Skip to page content
Full Graphics is active.

Main application readiness control

Capability, route, recovery, and UAT readiness

This inventory records what VMC implements, where data lives, how empty or malformed records are handled, what recovery action is available, and which machine-verifiable contracts protect the complete tester journey. It is a production-control record, not a claim of VA adjudication or legal entitlement.

Live routes

29

Calculation engines

20

Storage areas

13

Implemented records

62

Deferred records

0

Package E · Main application UAT readiness

Machine-verifiable route, control, and journey contracts

Package E treats readiness as an enforceable product contract. Every live route must appear in capability, accessibility, and UAT registries; every visible control must work or be noninteractive and labelled Planned; and the complete browser-local document workflow must remain testable through report and PDF export.

Registry schema
v2
Covered routes
29
UAT journeys
3
Regression contracts
26
Validation issues
0

All machine-readable readiness registry relationships are internally consistent.

Primary UAT journey

Reviewed document to printable report

Prove the complete browser-local veteran-record workflow without hidden uploads, silent truncation, automatic acceptance, or scenario-only reporting.

Manual candidate evidence required

  1. /documents · document-intake-verification

    Select a supported PDF or image.

    Expected: The file is inspected locally and is not stored until the verified preview is explicitly accepted.

  2. /documents · document-repository-integrity

    Review category, physical type, size, checksum, encryption status, and notes; then store the document.

    Expected: A versioned IndexedDB record is created or a duplicate is rejected without mutation.

  3. /documents · document-source-reopen

    Reopen the original browser-local source.

    Expected: The exact stored Blob opens without a network upload.

  4. /documents/ocr · document-processing-fail-closed

    Recover a PDF text layer, OCR selected image pages locally, or transcribe against the source.

    Expected: Processing is bounded and cancellable; mixed, encrypted, oversized, or cancelled operations return no partial transcript.

  5. /documents/ocr · reviewed-text-limit

    Review and correct the recovered text before transfer.

    Expected: The edited text remains temporary and is rejected rather than silently truncated when it exceeds a destination limit.

  6. /documents/ocr · reviewed-text-handoff

    Send reviewed text to an eligible analysis destination.

    Expected: A versioned, destination-bound, checksum-bound, expiring, single-use session handoff is created without clipboard dependency.

  7. /documents/records · record-analysis-candidates

    Generate source-linked evidence candidates from reviewed text.

    Expected: Candidates remain proposed and retain page or line provenance.

  8. /documents/records · review-completeness

    Accept or reject every candidate and review each hypothesis.

    Expected: No pending candidate can be saved as a finalized reviewed analysis.

  9. /documents/records · reviewed-result-storage

    Save the finalized reviewed result locally.

    Expected: The durable result stores dispositions and provenance without silently mutating calculator or scenario state.

  10. /documents/records · reviewed-result-reopen

    Reopen the saved reviewed result.

    Expected: The same finalized dispositions and provenance are reconstructed from the local store.

  11. /reports · document-report-projection

    Open the source-linked Document Intelligence Report.

    Expected: The report includes reviewed findings, explicit unverified extraction output, result and source IDs, checksum status, warnings, assumptions, privacy, and non-adjudication boundaries.

  12. /reports · document-report-print-isolation

    Print or Save as PDF.

    Expected: Only the selected report document is in the print target; navigation, controls, scenario workspace, and unrelated previews are excluded.

Manual evidence required on the exact candidate

  • Run the journey in Full Graphics and Easy Reading modes.
  • Run keyboard-only at 100%, 200%, and 400% zoom.
  • Verify focus order and visible focus through repository, preparation, review, reopen, report, and print controls.
  • Verify the source in a screen reader and confirm that Planned controls are announced as unavailable rather than clickable.
  • Exercise encrypted, image-only, mixed PDF, duplicate, oversized, cancelled, stale-handoff, deleted-source, and checksum-mismatch branches.

Automated regression contracts

These contracts fail Foundation CI when a protected readiness boundary regresses.

route-registry-parity

Route registry parity

Every main-application page route is represented in capability, accessibility, and UAT readiness registries.

Evidence: tests/packageEUatReadiness.test.ts

interactive-control-actionability

Interactive control actionability

Every visible clickable control has a supported action, a submit contract, or an honest disabled/Planned state.

