15 KiB
15 KiB
| 1 | Issue_ID | Severity | Area | Status | Code_path_or_control | Release_gate | Owner | Exit_criteria | Notes |
|---|---|---|---|---|---|---|---|---|---|
| 2 | P9-001 | Critical | Participant acceptance | Inherited open | contracts/phase9/research; docs/IMPLEMENTATION_ISSUE_REGISTER_v1.0.csv | Before release | Research | Run required pilot, core, and accessibility cohorts; fix/retest S0/S1 findings. | No production claim of usability acceptance. |
| 3 | P9-002 | High | CRM integration | Inherited open | src/contracts/phase9/demo-form-contract.ts; no endpoint implemented | Before production integration | Sales Ops + Engineering | Approve and integration-test endpoint, routing, duplicates, idempotency, retry, spam controls, monitoring, and ownership. | Demo submission remains unimplemented. |
| 4 | P9-003 | High | Legal consent | Inherited open | No production form or legal copy implemented | Before production form | Legal | Approve localized consent, privacy linkage, retention, and market requirements. | Suppressed rather than guessed. |
| 5 | P9-004 | High | Analytics and consent | Inherited open | src/contracts/phase9/analytics-contract.ts; no vendor adapter | Before beta | Analytics + Legal | Approve vendor, event authority, consent policy, retention, replay policy, and non-PII payloads. | Contract imported; collection disabled. |
| 6 | P9-005 | High | Native linguistic review | Inherited open | src/content/locales/{fr,ar}; CI locale parity | Before release | Content + Localization | Native review of all visible copy, metadata, errors, and bidi samples. | Mechanical parity is not linguistic approval. |
| 7 | P9-006 | High | Illustrative product preview | Inherited open | No preview shipped | Before release | Product + Design | Approve illustration or provide governed product capture. | Suppressed. |
| 8 | P9-007 | High | Multi-location claim | Inherited open | scripts/validate-prohibited-content.mjs; visible shell only | Before beta | Product | Approve capability or revise/suppress affected copy. | No new claim introduced. |
| 9 | P9-008 | High | Pricing model | Inherited open | No pricing route or component | Before pricing publication | Commercial | Approve public pricing and limits in writing. | Quote-only posture preserved by omission. |
| 10 | P9-009 | High | Security evidence | Inherited open | No public security claims | Before claims publish | Security + Legal | Provide scoped evidence, approvals, and expiry dates. | Security headers are implementation controls, not marketing claims. |
| 11 | P9-010 | Medium | Framework selection | Resolved in Phase 10 | docs/architecture/ADR-0001_REPOSITORY_FOUNDATION.md | Scaffold merge | Architecture | Architecture decision accepted and implemented. | Next.js App Router SSR, strict TypeScript, CSS Modules, OCI target. |
| 12 | P9-011 | Medium | Browser policy owner | Inherited open | .github/workflows/ci.yml; playwright.config.ts | Before beta | Product + Engineering | Approve supported browser matrix, owner, telemetry, and exception/retirement process. | Configured matrix is a test baseline, not a policy claim. |
| 13 | P9-012 | Medium | Product tour medium | Inherited open | No product tour implemented | Before release | Product + Marketing | Approve accessible localized dialog fallback or media/transcript. | Suppressed. |
| 14 | P9-013 | Medium | Markets and formatting | Inherited open | src/lib/localization; no currency/phone market assumptions | Before regional campaign | Product + Legal | Define markets, currency, timezone, phone, and jurisdiction independently of locale. | Locale is not treated as market. |
| 15 | P9-014 | Medium | Login destination | Inherited open | No login link implemented | Before release | Product + Engineering | Approve destination, security behavior, locale return path, and analytics. | Suppressed. |
| 16 | P9-015 | Medium | Alternate sales contact | Inherited open | No secondary contact destination | Before release | Sales Ops | Provide approved contact route or approve suppression. | Placeholder address not imported into runtime. |
