jobtrackingapp/docs/direct-roadmap/FINDINGS.md

Continuing findings list

10 November current additions

ID	Finding and evidence	Next action
PERF-01-RULES	RESOLVED in A3 e286be48, published through 1d733675. Seven red SQLite cases reproduced stale settings after save. Direct owner/global settings reads replace the 30-second controller cache. The 35-case final and integration runs include owner isolation, fallback and overlapping old/new responses. Native receipts retained.	Measure MariaDB/load tradeoff and inject a failed save in later qualification. Existing-setting reads add one indexed lookup, or two with global fallback. No latency gain claimed.
RR-14	Current use of the July first-deploy runbook could inherit its historical no-op migration rollback rationale. Source review confirmed current Up methods add application Version and operation-event schema. Guidance clarified and published at release 3cca4418.	Rehearse the exact old/new image pair after migration and representative writes with ownership/revision/document checks. Historical scope clarification is complete; runtime compatibility remains open.
UI-CONFIRM-DRAWER	RESOLVED in df93bfb6, published through A3 d027754d. Real nested Drawer/confirmation left focus on the presentation container. Conditional transition recovery preserves deliberate focus and the original Cancel/cancelled-delete/native-write assertions.	All11 native discovery cases passed together, with earlier failures retained. Broader final A3/human qualification remains open.
I18N-DATE-INPUT	RESOLVED in 265794e0 / 5a880a6a, published through A3 d027754d. UTC parsing/formatting shifted literal dates and default today.	Seven Add/Edit cases in each of three timezone processes passed, with null/invalid and exact revision/payload checks. Actual date-widget browser/native checks remain open.
I18N-DATE-LEGACY	OPEN. Company/Jobs display and Edit loading mix literal dates and legacy DateTime strings without a precision discriminator. Source and timezone review reproduced differing displayed/loaded days. Input conversion fixes retain those legacy loading policies.	Qualify date-only versus timestamp semantics and affected stored shapes before broader display/loading changes. Preserve historical/imported data and record missing precision metadata.

Earlier rows below retain historical dates. The current TODO and checkpoints supersede their old execution status, including the fixed backup parser and completed 188 dynamic-call reviews.

2026-11-02. Observed defects, source limitations and planning work are separate. This list does not approve implementation, accept risk or close mandatory gates. Exact branch evidence is in WORK_COMPLETED.md.

ID	Finding	Evidence / current state	Next action
RR-11	Deployment backup parser fails to extract the documented Host= alias; uppercase SERVER= also fails	REPRODUCED with shell-native synthetic positive control; canonical Server= works. Proposed P2 compatibility defect, no production impact inspected	Minimal parser/contract remediation in authorised release scope; alias/case/quoted separator/redaction checks
RR-12	Core-image rollback lacks post-rollback health check and does not reverse database/schema or AI changes	VERIFIED SOURCE LIMITATION; runtime recovery NOT TESTED	Isolated post-migration/post-write rehearsal; distinguish image-only and data recovery
RR-13	Backup format checks and off-host messages do not prove restore consistency or encryption	QUALIFICATION GAP; no actual recovery performed	Verify database/files/keys/tombstones together, off-host retrieval/decryption and agreed RPO/RTO
I00-13	Session-invalidated alert is hardcoded English	SOURCE VERIFIED, App.tsx:488	Localise without retaining old session tree or relying on discarded provider state
I00-14	Workflow overline Flow bypasses catalogue	SOURCE VERIFIED, JobFlowBar.tsx:147	Extract controlled UI label in approved I18N implementation
I00-15	Attachment iframe accessible title is only pdf	SOURCE VERIFIED, Attachments.tsx:361	Descriptive localised title; exclude private filenames from translation exports
I00-16	EN/NO and English/Norsk do not express planned locale/variant contract	SOURCE VERIFIED, AppShell.tsx:692	Native/English names, Bokmal/Nynorsk distinction and legacy nb preservation
I00-17	Attachment size uses fixed decimal formatting	SOURCE VERIFIED, ApplicationAssets.tsx:360	Locale-aware numeric display; preserve bytes and filename
I00-18	Language-save failure/retry reads catalogue directly	ACTIVE CONTRACT, I18nProvider.tsx:43; not a defect by itself	Preserve same-language retry/stale-save behavior; include in migration inventory
I00-19	Homepage framework/provider-name list is poor user-value copy	SOURCE VERIFIED, LandingPage.tsx:133; design recommendation	Coordinate with Launch Site concepts; no unapproved copy or feature claims

I18N progress: 108/188 dynamic calls resolved to finite literal branches; 240 existing-key references validated; 80 calls remain. Four direct reads and 26 reviewed JSX/accessibility candidates recorded. These are inventory counts, not translation completeness or runtime test passes.

Earlier homepage and qualification findings remain in their branch reports. Add new findings with stable IDs and evidence status; do not rediscover unchanged items on each continuation.