summercms/.planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-VERIFICATION.md

phase, verified, status, score, covered_files, covered_digest, behavior_unverified, overrides_applied, gaps, human_verification

phase	verified	status	score	covered_files	covered_digest	behavior_unverified	overrides_applied	gaps	human_verification
11.1-summercms-documentation-for-humans-and-ai-agents	2026-09-30T23:06:42Z	gaps_found	10/13 must-haves verified	.gitignore .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-01-PLAN.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-01-SUMMARY.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-02-PLAN.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-02-SUMMARY.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-03-PLAN.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-03-SUMMARY.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-04-PLAN.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-04-SUMMARY.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-05-PLAN.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-05-SUMMARY.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-06-PLAN.md .planning/phases/11.1-summercms-documentation-for-humans-and-ai-agents/11.1-06-SUMMARY.md CLAUDE.md README.md cmd/summer/docs.go cmd/summer/docs_test.go cmd/summer/main.go cmd/summer/main_test.go cmd/summer/phase11_1_acceptance_test.go docs/architecture/application-lifecycle.md docs/architecture/go-modules-and-workspaces.md docs/architecture/introduction.md docs/architecture/request-lifecycle.md docs/backend/admin-controllers.md docs/backend/admin-spa.md docs/backend/forms.md docs/backend/lists-and-filters.md docs/backend/partials-and-widgets.md docs/backend/relation-manager.md docs/backend/settings.md docs/backend/users-and-permissions.md docs/console/introduction.md docs/console/scaffolding.md docs/console/setup-and-maintenance.md docs/console/utilities.md docs/console/writing-commands.md docs/database/attachments.md docs/database/casts-and-validation.md docs/database/migrations.md docs/database/models.md docs/database/queries-and-pagination.md docs/database/relations.md docs/database/transactions.md docs/examples/blog/blog_test.go docs/examples/blog/classes/doc.go docs/examples/blog/config/config.yaml docs/examples/blog/console/doc.go docs/examples/blog/console/publish.go docs/examples/blog/console/publish_test.go docs/examples/blog/controllers/doc.go docs/examples/blog/controllers/posts.go docs/examples/blog/controllers/posts/config_form.yaml docs/examples/blog/controllers/posts/config_list.yaml docs/examples/blog/controllers/posts_test.go docs/examples/blog/jobs/doc.go docs/examples/blog/lang/en/lang.yaml docs/examples/blog/middleware/doc.go docs/examples/blog/models/doc.go docs/examples/blog/models/post.go docs/examples/blog/models/post_test.go docs/examples/blog/models/posts/columns.yaml docs/examples/blog/models/posts/fields.yaml docs/examples/blog/plugin.go docs/examples/blog/postgres_test.go docs/examples/blog/registry.gen.go docs/examples/blog/routes.go docs/examples/blog/scaffold_layout_test.go docs/examples/blog/updates/20260101000000_create_acme_blog_posts.go docs/examples/blog/updates/20260101000100_add_published_at.go docs/examples/blog/updates/doc.go docs/examples/blog/updates/updates_test.go docs/examples/blog/views/mail/welcome.htm docs/index.md docs/plugins/extending.md docs/plugins/registration.md docs/plugins/scheduling.md docs/plugins/testing.md docs/services/authentication.md docs/services/configuration.md docs/services/events.md docs/services/frontend-and-ajax.md docs/services/jobs.md docs/services/localization.md docs/services/mail.md docs/services/oauth-server.md docs/services/outbound-http.md docs/services/parity-testing.md docs/services/push.md docs/services/rate-limiting.md docs/services/realtime.md docs/services/routing.md docs/services/search.md docs/services/storage.md docs/setup/coming-from-wintercms.md docs/setup/configuration.md docs/setup/installation.md docs/setup/introduction.md docs/setup/porting-a-plugin.md docs/site.yaml go.mod go.sum internal/docsite/check_commands.go internal/docsite/check_forbidden.go internal/docsite/check_identifiers.go internal/docsite/check_links.go internal/docsite/check_policy.go internal/docsite/checks_test.go internal/docsite/docsite.go internal/docsite/docsite_test.go