| 17 | P9-016 | Medium | Customer evidence | Inherited open | No logos, metrics, testimonials, or case studies | Optional post-launch | Marketing + Legal | Provide attributable evidence records and approvals. | Suppressed. |
| 18 | P9-017 | Low | Exact dependency versions | Resolved in Phase 10 | package.json; pnpm-lock.yaml; docs/DEPENDENCY_MANIFEST_v1.0.md | Scaffold | Engineering | Exact versions pinned, audited, locked, and automated update review enabled. | No floating direct dependency ranges. |
| 19 | P10-001 | High | Canonical production origin | Open | src/lib/localization/site-origin.ts; .env.example | Before production deployment | Product + Infrastructure | Approve public domain/origin and configure SITE_ORIGIN in production. | Build fails closed in production when missing. |
| 20 | P10-002 | High | RentalDriveGo visual identity | Open | public/.gitkeep; docs/BRAND_MIGRATION_v1.0.md | Before public release | Product + Design | Approve and supply final accessible logo assets for light/dark contexts. | Old-name Phase 9 assets are retained only in immutable contracts and not shipped. |
| 21 | P10-003 | Medium | Browser suite execution | Environment blocked locally | .github/workflows/ci.yml; tests/browser; tests/a11y; tests/visual | Before Phase 11 acceptance | Engineering + QA | Run configured Playwright matrix in unblocked CI; generate/review baselines; close all failures. | Local Chromium is administrator-blocked and browser download DNS failed. |
| 22 | P10-004 | Low | Exact target runtime verification | Open verification | .github/workflows/ci.yml; Dockerfile; .node-version | Before scaffold merge | Engineering | Pass full quality and browser workflows on Node.js 24.17.0. | Local host exposes Node.js 22.16.0; target remains pinned to 24.17.0. |
| 23 | P11-001 | High | Phase 11 browser verification | Environment blocked | tests/browser; tests/a11y; playwright.config.ts | Before Phase 11 acceptance | Engineering + QA | Install pinned dependencies and browsers in unblocked Node 24.17.0 CI; pass all functional and accessibility projects. | Static implementation is complete; execution evidence is not fabricated. |
| 24 | P11-002 | High | Visual baseline generation and approval | Environment blocked | tests/visual; tests/visual/README.md | Before Phase 11 acceptance | Design + QA | Generate all Chromium snapshots with the pinned browser; review locale/theme/viewport/drawer/focus cases; commit approved baselines. | Scenario coverage exists but PNG baselines were not generated locally. |
| 25 | P11-003 | Low | Exact Phase 11 target runtime verification | Open verification | package.json; .node-version; .github/workflows/ci.yml | Before Phase 11 merge | Engineering | Run static, unit, build, package, and browser gates on Node 24.17.0 and pnpm 11.9.0. | Local host is Node 22.16.0 and could not download pnpm 11.9.0. |
| 26 | P11-004 | Medium | Application-shell copy linguistic approval | Inherited open | src/content/locales/fr/shell.json; src/content/locales/ar/shell.json | Before release | Content + Localization | Complete native French and Arabic review of Phase 11 shell, state, metadata, and pending-destination copy. | Mechanical parity passes; linguistic approval remains P9-005. |
| 27 | P12-001 | High | Browser and accessibility execution | Environment blocked | tests/browser; tests/a11y; playwright.config.ts | Before Phase 12 acceptance | Engineering + QA | Run all 44 Chromium browser/accessibility scenarios and the approved cross-browser matrix in an environment where loopback navigation is not administrator-blocked; fix product failures. | Chromium launched locally but every loopback navigation was rejected with net::ERR_BLOCKED_BY_ADMINISTRATOR before application response. |
| 28 | P12-002 | High | Visual regression baselines | Environment blocked | tests/visual; tests/fixtures/component-system/component-matrix.json | Before Phase 12 acceptance | Design + QA | Generate and review stable light/dark EN/FR/AR desktop/mobile/focus/error/long-content baselines with the pinned browser. | Visual scenarios are authored; image capture is blocked by the same Chromium loopback policy. |
