docs(qa): establish Phase 9 inventory and qualification plan

2026-10-22 21:40:18 +02:00
parent 1c24e406f1
commit 8cfc684c64
6 changed files with 3606 additions and 0 deletions
@@ -0,0 +1,28 @@
+# Phase 9 — Comprehensive QA and regression qualification
+
+Entry: `1c24e406f194f0f42277d837b3008a7a28dca26a`, clean working tree and direct Phase 8 remote equality verified 22 October 2026. Work branch: `feature/phase9-full-qa`. Main remains `5f835e54a9b74e6b71418422e28431b2af06453f`; it is not the redesign base.
+
+## Execution plan
+
+Goal: assess the existing application, repair reproduced in-scope defects, and make independent Phase 9, Phase 10 and production decisions. Reuse the .NET, Jest, Playwright, offline Python and native PDF fixtures. No redesign, new integrations, dependencies, model activation or production operations. Execute inline and autonomously, as requested.
+
+Specification: [owner brief](REQUEST.md). Authoritative entry records: [Phase 8 acceptance](../phase-8/p8-05/FINAL_ACCEPTANCE.md), [preservation](../phase-8/PRESERVATION.md), [original preservation contracts](../phase-2/PRESERVATION_MATRIX.md), [original implementation plan](../IMPLEMENTATION_PLAN.md), [Phase 7 acceptance](../phase-7/p7-12/FINAL_ACCEPTANCE.md) and [release withholding](../phase-7/p7-12/RELEASE_STATUS.md). Historic evidence remains unchanged.
+
+| Checkpoint | Files / responsibility | Required verification |
+|---|---|---|
+| P9-00 | `p9-00/INVENTORY.md`, `p9-00/inventory.json`, QA matrix, baseline evidence | Extract actual 33 route patterns, 57 preservation groups, roles, API owners, UI components, test files; fresh backend/frontend baseline, types/lint/build; source identities. |
+| P9-01 | `p9-01/README.md` | Execute complete connected browser journeys with isolated synthetic data; distinguish native HTTP from intercepted fixtures. |
+| P9-02 | `p9-02/README.md`, screenshots | Route/theme/locale/viewport coverage; actual visual inspection recorded separately from DOM assertions. |
+| P9-03 | `p9-03/README.md`, axe triage, human checklist | Account for all 64 inherited incomplete nodes; deduplicate causes, preserve manual obligations; EN/NB evidence. |
+| P9-04 | `p9-04/README.md` | Provider/migration/concurrency/security tests; inspect local database runtime availability without touching live services. |
+| P9-05 | `p9-05/README.md`, document/performance evidence | Native PDF pagination and visual checks, failure/large-data fixtures, bounded sustained local observations. |
+| P9-06 | `p9-06/README.md`, defect register | Reproduce any defect before minimal shared-owner repair; red/green focused proof, all affected callers and full regression. |
+| P9-07 | `p9-07/FINAL_ACCEPTANCE.md`, preservation, risk and handoff records | Reconcile every requested deliverable, exact results and limitations; independent decisions. |
+
+Each validated checkpoint is committed and normally pushed, then direct remote equality is checked. No force push or main merge. A blocked runtime or human check remains NOT TESTED/PARTIAL and carries an owner, closure evidence and release impact.
+
+## Review focus
+
+Account switching and foreign IDs must not expose/write another owner's resources. Stale preference/CV/document saves must retain recoverable drafts and reject silent overwrites. Submitted binaries must remain frozen when canonical Career Profile data changes. Empty/dense/long translated UI must remain operable across widths. Provider, assistive technology and native output claims require their actual environments.
+
+Use [TODO.md](TODO.md) for live checkpoint status. Raw transient artifacts live in `.artifacts/phase9/`; compact portable evidence belongs beside the checkpoint. An automated pass never substitutes for physical-device, human linguistic, screen-reader or production acceptance.
@@ -0,0 +1,651 @@
+# Jobjakt — Phase 9: Comprehensive Application QA and Regression Qualification
+
+## Mission
+
+Complete Phase 9 of the Jobjakt redesign.
+
+Perform a comprehensive, evidence-based quality-assurance assessment of the entire application following Phases 1–8.
+
+Identify and resolve confirmed in-scope regressions, validate existing functionality, test user journeys, assess accessibility and responsiveness, and produce a defensible acceptance decision.
+
+This phase is not a new redesign.
+
+The priorities are:
+
+1. Functional correctness and data integrity.
+2. Ease of use and workflow consistency.
+3. Accessibility and responsive behaviour.
+4. Security and user/tenant isolation.
+5. CV/document/PDF reliability.
+6. English and Norwegian Bokmål quality.
+7. Performance and stability.
+8. Release readiness and transparent risk reporting.
+
+Work autonomously through bounded checkpoints, testing, documentation, commits and remote pushes.
+
+Do not begin Phase 10 or new integration features.
+
+Do not deploy production.
+
+## 1. Confirmed Phase 8 baseline
+
+Phase 8 has completed its implemented scope.
+
+- Final branch: `feature/phase8-dashboard-customisation`
+- Final commit: `1c24e406f194f0f42277d837b3008a7a28dca26a`
+- Phase 8: CONDITIONAL GO.
+- Phase 9 readiness: CONDITIONAL GO.
+- Production: NO-GO.
+- Development remote matched HEAD.
+- Working tree was clean.
+
+Reported passing checks:
+
+- Backend: 1,084.
+- Frontend: 917.
+- Complete browser suite: 360.
+- Separate browser contracts: 23.
+- AI sidecar: 56.
+- Sizing/performance diagnostics: 3.
+
+Accepted runs had zero failures or skips.
+
+All 33 routes remain present.
+
+All 57 functionality-preservation groups were reconciled, but their statuses were 56 PARTIAL and C11 DEFERRED.
