Files
gstack/test
garrytan 3a4c34f184 test(W7c): ship-workflow-clarity becomes a structural check of ship-only invariants
W7c (t07 F1, F2, F15). One test file: 59 tests / ~438 pins -> 33 tests.
Round-tagged titles (r6/r12/r22) are gone. Every invariant this file shared
with the other converted ship files is now checked once, in its owner:
ship-control-flow (work list, repair ranges, docs/test/push recovery,
adversarial finish order, Step 11.5 binding), ship-plan-completion-
invariants (evidence ledger, push/commit, waivers), ship-reentry-gates (stop
lines, docs reentry, NEW_TITLE), workflow-excerpt (review cycle order,
coverage/probe gates), qa-probe-gates / qa-caller-authority (QA loop).

Removed assertion groups (invariant -> remaining protection):
- Duplicated literals (45 repeated 2-7x, e.g. "Keep the same attempt counts
  throughout the invocation" x7, "Docs, TODO edits ... make evidence STALE"
  x5, the CYCLES >= 3 / fixes-below-cap / no-edits sentences, push-failure
  and native-recovery sentences) -> one free check each in the owners above.
- Smoke/plan-check loop sentences and "Required even for small diffs ..."
  -> qa-probe-gates (free, every host); gate E2E ship-exploratory-small-cli
  (gate). Kept here: smoke guard started once before step 3, every host.
- Invocation-record field lists (receipt/handle/attempt field prose, "reuse
  this invocation's saved level", FRESH/ALREADY_BUMPED level derivation,
  receipt definition, start-token definition) -> kept `BUMP_LEVEL`, record
  outside the product tree, approval scope, never borrow/replace a token,
  REVIEW_START/PASS_START/DESIGN_START, `gstack-review-log --start`,
  `gstack-wtree`; version derivation also in test/ship-version-sync.test.ts
  (free); judge `ship/SKILL.md workflow` (gate lane).
- Reuse/judge-evidence prose ("original command, result/counts ...",
  "Compare hashes or complete bytes", "consumed files, fixtures ...",
  "complete expanded request, rubric ...") -> kept never resample, changed/
  unknown dependencies rerun, mandatory reviews still run, freeze inputs;
  judge `ship/SKILL.md workflow` (gate lane).
- Build/route prose ("If none exists, record not applicable ...", "declared
  generation/build commands ...", "Run them and save results", "Explain why
  other changes cannot affect it", "Inspect writer handles, including the
  docs child", "Keep Step 8's original child report and counts", "Recheck
  affected plan items ...", "append current evidence ...") -> kept stage
  order, route-label order, prompts/templates count as behavior, no-change ->
  stage 3, writer termination before another writer, stop until confirmed,
  build-failed label, no substitute command; gate E2Es ship-docsync-*
  (gate).
- Docs-collector prose ("Terminal completion or confirmed termination is
  sufficient", "Require every field/type ...", "Compare saved base and input
  hashes ...", "Otherwise save post-child hashes ...", "A stale snapshot is
  neither ...", "Reconcile those before proceeding") -> kept attempt counting
  incl. failed launches, request alone insufficient, exited child blocked,
  HEAD/index unchanged + `files_updated`, protected-file exclusions,
  `documentation_section`, failed/blocked -> recovery, actual user exception,
  blocked status retained, same approved scope and exact content, retry
  restarts stage 1; gate E2Es ship-docsync-missing-marker,
  ship-docsync-launch-failure, ship-docsync-late-result (gate).
- Release/commit prose ("Record the release decision after a version was
  actually written", "Skip unchanged versions and manifest-only repairs",
  "Best-effort, non-interactive, non-blocking", "Group VERSION + CHANGELOG
  + TODOS.md ...", "Only the final VERSION/CHANGELOG commit gets the release
  version and co-author trailer", "use the first changed component ...
  (major/minor/patch/micro") -> kept ALREADY_BUMPED, the stale "skip if
  ALREADY_BUMPED" ban, `baseVersion`/`currentVersion`, absent fourth
  component is zero, no automatic rebump, digest tokens and pre-push digest
  check, no Git tag, commit-before-push order; gate E2E ship-local-workflow
  (gate).
- Coverage/design prose ("Count each generation-authorized attempt ...",
  "including the initial audit, failures and zero-test results", "Two passes
  already used ...", "read-only reassessment uses no pass", design-lite
  ownership, same path/line merge, specialist stats, distinct defects) ->
  kept the 2-pass and 30/5/2-minute limits, re-entry never resets, missing
  permission is not approval, audit-only header/override order/no commit/
  return decisions, child JSON, one item with both sources and stricter ASK,
  neither pass substitutes; gate E2Es ship-coverage-audit,
  ship-coverage-value (gate). Design-review-lite E2E is periodic, so the
  merge rule keeps its free meaning check here.
- Spec/title/comment prose ("existing open PR/MR", "one match supplies the
  existing title/identity", "Save the result for Step 19's recheck", "In a
  new shell, restore ...", "Partial, deferred, failed, dropped or unverified
  scope uses ...", "newest", "Try to auto-resolve if they are simple",
  "distinguish an app from a library/CLI", "If the ask is App Store/
  TestFlight distribution", "a new package.json or Cargo.toml alone ...",
  "After edits, the full re-review repeats ...") -> judge `ship/SKILL.md
  workflow` (gate lane); ship-apple-gate (free) for the Apple route.

Kept as case-insensitive meaning checks (stop/consent/approval/safety,
always kept): never invent credentials, ask for unknown targets first,
include the workflow in tests/review, frontmatter read as data never shell
source, exact spec_branch match, positive-integer issue number, Closes #N
only for fully completed scope, lookup failure/ambiguous match -> stop never
"no PR", never publish an unprefixed title, ambiguous conflicts -> stop,
AskUserQuestion and wait, unclear Apple target -> AskUserQuestion and wait,
confirmed app -> stop and Read, stop for repair (recommended) or accept each
named probe risk, skipping a fix is not risk acceptance, accepted risk is not
passing verification, queue without editing in Steps 10/11, never credit
outside coverage, do not report a clean review, unavailable outside
challenge never resets the three-cycle limit, records mismatch blocks
release, missing snapshots block regardless of HEAD, uncertain edits cannot
be exempted, scripts/dependencies/runtime config need live tests, named
testing gap A/B/C (recommended), reuse prior B only for same scope, declared
but unavailable suite blocks, explicit untested-scope approval, report the
gap never FRESH, no documentation writer after push, do not run create
commands for an existing PR, Greptile status truthfulness.

Kept unchanged: all stale-string bans, machine tokens and JSON contracts
(`gh pr list ... --json number,title,url`, glab list, `v$NEW_VERSION `,
`${NEW_TITLE:?...}` guard, exit 3, `--allow-paths ...`, `| FRESH (exit 0) |`,
`--label <lane> --expect-cmd`, `gstack-review-read`, `git diff <reviewed-tree>
<current-tree>`, `"status":"complete|no_pr|unavailable"`, specialist and
coverage JSON, `status:"unavailable"`/`completed:false`/`converged:false`,
`Pre-Landing Review: INCOMPLETE`, `ALREADY_PUSHED`), the threshold/branch/
installed-asset reference test, the section-index row check.

Cosmetic pins dropped: STOP / ONE / ONLY capitals and bold (t07 F2).

Mutation log: .context/mutation-ship-workflow-clarity.md (23 mutations, 0
unexpected: 4 reorders, 4 markers, 9 safety red; 6 rewordings green, all of
which turned the old test red).
2026-10-03 01:38:09 +00:00
..