[T3.1] Web Hub-only guarded-flow check

[DeliciousBuding]

Task: T3.1 - Web Hub-only guarded-flow check

Phase: 3 - Desktop/Web Boundary And Backend Truth
Priority: P0 | Size: M | Lane: A
S.U.P.E.R Drivers: U,E
Test Expectation: Web Playwright plus data-mode contract
Memory/Governance Impact: None

Description

Enforce that Web guarded Hub workflows use Hub only and never direct-call Local Edge.

Acceptance Criteria

• Web E2E records Hub requests and blocks Local Edge/TDI/Gateway overclaims
• No silent mock fallback after Hub guard
• Manifest records stubbed-hub with real_tested=false when stubbed
• Passes S.U.P.E.R Quick Check for: U,E
• Satisfies test expectation: Web Playwright plus data-mode contract
• Updates resolved memory or instruction surfaces if durable project knowledge or agent instructions changed

Affected Files

• app/web/src/
• app/web/src/__e2e__/

Dependencies

• Depends on: See docs/plan/dependency-graph.md

---

Managed by Spec-Driven Develop workflow

[DeliciousBuding]

Post-task telemetry for T3.1 / PR #406

• actual_effort: M
• s.u.p.e.r_score: 5/5
• unplanned_dependencies: 0
• pr: test(web): enforce hub-only guarded flow #406
• evidence_level: fixture-unit + playwright-ui + stubbed-hub
• real_tested: false
• gates:
  • corepack.cmd pnpm --dir app/shared exec vitest run src/testing/e2eDataModeContract.test.ts - 9 passed
  • corepack.cmd pnpm --dir app/web exec vitest run src/platform/webPlatform.test.ts src/App.test.tsx - 24 passed
  • corepack.cmd pnpm --dir app/web typecheck - passed
  • pwsh ./scripts/verify/verify-web-hub-boundary.ps1 - 20 passed
  • corepack.cmd pnpm --dir app/web test:e2e:stubbed-hub - 9 passed
  • git diff --check - passed
  • pwsh ./scripts/verify/verify-doc-ssot.ps1 - passed
  • pwsh ./scripts/verify/verify-project-skills.ps1 - passed
  • pwsh ./scripts/verify/verify-real-e2e-contract.ps1 - passed
  • corepack.cmd pnpm --dir app/shared test - 93 files / 802 tests passed
• manifest evidence: generated stubbed-Hub manifests include evidence_level: "stubbed-hub", directLocalEdge: false, and real_tested: false
• boundary: does not claim packaged Desktop, real TokenDance ID login, real Hub/Edge runtime, real CLI/model/API execution, installer/signing/release, production deploy, approved-real spend, or Mobile UI coverage

[DeliciousBuding]

Closed after PR #406 merged into dev/delicious233 at 0e3c9e9. Evidence level: fixture-unit + playwright-ui + stubbed-hub. real_tested=false; this does not claim packaged Desktop, real TokenDance ID login, real Hub/Edge runtime, real CLI/model/API execution, installer/signing/release, production deploy, approved-real spend, or Mobile UI coverage.