13 KiB
13 KiB
| 1 | Issue_ID | Severity | Area | Status | Code_path_or_control | Release_gate | Owner | Exit_criteria | Notes |
|---|---|---|---|---|---|---|---|---|---|
| 2 | P9-001 | Critical | Participant acceptance | Inherited open | contracts/phase9/research; docs/IMPLEMENTATION_ISSUE_REGISTER_v1.0.csv | Before release | Research | Run required pilot, core, and accessibility cohorts; fix/retest S0/S1 findings. | No production claim of usability acceptance. |
| 3 | P9-002 | High | CRM integration | Inherited open | src/contracts/phase9/demo-form-contract.ts; no endpoint implemented | Before production integration | Sales Ops + Engineering | Approve and integration-test endpoint, routing, duplicates, idempotency, retry, spam controls, monitoring, and ownership. | Demo submission remains unimplemented. |
| 4 | P9-003 | High | Legal consent | Inherited open | No production form or legal copy implemented | Before production form | Legal | Approve localized consent, privacy linkage, retention, and market requirements. | Suppressed rather than guessed. |
| 5 | P9-004 | High | Analytics and consent | Inherited open | src/contracts/phase9/analytics-contract.ts; no vendor adapter | Before beta | Analytics + Legal | Approve vendor, event authority, consent policy, retention, replay policy, and non-PII payloads. | Contract imported; collection disabled. |
| 6 | P9-005 | High | Native linguistic review | Inherited open | src/content/locales/{fr,ar}; CI locale parity | Before release | Content + Localization | Native review of all visible copy, metadata, errors, and bidi samples. | Mechanical parity is not linguistic approval. |
| 7 | P9-006 | High | Illustrative product preview | Inherited open | No preview shipped | Before release | Product + Design | Approve illustration or provide governed product capture. | Suppressed. |
| 8 | P9-007 | High | Multi-location claim | Inherited open | scripts/validate-prohibited-content.mjs; visible shell only | Before beta | Product | Approve capability or revise/suppress affected copy. | No new claim introduced. |
| 9 | P9-008 | High | Pricing model | Inherited open | No pricing route or component | Before pricing publication | Commercial | Approve public pricing and limits in writing. | Quote-only posture preserved by omission. |
| 10 | P9-009 | High | Security evidence | Inherited open | No public security claims | Before claims publish | Security + Legal | Provide scoped evidence, approvals, and expiry dates. | Security headers are implementation controls, not marketing claims. |
| 11 | P9-010 | Medium | Framework selection | Resolved in Phase 10 | docs/architecture/ADR-0001_REPOSITORY_FOUNDATION.md | Scaffold merge | Architecture | Architecture decision accepted and implemented. | Next.js App Router SSR, strict TypeScript, CSS Modules, OCI target. |
| 12 | P9-011 | Medium | Browser policy owner | Inherited open | .github/workflows/ci.yml; playwright.config.ts | Before beta | Product + Engineering | Approve supported browser matrix, owner, telemetry, and exception/retirement process. | Configured matrix is a test baseline, not a policy claim. |
| 13 | P9-012 | Medium | Product tour medium | Inherited open | No product tour implemented | Before release | Product + Marketing | Approve accessible localized dialog fallback or media/transcript. | Suppressed. |
| 14 | P9-013 | Medium | Markets and formatting | Inherited open | src/lib/localization; no currency/phone market assumptions | Before regional campaign | Product + Legal | Define markets, currency, timezone, phone, and jurisdiction independently of locale. | Locale is not treated as market. |
| 15 | P9-014 | Medium | Login destination | Inherited open | No login link implemented | Before release | Product + Engineering | Approve destination, security behavior, locale return path, and analytics. | Suppressed. |
| 16 | P9-015 | Medium | Alternate sales contact | Inherited open | No secondary contact destination | Before release | Sales Ops | Provide approved contact route or approve suppression. | Placeholder address not imported into runtime. |
| 17 | P9-016 | Medium | Customer evidence | Inherited open | No logos, metrics, testimonials, or case studies | Optional post-launch | Marketing + Legal | Provide attributable evidence records and approvals. | Suppressed. |
| 18 | P9-017 | Low | Exact dependency versions | Resolved in Phase 10 | package.json; pnpm-lock.yaml; docs/DEPENDENCY_MANIFEST_v1.0.md | Scaffold | Engineering | Exact versions pinned, audited, locked, and automated update review enabled. | No floating direct dependency ranges. |
