{
  "version": "0.17.0",
  "date": "2026-10-28",
  "baseline_commit": "82bc1b8d68f3f78e0400df16c15dba857e8013a9",
  "scope": "WEB04 private feedback, customer permission, deliberate local publication, withdrawal and revoked-view repair",
  "full_backend_tests_passed": 611,
  "full_backend_seconds": 168.09,
  "versioned_junit": "test-results-v0.17.xml",
  "client_tests_passed": 101,
  "new_client_regressions": 7,
  "structural_render_cases_passed": 79,
  "build_passed": true,
  "built_assets": [
    "assets/index-BwlVijaS.js",
    "assets/index-DntQjQNV.css"
  ],
  "dependency_changes": false,
  "schema_change": false,
  "access_policy_routes": 207,
  "recovery_format": 11,
  "pinned_older_formats": [
    1,
    2,
    3,
    4,
    5,
    6,
    7,
    8,
    9,
    10
  ],
  "fixes": [
    "Feedback-only code access revalidates independently and clears revoked/unverifiable private views; valid checks preserve draft choices. Late operations cannot revive cleared access.",
    "Returning from owner request detail refreshes feedback list/counts so a prior published label does not linger."
  ],
  "preservation": "feedback-journey-preservation-check.json",
  "recovery": "feedback-journey-recovery-check.json",
  "browser_evidence": "../../SHS-Feedback-Verification-v0.17/verification.json",
  "actual_browser_verified": [
    "A new empty two-business dataset was used; two exact matching-contact customers and completed jobs were created through owner UI.",
    "Exact completed-job selection and protected local capture through owner UI; no email sent or address verified. No credential values saved in browser artifacts.",
    "Customer A entered four ratings and explicit recommendation through the feedback-only code path, with public permission default off. Validation kept unsaved private text.",
    "Owner saw immutable private A answers; the selected-testimonial page was empty. Customer B code exposed none of A answers or private job/contact data.",
    "A separate customer choice named exact public text and optional rating. Saving permission alone left the public page empty; owner confirmation published only the approved projection.",
    "Selected page and home strip showed the exact approved statement; private markers were absent. A withdrawal removed it from fresh public views.",
    "A stale owner preview could not republish withdrawn A text. Reload/reopen retained original answers and approval/withdrawal events, with no current public projection.",
    "B published a different statement with its rating kept private. Owner private note, high priority and tags preserved that publication.",
    "Changing only B contact email hid B publication and revoked B code. Restoring its old contact text did not restore permission or access; A remained separately withdrawn.",
    "Observed stale private feedback after revoked-code action, then repaired it. A reasoned replacement B2 request retained prior B history.",
    "Valid revalidation preserved B2 unsaved public choices. A stale permission save retained input. Owner revocation then automatically cleared saved answers, choice draft and code from the already-open repaired page.",
    "Explicit reissue restored B2 feedback-only access with original private answers and no public permission. Fresh customer approval plus explicit owner publication produced the final selected statement.",
    "Owner Back to feedback now refreshes saved counts/states; full reload retains A withdrawn, B suspended/revoked and B2 deliberately published.",
    "Customer and owner permission histories reopened. At 689 by 751 pixels, Tab reached the confirmation checkbox with visible focus and document width equal to viewport width.",
    "Harbour owner sign-in showed zero jobs/requests/responses/publications. Opening the general customer portal still required sign-in; no portal account/password was created.",
    "Only extra QA tabs 26–29 closed and test server 8789 stopped. Frozen owner review on 8788 and tabs 10/11 remained untouched."
  ],
  "browser_limits": [
    "Local fictional-data browser evidence only; no live SHS change, email delivery, real public hosting or production approval.",
    "The customer code page deliberately omits job title, exact internal IDs and contact details. Exact job/customer binding was checked in owner UI and separately in saved/API records; customer-side job-title display was not demonstrated.",
    "Expiry, concurrent submissions, foreign IDs, replay, portal/document denial and website-history non-revival have automated/API evidence; not all were clicked through browser UI.",
    "Public selected pages and home strips were verified after fresh retrieval/reload. Existing downloaded/open public copies cannot be recalled; same-device home-focus refresh timing was not independently proved.",
    "Feedback revalidation uses same-origin change notices, focus/visibility and 30-second visible checks with a 10-second deadline. Cross-device/background timing and full offline behavior remain unverified.",
    "Same-Mac stopped backup/fresh restore and restored access checks are CLI/test-API evidence, not restored-browser or second-machine proof.",
    "Broader archive/expiry/reissue errors, portal feedback navigation, editable reviews coexistence, gallery/website/recurrence/staff/customer transfer flows, touch/phone/screen-reader/PWA and large datasets remain in the queue.",
    "An unused transfer form was left without saving. Overlapping leave-dialog markup observed during background-control automation is retained for a focused wider modal/focus review; no transfer was completed.",
    "All 45 capabilities remain tracked and all 14 original SHS findings remain OPEN."
  ],
  "observed_warnings": [
    "Existing Vite chunk above 500 kB",
    "Starlette/httpx TestClient deprecation",
    "Expected oversized-image test warning"
  ],
  "capabilities_tracked": 45,
  "original_findings_open": 14,
  "question_pending": false,
  "live_SHS_changed": false,
  "production_approved": false,
  "full_product_complete": false
}