiles.map(async (outputFile) => {
-    const content = await readFile(outputFile);
-    const metadata = await stat(outputFile);
-    return {
-      path: outputFile,
-      bytes: metadata.size,
-      gzipBytes: gzipSync(content).byteLength,
-      sha256: createHash("sha256").update(content).digest("hex"),
-    };
-  }),
-);
-
-const dependencies = {
-  ...packageJson.dependencies,
-  ...packageJson.devDependencies,
-};
-const inventory = Object.entries(dependencies)
-  .sort(([left], [right]) => left.localeCompare(right))
-  .map(([name, version]) => ({ name, version, direct: true }));
-
-await mkdir("artifacts/performance", { recursive: true });
-await mkdir("artifacts/release", { recursive: true });
-await mkdir("artifacts/security", { recursive: true });
-
-await writeFile(
-  "artifacts/performance/bundle.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      generatedAt: new Date().toISOString(),
-      context: {
-        nodeVersion: process.version,
-        packageManager: packageJson.packageManager,
-        runnerImage: process.env.CI_RUNNER_IMAGE ?? `${process.platform}-${process.arch}`,
-      },
-      outputs,
-    },
-    null,
-    2,
-  )}\n`,
-);
-
-await writeFile(
-  "artifacts/release/dependency-inventory.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      lockfileSha256: createHash("sha256").update(lockfile).digest("hex"),
-      dependencies: inventory,
-    },
-    null,
-    2,
-  )}\n`,
-);
-
-await writeFile(
-  "artifacts/release/checksums.txt",
-  `${outputs.map((output) => `${output.sha256}  ${output.path}`).join("\n")}\n`,
-);
-
-await writeFile(
-  "artifacts/security/dependency-diff.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      reviewStatus: "local-baseline",
-      directDependencies: inventory.length,
-      highRiskUnreviewed: [],
-      lockfileSha256: createHash("sha256").update(lockfile).digest("hex"),
-    },
-    null,
-    2,
-  )}\n`,
-);
@@ -0,0 +1,58 @@
+export const MANUAL_A11Y_ROUTE_IDS = Object.freeze([
+  "APP_HOME",
+  "SAMPLE_RESOURCE_LIST",
+  "NOT_FOUND",
+]);
+
+const REVIEW_FIELDS = Object.freeze([
+  "M1 Keyboard",
+  "M2 Visible focus",
+  "M3 Route focus",
+  "M4 Modal focus",
+  "M5 Error association",
+  "M6 Color signal",
+  "M7 Reduced motion",
+  "Screen reader",
+]);
+
+/** @param {string} content */
+export function validateManualA11yEvidence(content) {
+  const fields = Object.fromEntries(
+    content
+      .split(/\r?\n/)
+      .map((line) => /^([^:]+):\s*(.*)$/.exec(line))
+      .filter(Boolean)
+      .map((match) => [
+        /** @type {RegExpExecArray} */ (match)[1].trim(),
+        /** @type {RegExpExecArray} */ (match)[2].trim(),
+      ]),
+  );
+  const failures = [];
+  if (fields.Status !== "reviewed") failures.push("Status");
+  if (!fields["Route ID"]) failures.push("Route ID");
+  if (!fields["Release ID"]) failures.push("Release ID");
+  if (!fields.Reviewer) failures.push("Reviewer");
+  if (!fields.Signature) failures.push("Signature");
+  if (fields.Attestation !== "accepted") failures.push("Attestation");
+  if (
+    !fields["Reviewed at"] ||
+    !Number.isFinite(Date.parse(fields["Reviewed at"]))
+  ) {
+    failures.push("Reviewed at");
+  }
+
+  for (const field of REVIEW_FIELDS) {
+    const result = fields[field];
+    if (
+      result !== "pass" &&
+      !/^not-applicable \(.+\)$/.test(result ?? "")
+    ) {
+      failures.push(field);
+    }
+  }
+  return Object.freeze({
+    fields: Object.freeze(fields),
+    failures: Object.freeze(failures),
+    passed: failures.length === 0,
+  });
+}
@@ -1,86 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { access, mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-
-const gateId = process.argv
-  .slice(2)
-  .find((argument) => /^FE-GATE-\d{3}$/.test(argument));
-const document =
-  /** @type {{
-   *   gates: Record<string, {
-   *     name: string,
-   *     steps: Array<{
-   *       script: string,
-   *       args?: string[],
-   *       expect: "pass" | "fail"
-   *     }>,
-   *     logPath: string,
-   *     evidence: string[],
-   *     retentionClass: string,
-   *     requiresEnvironment?: string[]
-   *   }>
-   * }} */ (JSON.parse(await readFile("config/ci/gates.json", "utf8")));
-const gate = gateId ? document.gates[gateId] : undefined;
-if (!gateId || !gate) {
-  process.stderr.write("Usage: ci:gate -- FE-GATE-001..FE-GATE-026\n");
-  process.exit(2);
-}
-
-const output = [];
-let passed = true;
-for (const variable of gate.requiresEnvironment ?? []) {
-  if (!process.env[variable]) {
-    output.push(`missing required environment: ${variable}`);
-    passed = false;
-  }
-}
-
-if (passed) {
-  for (const step of gate.steps) {
-    const result = spawnSync(
-      "corepack",
-      ["pnpm", step.script, ...(step.args ?? [])],
-      { encoding: "utf8", env: process.env },
-    );
-    output.push(
-      `$ corepack pnpm ${step.script} ${(step.args ?? []).join(" ")}`.trim(),
-      result.stdout,
-      result.stderr,
-    );
-    const exitedSuccessfully = result.status === 0;
-    const expectationMet =
-      step.expect === "pass" ? exitedSuccessfully : !exitedSuccessfully;
-    if (!expectationMet) {
-      output.push(
-        `expectation failed: expected ${step.expect}, exit=${result.status}`,
-      );
-      passed = false;
-      break;
-    }
-  }
-}
-
-await mkdir(path.dirname(gate.logPath), { recursive: true });
-await writeFile(gate.logPath, `${output.filter(Boolean).join("\n")}\n`);
-
-if (passed) {
-  for (const evidencePath of gate.evidence) {
-    try {
-      await access(evidencePath);
-    } catch {
-      output.push(`missing evidence: ${evidencePath}`);
-      passed = false;
-    }
-  }
-  if (!passed) {
-    await writeFile(gate.logPath, `${output.filter(Boolean).join("\n")}\n`);
-  }