+
+Existing risk items include:
+
+- 64 incomplete axe accessibility findings requiring triage/manual assessment.
+- Outstanding real-device and manual accessibility checks.
+- Database-provider runtime verification, particularly MariaDB.
+- Unprofiled sustained performance.
+- Pre-existing duplicate reminder read.
+- Outstanding live advisories.
+- Previously deferred P5-13 AI qualification.
+- Existing production release blockers.
+
+Read:
+
+`docs/redesign/phase-8/p8-05/FINAL_ACCEPTANCE.md`
+
+Read the Phase 9 handoff and the preceding redesign's authoritative preservation and acceptance records.
+
+Do not treat unresolved requirements as passed.
+
+## 2. Git and execution boundaries
+
+Verify the latest accepted Phase 8 commit and remote state.
+
+Create:
+
+`feature/phase9-full-qa`
+
+Base this branch on the accepted Phase 8 development HEAD.
+
+Do not branch from the older production main if main does not contain the redesign.
+
+Preserve existing working-tree changes and branch history.
+
+Commit and push validated checkpoints to the Phase 9 feature branch.
+
+Verify every remote push.
+
+Do not force-push.
+
+Do not merge to main.
+
+Do not deploy production.
+
+## 3. Establish the QA inventory
+
+Before testing, construct a complete inventory from the actual application.
+
+Include:
+
+- All 33 routes.
+- All 57 functionality-preservation groups.
+- Existing user roles.
+- All major APIs.
+- Backend/database workflows.
+- Frontend page components.
+- Shared design-system components.
+- AI sidecar contracts.
+- CV/document rendering.
+- Dashboard preferences.
+- Authentication and authorisation.
+- Admin-only functionality.
+
+Identify the existing automated coverage associated with each major workflow.
+
+Create a QA matrix connecting:
+
+Route → Workflow → Feature → Test evidence → Known risks → Acceptance status.
+
+Do not invent coverage where no tests exist.
+
+## 4. End-to-end user journey testing
+
+Test the application as a real job seeker would use it.
+
+Cover:
+
+### Authentication and account management
+Registration, verification, login, logout, password recovery, session management, account security and error handling.
+
+### Onboarding
+New-user flows, incomplete onboarding, resuming onboarding, localisation and navigation.
+
+### Dashboard
+Statistics, widget visibility, ordering, sizing, persistence, conflicts, reset and responsive layouts.
+
+### Jobs
+Job creation, editing, statuses, table, Kanban, searching, filtering, sorting, timelines, reminders and deletion where applicable.
+
+### Job Detail
+Navigation, associated documents, history, actions and data preservation.
+
+### Career Profile
+Canonical data editing, profile sections, validation, saving, recovery and relationships to CVs.
+
+### CV Builder
+Templates, editing, section ordering, content overrides, revisions, preview, exports and document fidelity.
+
+### Cover letters and documents
+Creation, editing, version handling, association with applications and safe persistence.
+
+### Analytics
+Data correctness, calculations, filters, empty states and dashboard relationships.
+
+### Notifications
+Read/unread state, duplicate handling, reminders, failure recovery and preferences.
+
+### Settings
+Profile, account, security, localisation, themes, preferences and other supported sections.
+
+### Admin
+Permissions, statistics, workflows, isolation and user management.
+
+Test complete connected workflows, not just individual pages.
+
+Preserve submitted/frozen document state and canonical Career Profile boundaries.
+
+## 5. Visual and responsive QA
+
+Inspect every significant route and user workflow across:
+
+- Desktop.
+- Tablet.
+- Mobile.
+- English.
+- Norwegian Bokmål.
+- Light theme.
+- Dark theme.
+
+Check:
+
+- Consistent design system.
+- Responsive layout.
+- Sidebar and navigation.
+- Dialogs and drawers.
+- Tables and cards.
+- Forms and validation.
+- Chart readability.
+- Touch interactions.
+- Typography and spacing.
+- Overflow and clipping.
+- Loading states.
+- Empty states.
+- Error states.
+- Long text and translations.
+- Realistic dense datasets.
+
+Use reproducible browser screenshots and DOM/accessibility evidence where useful.
+
+Compare against established redesign decisions.
+
+Fix confirmed in-scope regressions without introducing another full redesign.
+
+Do not mark a route visually tested unless it was actually inspected.
+
+## 6. Accessibility qualification
+
+Investigate Phase 8's 64 incomplete axe findings.
+
+These are not necessarily violations.
+
+Deduplicate findings by underlying cause and affected component.
+
+Classify them into:
+
+- Confirmed accessibility defect.
+- Requires manual inspection.
+- Tool limitation.
+- Not applicable, with evidence.
+- Resolved.
+
+Test:
+
+- Keyboard-only navigation.
+- Logical focus order.
+- Visible focus.
+- Dialog focus handling.
+- Accessible names.
+- Semantic structure.
+- Screen-reader announcements.
+- Dynamic status changes.
+- Reordering controls.
+- Drag-and-drop alternatives.
+- Reduced motion.
+- Zoom and text resizing.
+- Colour contrast.
+- Mobile touch targets.
+
+Run automated checks across representative routes.
+
+Perform genuine manual checks when the available testing environment supports them.
+
+Do not claim NVDA, VoiceOver, physical-device or human accessibility testing passed unless those checks actually occurred.
+
+Create a precise manual testing checklist for any checks requiring the product owner or another human tester.
+
+Carry uncompleted checks into the release gates.
+
+## 7. English and Norwegian Bokmål
+
+Review every significant workflow.
+
+Look for:
+
+- Missing translation keys.
+- English strings appearing in Norwegian mode.
+- Inconsistent terminology.
+- Literal or unnatural translations.
+- Incorrect date/number formatting.
+- Layout problems caused by longer text.
+- Inconsistent validation messages.
+- Missing accessibility labels.