| 19 | P10-001 | High | Canonical production origin | Open | src/lib/localization/site-origin.ts; .env.example | Before production deployment | Product + Infrastructure | Approve public domain/origin and configure SITE_ORIGIN in production. | Build fails closed in production when missing. |
| 20 | P10-002 | High | RentalDriveGo visual identity | Open | public/.gitkeep; docs/BRAND_MIGRATION_v1.0.md | Before public release | Product + Design | Approve and supply final accessible logo assets for light/dark contexts. | Old-name Phase 9 assets are retained only in immutable contracts and not shipped. |
| 21 | P10-003 | Medium | Browser suite execution | Environment blocked locally | .github/workflows/ci.yml; tests/browser; tests/a11y; tests/visual | Before Phase 11 acceptance | Engineering + QA | Run configured Playwright matrix in unblocked CI; generate/review baselines; close all failures. | Local Chromium is administrator-blocked and browser download DNS failed. |
| 22 | P10-004 | Low | Exact target runtime verification | Open verification | .github/workflows/ci.yml; Dockerfile; .node-version | Before scaffold merge | Engineering | Pass full quality and browser workflows on Node.js 24.17.0. | Local host exposes Node.js 22.16.0; target remains pinned to 24.17.0. |
| 23 | P11-001 | High | Phase 11 browser verification | Environment blocked | tests/browser; tests/a11y; playwright.config.ts | Before Phase 11 acceptance | Engineering + QA | Install pinned dependencies and browsers in unblocked Node 24.17.0 CI; pass all functional and accessibility projects. | Static implementation is complete; execution evidence is not fabricated. |
| 24 | P11-002 | High | Visual baseline generation and approval | Environment blocked | tests/visual; tests/visual/README.md | Before Phase 11 acceptance | Design + QA | Generate all Chromium snapshots with the pinned browser; review locale/theme/viewport/drawer/focus cases; commit approved baselines. | Scenario coverage exists but PNG baselines were not generated locally. |
| 25 | P11-003 | Low | Exact Phase 11 target runtime verification | Open verification | package.json; .node-version; .github/workflows/ci.yml | Before Phase 11 merge | Engineering | Run static, unit, build, package, and browser gates on Node 24.17.0 and pnpm 11.9.0. | Local host is Node 22.16.0 and could not download pnpm 11.9.0. |
| 26 | P11-004 | Medium | Application-shell copy linguistic approval | Inherited open | src/content/locales/fr/shell.json; src/content/locales/ar/shell.json | Before release | Content + Localization | Complete native French and Arabic review of Phase 11 shell, state, metadata, and pending-destination copy. | Mechanical parity passes; linguistic approval remains P9-005. |
| 27 | P12-001 | High | Browser and accessibility execution | Environment blocked | tests/browser; tests/a11y; playwright.config.ts | Before Phase 12 acceptance | Engineering + QA | Run all 44 Chromium browser/accessibility scenarios and the approved cross-browser matrix in an environment where loopback navigation is not administrator-blocked; fix product failures. | Chromium launched locally but every loopback navigation was rejected with net::ERR_BLOCKED_BY_ADMINISTRATOR before application response. |
| 28 | P12-002 | High | Visual regression baselines | Environment blocked | tests/visual; tests/fixtures/component-system/component-matrix.json | Before Phase 12 acceptance | Design + QA | Generate and review stable light/dark EN/FR/AR desktop/mobile/focus/error/long-content baselines with the pinned browser. | Visual scenarios are authored; image capture is blocked by the same Chromium loopback policy. |
| 29 | P12-003 | Medium | Pinned runtime verification | Open verification | package.json; .node-version; .github/workflows/ci.yml | Before Phase 12 merge | Engineering | Pass install, static, unit, build, browser, accessibility, visual, audit, and package gates on Node 24.17.0 and pnpm 11.9.0. | Source/static/unit/build checks passed under Node 22.16.0 with exact direct packages installed through npm fallback; target runtime remains unverified. |
| 30 | P12-004 | Medium | Frozen installation and dependency audit | Environment blocked | pnpm-lock.yaml; package.json; docs/phase12/DEPENDENCY_CHANGE_REPORT_v1.0.md | Before Phase 12 merge | Engineering + Security | Complete pnpm install --frozen-lockfile and pnpm audit --audit-level low with registry access. | Registry DNS returned EAI_AGAIN. npm fallback enabled local checks but does not satisfy the frozen pnpm or audit gates. |
| 31 | P12-005 | Medium | Manual assistive-technology and zoom QA | Open verification | docs/quality/PHASE_12_MANUAL_QA_RESULTS_v1.0.csv | Before Phase 12 acceptance | Accessibility + QA | Complete keyboard, touch, screen-reader, 200/400 percent zoom, reduced-motion, forced-colors, locale, theme, and viewport manual matrix; attach evidence. | Static semantics, unit interactions, and server-rendered routes are verified; human browser and assistive-technology observations are not fabricated. |
