From dc2112321aa8d5bac16bcef8f293479b80150ef2 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 12 Oct 2026 23:36:36 +0000 Subject: [PATCH 1/3] docs(specs): mark 013 G-04 closed-unproven after #676 (T033) Co-Authored-By: Claude Opus 5.5 (1M context) Signed-off-by: Claude --- specs/013-expand-test-coverage/coverage-gaps.md | 4 ++-- specs/013-expand-test-coverage/tasks.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/specs/013-expand-test-coverage/coverage-gaps.md b/specs/013-expand-test-coverage/coverage-gaps.md index 80a0337fd..07a7dc063 100644 --- a/specs/013-expand-test-coverage/coverage-gaps.md +++ b/specs/013-expand-test-coverage/coverage-gaps.md @@ -1,6 +1,6 @@ # Coverage Gap Record -**Summary**: 5/24 closed · 0 closed unproven · 2 in progress · 16 open · 1 unit-only by design +**Summary**: 5/24 closed · 1 closed unproven · 2 in progress · 15 open · 1 unit-only by design **Last updated**: 2026-10-12 | ID | Category | Gap | Story | FR | Priority | Status | Evidence | Notes | @@ -8,7 +8,7 @@ | G-01 | static | govulncheck gate | US1 | FR-001 | P1 | open | | | | G-02 | static | container image scan gate | US1 | FR-001 | P1 | open | | | | G-03 | static | Dockerfile lint gate | US1 | FR-001 | P1 | closed | `workflow lint` https://github.com/GameplanePanel/Gameplane/actions/runs/38286000942 | First run on #674 flagged DL3008/DL3018/DL4006 in 13 Dockerfiles; pinned apk/apt versions and pipefail SHELL fixed them, and every game image still builds (run 38286000940). | -| G-04 | static | dependency-review gate | US1 | FR-001 | P1 | open | | | +| G-04 | static | dependency-review gate | US1 | FR-001 | P1 | closed-unproven | `dependency review` job, added in https://github.com/GameplanePanel/Gameplane/pull/676 | OD-4: proven by configuration review only (`fail-on-severity: high`, PR-only); no throwaway PR, no fixture branch, no local act run. | | G-05 | static | codegen / tidy drift gate | US1 | FR-001 | P1 | closed | `codegen drift` https://github.com/GameplanePanel/Gameplane/actions/runs/38189397259 | First run on #672 found no drift; the proof shows the job fails on injected drift. | | G-06 | static | submodule pointer freshness gate | US1 | FR-001 | P1 | closed | `submodule freshness` https://github.com/GameplanePanel/Gameplane/actions/runs/38189409720 | First run on #675 green; the proof covers a stale and a fresh pointer. | | G-07 | e2e-dashboard | live: notification webhook config | US2 | FR-002 | P1 | open | | | diff --git a/specs/013-expand-test-coverage/tasks.md b/specs/013-expand-test-coverage/tasks.md index cb4707d86..e6e0cd34a 100644 --- a/specs/013-expand-test-coverage/tasks.md +++ b/specs/013-expand-test-coverage/tasks.md @@ -198,7 +198,7 @@ description: "Task list for 013-expand-test-coverage" - uses `actions/dependency-review-action`, SHA-pinned, with `fail-on-severity: high` and `comment-summary-in-pr: on-failure` Register it in `report`, and make the report treat `skipped` on push events as neutral, the same way other PR-only jobs are tallied. -- [ ] T033 [US1] Once the T032 PR merges, set G-04 to `closed-unproven` in `coverage-gaps.md`: Evidence names the `dependency review` job and that PR, and Notes cite OD-4 (configuration review only; no throwaway PR, no fixture branch, no local act run). +- [X] T033 [US1] Once the T032 PR merges, set G-04 to `closed-unproven` in `coverage-gaps.md`: Evidence names the `dependency review` job and that PR, and Notes cite OD-4 (configuration review only; no throwaway PR, no fixture branch, no local act run). ### G6 submodule freshness: PR `ci: submodule freshness gate` (OD-1 ruled) From 5190b460f1487629ed9752dd5a6e57a85b52cfa6 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 12 Oct 2026 23:46:36 +0000 Subject: [PATCH 2/3] docs(specs): state the OD-4 exception in the 013 US1 goal and checkpoint Co-Authored-By: Claude Opus 5.5 (1M context) Signed-off-by: Claude --- specs/013-expand-test-coverage/tasks.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/specs/013-expand-test-coverage/tasks.md b/specs/013-expand-test-coverage/tasks.md index 52506d3ea..8dd6ecfaa 100644 --- a/specs/013-expand-test-coverage/tasks.md +++ b/specs/013-expand-test-coverage/tasks.md @@ -97,7 +97,7 @@ description: "Task list for 013-expand-test-coverage" ## Phase 3: User Story 1 – Static gates (Priority: P1) 🎯 MVP -**Goal**: six blocking gates, each proven able to fail, with zero pre-existing findings left (contracts/static-gates.md G1–G6). +**Goal**: six blocking gates, each proven able to fail except `dependency-review`, which OD-4 proves by configuration review only, with zero pre-existing findings left (contracts/static-gates.md G1–G6). **Independent Test**: for each gate, its `hack/check-_test.sh` step is green, the gate job is green, and the gap record links a run where the gate was red on a real violation (quickstart.md, "US1"). @@ -219,7 +219,7 @@ description: "Task list for 013-expand-test-coverage" Register it in `report`. Depends on T007, T034 and T035. Flip G-06. -**Checkpoint**: all six gates are blocking and proven. The gap rows G-01 to G-06 are `closed` with run links (quickstart.md "US1" items 1–4). +**Checkpoint**: all six gates are blocking. G-01, G-02, G-03, G-05 and G-06 are `closed` with run links; G-04 is `closed-unproven` under OD-4 (quickstart.md "US1" items 1–4). --- From 4b5ccd4b9ec448da2fb6bc2c9318512f9c0870e6 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 12 Oct 2026 23:46:47 +0000 Subject: [PATCH 3/3] docs(specs): note the OD-4 exception in the 013 US1 independent test Co-Authored-By: Claude Opus 5.5 (1M context) Signed-off-by: Claude --- specs/013-expand-test-coverage/tasks.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/specs/013-expand-test-coverage/tasks.md b/specs/013-expand-test-coverage/tasks.md index 8dd6ecfaa..6ee158a0d 100644 --- a/specs/013-expand-test-coverage/tasks.md +++ b/specs/013-expand-test-coverage/tasks.md @@ -99,7 +99,7 @@ description: "Task list for 013-expand-test-coverage" **Goal**: six blocking gates, each proven able to fail except `dependency-review`, which OD-4 proves by configuration review only, with zero pre-existing findings left (contracts/static-gates.md G1–G6). -**Independent Test**: for each gate, its `hack/check-_test.sh` step is green, the gate job is green, and the gap record links a run where the gate was red on a real violation (quickstart.md, "US1"). +**Independent Test**: for each gate, its `hack/check-_test.sh` step is green, the gate job is green, and the gap record links a run where the gate was red on a real violation (quickstart.md, "US1") `dependency-review` is the OD-4 exception: no test script or red run, only a configuration review. **PR boundaries**: one PR per gate, in the order G5 → G1 → G3 → G2 → G4 → G6 (plan "Phase sequencing").