chore: initialize from frontend template 4dc033c

tests/fixtures/architecture/allowed/bootstrap-composes-adapter.ts

@@ -0,0 +1,3 @@
+import { createRuntimeAdapters } from "../../../../src/bootstrap/runtime-adapters.ts";
+
+export const bootstrapFactory = createRuntimeAdapters;

tests/fixtures/architecture/allowed/presentation-facade.ts

@@ -0,0 +1,3 @@
+import { createApplication } from "../../../../src/application/create-application.ts";
+
+export const applicationFactory = createApplication;

tests/fixtures/architecture/allowed/presentation-facade.tsx

@@ -0,0 +1,7 @@
+import { createApplication } from "../../../../src/application/create-application.ts";
+
+export const applicationFactory = createApplication;
+
+export function AllowedPresentationFixture() {
+  return <p>allowed</p>;
+}

tests/fixtures/architecture/dependency-graph/allowed/application/read-value.ts

@@ -0,0 +1,5 @@
+import type { Value } from "../domain/value.ts";
+
+export function readValue(): Value {
+  return { id: "fixture-value" };
+}

tests/fixtures/architecture/dependency-graph/allowed/domain/value.ts

@@ -0,0 +1,3 @@
+export type Value = {
+  readonly id: string;
+};

tests/fixtures/architecture/dependency-graph/allowed/presentation/value-view.tsx

@@ -0,0 +1,5 @@
+import { readValue } from "../application/read-value.ts";
+
+export function ValueView() {
+  return <p>{readValue().id}</p>;
+}

tests/fixtures/architecture/dependency-graph/cycle/application/first.ts

@@ -0,0 +1,3 @@
+import { second } from "./second.ts";
+
+export const first = `first:${second}`;

tests/fixtures/architecture/dependency-graph/cycle/application/second.ts

@@ -0,0 +1,3 @@
+import { first } from "./first.ts";
+
+export const second = `second:${first}`;

tests/fixtures/architecture/dependency-graph/layer/adapters/runtime.ts

@@ -0,0 +1 @@
+export const runtimeName = "forbidden-runtime";

tests/fixtures/architecture/dependency-graph/layer/application/use-runtime.ts

@@ -0,0 +1,3 @@
+import { runtimeName } from "../adapters/runtime.ts";
+
+export const selectedRuntime = runtimeName;

tests/fixtures/architecture/dependency-graph/unresolved/application/load-value.ts

@@ -0,0 +1,5 @@
+const modulePath = "../domain/value.ts";
+
+export async function loadValue() {
+  return import(modulePath);
+}

tests/fixtures/architecture/dependency-graph/unresolved/application/read-value.ts

@@ -0,0 +1,8 @@
+import "/definitely-missing-architecture-fixture.ts";
+import "architecture-fixture-package-that-does-not-exist";
+import "file:///definitely-missing-architecture-fixture.ts";
+import type { Value } from "../domain/missing-value.ts";
+
+export function readValue(value: Value) {
+  return value;
+}

tests/fixtures/architecture/dependency-graph/unresolved/application/require-value.ts

@@ -0,0 +1,5 @@
+const modulePath = "../domain/value.ts";
+
+export function requireValue() {
+  return require(modulePath);
+}

tests/fixtures/architecture/forbidden/application-imports-adapter.ts

@@ -0,0 +1,3 @@
+import { createHttpClient } from "../../../../src/adapters/http/client.ts";
+
+export const leakedHttpFactory = createHttpClient;

tests/fixtures/architecture/forbidden/application-imports-tanstack.ts

@@ -0,0 +1,3 @@
+import { QueryClient } from "@tanstack/react-query";
+
+export const invalidClient = new QueryClient();

tests/fixtures/architecture/forbidden/domain-imports-react.ts

@@ -0,0 +1,3 @@
+import React from "react";
+
+export const invalidDomainValue = React.createElement("div");

tests/fixtures/architecture/forbidden/presentation-direct-fetch.tsx

@@ -0,0 +1,4 @@
+export function DirectFetchPage() {
+  void fetch("/api/forbidden");
+  return <p>forbidden</p>;
+}

tests/fixtures/architecture/forbidden/presentation-imports-adapter.ts

@@ -0,0 +1,3 @@
+import "../../../../src/adapters/http/client.ts";
+
+export const invalidEdge = true;

tests/fixtures/architecture/forbidden/presentation-imports-adapter.tsx

@@ -0,0 +1,5 @@
+import "../../../../src/adapters/http/client.ts";
+
+export function InvalidPresentationFixture() {
+  return <p>invalid</p>;
+}

tests/fixtures/architecture/forbidden/presentation-imports-output-port.tsx

@@ -0,0 +1,5 @@
+import type { ApplicationOutputPorts } from "../../../../src/application/ports/out/application-output-ports.ts";
+
+export function OutputPortLeak(_props: ApplicationOutputPorts) {
+  return <p>forbidden</p>;
+}

tests/fixtures/architecture/forbidden/presentation-imports-tanstack.tsx

@@ -0,0 +1,3 @@
+import { useQuery } from "@tanstack/react-query";
+
+export const leakedQueryHook = useQuery;