+
+Prefer natural professional Bokmål.
+
+Preserve localisation architecture.
+
+Do not silently replace established terminology without a clear reason.
+
+## 8. Database and persistence qualification
+
+Investigate supported database providers and configurations.
+
+Include:
+
+- EF Core migrations.
+- SQLite development behaviour.
+- MariaDB deployment compatibility.
+- Database schema expectations.
+- Relationships and constraints.
+- Concurrent updates.
+- Stale writes.
+- Transaction handling.
+- Preference persistence.
+- Career Profile consistency.
+- CV revision safety.
+
+Use isolated test databases and synthetic data.
+
+Where possible, run actual MariaDB integration testing in an approved non-production environment.
+
+Do not claim MariaDB runtime acceptance from SQLite-only tests.
+
+Do not modify the live production database.
+
+Document any limitations where the provider cannot be tested safely.
+
+## 9. Security and privacy
+
+Verify:
+
+- User and tenant isolation.
+- API authorisation.
+- Admin permissions.
+- Session handling.
+- Upload validation.
+- Document ownership.
+- Sensitive-data exposure.
+- Error message leakage.
+- AI endpoint access controls.
+- URL import protections.
+- Relevant rate limits.
+- Data retention and deletion behaviour.
+- Safe handling of untrusted documents and external content.
+
+Run applicable existing security tests and static checks.
+
+Do not expand into an uncontrolled security rewrite.
+
+Record discovered high-risk issues and address those within the authorised QA scope.
+
+Do not hide security failures or weaken assertions.
+
+## 10. CV and PDF qualification
+
+Test real output fidelity using synthetic CV data.
+
+Cover:
+
+- One-page CVs.
+- Multi-page CVs.
+- Long employment histories.
+- Long bullet lists.
+- Missing optional sections.
+- Different templates.
+- English and Norwegian.
+- Long words and wrapping.
+- Special characters.
+- Page breaks.
+- Header/footer behaviour.
+- Margins.
+- Fonts.
+- Preview/export agreement.
+- Version preservation.
+
+Verify document pagination visually and programmatically where appropriate.
+
+Do not infer PDF fidelity from frontend component tests alone.
+
+Record renderer and environment differences.
+
+## 11. Large-data and edge-case testing
+
+Create realistic synthetic scenarios involving:
+
+- No applications.
+- Large numbers of applications.
+- Long application timelines.
+- Many CV revisions.
+- Complex Career Profile histories.
+- Missing or partial fields.
+- Long job descriptions.
+- Large filtering and sorting datasets.
+- Many notifications.
+- Slow APIs.
+- Network interruption.
+- Failed saves.
+- Expired sessions.
+- Concurrent edits.
+- Missing or stale external references.
+
+Verify that workflows remain usable and that data is not lost.
+
+Do not load destructive or excessive test data into production.
+
+## 12. Performance and stability
+
+Go beyond small sizing diagnostics.
+
+Assess representative workloads for:
+
+- Page loading.
+- Dashboard rendering.
+- Job Table/Kanban performance.
+- Filtering and search.
+- Large Career Profiles.
+- CV editing and preview.
+- PDF generation.
+- Preference saving.
+- Backend database requests.
+- AI sidecar interactions.
+
+Investigate sustained performance under controlled, bounded load.
+
+Measure actual resource usage and latency where possible.
+
+Use isolated or approved test environments.
+
+Do not benchmark destructively against live services.
+
+Clearly distinguish measured performance from estimates.
+
+Document resource constraints and untested production-scale behaviour.
+
+## 13. Known issues and deferred requirements
+
+Investigate the duplicate reminder read and other pre-existing advisories.
+
+Revisit:
+
+- Phase 7 conditional acceptance.
+- Phase 8 conditional acceptance.
+- 56 PARTIAL preservation statuses.
+- C11 DEFERRED.
+- Accessibility incompletes.
+- Database-provider coverage gaps.
+- Sustained performance qualification.
+- P5-13 withholding.
+- Existing production blockers.
+
+For every item, determine:
+
+- Current status.
+- Reproducibility.
+- User impact.
+- Severity.
+- Owner/next action.
+- Whether it blocks Phase 9 acceptance.
+- Whether it blocks production.
+- Required evidence for closure.
+
+Do not automatically reinterpret PARTIAL as PASS or DEFERRED as completed.
+
+Record why each item is legitimately accepted, deferred or still blocked.
+
+Do not change historic acceptance evidence retroactively.
+
+## 14. Remediation policy
+
+Phase 9 may fix confirmed regressions and defects discovered during QA.
+
+Keep fixes:
+
+- Bounded.
+- Tested.
+- Relevant to Phase 9.
+- Compatible with existing architecture.
+- Documented.
+- Independently reviewable.
+
+For major architectural changes or new product features, create a separate issue and explain the dependency.
+
+Do not begin Phase 10 legacy cleanup.
+
+Do not introduce LinkedIn, FINN, NAV or new AI model features.
+
+Do not activate P5-13.
+
+## 15. Suggested checkpoints
+
+Use existing authoritative Phase 9 checkpoint definitions where available; otherwise:
+
+### P9-00 — QA baseline and coverage matrix
+
+Establish the current test baseline, route/feature coverage, risks and acceptance criteria.
+
+### P9-01 — End-to-end functional QA
+
+Test full user journeys, account ownership, persistence and application workflows.
+
+### P9-02 — Responsive and visual QA
+
+Inspect routes, themes, languages, mobile/tablet layouts and complex states.
+
+### P9-03 — Accessibility and localisation
+
+Triage incomplete findings, resolve confirmed issues and prepare human testing evidence.
+
+### P9-04 — Data integrity, database and security
+
+Validate providers, concurrency, user isolation, uploads, document ownership and security contracts.