| 29 | P12-003 | Medium | Pinned runtime verification | Open verification | package.json; .node-version; .github/workflows/ci.yml | Before Phase 12 merge | Engineering | Pass install, static, unit, build, browser, accessibility, visual, audit, and package gates on Node 24.17.0 and pnpm 11.9.0. | Source/static/unit/build checks passed under Node 22.16.0 with exact direct packages installed through npm fallback; target runtime remains unverified. |
| 30 | P12-004 | Medium | Frozen installation and dependency audit | Environment blocked | pnpm-lock.yaml; package.json; docs/phase12/DEPENDENCY_CHANGE_REPORT_v1.0.md | Before Phase 12 merge | Engineering + Security | Complete pnpm install --frozen-lockfile and pnpm audit --audit-level low with registry access. | Registry DNS returned EAI_AGAIN. npm fallback enabled local checks but does not satisfy the frozen pnpm or audit gates. |
| 31 | P12-005 | Medium | Manual assistive-technology and zoom QA | Open verification | docs/quality/PHASE_12_MANUAL_QA_RESULTS_v1.0.csv | Before Phase 12 acceptance | Accessibility + QA | Complete keyboard, touch, screen-reader, 200/400 percent zoom, reduced-motion, forced-colors, locale, theme, and viewport manual matrix; attach evidence. | Static semantics, unit interactions, and server-rendered routes are verified; human browser and assistive-technology observations are not fabricated. |
| 32 | P13-001 | High | Homepage browser accessibility and visual execution | Environment blocked | tests/browser/homepage.spec.ts; tests/a11y/homepage.a11y.spec.ts; tests/visual/homepage.visual.spec.ts | Before Phase 13 acceptance | Engineering + QA | Run the authored homepage scenarios in unblocked pinned-browser CI; fix functional, axe, reflow, focus, and visual failures; approve baselines. | Local Chromium launches but rejects every loopback navigation with net::ERR_BLOCKED_BY_ADMINISTRATOR before application response. |
| 33 | P13-002 | Medium | Phase 13 manual responsive and assistive-technology QA | Open verification | docs/quality/PHASE_13_MANUAL_QA_RESULTS_v1.0.csv | Before Phase 13 acceptance | Accessibility + QA | Complete keyboard, touch, screen-reader, 200/400 percent zoom, reduced-motion, forced-colors, locale, theme, viewport, and content-expansion review; attach evidence. | Source and automated scenarios exist; human observations are not fabricated. |
| 34 | P13-003 | Medium | Exact Phase 13 target runtime and package verification | Open verification | package.json; .node-version; pnpm-lock.yaml; .github/workflows/ci.yml | Before Phase 13 merge | Engineering + Security | Pass frozen pnpm install, all validation suites, audit, build, and package verification on Node 24.17.0 and pnpm 11.9.0. | Available host is Node 22.16.0; npm fallback was used only to execute local checks. |
| 35 | P14-001 | High | Production lead destination | Blocked | src/lib/demo/adapters; docs/phase14/EXTERNAL_SERVICE_INVENTORY_v1.0.csv | Before production demo | Sales Ops + Engineering | Approve vendor, endpoint, authentication, scopes, mapping, duplicate policy, retries, sandbox, monitoring and ownership. | Local discard adapter is not a CRM. |
| 36 | P14-002 | High | Legal form processing | Blocked | docs/phase14/CONSENT_MATRIX_v1.0.csv; production feature flag | Before production demo | Legal + Privacy | Approve localized notice, legal basis, consent behavior, retention, deletion, recipients and transfer implications. | No final consent is invented. |
| 37 | P14-003 | High | Analytics provider and consent | Blocked | src/lib/analytics; docs/phase14/ANALYTICS_EVENT_REGISTRY_v1.0.csv | Before analytics activation | Analytics + Legal | Approve provider, consent category, storage, retention, region, DPA, replay policy and operational owner. | Test sink is disabled by default and has no network. |
| 38 | P14-004 | High | Distributed idempotency and duplicate policy | Blocked | src/lib/demo/idempotency.ts | Before scaled production | Engineering + Sales Ops | Select durable store and approve duplicate semantics across instances and CRM records. | Process-local implementation is test-only. |
| 39 | P14-005 | Medium | Observability and retention | Open | correlation IDs; no logging adapter | Before production operations | Engineering + Privacy | Approve metrics, retention, redaction, alert thresholds and owners without lead content. | No raw logging is implemented. |