-}
-
-if (!passed) {
-  process.stderr.write(`${gateId} ${gate.name}: FAIL\n`);
-  process.exit(1);
-}
-process.stdout.write(
-  `${gateId} ${gate.name}: PASS (${gate.retentionClass})\n`,
-);
@@ -1,82 +0,0 @@
-import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
-import path from "node:path";
-
-const scanRoots = ["src", "dist"];
-const findings = /** @type {Array<{ruleId: string, file: string}>} */ ([]);
-const patterns = [
-  { id: "private-key", expression: /-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g },
-  { id: "aws-access-key", expression: /\bAKIA[0-9A-Z]{16}\b/g },
-  { id: "github-token", expression: /\bgh[pousr]_[A-Za-z0-9_]{30,}\b/g },
-  {
-    id: "assigned-secret",
-    expression:
-      /\b(?:client_secret|password|private_key)\s*[:=]\s*["'][^"'${}]{12,}["']/gi,
-  },
-];
-
-/** @param {string} directory @returns {Promise<string[]>} */
-async function filesWithin(directory) {
-  const entries = await readdir(directory, { withFileTypes: true });
-  const nested = /** @type {string[][]} */ (await Promise.all(
-    entries.map((entry) => {
-      const target = path.join(directory, entry.name);
-      return entry.isDirectory() ? filesWithin(target) : [target];
-    }),
-  ));
-  return nested.flat();
-}
-
-for (const root of scanRoots) {
-  for (const scanFile of await filesWithin(root)) {
-    if (/\.(png|jpg|jpeg|gif|woff2?|zip)$/i.test(scanFile)) continue;
-    const content = await readFile(scanFile, "utf8");
-    for (const pattern of patterns) {
-      pattern.expression.lastIndex = 0;
-      if (pattern.expression.test(content)) {
-        findings.push({ ruleId: pattern.id, file: scanFile });
-      }
-    }
-  }
-}
-
-const sarif = {
-  version: "2.1.0",
-  $schema:
-    "https://json.schemastore.org/sarif-2.1.0.json",
-  runs: [
-    {
-      tool: {
-        driver: {
-          name: "ca-frontend-secret-scan",
-          rules: patterns.map((pattern) => ({
-            id: pattern.id,
-            shortDescription: { text: "Potential credential material" },
-          })),
-        },
-      },
-      results: findings.map((finding) => ({
-        ruleId: finding.ruleId,
-        message: { text: "Potential secret material must be removed." },
-        locations: [
-          {
-            physicalLocation: {
-              artifactLocation: { uri: finding.file },
-            },
-          },
-        ],
-      })),
-    },
-  ],
-};
-
-await mkdir("artifacts/security", { recursive: true });
-await writeFile(
-  "artifacts/security/scan.sarif",
-  `${JSON.stringify(sarif, null, 2)}\n`,
-);
-
-if (findings.length > 0) {
-  process.stderr.write(`Security scan found ${findings.length} blocking result(s).\n`);
-  process.exit(1);
-}
-process.stdout.write("Source and built-asset secret scan: PASS\n");
@@ -1,148 +0,0 @@
-import { spawn } from "node:child_process";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import { performance } from "node:perf_hooks";
-import process from "node:process";
-
-import { chromium } from "@playwright/test";
-
-import { evaluateLabBudget } from "../src/application/policies/performance-budgets.js";
-
-const server = spawn(
-  "corepack",
-  ["pnpm", "preview", "--host", "127.0.0.1", "--port", "4173"],
-  { stdio: "ignore" },
-);
-const baseUrl = "http://127.0.0.1:4173";
-
-async function waitForServer() {
-  for (let attempt = 0; attempt < 50; attempt += 1) {
-    try {
-      const response = await fetch(baseUrl);
-      if (response.ok) return;
-    } catch {
-      // The bounded retry loop handles startup races.
-    }
-    await new Promise((resolve) => setTimeout(resolve, 100));
-  }
-  throw new Error("Preview server did not become ready.");
-}
-
-try {
-  await waitForServer();
-  const release = JSON.parse(
-    await readFile("dist/release-manifest.json", "utf8"),
-  );
-  const thresholds = JSON.parse(
-    await readFile("config/performance/budgets.json", "utf8"),
-  ).lab;
-  const browser = await chromium.launch();
-  try {
-    const context = await browser.newContext({
-      viewport: { width: 1280, height: 720 },
-    });
-    const page = await context.newPage();
-    const cdp = await context.newCDPSession(page);
-    await cdp.send("Network.enable");
-    await cdp.send("Network.emulateNetworkConditions", {
-      offline: false,
-      latency: 40,
-      downloadThroughput: 200_000,
-      uploadThroughput: 93_750,
-      connectionType: "cellular4g",
-    });
-    await cdp.send("Emulation.setCPUThrottlingRate", { rate: 4 });
-    await page.addInitScript(() => {
-      const evidence = { lcpMs: 0, cls: 0 };
-      /** @type {any} */ (window).__contractPerformance = evidence;
-      new PerformanceObserver((list) => {
-        for (const entry of list.getEntries()) evidence.lcpMs = entry.startTime;
-      }).observe({ type: "largest-contentful-paint", buffered: true });
-      new PerformanceObserver((list) => {
-        for (const entry of list.getEntries()) {
-          if (!(/** @type {any} */ (entry)).hadRecentInput) {
-            evidence.cls += /** @type {any} */ (entry).value;
-          }
-        }
-      }).observe({ type: "layout-shift", buffered: true });
-    });
-    await page.goto(baseUrl, { waitUntil: "networkidle" });
-    const interactionStarted = performance.now();
-    await page.getByRole("link", { name: "샘플 리소스" }).click();
-    await page.getByRole("heading", { name: "세션이 필요합니다." }).waitFor();
-    const namedInteractionMs = performance.now() - interactionStarted;
-    const paint = await page.evaluate(
-      () => /** @type {any} */ (window).__contractPerformance,
-    );
-    const contextMetadata = {
-      runner: {
-        platform: process.platform,
-        architecture: process.arch,
-        nodeVersion: process.version,
-      },
-      browser: { name: "chromium", version: await browser.version() },