Evidence: tests/packageEInteractiveControlAudit.test.ts

planned-control-honesty

Planned control honesty

Planned native and custom controls are noninteractive, aria-disabled, and visibly labelled Planned.

Evidence: tests/packageEInteractiveControlAudit.test.ts

no-placeholder-capabilities

No placeholder capabilities

Production source does not expose Coming Soon, TODO, not-implemented, or placeholder actions as capabilities.

Evidence: tests/packageEInteractiveControlAudit.test.ts

document-processing-single-engine

Single document-processing engine

PDF.js and Tesseract runtime imports remain centralized in the shared browser-local document processor.

Evidence: tests/packageBDocumentProcessing.test.ts; tests/packageEUatReadiness.test.ts

no-silent-truncation

No silent truncation

Oversized recovered, pasted, transferred, or analyzed text fails closed without retaining a partial prefix.

Evidence: tests/packageBDocumentProcessing.test.ts; tests/packageCReviewedTextHandoff.test.ts; tests/packageEUatReadiness.test.ts

reviewed-handoff-integrity

Reviewed-text handoff integrity

Handoffs remain source-, checksum-, category-, destination-, expiry-, and single-use validated.

Evidence: tests/packageCIntegrityHardening.test.ts; tests/packageCReviewedTextHandoff.test.ts

document-report-not-scenario-only

Document reports remain implemented

The Reports route preserves scenario reports and separately renders finalized reviewed document results.

Evidence: tests/packageDDocumentReports.test.ts; tests/packageEUatReadiness.test.ts

document-workflow-end-to-end

End-to-end document workflow

The complete select-to-report-to-PDF journey remains represented by implemented routes and registered automated contracts.

Evidence: tests/packageEUatReadiness.test.ts

display-mode-parity

Display-mode parity

Every live main-application route is required in Full Graphics and Easy Reading modes.

Evidence: tests/packageEUatReadiness.test.ts

accessibility-route-parity

Accessibility route parity

Every live main-application route has explicit keyboard, focus, contrast, reflow, and route-specific manual evidence requirements.

Evidence: tests/packageEUatReadiness.test.ts

document-intake-verification

Document intake verification

Selected files are signature-, size-, checksum-, encryption-, and metadata-verified locally before deliberate storage.

Evidence: tests/documentRepositoryFoundation.test.ts; tests/packageEUatReadiness.test.ts

document-repository-integrity

Document repository integrity

IndexedDB source records preserve Blob content, metadata, duplicate protection, and explicit storage mutation.

Evidence: tests/documentRepositoryFoundation.test.ts; tests/packageEUatReadiness.test.ts

document-source-reopen

Document source reopen

Stored browser-local source content can be reopened without upload or reconstruction from extracted text.

Evidence: tests/documentRepositoryFoundation.test.ts; tests/packageEUatReadiness.test.ts

document-processing-fail-closed

Document processing fail-closed behavior

Encrypted, image-only, mixed, oversized, malformed, or cancelled processing returns no misleading partial transcript.

Evidence: tests/packageBDocumentProcessing.test.ts

reviewed-text-limit

Reviewed-text limit

Oversized reviewed text is rejected without retaining a silently truncated prefix.

Evidence: tests/packageBDocumentProcessing.test.ts; tests/packageCReviewedTextHandoff.test.ts

reviewed-text-handoff

Reviewed-text handoff

Session handoffs are versioned, source-linked, destination-bound, expiring, single-use, and clipboard-independent.

Evidence: tests/packageCReviewedTextHandoff.test.ts; tests/packageCIntegrityHardening.test.ts

record-analysis-candidates

Record-analysis candidates

Reviewed text produces bounded source-linked candidates with page or line provenance while preserving proposed status.

Evidence: tests/recordAnalysisReviewCorrections.test.ts; tests/packageEUatReadiness.test.ts

review-completeness

Review completeness

Finalized record analyses cannot retain pending candidates or draft hypotheses as reviewed findings.

Evidence: tests/recordAnalysisReviewCorrections.test.ts; tests/packageCIntegrityHardening.test.ts

reviewed-result-storage

Reviewed-result storage

Finalized reviewed results preserve dispositions and provenance without silently mutating calculator or scenario state.

Evidence: tests/packageCReviewedTextHandoff.test.ts; tests/packageCIntegrityHardening.test.ts

reviewed-result-reopen

Reviewed-result reopen

Saved reviewed results reopen with the same durable dispositions, source identity, and provenance.