+
+### P9-05 — CV/PDF, edge cases and performance
+
+Verify document fidelity, large datasets, failure recovery and bounded performance.
+
+### P9-06 — Defect remediation and full regression
+
+Resolve approved in-scope defects and run the complete relevant suites.
+
+### P9-07 — Final acceptance and Phase 10 handoff
+
+Consolidate evidence, remaining blockers, updated preservation statuses and recommended cleanup scope.
+
+At each validated checkpoint:
+
+1. Implement necessary QA tests and in-scope fixes.
+2. Execute verification.
+3. Record exact results.
+4. Commit the checkpoint.
+5. Push to the Phase 9 branch.
+6. Verify remote synchronisation.
+7. Continue autonomously.
+
+If an unsafe or unapproved issue blocks a checkpoint, document it and continue independent safe work where possible.
+
+## 16. Production restrictions
+
+The current production environment remains NO-GO.
+
+Previously reported blockers include:
+
+- EXT4 filesystem errors on Docker storage.
+- Missing independently verified off-disk backup at the last assessment.
+- Restore and rollback qualification.
+- Production ingress security.
+- Database-provider/runtime validation.
+- Manual accessibility requirements.
+- Outstanding release advisories.
+- AI model integrity and qualification.
+
+Do not assume these issues have been resolved.
+
+Do not:
+
+- Merge into main.
+- Deploy Jobjakt.
+- Restart live Docker services.
+- Modify production secrets.
+- Run production migrations.
+- Repair the production filesystem.
+- Perform live data deletion.
+- Activate Qwen3.5 or replace Qwen2.5.
+- Change production AI inference configuration.
+
+Safe local QA and isolated integration testing may continue.
+
+Production-readiness investigation can be documented but does not authorise production remediation.
+
+## 17. Documentation and evidence
+
+Use established repository conventions.
+
+Suggested location:
+
+`docs/redesign/phase-9/`
+
+Deliver:
+
+- QA coverage matrix.
+- Route and workflow verification.
+- Visual/responsive evidence.
+- Accessibility findings and manual checklist.
+- Localisation results.
+- Database/provider validation.
+- Security findings.
+- CV/PDF fidelity evidence.
+- Performance results.
+- Defect register.
+- Updated preservation matrix.
+- Full regression results.
+- Release risk register.
+- Phase 10 cleanup eligibility list.
+- Final acceptance report.
+
+Suggested final report:
+
+`docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md`
+
+Maintain original evidence and stable issue IDs.
+
+Separate PASS, FAIL, PARTIAL, DEFERRED and NOT TESTED.
+
+## 18. Final acceptance
+
+Provide independent decisions:
+
+**Phase 9 QA:**
+GO / CONDITIONAL GO / NO-GO.
+
+**Phase 10 readiness:**
+GO / CONDITIONAL GO / NO-GO.
+
+**Production release:**
+GO / NO-GO.
+
+Do not claim production readiness solely because QA tests pass.
+
+Do not claim a manual check passed without actual human/manual evidence.
+
+Do not claim a database provider passed if it was not exercised.
+
+Clearly distinguish development acceptance from production release approval.
+
+## 19. Required final response
+
+Report:
+
+1. Completed QA checkpoints.
+2. Routes and workflows tested.
+3. Actual backend/frontend/browser/contract/sidecar results.
+4. New regression tests.
+5. Confirmed defects found and resolved.
+6. Remaining defects and severity.
+7. Accessibility outcomes and outstanding human checks.
+8. Localisation findings.
+9. Database-provider verification.
+10. Security and tenant-isolation outcomes.
+11. CV/PDF rendering results.
+12. Performance results.
+13. Preservation-group status changes.
+14. C11 deferred status.
+15. Phase 10 cleanup eligibility.
+16. Final branch and commit.
+17. Remote push verification.
+18. Phase 9 decision.
+19. Phase 10 readiness decision.
+20. Production decision.
+
+## 20. Final execution instruction
+
+Begin Phase 9 from the accepted Phase 8 development baseline:
+
+`1c24e406f194f0f42277d837b3008a7a28dca26a`
+
+Create:
+
+`feature/phase9-full-qa`
+
+Complete comprehensive application QA autonomously through bounded checkpoints.
+
+Fix confirmed, authorised in-scope regressions.
+
+Preserve all existing features and data contracts.
+
+Maintain transparent unresolved-risk tracking.
+
+Commit and push each validated checkpoint.
+
+Prepare a complete Phase 10 handoff.
+
+**Do not merge into main.**
+
+**Do not deploy production.**
+
+**Do not begin Phase 10 automatically.**
@@ -0,0 +1,22 @@
+# P9-00 — Entry baseline and coverage inventory
+
+Development baseline and direct remote: `1c24e406f194f0f42277d837b3008a7a28dca26a` on `feature/phase8-dashboard-customisation`, clean before work. New branch is `feature/phase9-full-qa`. Main remains the older release branch and is not the redesign base. Feature pushes are authorised; `.gitea/workflows/ci-deploy.yml` restricts deployment to a main push.
+
+The reproducible [source inventory](INVENTORY.md) and [full JSON](inventory.json) enumerate **33 concrete routes**, **57 preservation groups**, actual page/shared component owners, **43 API controller/partial owners**, migration/data owners, the Admin/Premium entitlement roles and existing test files: backend 117, frontend 104, ordinary browser 58, sidecar 2. These are file counts and associations, not exhaustive behavioral coverage. Public/anonymous, roleless authenticated and administrator actors remain distinct; arbitrary stored roles are not inferred to confer grants.
+
+The exact group-level entry disposition is **56 PARTIAL / PRES-C11 DEFERRED**. Original contract/test/gap columns are retained in JSON and link back to the authoritative matrix. The current Documents route and context-preserving correspondence alias supersede older route descriptions; historic records are not edited.