tests/fixtures/architecture/forbidden/template-imports-application.tsx

@@ -0,0 +1,5 @@
+import type { ApplicationApi } from "../../../../src/application/ports/in/application-api.ts";
+
+export function ForbiddenTemplate(_props: { application: ApplicationApi }) {
+  return <main>Template must not select an application use case.</main>;
+}

tests/fixtures/browser-file-storage-boundaries/allowed/browser-storage-host.ts

@@ -0,0 +1,6 @@
+export function createOwnedBrowserStorageCapabilities() {
+  return {
+    local: localStorage,
+    session: sessionStorage,
+  };
+}

tests/fixtures/browser-file-storage-boundaries/allowed/cross-context-host.ts

@@ -0,0 +1,6 @@
+export function createOwnedCrossContextCapabilities() {
+  return {
+    channel: new BroadcastChannel("owned-cross-context-fixture"),
+    storage: localStorage,
+  };
+}

tests/fixtures/browser-file-storage-boundaries/allowed/policy-port.ts

@@ -0,0 +1,17 @@
+import type { BrowserStoragePolicy } from "../../../../src/application/ports/browser-file-storage/shared.ts";
+
+export const POLICY: BrowserStoragePolicy = {
+  owner: "fixture-owner",
+  namespace: "fixture",
+  classification: "INTERNAL",
+  authority: "RECONSTRUCTABLE",
+  accountScope: "OPAQUE_PARTITION",
+  retention: { kind: "TTL", maxAgeMs: 1_000 },
+  softBudgetBytes: 1_000,
+  hardBudgetBytes: 2_000,
+  evictionPriority: "RECONSTRUCTABLE",
+  logoutAction: "EXPORT_THEN_PURGE",
+  accountDeletionAction: "PURGE_PARTITION",
+  pressureAction: "RETAIN",
+  unavailableFallback: "ONLINE_ONLY",
+};

tests/fixtures/browser-file-storage-boundaries/forbidden/aliased-globalthis.ts

@@ -0,0 +1,4 @@
+export function bypassThroughAlias() {
+  const browser = globalThis;
+  return browser.indexedDB.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/class-field-alias.ts

@@ -0,0 +1,5 @@
+class BrowserRootHolder {
+  readonly root = globalThis;
+}
+
+new BrowserRootHolder().root.indexedDB.open("forbidden");

tests/fixtures/browser-file-storage-boundaries/forbidden/computed-alias.ts

@@ -0,0 +1,4 @@
+export function bypassThroughComputedAlias() {
+  const browser = globalThis;
+  return browser["caches"].open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/constructor-root-escape.ts

@@ -0,0 +1,5 @@
+class BrowserRootBox {
+  constructor(readonly root: typeof globalThis) {}
+}
+
+new BrowserRootBox(globalThis).root.indexedDB.open("forbidden");

tests/fixtures/browser-file-storage-boundaries/forbidden/default-parameter-alias.ts

@@ -0,0 +1,3 @@
+export function bypassThroughDefault(browser = globalThis) {
+  return browser.indexedDB.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-blob.ts

@@ -0,0 +1,3 @@
+export function constructBlobOutsideOwnedAdapter() {
+  return new Blob(["forbidden"]);
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-broadcast-channel.ts

@@ -0,0 +1,3 @@
+export function openBroadcastChannelDirectly() {
+  return new BroadcastChannel("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-cache-storage.ts

@@ -0,0 +1,3 @@
+export function openCacheDirectly() {
+  return caches.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-indexeddb.ts

@@ -0,0 +1,3 @@
+export function openDatabaseDirectly() {
+  return indexedDB.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-local-storage.ts

@@ -0,0 +1,3 @@
+export function writeLocalStorageDirectly() {
+  localStorage.setItem("forbidden", "value");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-opfs.ts

@@ -0,0 +1,3 @@
+export function openOpfsDirectly() {
+  return navigator.storage.getDirectory();
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/direct-session-storage.ts

@@ -0,0 +1,3 @@
+export function writeSessionStorageDirectly() {
+  sessionStorage.setItem("forbidden", "value");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/dynamic-capability-key.ts

@@ -0,0 +1,5 @@
+export function bypassThroughDynamicCapabilityKey() {
+  const browser = globalThis;
+  const capability = "indexedDB";
+  return browser[capability].open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/global-object-container.ts

@@ -0,0 +1,4 @@
+export function bypassThroughObjectContainer() {
+  const holder = { browser: globalThis };
+  return holder.browser.indexedDB.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/globalthis-storage.ts

@@ -0,0 +1,3 @@
+export function bypassThroughGlobalThis() {
+  return globalThis.indexedDB.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/identity-wrapped-global.ts

@@ -0,0 +1,7 @@
+function identity<Value>(value: Value): Value {
+  return value;
+}
+
+export function bypassThroughIdentityWrapper() {
+  return identity(globalThis).indexedDB.open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/instance-property-alias.ts

@@ -0,0 +1,4 @@
+const holder: { root?: typeof globalThis } = {};
+
+holder.root = globalThis;
+holder.root.indexedDB.open("forbidden");

tests/fixtures/browser-file-storage-boundaries/forbidden/object-url.ts

@@ -0,0 +1,3 @@
+export function allocateObjectUrlDirectly(value: never) {
+  return URL.createObjectURL(value);
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/property-descriptor-access.ts