| 40 | P14-006 | Medium | Scheduling service | Blocked | docs/phase14/EXTERNAL_SERVICE_INVENTORY_v1.0.csv | Before scheduler activation | Sales Ops + Product | Approve provider, locale/timezone behavior, accessibility, fallback and confirmation semantics. | No fake availability. |
| 41 | P14-007 | Medium | Email notifications | Blocked | docs/phase14/EXTERNAL_SERVICE_INVENTORY_v1.0.csv | Before email activation | Sales Ops + Engineering | Approve provider, templates, sender identities, recipients, data minimization and delivery semantics. | No email is claimed or sent. |
| 42 | P14-008 | High | Phase 14 browser/accessibility/visual execution | Environment blocked | tests/browser/integrations; tests/a11y/integrations; tests/visual/integrations.visual.spec.ts | Before Phase 14 acceptance | Engineering + QA + Accessibility | Run pinned browser suites, fix failures, approve visual baselines and complete manual AT/zoom review. | Authored coverage is not observed evidence. |
| 43 | P14-009 | Medium | Pinned runtime, install, audit and build | Environment blocked | docs/quality/logs/phase14 | Before Phase 14 merge | Engineering + Security | Run Node 24.17.0 and pnpm 11.9.0 frozen install, all tests, build, audit, secret scan and package verification. | Node 22.16.0 npm fallback passed build and offline audit with zero reported vulnerabilities; exact Node 24.17.0, pnpm 11.9.0 frozen install, and pinned-browser execution remain unverified. |
| 44 | P15-001 | High | Release evidence structural integrity | Resolved in Phase 15 | docs/IMPLEMENTATION_ISSUE_REGISTER_v1.4.csv; docs/quality/PHASE_14_MANUAL_QA_RESULTS_v1.0.csv; scripts/validate-phase15-readiness.mjs | Phase 15 evidence package | Engineering + QA | All repository CSV evidence parses with the declared header width and the regression validator passes. | Two malformed CSV rows were repaired and are now covered by automated validation. |
| 45 | P15-002 | Medium | Demo API media-type validation | Resolved in Phase 15 | src/lib/security/content-type.ts; src/app/api/demo/route.ts; tests/unit/integrations/content-type.test.ts | Before API release | Engineering + Security | Accept application/json with optional parameters and reject look-alike media types. | The prior prefix match accepted application/jsonp and similar values. |
| 46 | P15-003 | Medium | Visual regression determinism | Resolved in Phase 15 | tests/visual/component-system.visual.spec.ts; tests/visual/integrations.visual.spec.ts | Before visual baseline approval | Engineering + Design QA | Use the canonical theme storage key and restrict canonical snapshots to the pinned Chromium project. | The previous component test wrote an unused storage key and two suites attempted non-canonical browser snapshots. |
| 47 | P15-004 | High | CI integration-test coverage | Resolved in Phase 15 | .github/workflows/ci.yml; scripts/validate-phase15-readiness.mjs | Before merge | Engineering + QA | CI explicitly runs the demo-service integration suite and the security/privacy/browser/accessibility/visual command slices. | The Phase 14 workflow omitted the Vitest integration suite from CI. |
| 48 | P15-005 | High | Current release-candidate final QA execution | Environment and approval blocked | docs/phase15/COMMAND_MATRIX_v1.0.csv; docs/PHASE_15_IMPLEMENTATION_REPORT_v1.0.md | Before Phase 15 acceptance or Phase 16 release-candidate freeze | Engineering + QA + Accessibility + Security | On the exact Node 24.17.0 and pnpm 11.9.0 toolchain, complete frozen installation, format, lint, typecheck, unit, integration, build, audit, browser, accessibility, visual, performance, deployment, rollback, and manual AT matrices for the final manifest. | The supplied sandbox has Node 22.16.0, no pnpm binary, no registry DNS, and no installed project dependencies. Static controls ran; dependency-backed and human/browser gates did not. Phase 16 dependency-free validators and static audit passed, but the exact runtime, frozen install, dependency-backed/browser/manual/production evidence and approvals remain unavailable. |