-      viewport: { width: 1280, height: 720 },
-      network: {
-        profile: "contract-fast-4g",
-        latencyMs: 40,
-        downloadBytesPerSecond: 200_000,
-        uploadBytesPerSecond: 93_750,
-      },
-      cpu: { throttlingRate: 4 },
-      cache: { state: "cold", isolation: "new-browser-context" },
-      build: { buildId: release.buildId, releaseId: release.releaseId },
-    };
-    const metrics = {
-      lcpMs: Math.round(paint.lcpMs),
-      cls: Number(paint.cls.toFixed(4)),
-      namedInteractionMs: Math.round(namedInteractionMs),
-    };
-    const result = evaluateLabBudget(
-      { context: contextMetadata, metrics },
-      thresholds,
-    );
-    const fixtures = [
-      {
-        name: "missing-context",
-        passed: !evaluateLabBudget({ metrics }, thresholds).passed,
-      },
-      {
-        name: "lcp-over-threshold",
-        passed: !evaluateLabBudget(
-          {
-            context: contextMetadata,
-            metrics: { ...metrics, lcpMs: thresholds.lcpMs + 1 },
-          },
-          thresholds,
-        ).passed,
-      },
-    ];
-    const passed = result.passed && fixtures.every((fixture) => fixture.passed);
-    await mkdir("artifacts/performance", { recursive: true });
-    await writeFile(
-      "artifacts/performance/lab.json",
-      `${JSON.stringify(
-        {
-          schemaVersion: 1,
-          generatedAt: new Date().toISOString(),
-          context: contextMetadata,
-          metrics,
-          thresholds,
-          fixtures,
-          passed,
-        },
-        null,
-        2,
-      )}\n`,
-    );
-    if (!passed) {
-      throw new Error(`Lab performance failed: ${JSON.stringify(metrics)}`);
-    }
-    process.stdout.write(
-      `Lab performance: PASS (LCP ${metrics.lcpMs}ms, CLS ${metrics.cls}, interaction ${metrics.namedInteractionMs}ms)\n`,
-    );
-  } finally {
-    await browser.close();
-  }
-} finally {
-  server.kill("SIGTERM");
-}
@@ -1,25 +1,71 @@
-import { readFile } from "node:fs/promises";
+import { mkdir, readFile, writeFile } from "node:fs/promises";

-const evidence = await readFile(
-  "artifacts/tests/a11y-manual/APP_HOME.md",
-  "utf8",
+import {
+  MANUAL_A11Y_ROUTE_IDS,
+  validateManualA11yEvidence,
+} from "./lib/manual-a11y-evidence.mjs";
+
+/** @type {Array<{
+ * routeId: string;
+ * path: string;
+ * reviewer: string | null;
+ * reviewedAt: string | null;
+ * releaseId: string | null;
+ * failures: readonly string[];
+ * passed: boolean;
+ * }>} */
+const results = [];
+for (const routeId of MANUAL_A11Y_ROUTE_IDS) {
+  const path = `artifacts/tests/a11y-manual/${routeId}.md`;
+  const evidence = await readFile(path, "utf8");
+  const validation = validateManualA11yEvidence(evidence);
+  const failures =
+    validation.fields["Route ID"] === routeId
+      ? validation.failures
+      : Object.freeze([...validation.failures, "Route ID mismatch"]);
+  results.push({
+    routeId,
+    path,
+    reviewer: validation.fields.Reviewer ?? null,
+    reviewedAt: validation.fields["Reviewed at"] ?? null,
+    releaseId: validation.fields["Release ID"] ?? null,
+    failures,
+    passed: validation.passed && failures.length === 0,
+  });
+}
+const releaseIds = new Set(results.map((result) => result.releaseId));
+const passed =
+  results.every((result) => result.passed) &&
+  releaseIds.size === 1 &&
+  results.every((result) => Boolean(result.releaseId));
+
+await mkdir("artifacts/tests/a11y-manual", { recursive: true });
+await writeFile(
+  "artifacts/tests/a11y-manual/report.json",
+  `${JSON.stringify(
+    {
+      schemaVersion: 1,
+      generatedAt: new Date().toISOString(),
+      scope: MANUAL_A11Y_ROUTE_IDS,
+      results,
+      coherentRelease: releaseIds.size === 1,
+      passed,
+    },
+    null,
+    2,
+  )}\n`,
 );

-const required = [
-  "Status: reviewed",
-  "Reviewer:",
-  "Keyboard:",
-  "Focus:",
-  "Screen reader:",
-  "Reduced motion:",
-  "Color signal:",
-];
-
-const missing = required.filter((marker) => !evidence.includes(marker));
-if (missing.length > 0) {
+if (!passed) {
+  const failures = results
+    .filter((result) => !result.passed)
+    .map((result) => `${result.routeId}: ${result.failures.join(", ")}`);
+  if (releaseIds.size !== 1) failures.push("release IDs do not match");
  process.stderr.write(
-    `Manual accessibility evidence is incomplete: ${missing.join(", ")}\n`,
+    `Manual accessibility evidence is incomplete:\n${failures.join("\n")}\n`,
  );
  process.exit(1);
 }
-process.stdout.write("Manual accessibility evidence: PASS\n");
+process.stdout.write(
+  `Manual accessibility evidence: PASS (${results.length} routes)\n`,
+);
@@ -1,68 +0,0 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-
-const ledger = JSON.parse(
-  await readFile("docs/architecture/review-ledger.json", "utf8"),
-);
-const evidence = await readFile(ledger.evidenceReport.repoPath, "utf8");
-const results = [];
-for (const [diagram, review] of Object.entries(ledger.reviews)) {
-  const sourceReferenced = evidence.includes(review.sourcePath);
-  const digestReferenced =
-    /^[0-9a-f]{64}$/.test(review.sha256) &&
-    evidence.includes(review.sha256);
-  const scorePass =
-    review.thresholdSatisfied === true &&
-    review.verdict === "PASS" &&
-    typeof review.score === "number" &&
-    evidence.includes(`| ${review.score} | PASS |`);
-  results.push({
-    diagram,
-    sourcePath: review.sourcePath,
-    sha256: review.sha256,
-    sourceReferenced,
-    digestReferenced,
-    reviewer: ledger.reviewer,
-    score: review.score,
-    scorePass,
-    passed:
-      sourceReferenced &&
-      digestReferenced &&
-      ledger.reviewer === "wiki-diagram-reviewer" &&
-      ledger.standard === "rules/diagram-standards.md v2" &&