+
+## Fresh entry observations
+
+| Lane | Actual entry evidence | Qualification |
+|---|---|---|
+| Backend | 1,084 passed; 0 failed/skipped, Release, pinned SDK 9.0.317 | `.artifacts/phase9/backend/phase9.trx`; SQLite/test-host evidence, not MariaDB runtime. |
+| Frontend assertions | Report records 917 passed /104 suites, 0 failed/pending | Original wrapper was interrupted; its report is retained as `frontend-entry-reported.json`. A clean completed successor process is required for final acceptance. |
+| Types / lint / build | PASS; static frontend export uses `http://localhost:5302/api` | Rebuilt again after the bounded locale repair; no deployment. |
+| Sidecar | Initial 55 pass /1 fail; full corrected fixture successor 56/56 | Entry failure and red/green proof retained; see P9-T01. No model loading/inference acceptance. |
+| Ordinary browser | Interrupted after 36 completed cases | Not a complete accepted run. Full uninterrupted successor required. |
+| Provider availability | Docker Linux engine pipe missing; no `mariadbd`/`mysqld` runtime found | MariaDB runtime NOT TESTED. Do not substitute generated SQL or SQLite results. |
+
+Commands are the existing pinned `.dotnet/dotnet.exe test ... --configuration Release --no-restore`, Jest `--runInBand --json`, `npm run typecheck`, `npm run lint`, `npm run build`, offline pytest with `SKIP_MODEL_LOAD=1`, and native Playwright with static/prebuilt export, isolated synthetic data root, `--retries=0`. Raw logs and result files remain under `.artifacts/phase9/`. The final portable [validation record](../validation.json) supersedes provisional run counts without erasing failed attempts.
+
+Inventory assertions require exact 33/57 membership and one deferred group. Product verification and final acceptance are separate checkpoints; P9-00 does not clear inherited manual/provider/output/release gates.
@@ -0,0 +1,117 @@
+# P9-00 source inventory
+
+Generated by `inventory.py`; associations below are existing candidate coverage, not executed Phase 9 passes.
+
+## Route → workflow → feature → test evidence → risk → acceptance
+
+| Route | Actual element owners | Preservation contracts / existing test evidence | Known risk | Phase 9 |
+|---|---|---|---|---|
+| `/` | `Navigate`, `LandingPage` | PRES-E01, PRES-J04; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/dashboard` | `DashboardView` | PRES-S01, PRES-S02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/analytics` | `AnalyticsPage` | Shared shell / nearest parent contracts; direct route evidence required; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/discover` | `JobDiscoveryPage` | PRES-J01, PRES-J02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/jobs` | `JobTable` | PRES-J05, PRES-J06; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/jobs/:id` | `ApplicationWorkspacePage` | PRES-W01, PRES-W02, PRES-W03; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/reminders` | `RemindersView` | PRES-W11; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/operations` | `OperationsPage` | PRES-W12; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/kanban` | `LegacyBoardRedirect` | PRES-J07; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/companies` | `CompaniesTable` | PRES-J08; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/offers` | `OfferComparisonPage` | PRES-J09; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/correspondence` | `CorrespondenceInboxPage` | PRES-M03, PRES-M04, PRES-M05; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/correspondence/review` | `LegacyCorrespondenceReviewRedirect` | PRES-M05; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/profile` | `ProfilePage` | PRES-E04, PRES-E05, PRES-E06; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/applications/:id` | `LegacyApplicationRedirect` | PRES-W01; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/career` | `CareerWorkspacePage` | PRES-C01, PRES-C02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/career/builder` | `CvBuilderPage` | PRES-C05; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/career/builder/:id` | `CvBuilderEditor` | PRES-C06; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/documents` | `DocumentsPage` | Shared shell / nearest parent contracts; direct route evidence required; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/admin/audit` | `AdminAuditPage` | PRES-A02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/admin/users` | `AdminUsersPage` | PRES-A01; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/admin/system` | `AdminSystemPage` | PRES-A03; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/trash` | `JobTable` | PRES-J06; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/settings` | `SettingsView` | PRES-J10, PRES-W11, PRES-S03, PRES-S04; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/settings/connected-accounts` | `ConnectedAccountsPage` | PRES-M06; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/login` | `LoginPage` | PRES-E02, PRES-E03, PRES-E04; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/register` | `LoginPage` | PRES-E02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/forgot-password` | `ForgotPasswordPage` | PRES-E02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/reset-password` | `ResetPasswordPage` | PRES-E02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/verify-email` | `VerifyEmailPage` | PRES-E02; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/confirm-email-change` | `VerifyEmailPage` | PRES-E06; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/microsoft-legacy-relink` | `MicrosoftLegacyRelinkPage` | PRES-E03; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+| `/cv/:slug` | `PublicCvPage` | PRES-C12; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |
+
+## Complete preservation ledger
+
+Exact source/owner/test/gap columns for every group are retained in [inventory.json](inventory.json). The original matrix is authoritative for sub-capabilities.
