Merge pull request #1212 from jecanore/feat/audit-uat

feat: add verification debt tracking and /gsd:audit-uat command

docs/ARCHITECTURE.md

@@ -171,7 +171,7 @@ Runtime hooks that integrate with the host AI agent:
 
 ### CLI Tools (`get-shit-done/bin/`)
 
-Node.js CLI utility (`gsd-tools.cjs`) with 11 domain modules:
+Node.js CLI utility (`gsd-tools.cjs`) with 15 domain modules:
 
 | Module | Responsibility |
 |--------|---------------|
@@ -342,8 +342,8 @@ UI-SPEC.md (per phase) ───────────────────
 ├── commands/gsd/*.md               # 37 slash commands
 ├── get-shit-done/
 │   ├── bin/gsd-tools.cjs           # CLI utility
-│   ├── bin/lib/*.cjs               # 11 domain modules
-│   ├── workflows/*.md              # 41 workflow definitions
+│   ├── bin/lib/*.cjs               # 15 domain modules
+│   ├── workflows/*.md              # 42 workflow definitions
 │   ├── references/*.md             # 13 shared reference docs
 │   └── templates/                  # Planning artifact templates
 ├── agents/*.md                     # 15 agent definitions

docs/CLI-TOOLS.md

@@ -9,7 +9,7 @@
 `gsd-tools.cjs` is a Node.js CLI utility that replaces repetitive inline bash patterns across GSD's ~50 command, workflow, and agent files. It centralizes: config parsing, model resolution, phase lookup, git commits, summary verification, state management, and template operations.
 
 **Location:** `get-shit-done/bin/gsd-tools.cjs`
-**Modules:** 11 domain modules in `get-shit-done/bin/lib/`
+**Modules:** 15 domain modules in `get-shit-done/bin/lib/`
 
 **Usage:**
 ```bash
@@ -330,6 +330,9 @@ node gsd-tools.cjs progress [json|table|bar]
 # Complete a todo
 node gsd-tools.cjs todo complete <filename>
 
+# UAT audit — scan all phases for unresolved items
+node gsd-tools.cjs audit-uat
+
 # Git commit with config checks
 node gsd-tools.cjs commit <message> [--files f1 f2] [--amend] [--no-verify]
 ```
@@ -358,3 +361,6 @@ node gsd-tools.cjs websearch <query> [--limit N] [--freshness day|week|month]
 | Milestone | `lib/milestone.cjs` | Milestone archival, requirements marking |
 | Commands | `lib/commands.cjs` | Misc: slug, timestamp, todos, scaffold, stats, websearch |
 | Model Profiles | `lib/model-profiles.cjs` | Profile resolution table |
+| UAT | `lib/uat.cjs` | Cross-phase UAT/verification audit |
+| Profile Output | `lib/profile-output.cjs` | Developer profile formatting |
+| Profile Pipeline | `lib/profile-pipeline.cjs` | Session analysis pipeline |

docs/COMMANDS.md

@@ -215,6 +215,19 @@ Retroactive 6-pillar visual audit of implemented frontend.
 
 ---
 
+### `/gsd:audit-uat`
+
+Cross-phase audit of all outstanding UAT and verification items.
+
+**Prerequisites:** At least one phase has been executed with UAT or verification
+**Produces:** Categorized audit report with human test plan
+
+```bash
+/gsd:audit-uat
+```
+
+---
+
 ### `/gsd:audit-milestone`
 
 Verify milestone met its definition of done.

docs/FEATURES.md

@@ -52,6 +52,7 @@
   - [Hook System](#37-hook-system)
   - [Developer Profiling](#38-developer-profiling)
   - [Execution Hardening](#39-execution-hardening)
+  - [Verification Debt Tracking](#40-verification-debt-tracking)
 
 ---
 
@@ -939,3 +940,36 @@ After Level 3 wiring verification passes, spot-check individual exports for actu
 - REQ-HARD-01: Pre-wave check MUST verify key-links from all prior wave artifacts before spawning next wave
 - REQ-HARD-02: Cross-plan contract check MUST detect incompatible data transformations between plans
 - REQ-HARD-03: Export spot-check MUST identify dead stores in wired files
+
+---
+
+### 40. Verification Debt Tracking
+
+**Command:** `/gsd:audit-uat`
+
+**Purpose:** Prevent silent loss of UAT/verification items when projects advance past phases with outstanding tests. Surfaces verification debt across all prior phases so items are never forgotten.
+
+**Components:**
+
+**1. Cross-Phase Health Check** (progress.md Step 1.6)
+Every `/gsd:progress` call scans ALL phases in the current milestone for outstanding items (pending, skipped, blocked, human_needed). Displays a non-blocking warning section with actionable links.
+
+**2. `status: partial`** (verify-work.md, UAT.md)
+New UAT status that distinguishes between "session ended" and "all tests resolved". Prevents `status: complete` when tests are still pending, blocked, or skipped without reason.
+
+**3. `result: blocked` with `blocked_by` tag** (verify-work.md, UAT.md)
+New test result type for tests blocked by external dependencies (server, physical device, release build, third-party services). Categorized separately from skipped tests.
+
+**4. HUMAN-UAT.md Persistence** (execute-phase.md)
+When verification returns `human_needed`, items are persisted as a trackable HUMAN-UAT.md file with `status: partial`. Feeds into the cross-phase health check and audit systems.
+
+**5. Phase Completion Warnings** (phase.cjs, transition.md)
+`phase complete` CLI returns verification debt warnings in its JSON output. Transition workflow surfaces outstanding items before confirmation.
+
+**Requirements:**
+- REQ-DEBT-01: System MUST surface outstanding UAT/verification items from ALL prior phases in `/gsd:progress`
+- REQ-DEBT-02: System MUST distinguish incomplete testing (partial) from completed testing (complete)
+- REQ-DEBT-03: System MUST categorize blocked tests with `blocked_by` tags
+- REQ-DEBT-04: System MUST persist human_needed verification items as trackable UAT files
+- REQ-DEBT-05: System MUST warn (non-blocking) during phase completion and transition when verification debt exists
+- REQ-DEBT-06: `/gsd:audit-uat` MUST scan all phases, categorize items by testability, and produce a human test plan