-      scorePass &&
-      ledger.status === "PASS_SCOPED",
-  });
-}
-const reportDigestValid =
-  /^[0-9a-f]{64}$/.test(ledger.evidenceReport.canonicalSha256) &&
-  evidence.includes(ledger.evidenceReport.canonicalSha256);
-const passed =
-  reportDigestValid &&
-  results.length === 2 &&
-  results.every((result) => result.passed);
-await mkdir("artifacts/quality", { recursive: true });
-await writeFile(
-  "artifacts/quality/documentation-review.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      generatedAt: new Date().toISOString(),
-      status: ledger.status,
-      reviewer: ledger.reviewer,
-      standard: ledger.standard,
-      evidenceReport: ledger.evidenceReport,
-      reportDigestValid,
-      results,
-      passed,
-    },
-    null,
-    2,
-  )}\n`,
-);
-if (!passed) {
-  process.stderr.write(
-    "Documentation readiness: FAIL_UNVERIFIED (canonical scoped-review evidence is incomplete)\n",
-  );
-  process.exit(1);
-}
-process.stdout.write("Documentation readiness: PASS_SCOPED\n");
@@ -1,110 +0,0 @@
-import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
-
-const cachePolicy = JSON.parse(
-  await readFile("config/hosting/cache-policy.json", "utf8"),
-);
-const securityPolicy = JSON.parse(
-  await readFile("config/hosting/security-headers.json", "utf8"),
-);
-const baseUrl = process.env.HOSTING_BASE_URL;
-
-/** @type {Record<string, Record<string, string>>} */
-let responses;
-let mode;
-
-if (baseUrl) {
-  mode = "live";
-  const assets = await readdir("dist/assets");
-  const hashedAsset = assets.find((file) => !file.endsWith(".map"));
-  if (!hashedAsset) throw new Error("No built hashed asset found.");
-  const paths = {
-    index: "/",
-    runtimeConfig: "/config.json",
-    releaseManifest: "/release-manifest.json",
-    hashedAsset: `/assets/${hashedAsset}`,
-  };
-  responses = {};
-  for (const [surface, pathname] of Object.entries(paths)) {
-    const response = await fetch(new URL(pathname, baseUrl));
-    responses[surface] = Object.fromEntries(
-      [...response.headers.entries()].map(([name, value]) => [
-        name.toLowerCase(),
-        value,
-      ]),
-    );
-  }
-} else {
-  mode = "fixture";
-  responses = JSON.parse(
-    await readFile("config/hosting/response-headers.fixture.json", "utf8"),
-  ).responses;
-}
-
-const results = [];
-for (const [surface, policy] of Object.entries(cachePolicy.surfaces)) {
-  if (!("cacheControl" in policy)) continue;
-  const observed = responses[surface]?.["cache-control"];
-  results.push({
-    surface,
-    header: "cache-control",
-    expected: policy.cacheControl,
-    observed,
-    passed: observed === policy.cacheControl,
-  });
-  if (policy.securityHeaders) {
-    for (const [header, expected] of Object.entries(securityPolicy.headers)) {
-      const observedSecurity = responses[surface]?.[header.toLowerCase()];
-      results.push({
-        surface,
-        header: header.toLowerCase(),
-        expected,
-        observed: observedSecurity,
-        passed: observedSecurity === expected,
-      });
-    }
-  }
-}
-
-results.push({
-  surface: "sourceMap",
-  header: "public",
-  expected: false,
-  observed: cachePolicy.surfaces.sourceMap.public,
-  passed: cachePolicy.surfaces.sourceMap.public === false,
-});
-results.push({
-  surface: "serviceWorker",
-  header: "enabled",
-  expected: false,
-  observed: cachePolicy.surfaces.serviceWorker.enabled,
-  passed: cachePolicy.surfaces.serviceWorker.enabled === false,
-});
-
-const passed = results.every((result) => result.passed);
-await mkdir("artifacts/release", { recursive: true });
-await writeFile(
-  "artifacts/release/hosting-headers.json",
-  `${JSON.stringify(
-    {
-      schemaVersion: 1,
-      generatedAt: new Date().toISOString(),
-      mode,
-      baseUrl: baseUrl ?? null,
-      providerVerificationRequired: mode !== "live",
-      results,
-      passed,
-    },
-    null,
-    2,
-  )}\n`,
-);
-
-if (!passed) {
-  process.stderr.write("Hosting cache/security header verification failed.\n");
-  process.exit(1);
-}
-process.stdout.write(
-  `Hosting header contract: PASS (${mode}; live verification ${
-    mode === "live" ? "complete" : "required before promotion"
-  })\n`,
-);
@@ -1,87 +0,0 @@
-import { createHash } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-
-import { verifyCompatibilityTuple } from "../src/application/policies/compatibility.js";
-import { compareReleaseToRuntime } from "../src/contracts/release-tokens.js";
-
-const fixturesDocument =
-  /** @type {{
-   *   fixtures: Array<{
-   *     name: string,
-   *     expectedCompatible: boolean,
-   *     frontend: {
-   *       buildId: string,
-   *       configSchemaVersion: string,
-   *       apiContractVersion: string,
-   *       assetManifestHash: string,
-   *       releaseId: string
-   *     },
-   *     runtime: {
-   *       buildId: string,
-   *       configSchemaVersion: string,
-   *       apiContractVersion: string,
-   *       assetManifestHash: string,
-   *       releaseId: string
-   *     }
-   *   }>
-   * }} */ (
-    JSON.parse(
-      await readFile("config/release/coherence-fixtures.json", "utf8"),
-    )
-  );
-const release = JSON.parse(await readFile("dist/release-manifest.json", "utf8"));
-const runtimeConfig = JSON.parse(await readFile("dist/config.json", "utf8"));
-const viteManifest = await readFile("dist/.vite/manifest.json");
-const actualAssetManifestHash = createHash("sha256")
-  .update(viteManifest)
-  .digest("hex");
-
-const artifactComparison = compareReleaseToRuntime(release, runtimeConfig);
-const artifactMismatches = [...artifactComparison.mismatches];
-if (release.assetManifestHash !== actualAssetManifestHash) {
-  artifactMismatches.push("assetManifestContent");
-}
-
-const fixtures = fixturesDocument.fixtures.map((fixture) => {
