[T3.3] Observed and approved-real manifest boundary

[DeliciousBuding]

Task: T3.3 - Observed and approved-real manifest boundary

Phase: 3 - Desktop/Web Boundary And Backend Truth
Priority: P1 | Size: M | Lane: C
S.U.P.E.R Drivers: P,E
Test Expectation: Verifier tests and manifest fixture tests
Memory/Governance Impact: Update AGENTS.md only if an agent-facing rule changes

Description

Make observed, readiness, and approved-real evidence boundaries impossible to overclaim in manifests.

Acceptance Criteria

• Readiness-only and stubbed manifests set real_tested=false
• Approved-real requires explicit fields for real login and real CLI/model/API evidence
• Packaged Desktop remains a separate evidence level
• Passes S.U.P.E.R Quick Check for: P,E
• Satisfies test expectation: Verifier tests and manifest fixture tests
• Updates resolved memory or instruction surfaces if durable project knowledge or agent instructions changed

Affected Files

• scripts/verify/
• tests/contract/
• .agents/skills/real-e2e-acceptance/

Dependencies

• Depends on: See docs/plan/dependency-graph.md

---

Managed by Spec-Driven Develop workflow

[DeliciousBuding]

⚠️ Adaptive Control Notice: drift_score=1/2.
Previous Phase 3 task found a small extra command/doc synchronization surface while tightening Desktop request phases. Keep #388 focused on observed/approved-real manifest boundaries and avoid expanding into packaging or live-runtime claims.

[DeliciousBuding]

T3.3 Telemetry

• Actual effort: M
• S.U.P.E.R score: 9/10
• Unplanned dependencies: 1
  • Updated stale tests/contract/scripts/verify-e2e-smoke-matrix.ps1 expectations from older real-mode/replay schema wording to the current stubbed-Hub/data-mode manifest contract.
• Evidence boundary: real_tested=false; fixture/contract/readiness verification only. No real TokenDance ID login, no real CLI/model/API execution, no packaged Desktop, no signing, no release upload.
• PR: test(e2e): harden approved-real manifest boundaries #410

Verification

• corepack.cmd pnpm --dir app/shared exec vitest run src/testing/e2eDataModeContract.test.ts src/testing/e2eEvidenceManifest.test.ts - 19 passed
• pwsh ./scripts/verify/verify-real-e2e-contract.ps1 - passed
• pwsh ./tests/contract/scripts/verify-approved-real-preflight.ps1 -RepoRoot . - passed
• pwsh ./tests/contract/scripts/verify-e2e-smoke-matrix.ps1 -RepoRoot . - passed
• pwsh ./scripts/verify/verify-doc-ssot.ps1 - passed
• pwsh ./scripts/verify/verify-project-skills.ps1 - passed
• git diff --check - passed
• GitHub CI for test(e2e): harden approved-real manifest boundaries #410 - passed

[DeliciousBuding]

Closed manually after PR #410 merged into dev/delicious233. Non-default base branch did not auto-close the issue. Evidence boundary remains real_tested=false.