UI V2 Rewire - Release Readiness Package

Sprint: SPRINT_20260219_007_FE_ui_v2_shell_qa_and_readiness_reverification Date: 2026-02-19 Owner: Project Manager, QA lead Status: PASS (frontend shell structure + backend contract dependency closure + UI endpoint binding)

1. Scope Reverification Summary

Frontend shell restructuring is implemented for the canonical seven domains and verified against reopened sprint requirements:

• Dashboard
• Release Control
• Security and Risk
• Evidence and Audit
• Integrations
• Platform Ops
• Administration

Implemented shell evidence (non-exhaustive):

• src/Web/StellaOps.Web/src/app/app.routes.ts
• src/Web/StellaOps.Web/src/app/layout/app-sidebar/app-sidebar.component.ts
• src/Web/StellaOps.Web/src/app/routes/release-control.routes.ts
• src/Web/StellaOps.Web/src/app/routes/security-risk.routes.ts
• src/Web/StellaOps.Web/src/app/routes/evidence-audit.routes.ts
• src/Web/StellaOps.Web/src/app/routes/platform-ops.routes.ts
• src/Web/StellaOps.Web/src/app/routes/administration.routes.ts

API binding evidence for previously blocked contract rows:

• src/Web/StellaOps.Web/src/app/features/bundles/bundle-organizer.api.ts
• src/Web/StellaOps.Web/src/app/features/bundles/bundle-catalog.component.ts
• src/Web/StellaOps.Web/src/app/features/bundles/bundle-detail.component.ts
• src/Web/StellaOps.Web/src/app/features/bundles/bundle-builder.component.ts
• src/Web/StellaOps.Web/src/app/features/bundles/bundle-version-detail.component.ts
• src/Web/StellaOps.Web/src/app/features/security-risk/advisory-sources.api.ts
• src/Web/StellaOps.Web/src/app/features/security-risk/advisory-sources.component.ts

2. QA Evidence (Strict Suites)

2.1 Unit and Structural Route Coverage

Command:

npm run test -- --watch=false --include src/tests/navigation/nav-route-integrity.spec.ts --include src/tests/navigation/nav-model.spec.ts --include src/tests/navigation/legacy-redirects.spec.ts --include src/tests/release-control/release-control-routes.spec.ts --include src/tests/release-control/release-control-setup.component.spec.ts --include src/tests/release-control/release-control-structure.component.spec.ts --include src/tests/security-risk/security-risk-routes.spec.ts --include src/tests/security-risk/advisory-sources.component.spec.ts --include src/tests/evidence-audit/evidence-audit-routes.spec.ts --include src/tests/evidence-audit/evidence-audit-overview.component.spec.ts --include src/tests/platform-ops/platform-ops-routes.spec.ts --include src/tests/administration/administration-routes.spec.ts

Result:

• 12 files passed
• 167 tests passed
• 0 failed

2.2 E2E Shell Reverification

Command:

npx playwright test tests/e2e/nav-shell.spec.ts tests/e2e/critical-path.spec.ts tests/e2e/ia-v2-a11y-regression.spec.ts --workers=1

Result:

• 33 tests passed
• 0 failed

Suites covered:

• canonical nav shell and redirect behavior
• cross-domain critical flows
• IA v2 accessibility/regression checks

3. Contract Ledger Reconciliation (QA7-04 + BE8-06)

Source ledger: docs/modules/ui/v2-rewire/S00_endpoint_contract_ledger_v1.md

Previously blocked backend dependency rows are now implemented and reconciled:

1. S00-T05-RC-01 (Bundle catalog/detail/builder endpoint family)

• Reclassified from MISSING_NEW -> EXISTS_COMPAT.
• Implemented route family:
  • GET /api/v1/release-control/bundles
  • GET /api/v1/release-control/bundles/{bundleId}
  • GET /api/v1/release-control/bundles/{bundleId}/versions
  • GET /api/v1/release-control/bundles/{bundleId}/versions/{versionId}
  • POST /api/v1/release-control/bundles
  • POST /api/v1/release-control/bundles/{bundleId}/versions
  • POST /api/v1/release-control/bundles/{bundleId}/versions/{versionId}/materialize
• Persistence implemented by migration:
  • src/Platform/__Libraries/StellaOps.Platform.Database/Migrations/Release/045_ReleaseControlBundleLifecycle.sql

2. S00-T05-SEC-02 (Advisory Sources aggregate endpoint family)

• Reclassified from MISSING_NEW -> EXISTS_COMPAT.
• Implemented Concelier freshness routes:
  • GET /api/v1/advisory-sources
  • GET /api/v1/advisory-sources/summary
  • GET /api/v1/advisory-sources/{id}/freshness
• Implemented Policy impact/conflict routes:
  • GET /api/v1/advisory-sources/{id}/impact
  • GET /api/v1/advisory-sources/{id}/conflicts
• Persistence implemented by migrations:
  • src/Concelier/__Libraries/StellaOps.Concelier.Persistence/Migrations/004_add_advisory_source_freshness_projection.sql
  • src/Concelier/__Libraries/StellaOps.Concelier.Persistence/Migrations/005_add_advisory_source_signature_projection.sql
  • src/Policy/__Libraries/StellaOps.Policy.Persistence/Migrations/005_advisory_source_projection.sql
• Advisory detail diagnostics now include backend contract fields for total/signed/unsigned/signature-failure counts.