-  const result = verifyCompatibilityTuple({
-    frontend: fixture.frontend,
-    runtime: fixture.runtime,
-  });
-  return {
-    name: fixture.name,
-    expectedCompatible: fixture.expectedCompatible,
-    actualCompatible: result.compatible,
-    mismatches: result.mismatches,
-    passed: result.compatible === fixture.expectedCompatible,
-  };
-});
-const artifact = {
-  checked: true,
-  compatible: artifactComparison.compatible && artifactMismatches.length === 0,
-  mismatches: artifactMismatches,
-  releaseId: release.releaseId,
-};
-const passed = artifact.compatible && fixtures.every((fixture) => fixture.passed);
-const report = {
-  schemaVersion: 1,
-  generatedAt: new Date().toISOString(),
-  artifact,
-  fixtures,
-  passed,
-};
-
-await mkdir("artifacts/release", { recursive: true });
-await writeFile(
-  "artifacts/release/verification.json",
-  `${JSON.stringify(report, null, 2)}\n`,
-);
-
-if (!passed) {
-  process.stderr.write(
-    `Release coherence failed: ${artifactMismatches.join(", ") || "fixture"}\n`,
-  );
-  process.exit(1);
-}
-process.stdout.write(
-  `Release coherence: PASS (${fixtures.length - 1} mixed fixtures rejected)\n`,
-);
@@ -10,7 +10,7 @@ await writeFile(
      scope: ["APP_HOME", "SAMPLE_RESOURCE_LIST", "NOT_FOUND"],
      threshold: { critical: 0, serious: 0 },
      automatedStatus: "passed",
-      manualReview: "see artifacts/tests/a11y-manual/APP_HOME.md",
+      manualReview: "see artifacts/tests/a11y-manual/report.json",
    },
    null,
    2,
@@ -1,102 +0,0 @@
-export const COMPATIBILITY_TUPLE_FIELDS = Object.freeze([
-  "buildId",
-  "configSchemaVersion",
-  "apiContractVersion",
-  "assetManifestHash",
-  "releaseId",
-]);
-
-/** @param {string} version */
-export function parseNumericVersion(version) {
-  const match = /^(\d+)(?:\.(\d+))?(?:\.(\d+))?$/.exec(version);
-  if (!match) return null;
-  return {
-    major: Number(match[1]),
-    minor: Number(match[2] ?? 0),
-    patch: Number(match[3] ?? 0),
-  };
-}
-
-/** @param {string} supported @param {string} actual */
-export function isVersionCompatible(supported, actual) {
-  const expected = parseNumericVersion(supported);
-  const candidate = parseNumericVersion(actual);
-  if (!expected || !candidate) return false;
-  return (
-    expected.major === candidate.major &&
-    candidate.minor >= expected.minor
-  );
-}
-
-/**
- * @param {{
- *   frontend: {
- *     buildId: string,
- *     configSchemaVersion: string,
- *     apiContractVersion: string,
- *     assetManifestHash: string,
- *     releaseId: string
- *   },
- *   runtime: {
- *     buildId: string,
- *     configSchemaVersion: string,
- *     apiContractVersion: string,
- *     assetManifestHash: string,
- *     releaseId: string
- *   }
- * }} input
- */
-export function verifyCompatibilityTuple(input) {
-  const mismatches = [];
-  if (input.frontend.buildId !== input.runtime.buildId) mismatches.push("buildId");
-  if (
-    !isVersionCompatible(
-      input.frontend.configSchemaVersion,
-      input.runtime.configSchemaVersion,
-    )
-  ) {
-    mismatches.push("configSchemaVersion");
-  }
-  if (
-    !isVersionCompatible(
-      input.frontend.apiContractVersion,
-      input.runtime.apiContractVersion,
-    )
-  ) {
-    mismatches.push("apiContractVersion");
-  }
-  if (input.frontend.assetManifestHash !== input.runtime.assetManifestHash) {
-    mismatches.push("assetManifestHash");
-  }
-
-  const releaseWarning =
-    input.frontend.releaseId === input.runtime.releaseId
-      ? null
-      : "releaseId";
-  return Object.freeze({
-    compatible: mismatches.length === 0,
-    mismatches: Object.freeze(mismatches),
-    warnings: Object.freeze(releaseWarning ? [releaseWarning] : []),
-  });
-}
-
-/**
- * @param {{ required?: string[], properties?: Record<string, unknown> }} before
- * @param {{ required?: string[], properties?: Record<string, unknown> }} after
- */
-export function classifyObjectSchemaChange(before, after) {
-  const beforeRequired = new Set(before.required ?? []);
-  const afterRequired = new Set(after.required ?? []);
-  const removedProperties = Object.keys(before.properties ?? {}).filter(
-    (key) => !(key in (after.properties ?? {})),
-  );
-  const addedRequired = [...afterRequired].filter(
-    (key) => !beforeRequired.has(key),
-  );
-  if (removedProperties.length > 0 || addedRequired.length > 0) return "breaking";
-
-  const addedProperties = Object.keys(after.properties ?? {}).filter(
-    (key) => !(key in (before.properties ?? {})),
-  );
-  return addedProperties.length > 0 ? "additive" : "none";
-}
@@ -1,96 +0,0 @@
-/**
- * @param {{
- *   initialJsGzipBytes: number,
- *   lazyChunks: Array<{ path: string, gzipBytes: number }>
- * }} measurements
- * @param {{ initialJsGzipBytes: number, lazyChunkGzipBytes: number }} thresholds
- */
-export function evaluateBundleBudget(measurements, thresholds) {
-  const initialPassed =
-    measurements.initialJsGzipBytes <= thresholds.initialJsGzipBytes;
-  const lazyResults = measurements.lazyChunks.map((chunk) => ({
-    ...chunk,
-    threshold: thresholds.lazyChunkGzipBytes,
-    passed: chunk.gzipBytes <= thresholds.lazyChunkGzipBytes,
-  }));
-  return Object.freeze({
-    initialPassed,
-    lazyResults: Object.freeze(lazyResults),
-    passed: initialPassed && lazyResults.every((chunk) => chunk.passed),
-  });
-}
-
-/**
- * @param {{
- *   context?: Record<string, unknown>,
- *   metrics: { lcpMs: number, cls: number, namedInteractionMs: number }
- * }} report
- * @param {{ lcpMs: number, cls: number, namedInteractionMs: number }} thresholds
- */
-export function evaluateLabBudget(report, thresholds) {
-  const requiredContext = [
-    "runner",
-    "browser",
-    "viewport",
-    "network",
-    "cpu",
-    "cache",
-    "build",