@@ -0,0 +1,7 @@
+export function bypassThroughPropertyDescriptor() {
+  const descriptor = Object.getOwnPropertyDescriptor(
+    globalThis,
+    "indexedDB",
+  );
+  return (descriptor?.value as IDBFactory).open("forbidden");
+}

tests/fixtures/browser-file-storage-boundaries/forbidden/reflect-get.ts

@@ -0,0 +1,3 @@
+export function bypassThroughReflection() {
+  return Reflect.get(globalThis, "indexedDB");
+}

tests/fixtures/ci-contract/duplicate-gate-id.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": 2,
+  "providerAdapter": ".gitea/workflows/quality-gates.yml",
+  "commands": [],
+  "artifactSchemas": [{ "id": "text", "kind": "text", "maxBytes": 1024 }],
+  "artifacts": [{ "id": "log", "path": "artifacts/gate.txt", "schemaId": "text", "production": "runner-generated" }],
+  "gates": [
+    { "id": "FE-GATE-001", "name": "one", "commandIds": ["command"], "logArtifactId": "log", "evidenceArtifactIds": ["log"], "retentionClassId": "merge" },
+    { "id": "FE-GATE-001", "name": "duplicate", "commandIds": ["command"], "logArtifactId": "log", "evidenceArtifactIds": ["log"], "retentionClassId": "merge" }
+  ],
+  "stages": [],
+  "jobs": [],
+  "retention": { "durationStatus": "UNSUPPORTED", "classes": [{ "id": "merge", "policy": "one cycle" }] }
+}

tests/fixtures/ci-contract/job-cycle.json

@@ -0,0 +1,4 @@
+{
+  "jobId": "merge_gate",
+  "needs": ["release_gate"]
+}

tests/fixtures/ci-contract/missing-artifact-schema.json

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 2,
+  "providerAdapter": ".gitea/workflows/quality-gates.yml",
+  "commands": [],
+  "artifactSchemas": [],
+  "artifacts": [{ "id": "log", "path": "artifacts/gate.txt", "schemaId": "missing", "production": "runner-generated" }],
+  "gates": [],
+  "stages": [],
+  "jobs": [],
+  "retention": { "durationStatus": "UNSUPPORTED", "classes": [] }
+}

tests/fixtures/ci-contract/multiply-owned-gate.json

@@ -0,0 +1,4 @@
+{
+  "jobId": "release_gate",
+  "addGateId": "FE-GATE-001"
+}

tests/fixtures/ci-contract/unknown-field.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 2,
+  "providerAdapter": ".gitea/workflows/quality-gates.yml",
+  "commands": [],
+  "artifactSchemas": [],
+  "artifacts": [],
+  "gates": [],
+  "stages": [],
+  "jobs": [],
+  "retention": { "durationStatus": "UNSUPPORTED", "classes": [] },
+  "unexpected": true
+}

tests/fixtures/ci-contract/unknown-job-dependency.json

@@ -0,0 +1,4 @@
+{
+  "jobId": "merge_gate",
+  "needs": ["missing"]
+}

tests/fixtures/ci-contract/unowned-gate.json

@@ -0,0 +1,4 @@
+{
+  "jobId": "merge_gate",
+  "removeGateId": "FE-GATE-001"
+}

tests/fixtures/coverage/below-threshold.json

@@ -0,0 +1,14 @@
+{
+  "total": {
+    "lines": { "pct": 0 },
+    "statements": { "pct": 0 },
+    "functions": { "pct": 0 },
+    "branches": { "pct": 0 }
+  },
+  "src/adapters/http/http-execution-v3.ts": {
+    "lines": { "pct": 0 },
+    "statements": { "pct": 0 },
+    "functions": { "pct": 0 },
+    "branches": { "pct": 0 }
+  }
+}

tests/fixtures/coverage/repository-omission.json

@@ -0,0 +1,50 @@
+{
+  "total": {
+    "lines": { "total": 14, "covered": 14, "skipped": 0, "pct": 100 },
+    "statements": { "total": 14, "covered": 14, "skipped": 0, "pct": 100 },
+    "functions": { "total": 14, "covered": 14, "skipped": 0, "pct": 100 },
+    "branches": { "total": 14, "covered": 14, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/http/bounded-body-reader.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/http/bounded-json.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/http/http-execution-v3.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/http/request-builder.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/http/retry-policy.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/query-cache/server-state-scope-runtime.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/service-worker/service-worker-lifecycle.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/storage/browser-storage-adapter.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/adapters/telemetry/best-effort-telemetry.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/application/create-application.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/application/policies/compatibility.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/application/policies/performance-budgets.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/application/policies/promotion-readiness.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  },
+  "src/application/use-cases/decide-chunk-recovery.ts": {
+    "lines": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "statements": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "functions": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }, "branches": { "total": 1, "covered": 1, "skipped": 0, "pct": 100 }
+  }
+}

tests/fixtures/design-system/forbidden/deep-import.tsx

@@ -0,0 +1,3 @@
+import { Button } from "../../../../src/presentation/design-system/primitives/core.tsx";
+
+export const DeepImport = Button;

tests/fixtures/design-system/forbidden/direct-icon.tsx

@@ -0,0 +1,3 @@
+import { Menu } from "lucide-react";
+
+export const DirectIcon = Menu;