| 32 | P13-001 | High | Homepage browser accessibility and visual execution | Environment blocked | tests/browser/homepage.spec.ts; tests/a11y/homepage.a11y.spec.ts; tests/visual/homepage.visual.spec.ts | Before Phase 13 acceptance | Engineering + QA | Run the authored homepage scenarios in unblocked pinned-browser CI; fix functional, axe, reflow, focus, and visual failures; approve baselines. | Local Chromium launches but rejects every loopback navigation with net::ERR_BLOCKED_BY_ADMINISTRATOR before application response. |
| 33 | P13-002 | Medium | Phase 13 manual responsive and assistive-technology QA | Open verification | docs/quality/PHASE_13_MANUAL_QA_RESULTS_v1.0.csv | Before Phase 13 acceptance | Accessibility + QA | Complete keyboard, touch, screen-reader, 200/400 percent zoom, reduced-motion, forced-colors, locale, theme, viewport, and content-expansion review; attach evidence. | Source and automated scenarios exist; human observations are not fabricated. |
| 34 | P13-003 | Medium | Exact Phase 13 target runtime and package verification | Open verification | package.json; .node-version; pnpm-lock.yaml; .github/workflows/ci.yml | Before Phase 13 merge | Engineering + Security | Pass frozen pnpm install, all validation suites, audit, build, and package verification on Node 24.17.0 and pnpm 11.9.0. | Available host is Node 22.16.0; npm fallback was used only to execute local checks. |
| 35 | P14-001 | High | Production lead destination | Blocked | src/lib/demo/adapters; docs/phase14/EXTERNAL_SERVICE_INVENTORY_v1.0.csv | Before production demo | Sales Ops + Engineering | Approve vendor, endpoint, authentication, scopes, mapping, duplicate policy, retries, sandbox, monitoring and ownership. | Local discard adapter is not a CRM. |
| 36 | P14-002 | High | Legal form processing | Blocked | docs/phase14/CONSENT_MATRIX_v1.0.csv; production feature flag | Before production demo | Legal + Privacy | Approve localized notice, legal basis, consent behavior, retention, deletion, recipients and transfer implications. | No final consent is invented. |
| 37 | P14-003 | High | Analytics provider and consent | Blocked | src/lib/analytics; docs/phase14/ANALYTICS_EVENT_REGISTRY_v1.0.csv | Before analytics activation | Analytics + Legal | Approve provider, consent category, storage, retention, region, DPA, replay policy and operational owner. | Test sink is disabled by default and has no network. |
| 38 | P14-004 | High | Distributed idempotency and duplicate policy | Blocked | src/lib/demo/idempotency.ts | Before scaled production | Engineering + Sales Ops | Select durable store and approve duplicate semantics across instances and CRM records. | Process-local implementation is test-only. |
| 39 | P14-005 | Medium | Observability and retention | Open | correlation IDs; no logging adapter | Before production operations | Engineering + Privacy | Approve metrics, retention, redaction, alert thresholds and owners without lead content. | No raw logging is implemented. |
| 40 | P14-006 | Medium | Scheduling service | Blocked | docs/phase14/EXTERNAL_SERVICE_INVENTORY_v1.0.csv | Before scheduler activation | Sales Ops + Product | Approve provider, locale/timezone behavior, accessibility, fallback and confirmation semantics. | No fake availability. |
| 41 | P14-007 | Medium | Email notifications | Blocked | docs/phase14/EXTERNAL_SERVICE_INVENTORY_v1.0.csv | Before email activation | Sales Ops + Engineering | Approve provider, templates, sender identities, recipients, data minimization and delivery semantics. | No email is claimed or sent. |
| 42 | P14-008 | High | Phase 14 browser/accessibility/visual execution | Environment blocked | tests/browser/integrations; tests/a11y/integrations; tests/visual/integrations.visual.spec.ts | Before Phase 14 acceptance | Engineering + QA + Accessibility | Run pinned browser suites, fix failures, approve visual baselines and complete manual AT/zoom review. | Authored coverage is not observed evidence. |
| 43 | P14-009 | Medium | Pinned runtime, install, audit and build | Environment blocked | docs/quality/logs/phase14 | Before Phase 14 merge | Engineering + Security | Run Node 24.17.0 and pnpm 11.9.0 frozen install, all tests, build, audit, secret scan and package verification. | Node 22.16.0 npm fallback passed build and offline audit with zero reported vulnerabilities; exact Node 24.17.0, pnpm 11.9.0 frozen install, and pinned-browser execution remain unverified. |