From 9807c98df3be4fa4b46738a2cb61908f0a91e97f Mon Sep 17 00:00:00 2001 From: Patrick Singletary Date: Sun, 6 Sep 2026 20:51:10 -0400 Subject: [PATCH] =?UTF-8?q?PLAN-timer:=20owner=20amendment=20=E2=80=94=20t?= =?UTF-8?q?est=206=20post-deploy;=20S0=20clears=20on=201-5+7?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/plans/archive/PLAN-timer.md | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/docs/plans/archive/PLAN-timer.md b/docs/plans/archive/PLAN-timer.md index ea79663..5960ebe 100644 --- a/docs/plans/archive/PLAN-timer.md +++ b/docs/plans/archive/PLAN-timer.md @@ -537,6 +537,14 @@ dir (or a `spike/` branch) — not in the real app. transform must handle the atproto imports). 6. **Runtime OAuth test.** Exercise a real (throwaway-account) OAuth round trip in the spike to confirm the DPoP/PAR flow runs in-browser, not just at compile time. + **[OWNER AMENDMENT 2026-09-07 (approved): test 6 is POST-DEPLOY.** The metadata's + client_id/redirect is fixed to https://timer.psingletary.com, which does not exist before + S11, and §17.3 offers no remediation for an unrunnable test (F1–F7 are build/runtime-code + failures; test 6 is none of them). S0 therefore clears on tests 1–5 + 7 per §9's + "[pass criteria green, or documented remediation applied]"; test 6 is tracked as a + post-deploy validation (S11 checklist) using a throwaway account. This amendment is a + plan decision — it does not reopen §1 locked decisions and does not change any other §17 + gate.] 7. **Bundle-integrity check.** Confirm the produced bundle includes atproto code (no empty chunks) and no `@atproto` externalized/unresolved module warnings. @@ -617,6 +625,6 @@ needed if a test must import @atproto directly. Copy the spike's craco.config.js + setupTests.js into the app (S2) only if/when such a test is written; do not add CRACO to the app preemptively. -**Test 6 disposition:** defer to post-deploy (S11) or when a throwaway -account is available; it exercises DPoP/PAR in-browser, which the §17 risk -statement (bundling) does not actually gate. +**Test 6 disposition:** POST-DEPLOY by owner amendment (2026-09-07, see +§17.2 note). S0 clears on tests 1–5 + 7. Re-run test 6 as an S11 post-deploy +checklist item with a throwaway account. -- 2.51.2