+
+| ID | Capability | Entry status | Phase 9 |
+|---|---|---|---|
+| PRES-E01 | **PRES-E01** — Public product/plans; honest unavailable billing | PARTIAL | NOT TESTED |
+| PRES-E02 | **PRES-E02** — Local login/register/remember, challenge, reset and verification | PARTIAL | NOT TESTED |
+| PRES-E03 | **PRES-E03** — Google/Microsoft login, link, legacy relink and popup results | PARTIAL | NOT TESTED |
+| PRES-E04 | **PRES-E04** — 2FA challenge/recovery/setup/disable; trusted-device revocation | PARTIAL | NOT TESTED |
+| PRES-E05 | **PRES-E05** — Session list/current device, revoke one/others, logout | PARTIAL | NOT TESTED |
+| PRES-E06 | **PRES-E06** — Avatar, account names/headline, email change and password | PARTIAL | NOT TESTED |
+| PRES-E07 | **PRES-E07** — Desktop collapse/mobile drawer, active nav and command search/actions | PARTIAL | NOT TESTED |
+| PRES-E08 | **PRES-E08** — Theme/system, EN/NB hydration, toast/confirm/prompt and errors | PARTIAL | NOT TESTED |
+| PRES-E09 | **PRES-E09** — Account-switch private-state disposal and stale request rejection | PARTIAL | NOT TESTED |
+| PRES-J01 | **PRES-J01** — NAV discovery/filter/sort/source/deadline/details | PARTIAL | NOT TESTED |
+| PRES-J02 | **PRES-J02** — Saved searches, run/delete/alerts, result changes/dismissal | PARTIAL | NOT TESTED |
+| PRES-J03 | **PRES-J03** — Reviewed manual/URL/paste job create, company/tags/dates, duplicates | PARTIAL | NOT TESTED |
+| PRES-J04 | **PRES-J04** — Extension/bookmarklet/share capture; post-create attachment/CV | PARTIAL | NOT TESTED |
+| PRES-J05 | **PRES-J05** — Job filters/sort/page/columns, saved views and row/mobile actions | PARTIAL | NOT TESTED |
+| PRES-J06 | **PRES-J06** — Bulk status/delete, soft delete/trash/restore and job edit | PARTIAL | NOT TESTED |
+| PRES-J07 | **PRES-J07** — Kanban grouped statuses, pointer/keyboard move and precise menu | PARTIAL | NOT TESTED |
+| PRES-J08 | **PRES-J08** — Company/contact edits, pipeline dates and linked-job history | PARTIAL | NOT TESTED |
+| PRES-J09 | **PRES-J09** — Recorded offers/compensation/deadlines/notes and source links | PARTIAL | NOT TESTED |
+| PRES-J10 | **PRES-J10** — CSV/JSON export, JSON import and CSV-to-JSON conversion | PARTIAL | NOT TESTED |
+| PRES-W01 | **PRES-W01** — Full workspace, sections, legacy links and optional reusable overlay | PARTIAL | NOT TESTED |
+| PRES-W02 | **PRES-W02** — Detail/status/progression, recruiter/dates/description/timeline | PARTIAL | NOT TESTED |
+| PRES-W03 | **PRES-W03** — Analysis, match/gaps, strategy and reviewed status/workflow suggestions | PARTIAL | NOT TESTED |
+| PRES-W04 | **PRES-W04** — Checklist create/edit/complete/delete/order and next action | PARTIAL | NOT TESTED |
+| PRES-W05 | **PRES-W05** — Attach/select/create/tailor CV and source context | PARTIAL | NOT TESTED |
+| PRES-W06 | **PRES-W06** — Cover-letter manual/AI review, versions/restore and dirty protection | PARTIAL | NOT TESTED |
+| PRES-W07 | **PRES-W07** — Application drafts and immutable submitted package/archived binaries | PARTIAL | NOT TESTED |
+| PRES-W08 | **PRES-W08** — Attachments upload/category/name/AI consent/preview/download/delete | PARTIAL | NOT TESTED |
+| PRES-W09 | **PRES-W09** — Interview questions/answers/ready/manual removal/AI review | PARTIAL | NOT TESTED |
+| PRES-W10 | **PRES-W10** — Debrief/follow-up draft/date/readiness | PARTIAL | NOT TESTED |
+| PRES-W11 | **PRES-W11** — Reminder rules/actions/notifications, ICS and Google/Outlook events | PARTIAL | NOT TESTED |
+| PRES-W12 | **PRES-W12** — Async progress/failure/retry/cancel/notifications | PARTIAL | NOT TESTED |
+| PRES-C01 | **PRES-C01** — Canonical structured career data and long-tail/custom sections | PARTIAL | NOT TESTED |
+| PRES-C02 | **PRES-C02** — Profile overview/completeness/import guidance/raw copy/history/restore | PARTIAL | NOT TESTED |
+| PRES-C03 | **PRES-C03** — Upload/extract/rebuild/reprocess/diff/select/accept/discard/retry/cancel | PARTIAL | NOT TESTED |
+| PRES-C04 | **PRES-C04** — Evidence bank source/category/tags/add/list/delete | PARTIAL | NOT TESTED |
+| PRES-C05 | **PRES-C05** — CV library create/copy/delete/templates/share/publication/PDF | PARTIAL | NOT TESTED |
+| PRES-C06 | **PRES-C06** — Studio tabs, preview debounce/pages/fit/save state/mobile panes | PARTIAL | NOT TESTED |
+| PRES-C07 | **PRES-C07** — Visibility/order/custom sections and item/document overrides | PARTIAL | NOT TESTED |
+| PRES-C08 | **PRES-C08** — Capability-aware templates/typography/color/header/skills/sidebar/photo | PARTIAL | NOT TESTED |
+| PRES-C09 | **PRES-C09** — A4/Letter/density/margins/dates/document locale/section presentation | PARTIAL | NOT TESTED |
+| PRES-C10 | **PRES-C10** — Undo/redo, save queue, dirty guard, history restore/preview lifecycle | PARTIAL | NOT TESTED |
+| PRES-C11 | **PRES-C11** — Section and whole-document AI improve/translate/instruction/grammar review | DEFERRED | NOT TESTED |
+| PRES-C12 | **PRES-C12** — Private PDF and published anonymous CV/PDF, long searchable pages | PARTIAL | NOT TESTED |
+| PRES-M01 | **PRES-M01** — Job-scoped manual correspondence/search/delete/paste import | PARTIAL | NOT TESTED |
+| PRES-M02 | **PRES-M02** — Gmail candidate/thread import/refresh/sync/unlink/relink/move | PARTIAL | NOT TESTED |
+| PRES-M03 | **PRES-M03** — Global inbox filters/page/provider/link/direction/detail/source links | PARTIAL | NOT TESTED |