Evidence: tests/packageCReviewedTextHandoff.test.ts; tests/packageDDocumentReports.test.ts

document-report-projection

Document report projection

Finalized reviewed records project into source-linked reports with reviewed-only semantics, checksum status, warnings, assumptions, privacy, and non-adjudication boundaries.

Evidence: tests/packageDDocumentReports.test.ts; tests/packageDDispositionSemantics.test.ts

document-report-print-isolation

Document report print isolation

Only the selected document report enters the document-report print target.

Evidence: tests/packageDDocumentReports.test.ts; tests/packageEUatReadiness.test.ts

rating-review-completeness

Rating review completeness

A rating review is reportable only after every candidate has a final accept or reject disposition.

Evidence: tests/packageCReviewedTextHandoff.test.ts; tests/release11SliceBRatingSnapshot.test.ts

decision-review-completeness

Decision review completeness

A decision review preserves one final disposition per issue candidate and exposes only accepted issues downstream.

Evidence: tests/packageCIntegrityHardening.test.ts; tests/release11SliceCDecisionLetter.test.ts

decision-report-semantics

Decision report semantics

Reviewed decision issues remain distinct from supporting parser output labelled Unverified Extraction.

Evidence: tests/packageDDispositionSemantics.test.ts; tests/packageDReviewCorrections.test.ts

Route coverage matrix

Every route carries recovery, display-mode, state, accessibility, and interaction requirements.

RouteModes and statesRecovery
Mission Control/full · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetOpen Data & Backup to restore or clear affected records.
Quick Estimate/quick-calcfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetReset calculator state or restore a reviewed backup.
SMC Calculator/smcfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetSelect a supported designation or restore calculator state.
Guided Planning/wizardfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetReturn to Quick Estimate or restart planning.
Historical Workspace/workspacefull · easydefault · keyboard · reflow · empty · populated · malformed · recoveryimport recoveryRestore a portable package or create a scenario.
Scenario Planning/planningfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect or remove the affected record.
Payment Verification/paymentsfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect the transaction, attribution, date, or adjustment.
Document Repository/documentsfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewReview metadata or remove the affected record.
Local OCR Foundation/documents/ocrfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewAdjust preparation or transcribe against the source.
C-File and Service Record Analysis/documents/recordsfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect or divide prepared text and review each candidate.
VA Rating Snapshot Import/documents/ratingsfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect source text and explicitly review each candidate.
VA Decision Letter Intelligence/documents/decisionsfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect text and explicitly save accepted outcomes.
Document Comparison and Evidence Matrix/documents/comparefull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect sources and save a reviewed matrix.
Document-Derived Scenarios/documents/scenariosfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewComplete a reviewed matrix and generate an isolated scenario.
Representative Profiles/representativesfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewCorrect the profile, review the official VA accreditation source, or delete the affected local record.
Representative Discovery & Comparison/representatives/directoryfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewReview current VA sources and deliberately add or correct a local profile.
Reports/reportsfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverymanual reviewRepair the reviewed scenario or document result, restore its source, or select another report.
Data & Backup/datafull · easydefault · keyboard · reflow · empty · populated · malformed · recoveryimport recoveryReview a valid package and explicitly merge or replace.
Knowledge Center/learnfull · easydefault · keyboard · reflowstatic safeUse official source links.
Service Identity/service-identityfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetRestore canonical branch marks.
Accessibility/accessibilityfull · easydefault · keyboard · reflowstatic safeOpen accessibility evidence.
Accessibility Execution/accessibility/executionfull · easydefault · keyboard · reflowstatic safeFollow the ordered route sequence.
Accessibility Evidence/accessibility/readinessfull · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetRe-enter evidence for the candidate.
System Readiness/readinessfull · easydefault · keyboard · reflowstatic safeCorrect the affected registry, source control, or automated contract and rerun Foundation CI.
Security and Operational Readiness/readiness/securityfull · easydefault · keyboard · reflowstatic safeComplete manual requirements.
Release Candidate and Owner Acceptance/readiness/releasefull · easydefault · keyboard · reflow · empty · populated · malformed · recoverylocal resetRe-enter evidence for the exact candidate.
About VMC/aboutfull · easydefault · keyboard · reflowstatic safeReturn to Mission Control.
Privacy/privacyfull · easydefault · keyboard · reflowstatic safeOpen Data & Backup for local-data controls.
Disclaimer/disclaimerfull · easydefault · keyboard · reflowstatic safeReturn to the applicable module.