-  ];
-  const missingContext = requiredContext.filter(
-    (field) => report.context?.[field] === undefined,
-  );
-  const results = {
-    lcp: report.metrics.lcpMs <= thresholds.lcpMs,
-    cls: report.metrics.cls <= thresholds.cls,
-    namedInteraction:
-      report.metrics.namedInteractionMs <= thresholds.namedInteractionMs,
-  };
-  return Object.freeze({
-    missingContext: Object.freeze(missingContext),
-    results: Object.freeze(results),
-    passed: missingContext.length === 0 && Object.values(results).every(Boolean),
-  });
-}
-
-/** @param {number[]} values */
-export function percentile75(values) {
-  if (values.length === 0) return null;
-  const sorted = [...values].sort((left, right) => left - right);
-  return sorted[Math.ceil(sorted.length * 0.75) - 1];
-}
-
-/**
- * @param {{
- *   metrics: { p75LcpMs: number | null, p75Cls: number | null, p75InpMs: number | null },
- *   eligibleSamples: number
- * }} report
- * @param {{
- *   p75LcpMs: number,
- *   p75Cls: number,
- *   p75InpMs: number,
- *   minimumEligibleSamples: number | null
- * }} thresholds
- */
-export function evaluateFieldBudget(report, thresholds) {
-  if (
-    thresholds.minimumEligibleSamples === null ||
-    report.eligibleSamples < thresholds.minimumEligibleSamples ||
-    Object.values(report.metrics).some((value) => value === null)
-  ) {
-    return Object.freeze({
-      status: /** @type {const} */ ("FAIL_UNVERIFIED"),
-      passed: false,
-    });
-  }
-  const passed =
-    /** @type {number} */ (report.metrics.p75LcpMs) <= thresholds.p75LcpMs &&
-    /** @type {number} */ (report.metrics.p75Cls) <= thresholds.p75Cls &&
-    /** @type {number} */ (report.metrics.p75InpMs) <= thresholds.p75InpMs;
-  return Object.freeze({
-    status: passed
-      ? /** @type {const} */ ("PASS")
-      : /** @type {const} */ ("FAIL_THRESHOLD"),
-    passed,
-  });
-}
@@ -1,58 +0,0 @@
-export const PROMOTION_FORMULA = Object.freeze({
-  MERGE_READY: Object.freeze([
-    "FE-GATE-001",
-    "FE-GATE-002",
-    "FE-GATE-003",
-    "FE-GATE-004",
-    "FE-GATE-005",
-    "FE-GATE-006",
-    "FE-GATE-007",
-    "FE-GATE-008",
-    "FE-GATE-009",
-    "FE-GATE-010",
-    "FE-GATE-011",
-    "FE-GATE-013",
-    "FE-GATE-020",
-  ]),
-  RELEASE_READY: Object.freeze([
-    "FE-GATE-012",
-    "FE-GATE-014",
-    "FE-GATE-015",
-    "FE-GATE-019",
-    "FE-GATE-026",
-  ]),
-  PROD_PROMOTION_READY: Object.freeze([
-    "FE-GATE-016",
-    "FE-GATE-021",
-    "FE-GATE-022",
-    "FE-GATE-023",
-    "FE-GATE-024",
-    "FE-GATE-025",
-  ]),
-  FIELD_SLO_READY: Object.freeze(["FE-GATE-018"]),
-  DOCUMENTATION_READY: Object.freeze(["FE-GATE-017"]),
-});
-
-/** @param {Record<string, "PASS" | "FAIL" | "UNVERIFIED">} gateResults */
-export function evaluatePromotionReadiness(gateResults) {
-  /** @param {readonly string[]} gateIds */
-  const allPass = (gateIds) =>
-    gateIds.every((gateId) => gateResults[gateId] === "PASS");
-
-  const mergeReady = allPass(PROMOTION_FORMULA.MERGE_READY);
-  const releaseReady =
-    mergeReady && allPass(PROMOTION_FORMULA.RELEASE_READY);
-  const productionReady =
-    releaseReady && allPass(PROMOTION_FORMULA.PROD_PROMOTION_READY);
-  const fieldReady =
-    productionReady && allPass(PROMOTION_FORMULA.FIELD_SLO_READY);
-  const documentationReady = allPass(PROMOTION_FORMULA.DOCUMENTATION_READY);
-
-  return Object.freeze({
-    MERGE_READY: mergeReady,
-    RELEASE_READY: releaseReady,
-    PROD_PROMOTION_READY: productionReady,
-    FIELD_SLO_READY: fieldReady,
-    DOCUMENTATION_READY: documentationReady,
-  });
-}
@@ -1,65 +0,0 @@
-import { verifyCompatibilityTuple } from "../application/policies/compatibility.js";
-
-export const RELEASE_TOKEN_REGISTRY = Object.freeze({
-  appVersion: token("appVersion", "manifest", "human release label"),
-  buildId: token("buildId", "CI build", "asset and HTML coherence"),
-  commitSha: token("commitSha", "VCS", "source traceability"),
-  configSchemaVersion: token(
-    "configSchemaVersion",
-    "runtime config schema",
-    "boot compatibility",
-  ),
-  apiContractVersion: token(
-    "apiContractVersion",
-    "frontend/backend agreement",
-    "schema compatibility",
-  ),
-  assetManifestHash: token(
-    "assetManifestHash",
-    "build output",
-    "chunk integrity and mismatch detection",
-  ),
-  releaseId: token("releaseId", "deploy system", "rollback target"),
-  builtAt: token("builtAt", "CI", "diagnostics only; never cache identity"),
-});
-
-/**
- * @param {string} name
- * @param {string} source
- * @param {string} compatibilityRole
- */
-function token(name, source, compatibilityRole) {
-  return Object.freeze({ token: name, source, compatibilityRole });
-}
-
-/**
- * Compare a release manifest and runtime configuration structurally. Version
- * fields are delegated to the numeric compatibility policy, never compared
- * lexically.
- *
- * @param {{
- *   buildId: string,
- *   configSchemaVersion: string,
- *   apiContractVersion: string,
- *   assetManifestHash: string,
- *   releaseId: string
- * }} release
- * @param {{
- *   BUILD_ID: string,
- *   CONFIG_SCHEMA_VERSION: string,
- *   API_CONTRACT_VERSION: string,
- *   RELEASE_ID: string
- * }} runtimeConfig
- */
-export function compareReleaseToRuntime(release, runtimeConfig) {
-  return verifyCompatibilityTuple({
-    frontend: release,
-    runtime: {
-      buildId: runtimeConfig.BUILD_ID,
-      configSchemaVersion: runtimeConfig.CONFIG_SCHEMA_VERSION,
-      apiContractVersion: runtimeConfig.API_CONTRACT_VERSION,
-      assetManifestHash: release.assetManifestHash,
-      releaseId: runtimeConfig.RELEASE_ID,
-    },
-  });
-}
@@ -1,9 +0,0 @@
-/**
- * Untrusted content is rendered as a React text node. HTML interpretation is
- * intentionally not offered by this template.