tests/fixtures/design-system/forbidden/raw-palette.tsx

@@ -0,0 +1,3 @@
+export function RawPalette() {
+  return <div style={{ color: "#ff0000" }}>raw palette</div>;
+}

tests/fixtures/design-system/forbidden/tooltip-only.tsx

@@ -0,0 +1 @@
+export const TOOLTIP_ONLY_REQUIRED_INFORMATION = "Required approval details";

tests/fixtures/diagnostics/forbidden/direct-console.ts

@@ -0,0 +1,3 @@
+export function leakToConsole(token: string) {
+  console.error("UNKNOWN_DIAGNOSTIC_EVENT", token);
+}

tests/fixtures/diagnostics/forbidden/raw-context.ts

@@ -0,0 +1,8 @@
+export function leakSensitiveContext(telemetry: {
+  emit(eventName: string, context: Record<string, unknown>): void;
+}) {
+  telemetry.emit("api.request.failed", {
+    authorization: "Bearer secret",
+    request_body: { email: "private@example.test" },
+  });
+}

tests/fixtures/i18n/forbidden/backend-message.tsx

@@ -0,0 +1,5 @@
+export function UnsafeBackendFailure({
+  failure,
+}: Readonly<{ failure: { message: string } }>) {
+  return <p>{failure.message}</p>;
+}

tests/fixtures/i18n/forbidden/hardcoded-common.tsx

@@ -0,0 +1,3 @@
+export function HardcodedCommonAction() {
+  return <button type="button">다시 시도</button>;
+}

tests/fixtures/i18n/forbidden/unsafe-html.tsx

@@ -0,0 +1,3 @@
+export function UnsafeTranslatedMarkup({ value }: Readonly<{ value: string }>) {
+  return <p dangerouslySetInnerHTML={{ __html: value }} />;
+}

tests/fixtures/optional-recipes/forbidden/credential-leak/src/adapters/bad-storage.ts

@@ -0,0 +1,3 @@
+export function persistCredential(token: string) {
+  localStorage.setItem("authToken", token);
+}

tests/fixtures/optional-recipes/forbidden/production-import/src/bad.ts

@@ -0,0 +1,3 @@
+import { OPTIONAL_RECIPE_RUNTIME_SENTINEL } from "../../../../../../recipes/frontend-capabilities/index.ts";
+
+export const recipeInProduction = OPTIONAL_RECIPE_RUNTIME_SENTINEL;

tests/fixtures/optional-recipes/forbidden/runtime-composition/src/bootstrap/bad-runtime.ts

@@ -0,0 +1,3 @@
+import { createIndexedDbRepository } from "../../../adapters/storage/indexeddb/indexeddb-repository.ts";
+
+export const composedWithoutProjectSelection = createIndexedDbRepository;

tests/fixtures/optional-recipes/forbidden/server-state/src/bad-store.ts

@@ -0,0 +1,3 @@
+export const store = createStore({
+  serverState: [{ id: "copied-from-query-cache" }],
+});

tests/fixtures/optional-recipes/forbidden/vendor-import/src/presentation/bad-vendor.ts

@@ -0,0 +1,3 @@
+import { initialize } from "@launchdarkly/client-sdk";
+
+export const leakedVendor = initialize;

tests/fixtures/realtime-boundaries/allowed/src/adapters/realtime/native-websocket.ts

@@ -0,0 +1,3 @@
+export function createOwnedWebSocket(endpoint: string): WebSocket {
+  return new WebSocket(endpoint, "realtime.v1");
+}

tests/fixtures/realtime-boundaries/allowed/src/adapters/web-push/native-push.ts

@@ -0,0 +1,5 @@
+export async function readOwnedPushSubscription(
+  registration: ServiceWorkerRegistration,
+): Promise<PushSubscription | null> {
+  return registration.pushManager.getSubscription();
+}

tests/fixtures/realtime-boundaries/forbidden/src/bootstrap/composed-realtime.ts

@@ -0,0 +1,3 @@
+import { createWebSocketConnection } from "../../../adapters/realtime/websocket/websocket-connection.ts";
+
+export const incorrectlyComposed = createWebSocketConnection;

tests/fixtures/realtime-boundaries/forbidden/src/presentation/direct-realtime.ts

@@ -0,0 +1,4 @@
+export function createRouteOwnedSocket(endpoint: string): WebSocket {
+  setInterval(() => undefined, 1_000);
+  return new WebSocket(endpoint);
+}