+| PRES-M04 | **PRES-M04** — Compose/reply/provider/recipient/job; draft conflicts; confirm send/uncertainty | PARTIAL | NOT TESTED |
+| PRES-M05 | **PRES-M05** — Review proposed jobs/link/reject/keep/notes/sync/create | PARTIAL | NOT TESTED |
+| PRES-M06 | **PRES-M06** — Gmail/Graph/IMAP connect/status/disconnect separate from sign-in | PARTIAL | NOT TESTED |
+| PRES-S01 | **PRES-S01** — Personal metrics/activity/funnel/company/skills/stage/salary/next actions | PARTIAL | NOT TESTED |
+| PRES-S02 | **PRES-S02** — Owner-local five visibility preferences/onboarding dismiss/notifications | PARTIAL | NOT TESTED |
+| PRES-S03 | **PRES-S03** — Rules/reminder/table/theme/language preferences and account links | PARTIAL | NOT TESTED |
+| PRES-S04 | **PRES-S04** — AI privacy/usage/limits/Free-Pro/server entitlement/conditional billing | PARTIAL | NOT TESTED |
+| PRES-S05 | **PRES-S05** — Account ZIP/encrypted backup/lifecycle/deletion confirmations | PARTIAL | NOT TESTED |
+| PRES-A01 | **PRES-A01** — Admin user/create/roles/reset/delete/last-admin/self guards | PARTIAL | NOT TESTED |
+| PRES-A02 | **PRES-A02** — Audit list/detail/supported undo/job restore | PARTIAL | NOT TESTED |
+| PRES-A03 | **PRES-A03** — System/build/DB/AI/mail/SMTP/test/probe/benchmark/maintenance | PARTIAL | NOT TESTED |
+
+## API and implementation census
+
+43 controller/partial owners; 254 HTTP method attributes. Full base/suffix/authorization attributes are in JSON; this is source inventory, not runtime endpoint acceptance.
+
+Existing test files: backend 117, frontend 104, browser 58, sidecar 2. File presence does not establish coverage of every branch.
+
+Actors: anonymous/public, authenticated ordinary account, administrator, and plan entitlement variants. Actual role literals and authorization attributes are recorded in JSON. Test auth handlers, real local cookies and external identity providers require separate qualification.
+
+Database workflows: canonical Career Profile and evidence/import, CV variants/revisions/overrides, frozen application packages, job lifecycle/soft delete, correspondence/draft versions, account preferences/session revocation, administrative restore. Migration and data-owner file lists are in JSON.
+
+Shared UI: complete page/component lists in JSON; preserve current MUI/theme/i18n/router/confirm/prompt/resource owners. AI sidecar contracts are offline only unless actual model inference is explicitly exercised; P5-13 remains withheld.
@@ -0,0 +1,100 @@
+"""Reproducible source census; test-file associations are candidates, not passes."""
+import json
+import re
+from pathlib import Path
+import shutil
+
+ROOT = Path(__file__).resolve().parents[4]
+HERE = Path(__file__).resolve().parent
+UI = ROOT / 'job-tracker-ui'
+
+
+def relative(path):
+    return path.relative_to(ROOT).as_posix()
+
+
+def collect():
+    app = (UI / 'src/App.tsx').read_text(encoding='utf-8')
+    routes = {}
+    for match in re.finditer(r'<Route\s+path="([^"]+)"', app):
+        route = match.group(1)
+        element_match = re.search(r'element=\{\s*<([A-Za-z][A-Za-z0-9]*)', app[match.end():match.end() + 1200])
+        element = element_match.group(1) if element_match else 'Inspect App.tsx route body'
+        if route == '*':
+            continue
+        routes.setdefault(route, []).append(element)
+    for route, element in re.findall(r'\{ path: "([^"]+)", element: <([A-Za-z][A-Za-z0-9]*)', app):
+        if '*' not in route:
+            routes.setdefault(route, []).append(element)
+    # Public and authenticated '/' are one concrete pattern.
+    assert len(routes) == 33, (len(routes), routes)
+    source_matrix = (ROOT / 'docs/redesign/phase-2/PRESERVATION_MATRIX.md').read_text(encoding='utf-8')
+    accepted = (ROOT / 'docs/redesign/phase-8/PRESERVATION.md').read_text(encoding='utf-8')
+    groups = []
+    for line in source_matrix.splitlines():
+        if not line.startswith('| **PRES-'):
+            continue
+        cells = [cell.strip() for cell in line.strip('|').split('|')]
+        identifier = re.search(r'PRES-[A-Z]\d{2}', cells[0]).group()
+        previous = next(row for row in accepted.splitlines() if identifier in row and row.startswith('|'))
+        groups.append(dict(id=identifier, capability=cells[0], entry=cells[1], owners=cells[2],
+                           existingEvidence=cells[3], historicGap=cells[4],
+                           entryStatus='DEFERRED' if '| DEFERRED |' in previous else 'PARTIAL',
+                           phase9Status='NOT TESTED'))
+    assert len(groups) == 57 and len({group['id'] for group in groups}) == 57
+    assert sum(group['entryStatus'] == 'DEFERRED' for group in groups) == 1
+    endpoints = []
+    for path in sorted((ROOT / 'JobTrackerApi/Controllers').glob('*.cs')):
+        text = path.read_text(encoding='utf-8-sig')
+        bases = re.findall(r'\[Route\("([^"]+)"\)\]', text)
+        methods = re.findall(r'\[Http(Get|Post|Put|Patch|Delete)(?:\("([^"]*)"\))?\]', text)
+        if bases or methods:
+            endpoints.append(dict(file=relative(path), baseRoutes=bases, actions=[dict(method=m.upper(), suffix=s) for m, s in methods],
+                                  authorizationAttributes=re.findall(r'\[Authorize[^\]]*\]', text)))
+    tests = dict(backend=[relative(p) for p in sorted((ROOT / 'JobTrackerApi.Tests').rglob('*Tests.cs'))],