Candidate accessibility evidence

Run the manual accessibility sequence

Execute every live route across keyboard, screen-reader, touch, reflow, zoom, contrast, motion, Full Graphics, and Easy Reading environments, then record evidence against one exact candidate.

Open execution planRecord evidence

Release control

Close security and owner acceptance

Review the security and operational gate registry, then record candidate-bound evidence and owner approval before any controlled promotion to develop or main.

Release acceptanceSecurity readiness

Route and recovery inventory

Each route must expose an honest empty state, reject malformed data without silently changing accepted results, and provide a documented recovery path.

RouteCapabilityData boundaryEmpty or malformed stateRecovery
Mission Control/Operational intelligence dashboard with compact persistent navigation and high-contrast ownership footerbrowser localDashboard loads with zero-value status and links to implemented command modules.Malformed local records are rejected by their schema parsers.local resetOpen Data & Backup to restore or clear affected records.
Quick Estimate/quick-calcCompensation, bilateral, dependency, and SMC calculationcalculator stateA veteran-alone zero-rating estimate remains available.Invalid calculator state migrates or falls back to safe defaults.local resetReset calculator state or restore a reviewed backup.
SMC Calculator/smcReviewed full-SMC designation workspacecalculator stateRegular compensation is shown until a reviewed designation is selected.Unsupported designations fail validation without changing entitlement.local resetSelect a supported designation or restore calculator state.
Guided Planning/wizardStepwise benefits-planning workflowcalculator statePlanning starts from the current calculator baseline.Invalid draft inputs remain isolated.local resetReturn to Quick Estimate or restart planning.
Historical Workspace/workspaceReviewed events and entitlement periodsworkspace stateThe workspace explains how to create the first local scenario.Invalid portfolios fail closed.import recoveryRestore a portable package or create a scenario.
Scenario Planning/planningCounterfactual scenario comparisonworkspace stateThe route prompts for a reviewed baseline.Invalid records are excluded without altering accepted history.manual reviewCorrect or remove the affected record.
Payment Verification/paymentsExpected-versus-actual reconciliation and award auditworkspace stateThe route presents entry guidance and a not-started state.Malformed transactions remain review items.manual reviewCorrect the transaction, attribution, date, or adjustment.
Document Repository/documentsReview-first local document intake and workflow navigationbrowser localThe repository displays a guided empty state.Unsupported, duplicate, encrypted, or unreadable files stop or remain blocked.manual reviewReview metadata or remove the affected record.
Local OCR Foundation/documents/ocrLocal image preparation, native detection, PDF text recovery, and transcript reviewbrowser localManual transcription remains available.Unreadable or detector-unavailable sources remain review items.manual reviewAdjust preparation or transcribe against the source.
C-File and Service Record Analysis/documents/recordsBounded chunking, transient search, evidence candidates, and completeness reviewsbrowser localThe workspace accepts reviewed prepared text.Unsupported, encrypted, oversized, malformed, or pending records fail closed.manual reviewCorrect or divide prepared text and review each candidate.
VA Rating Snapshot Import/documents/ratingsSource-linked rating extraction, comparison, and reviewcalculator stateManual VA.gov text entry remains available.Unrecognized or ambiguous fields remain pending.manual reviewCorrect source text and explicitly review each candidate.
VA Decision Letter Intelligence/documents/decisionsSource-linked outcomes, findings, reasons, evidence, and chronologybrowser localManual transcription remains available.Ambiguous or rejected outcomes remain review items.manual reviewCorrect text and explicitly save accepted outcomes.
Document Comparison and Evidence Matrix/documents/compareCross-source comparison with provenance and review dispositionsbrowser localAccepted state can be compared alone.Conflicts remain review items.manual reviewCorrect sources and save a reviewed matrix.
Document-Derived Scenarios/documents/scenariosIsolated compensation, bilateral, SMC-review, and backpay modelsbrowser localThe workspace explains when no modelable action is available.Unsupported facts cannot be modeled.manual reviewComplete a reviewed matrix and generate an isolated scenario.
Representative Profiles/representativesBrowser-local VSO, attorney, claims-agent, and support-contact profiles with appointment and verification trackingbrowser localThe workspace provides official VA links and a guided empty profile state.Malformed enums, timestamps, contact fields, or unsupported verification claims fail closed and do not certify accreditation.manual reviewCorrect the profile, review the official VA accreditation source, or delete the affected local record.
Representative Discovery & Comparison/representatives/directoryOfficial-source discovery guidance plus neutral filtering and side-by-side comparison of deliberately saved local profilesbrowser localOfficial VA links and a guided no-saved-profile state remain available.Malformed profiles fail closed in the existing representative store; discovery does not import, rank, or certify directory results.manual reviewReview current VA sources and deliberately add or correct a local profile.
Reports/reportsSeparate scenario and reviewed document-intelligence reports with browser-native PDF and JSON exportbrowser localThe route offers scenario guidance or requests a finalized reviewed document result.Invalid, unfinished, missing-source, or checksum-mismatched records fail closed or surface explicit warnings.manual reviewRepair the reviewed scenario or document result, restore its source, or select another report.
Data & Backup/dataBounded portable backup, atomic restore, migration, and recoverybrowser localBackup controls remain available with no records.Unsafe or integrity-failed imports stop before mutation.import recoveryReview a valid package and explicitly merge or replace.
Knowledge Center/learnSource-grounded educational guidancestaticCore articles remain available without local data.Local-data failures do not affect content.static safeUse official source links.
Service Identity/service-identityBranch-symbol defaults and local overridesbrowser localCanonical assets remain the default.Malformed overrides fail closed.local resetRestore canonical branch marks.
Accessibility/accessibilityAccessibility status, route matrix, and standardsstaticThe statement remains readable.No local state is required.static safeOpen accessibility evidence.
Accessibility Execution/accessibility/executionOrdered manual accessibility protocolstaticThe sequence remains available.No local data is required.static safeFollow the ordered route sequence.
Accessibility Evidence/accessibility/readinessBrowser-local manual evidencebrowser localChecks begin not tested.Malformed evidence resets.local resetRe-enter evidence for the candidate.
System Readiness/readinessIntegrated capability, route, recovery, display-mode, accessibility, interactive-control, and end-to-end UAT contract inventorystaticThe inventory and primary UAT journey remain available without local data.Registry parity or source-audit violations fail Foundation CI before candidate acceptance.static safeCorrect the affected registry, source control, or automated contract and rerun Foundation CI.
Security and Operational Readiness/readiness/securitySecurity, privacy, backup, incident, rollback, and observability gatesstaticThe gate registry remains available.No local data is required.static safeComplete manual requirements.
Release Candidate and Owner Acceptance/readiness/releaseCandidate identity, evidence, attestation, and promotion readinessbrowser localFinal gates begin not tested.Mismatched evidence fails closed.local resetRe-enter evidence for the exact candidate.
About VMC/aboutProduct identity and independent-tool disclosurestaticProduct information remains available.No local state is required.static safeReturn to Mission Control.
Privacy/privacyLocal-first privacy disclosurestaticTerms remain available.No local state is required.static safeOpen Data & Backup for local-data controls.
Disclaimer/disclaimerIndependent-tool and non-adjudication boundarystaticLimitations remain available.No local state is required.static safeReturn to the applicable module.