tests/fixtures/registry/compatibility/semantic-diff.json

@@ -0,0 +1,225 @@
+{
+  "schemaVersion": 1,
+  "cases": [
+    {
+      "id": "ordering-only",
+      "expected": "none",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": {
+              "A": { "path": "/a", "tags": ["one", "two"] },
+              "B": { "path": "/b", "tags": ["three"] }
+            }
+          }
+        ]
+      },
+      "after": {
+        "registries": [
+          {
+            "rows": {
+              "B": { "tags": ["three"], "path": "/b" },
+              "A": { "tags": ["two", "one"], "path": "/a" }
+            },
+            "contract": { "breakingFields": ["path"] },
+            "registryId": "FE-REG-TEST"
+          }
+        ],
+        "schemaVersion": 2
+      }
+    },
+    {
+      "id": "row-addition",
+      "expected": "additive",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "path": "/a" } }
+          }
+        ]
+      },
+      "after": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": {
+              "A": { "path": "/a" },
+              "B": { "path": "/b" }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "id": "behavior-change",
+      "expected": "behavior-change",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "path": "/a", "owner": "one" } }
+          }
+        ]
+      },
+      "after": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "path": "/a", "owner": "two" } }
+          }
+        ]
+      }
+    },
+    {
+      "id": "row-removal",
+      "expected": "breaking",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": {
+              "A": { "path": "/a" },
+              "B": { "path": "/b" }
+            }
+          }
+        ]
+      },
+      "after": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "path": "/a" } }
+          }
+        ]
+      }
+    },
+    {
+      "id": "field-type-narrowing",
+      "expected": "breaking",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "limit": 10 } }
+          }
+        ]
+      },
+      "after": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "limit": "10" } }
+          }
+        ]
+      }
+    },
+    {
+      "id": "route-path-change",
+      "expected": "breaking",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "path": "/before" } }
+          }
+        ]
+      },
+      "after": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": { "breakingFields": ["path"] },
+            "rows": { "A": { "path": "/after" } }
+          }
+        ]
+      }
+    },
+    {
+      "id": "registry-contract-narrowing",
+      "expected": "breaking",
+      "before": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": {
+              "breakingFields": ["path"],
+              "allowedValues": { "kind": ["one", "two"] }
+            },
+            "rows": { "A": { "path": "/a", "kind": "one" } }
+          }
+        ]
+      },
+      "after": {
+        "schemaVersion": 2,
+        "registries": [
+          {
+            "registryId": "FE-REG-TEST",
+            "contract": {
+              "breakingFields": ["path"],
+              "allowedValues": { "kind": ["one"] }
+            },
+            "rows": { "A": { "path": "/a", "kind": "one" } }
+          }
+        ]
+      }
+    }
+  ],
+  "breakingEvidence": {
+    "before": {
+      "schemaVersion": 2,
+      "registries": [
+        {
+          "registryId": "FE-REG-TEST",
+          "contract": { "breakingFields": ["path"] },
+          "rows": { "A": { "path": "/before" } }
+        }
+      ]
+    },
+    "after": {
+      "schemaVersion": 2,
+      "registries": [
+        {
+          "registryId": "FE-REG-TEST",
+          "contract": { "breakingFields": ["path"] },
+          "rows": { "A": { "path": "/after" } }
+        }
+      ]
+    }
+  },
+  "tamperedApproval": {
+    "snapshot": {
+      "schemaVersion": 2,
+      "registries": []
+    },
+    "approval": {
+      "schemaVersion": 1,
+      "snapshotDigest": "tampered",
+      "owner": "fixture-owner",
+      "approvedAt": "2026-07-26T00:00:00.000Z"
+    }
+  }
+}

tests/fixtures/registry/compatibility/tampered-approval.json

@@ -0,0 +1,6 @@
+{
+  "schemaVersion": 1,
+  "snapshotDigest": "0000000000000000000000000000000000000000000000000000000000000000",
+  "owner": "negative-fixture",
+  "approvedAt": "2026-07-26T00:00:00.000Z"
+}

tests/fixtures/registry/forbidden/governance.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "sourceDirectories": [],
+  "registries": [
+    {
+      "registryId": "FIXTURE-SOURCE",
+      "path": "tests/fixtures/registry/forbidden/invalid-registry.ts",
+      "exportName": "INVALID_REGISTRY",
+      "owner": "fixture",
+      "requiredFields": ["id", "target"],
+      "uniqueFields": ["id"],
+      "references": [
+        {
+          "field": "target",
+          "registryId": "FIXTURE-TARGET",
+          "targetField": "id"
+        }
+      ]
+    },
+    {
+      "registryId": "FIXTURE-TARGET",
+      "path": "tests/fixtures/registry/forbidden/invalid-registry.ts",
+      "exportName": "TARGET_REGISTRY",
+      "owner": "fixture",
+      "requiredFields": ["id"],
+      "uniqueFields": ["id"]
+    }
+  ],
+  "compatibilityImpact": {
+    "allowed": ["none", "additive", "behavior-change", "breaking"],
+    "current": "breaking"
+  }
+}

tests/fixtures/registry/forbidden/invalid-registry.ts

@@ -0,0 +1,13 @@
+type InvalidRow = Readonly<{
+  id: string;
+  target?: string;
+}>;
+
+export const INVALID_REGISTRY: Record<string, InvalidRow> = {
+  FIRST: { id: "duplicate", target: "missing" },
+  SECOND: { id: "duplicate" },
+};
+
+export const TARGET_REGISTRY = {
+  KNOWN: { id: "known" },
+} as const;

tests/fixtures/registry/invalidation/duplicate-governance.json

@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 2,
+  "sourceDirectories": [],
+  "registries": [
+    {
+      "registryId": "FIXTURE-DUPLICATE-INVALIDATION-EDGES",
+      "path": "tests/fixtures/registry/invalidation/registries.ts",
+      "exportName": "DUPLICATE_INVALIDATION_REGISTRY",
+      "rowsPath": "edges",
+      "rowKeyFields": [
+        "topicId",
+        "namespace.namespaceId",
+        "namespace.namespaceVersion"
+      ],
+      "owner": "fixture",
+      "requiredFields": [
+        "topicId",
+        "namespace.namespaceId",
+        "namespace.namespaceVersion"
+      ],
+      "fieldTypes": {
+        "topicId": "string",
+        "namespace.namespaceId": "string",
+        "namespace.namespaceVersion": "integer"
+      },
+      "uniqueFieldSets": [
+        [
+          "topicId",
+          "namespace.namespaceId",
+          "namespace.namespaceVersion"
+        ]
+      ],
+      "breakingFields": [
+        "topicId",
+        "namespace.namespaceId",
+        "namespace.namespaceVersion"
+      ]
+    }
+  ]
+}