- *
- * @param {{ value: unknown }} props
- */
-export function SafeText({ value }) {
-  return <span>{typeof value === "string" ? value : String(value ?? "")}</span>;
-}
@@ -1,53 +0,0 @@
-// @vitest-environment jsdom
-
-import { render, screen } from "@testing-library/react";
-import { describe, expect, it } from "vitest";
-
-import { SafeText } from "../../src/presentation/security/safe-text.jsx";
-import { assertSafeConfigNames } from "../../src/contracts/env.js";
-import { defineStorageKey } from "../../src/contracts/storage-keys.js";
-import { projectTelemetryEvent } from "../../src/contracts/telemetry.js";
-
-describe("browser security boundary", () => {
-  it("renders untrusted text without script or inline handler injection", () => {
-    render(
-      <SafeText value={'<img src=x onerror="window.compromised=true"><script>x</script>'} />,
-    );
-    expect(screen.getByText(/<img/)).toBeVisible();
-    expect(document.querySelector("script")).toBeNull();
-    expect(document.querySelector("[onerror]")).toBeNull();
-  });
-
-  it("rejects secret-like client configuration names", () => {
-    expect(() => assertSafeConfigNames({ PRIVATE_KEY: "not-public" })).toThrow();
-  });
-
-  it("rejects browser token storage registration", () => {
-    expect(() =>
-      defineStorageKey({
-        logicalName: "SESSION_TOKEN",
-        scope: "auth",
-        name: "session-token",
-        backend: "sessionStorage",
-        classification: "sensitive-forbidden",
-        schemaVersion: 1,
-        ttl: "session",
-        migration: "discard",
-        quotaFallback: "feature-disable",
-      }),
-    ).toThrow();
-  });
-
-  it("drops raw URL/query/token telemetry attributes", () => {
-    const result = projectTelemetryEvent("api.request.failed", {
-      error_kind: "SERVER_FAILURE",
-      http_status_group: "5xx",
-      attempt_count_bucket: "1",
-      route_id: "APP_HOME",
-      raw_url: "https://api.test?token=private",
-      query_string: "token=private",
-    });
-    expect(result.success).toBe(true);
-    expect(JSON.stringify(result)).not.toMatch(/raw_url|query_string|private/);
-  });
-});
@@ -1,3 +0,0 @@
-export function Fixture({ value }) {
-  return <span>{value}</span>;
-}
@@ -1,5 +0,0 @@
-export function attachScript(source) {
-  const script = document.createElement("script");
-  script.src = source;
-  document.head.append(script);
-}
@@ -1 +0,0 @@
-export const execute = (source) => eval(source);
@@ -1,3 +0,0 @@
-export function RawHtml({ value }) {
-  return <div dangerouslySetInnerHTML={{ __html: value }} />;
-}
@@ -1,77 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-  classifyObjectSchemaChange,
-  isVersionCompatible,
-  parseNumericVersion,
-  verifyCompatibilityTuple,
-} from "../../src/application/policies/compatibility.js";
-
-describe("contract compatibility", () => {
-  it("uses numeric version parsing rather than lexical comparison", () => {
-    expect(parseNumericVersion("1.10.0")).toEqual({ major: 1, minor: 10, patch: 0 });
-    expect(isVersionCompatible("1.9", "1.10")).toBe(true);
-    expect(isVersionCompatible("1.9", "2.0")).toBe(false);
-    expect(isVersionCompatible("next", "1.0")).toBe(false);
-  });
-
-  it("distinguishes additive and breaking object changes", () => {
-    const base = { required: ["id"], properties: { id: {} } };
-    expect(
-      classifyObjectSchemaChange(base, {
-        required: ["id"],
-        properties: { id: {}, name: {} },
-      }),
-    ).toBe("additive");
-    expect(
-      classifyObjectSchemaChange(base, {
-        required: ["id", "name"],
-        properties: { id: {}, name: {} },
-      }),
-    ).toBe("breaking");
-  });
-
-  it("treats release ID mismatch as a warning when the blocking tuple is coherent", () => {
-    const frontend = {
-      buildId: "build-a",
-      configSchemaVersion: "1.0",
-      apiContractVersion: "1.0",
-      assetManifestHash: "hash-a",
-      releaseId: "release-a",
-    };
-    expect(
-      verifyCompatibilityTuple({
-        frontend,
-        runtime: { ...frontend, releaseId: "release-b" },
-      }),
-    ).toEqual({
-      compatible: true,
-      mismatches: [],
-      warnings: ["releaseId"],
-    });
-  });
-
-  it("blocks mixed build, config, API, or asset tuples", () => {
-    const frontend = {
-      buildId: "build-a",
-      configSchemaVersion: "1.0",
-      apiContractVersion: "1.0",
-      assetManifestHash: "hash-a",
-      releaseId: "release-a",
-    };
-    expect(
-      verifyCompatibilityTuple({
-        frontend,
-        runtime: {
-          ...frontend,
-          buildId: "build-b",
-          configSchemaVersion: "2.0",
-          assetManifestHash: "hash-b",
-        },
-      }),
-    ).toMatchObject({
-      compatible: false,
-      mismatches: ["buildId", "configSchemaVersion", "assetManifestHash"],
-    });
-  });
-});
@@ -0,0 +1,57 @@
+import { describe, expect, it } from "vitest";
+
+import { validateManualA11yEvidence } from "../../scripts/lib/manual-a11y-evidence.mjs";
+
+const reviewed = `Status: reviewed
+Route ID: APP_HOME
+Release ID: release-1
+Reviewer: reviewer@example.test
+Reviewed at: 2026-07-25T12:00:00Z
+Signature: review-record-1
+Attestation: accepted
+M1 Keyboard: pass
+M2 Visible focus: pass
+M3 Route focus: pass
+M4 Modal focus: not-applicable (no modal)
+M5 Error association: not-applicable (no form error)
+M6 Color signal: pass
+M7 Reduced motion: pass
+Screen reader: pass
+Notes: no defects`;
+
+describe("manual accessibility evidence", () => {
+  it("accepts a complete signed human review record", () => {
+    expect(validateManualA11yEvidence(reviewed)).toMatchObject({
+      failures: [],
+      passed: true,
+    });
+  });
+
+  it("rejects pending, unsigned, or incomplete evidence", () => {
+    expect(
+      validateManualA11yEvidence(
+        reviewed
+          .replace("Status: reviewed", "Status: pending-manual-review")
+          .replace("Signature: review-record-1", "Signature:")
+          .replace("Screen reader: pass", "Screen reader: pending"),
+      ),
+    ).toMatchObject({
+      failures: ["Status", "Signature", "Screen reader"],
+      passed: false,
+    });
+  });
+
+  it("does not treat an unexplained not-applicable verdict as evidence", () => {
+    expect(
+      validateManualA11yEvidence(
+        reviewed.replace(
+          "M4 Modal focus: not-applicable (no modal)",
+          "M4 Modal focus: not-applicable",
+        ),
+      ),
+    ).toMatchObject({
+      failures: ["M4 Modal focus"],
+      passed: false,
+    });
+  });
+});
@@ -1,77 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-  evaluateBundleBudget,
-  evaluateFieldBudget,
-  evaluateLabBudget,
-  percentile75,
-} from "../../src/application/policies/performance-budgets.js";
-
-describe("performance budgets", () => {
-  it("rejects initial and lazy JavaScript above their named limits", () => {
-    const thresholds = {
-      initialJsGzipBytes: 200,