Reconciled truth:

• Frontend shell conformance: PASS.
• Backend dependency closure for UI shell contracts (S00-T05-RC-01, S00-T05-SEC-02): PASS.
• Frontend endpoint-consumption closure for S00-T05-RC-01 and S00-T05-SEC-02: PASS.

4. Decision

Readiness outcome

• Frontend shell gate (sprints 002-006 scope): PASS.
• Backend dependency gate for full pack closure (S00-T05-RC-01, S00-T05-SEC-02): PASS.

Verification evidence (backend dependency closure)

• dotnet test src/Platform/__Tests/StellaOps.Platform.WebService.Tests/StellaOps.Platform.WebService.Tests.csproj -v minimal -> Passed 115/115 (MTP full project run)
• dotnet test src/Policy/__Tests/StellaOps.Policy.Gateway.Tests/StellaOps.Policy.Gateway.Tests.csproj -v minimal -> Passed 131/131 (MTP full project run)
• src/Platform/__Tests/StellaOps.Platform.WebService.Tests/bin/Debug/net10.0/StellaOps.Platform.WebService.Tests.exe -class "StellaOps.Platform.WebService.Tests.ReleaseControlEndpointsTests" -> Passed 3/3
• src/Policy/__Tests/StellaOps.Policy.Gateway.Tests/bin/Debug/net10.0/StellaOps.Policy.Gateway.Tests.exe -class "StellaOps.Policy.Gateway.Tests.AdvisorySourceEndpointsTests" -> Passed 5/5
• src/Concelier/__Tests/StellaOps.Concelier.WebService.Tests/bin/Debug/net10.0/StellaOps.Concelier.WebService.Tests.exe -class "StellaOps.Concelier.WebService.Tests.AdvisorySourceEndpointsTests" -> Passed 5/5
• Note: dotnet test --filter remains non-deterministic in this repo under Microsoft Testing Platform (MTP0001), so targeted class evidence uses xUnit in-proc runner executables.
• npm run test -- --watch=false --include src/tests/release-control/release-control-structure.component.spec.ts --include src/tests/security-risk/advisory-sources.component.spec.ts -> Passed 11/11
• npm run build -> Passed (with existing bundle-size/commonjs warnings unrelated to these endpoint bindings)

5. Sprint Archival Decision

Backend dependency blockers tracked by this package are cleared.

Archival for reopened UI sprints can proceed once sprint owners confirm remaining non-endpoint risks (if any) are closed and statuses are updated in their sprint trackers.

• backend contract blockers are implemented (completed here),
• ledger reconciliation remains current with implementation state,
• sprint trackers carry explicit QA/closure evidence.

6. Addendum - Promotions Contract Binding (Sprint 015)

Follow-on sprint SPRINT_20260219_015_FE_ui_v2_shell_release_control_promotions_pack13_contract_binding completed pack-13 promotions contract binding work that remained after structural closure.

Implemented frontend evidence:

• src/Web/StellaOps.Web/src/app/features/promotions/promotions-list.component.ts
• src/Web/StellaOps.Web/src/app/features/promotions/promotion-detail.component.ts
• src/Web/StellaOps.Web/src/app/features/promotions/create-promotion.component.ts
• src/Web/StellaOps.Web/src/tests/release-control/release-control-structure.component.spec.ts

Validation evidence:

• npm run test -- --watch=false --include src/tests/release-control/release-control-structure.component.spec.ts --include src/tests/release-control/release-control-routes.spec.ts -> Passed 33/33.
• npm run build -> Passed (existing bundle-size/commonjs warnings unchanged).

Ledger impact:

• S00-T05-RC-02 and S00-T05-ADM-01 are now EXISTS_COMPAT after backend contract enrichment in sprint 20260219_016 (release-control derived-signal contracts + administration A0-A7 adapter routes).
• Trust-owner mutation routes (/api/v1/administration/trust-signing/{keys,issuers,certificates,transparency-log}) are now shipped with platform.trust.write / platform.trust.admin mapping and DB backing via 046_TrustSigningAdministration.sql.

7. Post-Readiness Verification and Archival Update

Additional verification was executed after reading all docs/modules/ui/v2-rewire/pack-01.md through pack-21.md to account for higher-pack overrides.

Updated Playwright evidence:

• npx playwright test tests/e2e/nav-shell.spec.ts tests/e2e/critical-path.spec.ts tests/e2e/ia-v2-a11y-regression.spec.ts --workers=1 -> Passed 33/33.
• Deterministic advisory-source API fixtures were added to tests/e2e/critical-path.spec.ts so ownership-split assertions are validated against stable data.

Archival update:

• Completed sprint files were moved from docs/implplan/ to docs-archive/implplan/.