tests/fixtures/registry/invalidation/governance.json

@@ -0,0 +1,62 @@
+{
+  "schemaVersion": 2,
+  "sourceDirectories": [],
+  "registries": [
+    {
+      "registryId": "FIXTURE-INVALIDATION-EDGES",
+      "path": "tests/fixtures/registry/invalidation/registries.ts",
+      "exportName": "INVALIDATION_REGISTRY",
+      "rowsPath": "edges",
+      "rowKeyFields": [
+        "topicId",
+        "namespace.namespaceId",
+        "namespace.namespaceVersion"
+      ],
+      "owner": "fixture",
+      "requiredFields": [
+        "topicId",
+        "namespace.namespaceId",
+        "namespace.namespaceVersion"
+      ],
+      "fieldTypes": {
+        "topicId": "string",
+        "namespace.namespaceId": "string",
+        "namespace.namespaceVersion": "integer"
+      },
+      "uniqueFieldSets": [
+        [
+          "topicId",
+          "namespace.namespaceId",
+          "namespace.namespaceVersion"
+        ]
+      ],
+      "snapshotProjection": {
+        "singletonRowKey": "invalidation-graph",
+        "canonicalArrayKeyFields": {
+          "topics": ["$value"],
+          "namespaces": ["namespaceId", "namespaceVersion"],
+          "edges": [
+            "topicId",
+            "namespace.namespaceId",
+            "namespace.namespaceVersion"
+          ]
+        }
+      },
+      "breakingFields": ["topics", "namespaces", "edges"]
+    },
+    {
+      "registryId": "FIXTURE-INVALIDATION-VERSIONS",
+      "path": "tests/fixtures/registry/invalidation/registries.ts",
+      "exportName": "INVALIDATION_TOPIC_VERSIONS",
+      "rowKeyFields": ["topicId"],
+      "owner": "fixture",
+      "requiredFields": ["topicId", "topicVersion"],
+      "fieldTypes": {
+        "topicId": "string",
+        "topicVersion": "integer"
+      },
+      "uniqueFields": ["topicId"],
+      "breakingFields": ["topicId", "topicVersion"]
+    }
+  ]
+}

tests/fixtures/registry/invalidation/registries.ts

@@ -0,0 +1,49 @@
+const namespace = Object.freeze({
+  namespaceId: "orders",
+  namespaceVersion: 1,
+});
+const reverseNamespace = Object.freeze({
+  namespaceId: "qinv.fixture.changed",
+  namespaceVersion: 1,
+});
+
+export const INVALIDATION_REGISTRY = Object.freeze({
+  topics: Object.freeze(["qinv.fixture.changed", "orders"]),
+  namespaces: Object.freeze([namespace, reverseNamespace]),
+  edges: Object.freeze([
+    Object.freeze({
+      topicId: "qinv.fixture.changed",
+      namespace,
+    }),
+    Object.freeze({
+      topicId: "orders",
+      namespace: reverseNamespace,
+    }),
+  ]),
+});
+
+export const INVALIDATION_TOPIC_VERSIONS = Object.freeze([
+  Object.freeze({
+    topicId: "qinv.fixture.changed",
+    topicVersion: 1,
+  }),
+  Object.freeze({
+    topicId: "orders",
+    topicVersion: 1,
+  }),
+]);
+
+export const DUPLICATE_INVALIDATION_REGISTRY = Object.freeze({
+  topics: INVALIDATION_REGISTRY.topics,
+  namespaces: INVALIDATION_REGISTRY.namespaces,
+  edges: Object.freeze([
+    INVALIDATION_REGISTRY.edges[0],
+    Object.freeze({
+      topicId: "qinv.fixture.changed",
+      namespace: Object.freeze({
+        namespaceId: "orders",
+        namespaceVersion: 1,
+      }),
+    }),
+  ]),
+});

tests/fixtures/registry/routes/governance.json

@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "sourceDirectories": [],
+  "registries": [
+    {
+      "registryId": "ROUTES",
+      "path": "tests/fixtures/registry/routes/invalid-routes.ts",
+      "exportName": "INVALID_ROUTES",
+      "owner": "fixture",
+      "requiredFields": [
+        "routeId",
+        "path",
+        "paramsSchema",
+        "searchSchema",
+        "loadingSurface",
+        "errorSurface",
+        "chunkId"
+      ],
+      "uniqueFields": ["routeId", "path", "chunkId"],
+      "allowedValues": {
+        "paramsSchema": [null],
+        "searchSchema": [null],
+        "loadingSurface": ["app-shell"],
+        "errorSurface": ["route-boundary"],
+        "chunkId": ["route-home"]
+      },
+      "references": [
+        {
+          "field": "routeId",
+          "registryId": "RUNTIME",
+          "targetField": "routeId"
+        }
+      ]
+    },
+    {
+      "registryId": "RUNTIME",
+      "path": "tests/fixtures/registry/routes/invalid-routes.ts",
+      "exportName": "INVALID_RUNTIME",
+      "owner": "fixture",
+      "requiredFields": ["routeId", "moduleId", "paramsCodec", "searchCodec"],
+      "allowedValues": {
+        "moduleId": ["home-page"],
+        "paramsCodec": ["none"],
+        "searchCodec": ["none"]
+      },
+      "references": [
+        {
+          "field": "routeId",
+          "registryId": "ROUTES",
+          "targetField": "routeId"
+        }
+      ]
+    }
+  ],
+  "compatibilityImpact": {
+    "allowed": ["none", "additive", "behavior-change", "breaking"],
+    "current": "breaking"
+  }
+}