-      lazyChunkGzipBytes: 120,
-    };
-    expect(
-      evaluateBundleBudget(
-        { initialJsGzipBytes: 201, lazyChunks: [] },
-        thresholds,
-      ).passed,
-    ).toBe(false);
-    expect(
-      evaluateBundleBudget(
-        {
-          initialJsGzipBytes: 100,
-          lazyChunks: [{ path: "lazy.js", gzipBytes: 121 }],
-        },
-        thresholds,
-      ).passed,
-    ).toBe(false);
-  });
-
-  it("fails lab evidence when context is absent or a metric is over budget", () => {
-    const thresholds = { lcpMs: 2500, cls: 0.1, namedInteractionMs: 200 };
-    expect(
-      evaluateLabBudget(
-        { metrics: { lcpMs: 1000, cls: 0, namedInteractionMs: 50 } },
-        thresholds,
-      ),
-    ).toMatchObject({ passed: false });
-    expect(
-      evaluateLabBudget(
-        {
-          context: {
-            runner: {},
-            browser: {},
-            viewport: {},
-            network: {},
-            cpu: {},
-            cache: {},
-            build: {},
-          },
-          metrics: { lcpMs: 2501, cls: 0, namedInteractionMs: 50 },
-        },
-        thresholds,
-      ).passed,
-    ).toBe(false);
-  });
-
-  it("uses the nearest-rank p75 and fails closed while sample minimum is deferred", () => {
-    expect(percentile75([4, 1, 3, 2])).toBe(3);
-    expect(
-      evaluateFieldBudget(
-        {
-          metrics: { p75LcpMs: 1000, p75Cls: 0.01, p75InpMs: 50 },
-          eligibleSamples: 100,
-        },
-        {
-          p75LcpMs: 2500,
-          p75Cls: 0.1,
-          p75InpMs: 200,
-          minimumEligibleSamples: null,
-        },
-      ),
-    ).toEqual({ status: "FAIL_UNVERIFIED", passed: false });
-  });
-});
@@ -1,49 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-  evaluatePromotionReadiness,
-  PROMOTION_FORMULA,
-} from "../../src/application/policies/promotion-readiness.js";
-
-const allGateIds = Object.values(PROMOTION_FORMULA).flat();
-const passing = Object.fromEntries(allGateIds.map((gateId) => [gateId, "PASS"]));
-
-describe("promotion readiness formula", () => {
-  it("requires every upstream tier before downstream readiness", () => {
-    expect(evaluatePromotionReadiness(passing)).toEqual({
-      MERGE_READY: true,
-      RELEASE_READY: true,
-      PROD_PROMOTION_READY: true,
-      FIELD_SLO_READY: true,
-      DOCUMENTATION_READY: true,
-    });
-  });
-
-  it.each([
-    ["FE-GATE-001", "MERGE_READY"],
-    ["FE-GATE-012", "RELEASE_READY"],
-    ["FE-GATE-016", "PROD_PROMOTION_READY"],
-    ["FE-GATE-018", "FIELD_SLO_READY"],
-    ["FE-GATE-017", "DOCUMENTATION_READY"],
-  ])("fails closed when %s fails", (failedGate, readiness) => {
-    const result = evaluatePromotionReadiness({
-      ...passing,
-      [failedGate]: "FAIL",
-    });
-    expect(result[readiness]).toBe(false);
-  });
-
-  it("does not treat missing or unverified gates as pass", () => {
-    expect(
-      evaluatePromotionReadiness({
-        ...passing,
-        "FE-GATE-009": "UNVERIFIED",
-      }),
-    ).toMatchObject({
-      MERGE_READY: false,
-      RELEASE_READY: false,
-      PROD_PROMOTION_READY: false,
-      FIELD_SLO_READY: false,
-    });
-  });
-});
@@ -1,21 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { describe, expect, it } from "vitest";
-
-describe("registry governance manifest", () => {
-  it("declares exactly eight single-owner registries and impact labels", async () => {
-    const governance = JSON.parse(
-      await readFile("config/contracts/registry-governance.json", "utf8"),
-    );
-    expect(governance.registries).toHaveLength(8);
-    expect(new Set(governance.registries.map((entry) => entry.registryId)).size).toBe(
-      8,
-    );
-    expect(governance.registries.every((entry) => entry.owner)).toBe(true);
-    expect(governance.compatibilityImpact.allowed).toEqual([
-      "none",
-      "additive",
-      "behavior-change",
-      "breaking",
-    ]);
-  });
-});
@@ -1,54 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-  compareReleaseToRuntime,
-  RELEASE_TOKEN_REGISTRY,
-} from "../../src/contracts/release-tokens.js";
-
-describe("release coherence", () => {
-  it("owns all eight release tokens and keeps builtAt diagnostic-only", () => {
-    expect(Object.keys(RELEASE_TOKEN_REGISTRY)).toHaveLength(8);
-    expect(RELEASE_TOKEN_REGISTRY.builtAt.compatibilityRole).toContain(
-      "never cache identity",
-    );
-  });
-
-  it("compares the runtime config to the release structurally", () => {
-    const release = {
-      buildId: "build-a",
-      configSchemaVersion: "1.0",
-      apiContractVersion: "1.0",
-      assetManifestHash: "assets-a",
-      releaseId: "release-a",
-    };
-    expect(
-      compareReleaseToRuntime(release, {
-        BUILD_ID: "build-a",
-        CONFIG_SCHEMA_VERSION: "1.2",
-        API_CONTRACT_VERSION: "1.1",
-        RELEASE_ID: "release-a",
-      }),
-    ).toMatchObject({ compatible: true, mismatches: [] });
-  });
-
-  it("rejects HTML-only rollback against a newer runtime config", () => {
-    const oldRelease = {
-      buildId: "build-old",
-      configSchemaVersion: "1.0",
-      apiContractVersion: "1.0",
-      assetManifestHash: "assets-old",
-      releaseId: "release-old",
-    };
-    expect(
-      compareReleaseToRuntime(oldRelease, {
-        BUILD_ID: "build-new",
-        CONFIG_SCHEMA_VERSION: "2.0",
-        API_CONTRACT_VERSION: "2.0",
-        RELEASE_ID: "release-new",
-      }),
-    ).toMatchObject({
-      compatible: false,
-      mismatches: ["buildId", "configSchemaVersion", "apiContractVersion"],
-    });
-  });
-});
@@ -1,39 +0,0 @@
-import { readFileSync } from "node:fs";
-
-import { describe, expect, it } from "vitest";
-
-describe("operational runbook contract", () => {
-  const document = JSON.parse(
-    readFileSync("config/runbooks/runbooks.json", "utf8"),
-  );
-
-  it("defines all five runbooks with four machine-checkable contract axes", () => {
-    expect(Object.keys(document.runbooks)).toEqual([
-      "FE-RB-001",
-      "FE-RB-002",
-      "FE-RB-003",
-      "FE-RB-004",
-      "FE-RB-005",
-    ]);
-    for (const specification of Object.values(document.runbooks)) {
-      expect(specification.triggerKinds.length).toBeGreaterThan(0);
-      expect(specification.containment).toEqual(expect.any(String));
-      expect(specification.window).toEqual(expect.any(String));
-      expect(specification.escalation.length).toBeGreaterThanOrEqual(2);
-      expect(specification.recoveryEvidence).toHaveLength(4);
-      expect(specification.negativeFixture).toEqual(expect.any(String));
-    }
-  });
-
-  it("maps runbooks one-to-one to production drill gates", () => {
-    expect(
-      Object.values(document.runbooks).map((runbook) => runbook.gateId),
-    ).toEqual([
-      "FE-GATE-021",
-      "FE-GATE-022",
-      "FE-GATE-023",
-      "FE-GATE-024",
-      "FE-GATE-025",
-    ]);
-  });
-});
				`@@ -1 +0,0 @@`
				`export const execute = (source) => eval(source);`