{
  "version": "0.18.0",
  "date": "2026-10-29",
  "baseline_commit": "2350517d3d957eeda6eed4eebe8724ed18d2a43d",
  "scope": "WEB01/WEB02 editable website, deliberate publication and isolated public enquiries; bounded WEB03/WEB05 image/metadata checks",
  "full_backend_tests_passed": 612,
  "full_backend_seconds": 176.36,
  "versioned_junit": "test-results-v0.18.xml",
  "client_tests_passed": 113,
  "new_client_regressions": 12,
  "structural_render_cases_passed": 81,
  "build_passed": true,
  "built_assets": [
    "assets/index-ClSWVJ7B.js",
    "assets/index-DntQjQNV.css"
  ],
  "dependency_changes": false,
  "schema_change": false,
  "access_policy_routes": 207,
  "recovery_format": 11,
  "pinned_older_formats": [
    1,
    2,
    3,
    4,
    5,
    6,
    7,
    8,
    9,
    10
  ],
  "fixes": [
    "Service enquiry CTA carries only an exact published service slug, resolved to its canonical editable title.",
    "Private website preview validates exact owner access and clears on loss; late results cannot restore cleared content.",
    "Missing and unpublished website routes render a branded HTML shell with safe metadata and real HTTP 404.",
    "Owner workspace clears saved/private/unsaved state on same-origin staff-context invalidation."
  ],
  "preservation": "website-journey-preservation-check.json",
  "recovery": "website-journey-recovery-check.json",
  "browser_evidence": "../../SHS-Website-Verification-v0.18/verification.json",
  "actual_browser_verified": [
    "A fresh two-business fictional dataset was used. All operational website edits, assets and two enquiries were created through the actual browser, not API fixtures.",
    "Owner changed published business name to Willow Test Works, contact wording, colours, synthetic logo, homepage text and enquiry success message; saved values reopened.",
    "Owner added a custom page with distinct menu label and a service with description, alternative text and a synthetic image. Reserved admin slug was rejected while text remained.",
    "Unpublished page/service content worked in an authenticated draft preview, with enquiry submission disabled. Known public URLs and images remained unavailable before publication.",
    "An open private preview incorrectly survived sign-out. After repair it automatically cleared on sign-out, without a manual reload.",
    "Explicit local publication exposed reviewed home/page/service content, menu and images. A service CTA initially lost its context; after repair the contact form carried its canonical published service title.",
    "An unauthenticated visitor encountered required-name and whitespace-message validation with entered text preserved, then submitted enquiry A with a double-click. Exactly one job was saved.",
    "Try another enquiry cleared the contact/message fields and retained the service. A deliberately separate enquiry B using matching contacts created a second job and a distinct customer.",
    "Success views showed the owner wording and local/no-email notice, without staff views, private work or document access. No customer or portal account was linked from matching text.",
    "Owner reopened both exact jobs, including after reload, and checked service, full message and contact facts. Harbour sign-in showed zero jobs and separate website data.",
    "Website leave confirmation was a native modal; background Pages activation did not switch the editor or open another modal. Keep editing and explicit discard/reload were exercised.",
    "Two owner windows rejected a stale draft save without losing entered text. Explicit reload recovered the newer saved draft; saving it alone left the public publication unchanged.",
    "A deliberate publication hid the custom page and service. Fresh public navigation omitted them, and their routes/image were unavailable. The raw JSON 404 was repaired to a branded missing-page view retaining HTTP 404.",
    "History restoration changed the saved draft only. Public hidden state persisted until the owner reviewed and explicitly republished the earlier content.",
    "A final V3 footer and private metadata were saved but left unpublished. Public V1 remained visible; private V3 was visible only in owner preview.",
    "At 689 by 751 CSS pixels, Tab visibly focused Services, Return opened it, both images loaded and document width matched viewport width. Brand/accent values matched saved colours.",
    "A second owner window initially retained private editor content after sign-out elsewhere. The repair cleared that editor and the draft preview; a normal valid-session refresh had preserved unsaved text beforehand.",
    "Only QA tabs 30–33 were closed and server 8789 stopped. Owner-review tabs 10/11, preexisting tab 14 and frozen v0.12.1 server 8788 were preserved."
  ],
  "browser_limits": [
    "Local fictional-data evidence only. No live SHS changes, external delivery, real public hosting, domain changes or production approval.",
    "The original enquiry page supports a preferred date and up to five photos. Dedicated visitor date/photo fields are still missing here; full route-by-route source parity is not claimed.",
    "The structured editor deliberately excludes executable HTML. Rich formatting, multiple themes, redirects, complete gallery/job-photo publication UI and real legal/consent content remain.",
    "Only the bounded website leave dialog passed. The earlier nested customer-transfer dialog/focus observation remains queued; no universal focus-trap or accessibility claim.",
    "Same-origin sign-out clearing was observed for owner workspace and preview. General owner expiry, private document views, cross-device/background timing and offline behaviour were not fully rehearsed.",
    "Private draft preview revalidates on focus/visibility and visible 30-second checks with a 10-second deadline; valid checks preserve the loaded draft rather than silently reloading it.",
    "Public withdrawal was checked on fresh reads. Already-open or downloaded public copies cannot be recalled.",
    "Metadata, canonical, robots, sitemap, exact foreign IDs and response status have separate HTTP/API evidence. No real crawler, phone, touch, screen reader, PWA installation or performance certification.",
    "Same-Mac stopped backup/fresh restore and access probes use CLI/test APIs, not a restored browser login or a second machine. This fixture has no restricted job photos or testimonials; those restore rules retain full-suite evidence.",
    "The public enquiry response retains its existing opaque receipt field; it is not shown in the success view and does not authorize private access.",
    "All 45 capabilities remain tracked and all 14 original SHS findings remain OPEN."
  ],
  "observed_warnings": [
    "Existing Vite chunk above 500 kB",
    "Starlette/httpx TestClient deprecation",
    "Expected oversized-image test warning"
  ],
  "capabilities_tracked": 45,
  "original_findings_open": 14,
  "question_pending": false,
  "live_SHS_changed": false,
  "production_approved": false,
  "full_product_complete": false
}