tests/fixtures/registry/routes/invalid-routes.ts

@@ -0,0 +1,29 @@
+export const INVALID_ROUTES = {
+  FIRST: {
+    routeId: "DUPLICATE",
+    path: "/duplicate",
+    paramsSchema: "UnknownParams",
+    searchSchema: "UnknownSearch",
+    loadingSurface: "unknown-loading",
+    errorSurface: "unknown-error",
+    chunkId: "unknown-chunk",
+  },
+  SECOND: {
+    routeId: "DUPLICATE",
+    path: "/duplicate",
+    paramsSchema: null,
+    searchSchema: null,
+    loadingSurface: "app-shell",
+    errorSurface: "route-boundary",
+    chunkId: "route-home",
+  },
+};
+
+export const INVALID_RUNTIME = {
+  ORPHAN: {
+    routeId: "ORPHAN",
+    moduleId: "unknown-module",
+    paramsCodec: "none",
+    searchCodec: "none",
+  },
+};

tests/fixtures/security/allowed/safe-text-expression.tsx

@@ -0,0 +1,3 @@
+export function Fixture({ value }: { value: string }) {
+  return <span>{value}</span>;
+}

tests/fixtures/security/allowed/safe-text.tsx

@@ -0,0 +1,3 @@
+export function SafeTextFixture({ value }: Readonly<{ value: string }>) {
+  return <p>{value}</p>;
+}

tests/fixtures/security/forbidden/dynamic-script.ts

@@ -0,0 +1,5 @@
+export function attachScript(source: string) {
+  const script = document.createElement("script");
+  script.src = source;
+  document.head.append(script);
+}

tests/fixtures/security/forbidden/eval.ts

@@ -0,0 +1 @@
+export const execute = (source: string) => eval(source);

tests/fixtures/security/forbidden/raw-html-expression.tsx

@@ -0,0 +1,3 @@
+export function RawHtml({ value }: { value: string }) {
+  return <div dangerouslySetInnerHTML={{ __html: value }} />;
+}

tests/fixtures/security/forbidden/raw-html.tsx

@@ -0,0 +1,3 @@
+export function UnsafeHtmlFixture({ value }: Readonly<{ value: string }>) {
+  return <div dangerouslySetInnerHTML={{ __html: value }} />;
+}

tests/fixtures/security/secret-detection/allowed/test-credentials.ts

@@ -0,0 +1 @@
+export const client_secret = "fixture-only-secret-value";

tests/fixtures/security/secret-detection/forbidden-policy.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "trackedRoots": [
+    "tests/fixtures/security/secret-detection/forbidden"
+  ],
+  "generatedRoots": [],
+  "includedPaths": [
+    "tests/fixtures/security/secret-detection/forbidden"
+  ],
+  "excludedPaths": [],
+  "allowlist": []
+}

tests/fixtures/security/secret-detection/forbidden/config.json

@@ -0,0 +1,3 @@
+{
+  "client_secret": "synthetic-forbidden-secret"
+}

tests/fixtures/security/secret-detection/forbidden/dist.ts

@@ -0,0 +1,2 @@
+(globalThis as typeof globalThis & { password: string }).password =
+  "synthetic-built-secret";

tests/fixtures/security/secret-detection/forbidden/source.ts

@@ -0,0 +1 @@
+export const leaked = "AKIAABCDEFGHIJKLMNOP";

tests/fixtures/security/secret-detection/nonmatching-policy.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "trackedRoots": [
+    "tests/fixtures/security/secret-detection/forbidden"
+  ],
+  "generatedRoots": [],
+  "includedPaths": [
+    "tests/fixtures/security/secret-detection/misspelled"
+  ],
+  "excludedPaths": [],
+  "allowlist": []
+}

tests/fixtures/test-evidence/forbidden/full-screen-mask.fixture

@@ -0,0 +1,5 @@
+test("false visual pass", async ({ page }) => {
+  await expect(page).toHaveScreenshot({
+    mask: [page.locator("body")]
+  });
+});

tests/fixtures/test-evidence/forbidden/unowned-skip.fixture

@@ -0,0 +1 @@
+test.skip("unowned indefinite quarantine", async () => {});