Calculation and analysis engines

Combined rating

implemented

src/lib/services/vaMath.ts

Validation: Regulatory and edge-case fixtures

Boundary: Deterministic estimate; not VA adjudication

Bilateral factor and favorable exception

implemented

src/lib/services/vaMath.ts

Validation: Regulatory examples and optimization tests

Boundary: Requires reviewed classification

Compensation and dependencies

implemented

src/lib/services/compensation.ts

Validation: Official rate fixtures

Boundary: Verified datasets only

Full SMC and additive K

implemented

src/lib/services/fullSmc.ts

Validation: Official examples and combination tests

Boundary: Designation is reviewed

Historical entitlement timeline

implemented

src/lib/services/entitlementTimeline.ts

Validation: Date and COLA fixtures

Boundary: Whole benefit months

Payment reconciliation

implemented

src/lib/services/paymentReconciliation.ts

Validation: Recurring and retroactive tests

Boundary: Review aid only

Award-specific backpay audit

implemented

src/lib/services/awardBackpayAudit.ts

Validation: Event-delta tests

Boundary: No automatic attribution

Scenario planning

implemented

src/lib/services/scenarioPlanning.ts

Validation: Baseline-isolation tests

Boundary: Does not mutate accepted history

Scenario report model

implemented

src/lib/services/reporting.ts

Validation: DOM-independent tests

Boundary: Browser print/save

Reviewed document report model

implemented

src/lib/services/documentReporting.ts

Validation: Reviewed-only projections, provenance, checksum, omission, and print-isolation tests

