test(09): persist human verification items as UAT

.planning/phases/09-backend-admin-authentication-and-schema-pipeline/09-UAT.md

@@ -0,0 +1,40 @@
+---
+status: testing
+phase: 09-backend-admin-authentication-and-schema-pipeline
+source: [09-VERIFICATION.md]
+started: 2026-09-27T22:03:21Z
+updated: 2026-09-27T22:03:21Z
+---
+
+## Current Test
+
+number: 1
+name: Decide CR-01 (admin CRUD cannot save a writable number field; type mismatches return 500 instead of 422)
+expected: |
+  Either fix it before closing Phase 9 (normalize json.Number before lagoon.Fill or teach convertValue about it, map conversion failures to a per-field 422, add a CRUD test writing a non-protected number field bound to an int column), or record an explicit deferral or override with a reason.
+awaiting: user response
+
+## Tests
+
+### 1. Decide CR-01 (admin CRUD cannot save a writable number field; type mismatches return 500 instead of 422)
+expected: Fixed before closing Phase 9, or an explicit deferral/override with a reason is recorded.
+result: [pending]
+
+### 2. Triage the 19 open code-review warnings (priority: WR-01, WR-02, WR-14, WR-17 for AUTH-08 Winter permission semantics)
+expected: Each warning set to fixed, deferred (with reason) or skipped in 09-REVIEW-DISPOSITION.md; none left open.
+result: [pending]
+
+### 3. Review the 24 judgment-tier prohibitions in 09-VERIFICATION.md
+expected: Verdicts accepted or rejected; the two qualified ones (09-11 #1 navigation reveals albums target to a genres-only admin, WR-02; 09-12 #1 zero-test detection per invocation, not per package, WR-18) are resolved.
+result: [pending]
+
+## Summary
+
+total: 3
+passed: 0
+issues: 0
+pending: 3
+skipped: 0
+blocked: 0
+
+## Gaps