tests/fixtures/test-evidence/scenarios/catalog.json

@@ -0,0 +1,36 @@
+{
+  "HTTP_SCENARIO_EXPECTATIONS": [
+    {
+      "executionId": "FIXTURE_OPERATION::declared-and-executed",
+      "operationId": "FIXTURE_OPERATION",
+      "scenarioId": "declared-and-executed",
+      "expected": {
+        "status": { "attempts": [200], "final": 200 },
+        "outcome": { "kind": "SUCCESS", "detail": null },
+        "effect": { "outcome": "NOT_APPLICABLE", "observer": "NOT_APPLICABLE" },
+        "retry": { "count": 0, "reasons": [] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": true },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 2, "ceiling": 16 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "testDeadlineOverrideMs": null
+    },
+    {
+      "executionId": "FIXTURE_OPERATION::declared-but-unexecuted",
+      "operationId": "FIXTURE_OPERATION",
+      "scenarioId": "declared-but-unexecuted",
+      "expected": {
+        "status": { "attempts": [503], "final": 503 },
+        "outcome": { "kind": "PROBLEM", "detail": "503" },
+        "effect": { "outcome": "NOT_APPLIED", "observer": "NOT_STARTED" },
+        "retry": { "count": 0, "reasons": [] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": true },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 64, "ceiling": 65536 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "testDeadlineOverrideMs": null
+    }
+  ]
+}

tests/fixtures/test-evidence/scenarios/policy.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 2,
+  "scenarioCatalogs": [
+    {
+      "owner": "fixture-owner",
+      "path": "tests/fixtures/test-evidence/scenarios/catalog.json",
+      "expectationExport": "HTTP_SCENARIO_EXPECTATIONS",
+      "receiptPath": "tests/fixtures/test-evidence/scenarios/receipt.json",
+      "receiptSchemaVersion": 1
+    }
+  ],
+  "sourceContracts": []
+}

tests/fixtures/test-evidence/scenarios/receipt-semantic-invalid.json

@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "catalogDigest": "sha256:87779c47f0042025edf18e148f86c29e5d219f7010cf7effeb69d29059420841",
+  "catalogTotal": 2,
+  "executedIds": [
+    "FIXTURE_OPERATION::declared-and-executed",
+    "FIXTURE_OPERATION::declared-but-unexecuted"
+  ],
+  "rows": [
+    {
+      "executionId": "FIXTURE_OPERATION::declared-and-executed",
+      "expected": {
+        "status": { "attempts": [200], "final": 200 },
+        "outcome": { "kind": "SUCCESS", "detail": null },
+        "effect": { "outcome": "NOT_APPLICABLE", "observer": "NOT_APPLICABLE" },
+        "retry": { "count": 1, "reasons": ["HTTP_503"] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": false },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 2, "ceiling": 16 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "observed": {
+        "status": { "attempts": [200], "final": 200 },
+        "outcome": { "kind": "SUCCESS", "detail": null },
+        "effect": { "outcome": "NOT_APPLICABLE", "observer": "NOT_APPLICABLE" },
+        "retry": { "count": 1, "reasons": ["HTTP_503"] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": false },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 2, "ceiling": 16 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "testDeadlineOverrideMs": null
+    },
+    {
+      "executionId": "FIXTURE_OPERATION::declared-but-unexecuted",
+      "expected": {
+        "status": { "attempts": [503], "final": 503 },
+        "outcome": { "kind": "PROBLEM", "detail": "503" },
+        "effect": { "outcome": "NOT_APPLIED", "observer": "NOT_STARTED" },
+        "retry": { "count": 0, "reasons": [] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": true },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 64, "ceiling": 65536 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "observed": {
+        "status": { "attempts": [503], "final": 503 },
+        "outcome": { "kind": "PROBLEM", "detail": "503" },
+        "effect": { "outcome": "NOT_APPLIED", "observer": "NOT_STARTED" },
+        "retry": { "count": 0, "reasons": [] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": true },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 64, "ceiling": 65536 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "testDeadlineOverrideMs": null
+    }
+  ]
+}

tests/fixtures/test-evidence/scenarios/receipt.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "catalogDigest": "sha256:87779c47f0042025edf18e148f86c29e5d219f7010cf7effeb69d29059420841",
+  "catalogTotal": 2,
+  "executedIds": ["FIXTURE_OPERATION::declared-and-executed"],
+  "rows": [
+    {
+      "executionId": "FIXTURE_OPERATION::declared-and-executed",
+      "expected": {
+        "status": { "attempts": [200], "final": 200 },
+        "outcome": { "kind": "SUCCESS", "detail": null },
+        "effect": { "outcome": "NOT_APPLICABLE", "observer": "NOT_APPLICABLE" },
+        "retry": { "count": 0, "reasons": [] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": true },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 2, "ceiling": 16 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "observed": {
+        "status": { "attempts": [200], "final": 200 },
+        "outcome": { "kind": "SUCCESS", "detail": null },
+        "effect": { "outcome": "NOT_APPLICABLE", "observer": "NOT_APPLICABLE" },
+        "retry": { "count": 0, "reasons": [] },
+        "fetch": { "count": 1, "observerAttempts": 1, "agrees": true },
+        "media": { "attempts": ["application/json"], "final": "application/json" },
+        "body": { "attempts": [{ "disposition": "FULLY_READ_WITHIN_BOUND", "pulledBytes": 2, "ceiling": 16 }] },
+        "scope": { "start": "CURRENT", "end": "CURRENT", "signal": "ACTIVE", "cancellationOwner": "NONE" }
+      },
+      "testDeadlineOverrideMs": null
+    }
+  ]
+}