Boundary: Read-only browser-local PDF and JSON export

UAT readiness governance

implemented

src/lib/product/uatReadiness.ts

Validation: Dynamic route discovery, registry parity, source-control actionability through src/lib/product/interactiveControlAudit.ts, display-mode, accessibility, workflow, and edge-case regression tests

Boundary: Automated foundation only; exact-candidate manual evidence and owner acceptance remain required

Document intake verification

implemented

src/lib/services/documentIntake.ts

Validation: Signature, size, checksum, encryption, and dimensions

Boundary: No interpretation

Local OCR preparation

implemented

src/lib/services/localOcr.ts

Validation: Transcript and preprocessing tests

Boundary: Temporary unverified text

C-File and service-record analysis

implemented

src/lib/services/recordAnalysis.ts

Validation: Chunking, cues, provenance, scoring, and isolation

Boundary: Review aids only

Rating snapshot import

implemented

src/lib/services/ratingSnapshotImport.ts

Validation: Rating parser and isolation tests

Boundary: Common patterns only

Decision letter intelligence

implemented

src/lib/services/decisionLetterIntelligence.ts

Validation: Outcome, date, section, and chronology tests

Boundary: No automatic mutation

Document comparison

implemented

src/lib/services/documentComparison.ts

Validation: Conflict, duplicate, provenance, and laterality tests

Boundary: No adjudication

Document-derived scenario modeling

implemented

src/lib/services/documentDerivedScenario.ts

Validation: Eligibility, classification, compensation, and backpay tests

Boundary: Planning model only

Representative profile validation

implemented

src/lib/services/representativeProfile.ts

Validation: Sanitization, official-source confirmation, contact validation, and state-isolation tests

Boundary: Contact and user-review record only; no accreditation certification, representation, filing, or submission

Representative discovery and comparison

implemented

src/lib/services/representativeDirectory.ts

Validation: Neutral filtering, alphabetical ordering, comparison limits, summaries, and missing-information tests

Boundary: Saved-fact comparison only; no scraping, ranking, referral, accreditation certification, or appointment submission

Browser-local storage and recovery

Calculator state

implemented

Schema: Versioned calculator schema

Recovery: Safe defaults or backup restore

Scenario portfolio

implemented

Schema: Versioned workspace schema

Recovery: Empty fallback or restore

Mission Control activity

implemented

Schema: Versioned capped record

Recovery: Malformed records fail closed

Document repository

implemented

Schema: Versioned IndexedDB metadata and Blob content

Recovery: Download or remove local documents

Reviewed decision chronology

implemented

Schema: Versioned source-linked outcomes

Recovery: Malformed records fail closed

Reviewed evidence matrices

implemented

Schema: Versioned rows, actions, notes, facts, and provenance

Recovery: Delete and regenerate

Document-derived scenarios

implemented

Schema: Versioned isolated models and support

Recovery: Delete without changing accepted state

Reviewed record analyses

implemented

Schema: Versioned candidates and hypotheses without full source text

Recovery: Rebuild from original source

Representative profiles

implemented

Schema: Versioned local contact, appointment, verification, and note records capped at 25

Recovery: Malformed records fail closed; export or delete individual profiles

Service identity overrides

implemented

Schema: Versioned local image overrides

Recovery: Canonical defaults remain available

Accessibility evidence

implemented

Schema: Versioned fail-closed evidence

Recovery: Reset to not tested

Release acceptance evidence

implemented

Schema: Candidate-bound evidence

Recovery: Different-SHA evidence resets

Portable backup package

implemented

Schema: Versioned bounded JSON with SHA-256 integrity

Recovery: Preview-first rollback-protected restore

Production and isolated UAT remain separately gated

An implemented route, engine, or automated contract is not automatically approved for UAT or production. Human accessibility evidence, security and privacy review, operational procedures, exact candidate identity, owner visual acceptance, and protected release approval remain required before any later environment configuration or promotion.