+                 frontend=[relative(p) for p in sorted((UI / 'src').rglob('*')) if re.search(r'\.(test|spec)\.tsx?$', p.name)],
+                 browser=[relative(p) for p in sorted((UI / 'e2e').glob('*.spec.ts'))],
+                 sidecar=[relative(p) for p in sorted((ROOT / 'tools/summarizer/tests').glob('test_*.py'))])
+    assert all(tests.values())
+    role_source = (ROOT / 'JobTrackerApi/Controllers/UsersController.cs').read_text(encoding='utf-8')
+    role_literals = sorted(set(re.findall(r'"(Admin|User|Pro|Premium|Administrator)"', role_source)))
+    plan_source = (ROOT / 'JobTrackerApi/Models/AccountPlans.cs').read_text(encoding='utf-8')
+    entitlement_roles = sorted(set(re.findall(r'Contains\("([^"]+)"', plan_source)))
+    return dict(baseline='1c24e406f194f0f42277d837b3008a7a28dca26a', routes=routes,
+                preservation=groups, apiOwners=endpoints, rolesFromUsersController=role_literals,
+                entitlementRoles=entitlement_roles,
+                rolesCaveat='Admin controls user administration; Admin/Premium grant pro entitlements; ordinary accounts may have no role. UsersController supports custom role strings, which do not imply new grants. Public/anonymous is distinct.',
+                frontendPages=[relative(p) for p in sorted((UI / 'src/views').glob('*.tsx'))],
+                sharedComponents=[relative(p) for p in sorted((UI / 'src/components').rglob('*.tsx'))], tests=tests,
+                databaseWorkflows=[relative(p) for p in sorted((ROOT / 'JobTrackerApi/Data').rglob('*.cs'))],
+                migrations=[relative(p) for p in sorted((ROOT / 'JobTrackerApi/Migrations').glob('*.cs'))],
+                cvDocumentOwners=[relative(p) for p in sorted((ROOT / 'JobTrackerApi').rglob('*.cs')) if any(word in p.name for word in ['Pdf', 'CvRender', 'Document', 'CareerProfile'])])
+
+
+if __name__ == '__main__':
+    inventory = collect()
+    HERE.mkdir(parents=True, exist_ok=True)
+    (HERE / 'inventory.json').write_text(json.dumps(inventory, indent=2, ensure_ascii=False) + '\n', encoding='utf-8')
+    request = Path('C:/Users/Connor/.codex/attachments/08a603fb-3692-4d57-8f62-69475e72a7e0/Pasted text.txt')
+    if request.exists() and not (HERE.parent / 'REQUEST.md').exists():
+        shutil.copyfile(request, HERE.parent / 'REQUEST.md')
+    lines = ['# P9-00 source inventory', '', 'Generated by `inventory.py`; associations below are existing candidate coverage, not executed Phase 9 passes.', '',
+             '## Route → workflow → feature → test evidence → risk → acceptance', '',
+             '| Route | Actual element owners | Preservation contracts / existing test evidence | Known risk | Phase 9 |',
+             '|---|---|---|---|---|']
+    for route, owners in inventory['routes'].items():
+        matched = [group for group in inventory['preservation'] if route in re.findall(r'/[A-Za-z0-9_:/-]*', group['entry'])]
+        group_text = ', '.join(group['id'] for group in matched) or 'Shared shell / nearest parent contracts; direct route evidence required'
+        lines.append(f"| `{route}` | {', '.join('`' + owner.replace('|', '&#124;') + '`' for owner in owners)} | {group_text}; [original test mapping](../../phase-2/PRESERVATION_MATRIX.md) | Human/device/provider qualification retained | NOT TESTED |")
+    lines += ['', '## Complete preservation ledger', '',
+              'Exact source/owner/test/gap columns for every group are retained in [inventory.json](inventory.json). The original matrix is authoritative for sub-capabilities.', '',
+              '| ID | Capability | Entry status | Phase 9 |', '|---|---|---|---|']
+    lines += [f"| {g['id']} | {g['capability']} | {g['entryStatus']} | NOT TESTED |" for g in inventory['preservation']]
+    lines += ['', '## API and implementation census', '',
+              f"{len(inventory['apiOwners'])} controller/partial owners; {sum(len(a['actions']) for a in inventory['apiOwners'])} HTTP method attributes. Full base/suffix/authorization attributes are in JSON; this is source inventory, not runtime endpoint acceptance.", '',
+              f"Existing test files: {', '.join(f'{lane} {len(files)}' for lane, files in inventory['tests'].items())}. File presence does not establish coverage of every branch.", '',
+              'Actors: anonymous/public, authenticated ordinary account, administrator, and plan entitlement variants. Actual role literals and authorization attributes are recorded in JSON. Test auth handlers, real local cookies and external identity providers require separate qualification.', '',
+              'Database workflows: canonical Career Profile and evidence/import, CV variants/revisions/overrides, frozen application packages, job lifecycle/soft delete, correspondence/draft versions, account preferences/session revocation, administrative restore. Migration and data-owner file lists are in JSON.', '',
+              'Shared UI: complete page/component lists in JSON; preserve current MUI/theme/i18n/router/confirm/prompt/resource owners. AI sidecar contracts are offline only unless actual model inference is explicitly exercised; P5-13 remains withheld.']
+    (HERE / 'INVENTORY.md').write_text('\n'.join(lines) + '\n', encoding='utf-8')
+    print(json.dumps(dict(routes=len(inventory['routes']), groups=len(inventory['preservation']), apiOwners=len(inventory['apiOwners']), tests={k: len(v) for k, v in inventory['tests'].items()})))