internal/docsite/emit.go internal/docsite/emit_test.go internal/docsite/highlight.go internal/docsite/highlight_test.go internal/docsite/load.go internal/docsite/load_test.go internal/docsite/render.go internal/docsite/render_test.go internal/docsite/serve.go internal/docsite/serve_test.go internal/docsite/snippet.go internal/docsite/snippet_test.go internal/docsite/theme/assets/search.js internal/docsite/theme/assets/site.css internal/docsite/theme/assets/site.js internal/docsite/theme/assets/theme-init.js internal/docsite/theme/templates/404.html internal/docsite/theme/templates/footer.html internal/docsite/theme/templates/header.html internal/docsite/theme/templates/icons.html internal/docsite/theme/templates/page.html internal/docsite/theme/templates/pager.html internal/docsite/theme/templates/search.html internal/docsite/theme/templates/sidebar.html internal/docsite/theme/templates/toc.html internal/docsite/theme_test.go internal/docsite/violations_test.go modules/backpack/example_test.go modules/beachcomber/example_test.go modules/beachcomber/export_docs_test.go modules/beachcomber/typesense/example_test.go modules/bonfire/example_test.go modules/bouncer/example_test.go modules/cabana/example_controller_test.go modules/cabana/example_test.go modules/cabana/testdata/docs/controllers/posts/config_filter.yaml modules/cabana/testdata/docs/controllers/posts/config_form.yaml modules/cabana/testdata/docs/controllers/posts/config_list.yaml modules/cabana/testdata/docs/models/post/columns.yaml modules/cabana/testdata/docs/models/post/fields.yaml modules/cabana/testdata/docs/models/settings/fields.yaml modules/compass/example_test.go modules/conga/example_test.go modules/conga/export_docs_test.go modules/festival/example_test.go modules/fetchguard/example_test.go modules/flare/example_test.go modules/lagoon/attach/example_test.go modules/lagoon/example_test.go modules/lagoon/export_docs_test.go modules/lighthouse/centrifugo/example_test.go modules/lighthouse/example_test.go modules/lighthouse/export_docs_test.go modules/pact/example_test.go modules/party/example_plugin_test.go modules/party/example_test.go modules/phrasebook/example_test.go modules/postcard/example_test.go modules/surf/example_test.go modules/tide/example_test.go modules/tide/testdata/docs/posts-spec.yaml modules/towel/example_test.go modules/wire/example_test.go modules/wristband/example_test.go scripts/check-phase11.1.sh	v2:sha256:c68da6c413348d7d4d0d272df3d007aa82e2f9ca5aa9f9ab79eefc797d2cb7d0	0	0	truth status reason artifacts missing DOCS-04 / D-07 / D-18 policy: a test fails on a missing or drifted src= snippet, and every Go fence in a docs/ page must carry src= (plan 01 truth 5, plan 02 truth 5) failed Fence discovery in the checkers is a line scanner that only strips leading spaces. It never sees a fence inside a blockquote or callout (`> ```go src=...`), and the go-fence policy compares the language word to the literal `go`, so a ```golang fence is exempt. goldmark still renders both, and fenceAnnotator still adds the source caption. Reproduced on a git-archive copy of HEAD: a `> [!TIP]` callout holding `go src=modules/bonfire/example_test.go#ExampleCall` with body BOGUS passed `summer docs:build --check`, and `docs:build` wrote setup/installation.html with BOGUS under a figcaption linking modules/bonfire/example_test.go. A ```golang fence with no src= also passed. Module README src= fences are annotated but never checked (snippet.go skips README pages). The acceptance test's independent scanner (docsGoFences/pageFences) has the same blind spot, so SC4 cannot catch it. No real page uses either form today, so the content is correct, but the guarantee DOCS-04 states is not enforced. (Review CR-01, WR-04.) path issue internal/docsite/render.go scanFences/openFence skip blockquote-prefixed fences (and accept 4-space-indented backticks, IN-02); fenceAnnotator captions every src= fence regardless of whether it was checked path issue internal/docsite/snippet.go checkFences relies on scanFences; checkSnippets skips module README pages while their src= fences are still captioned path issue internal/docsite/check_policy.go go-fence-needs-src policy matches only fields[0] == "go"; golang (chroma alias) bypasses it path issue cmd/summer/phase11_1_acceptance_test.go pageFences does not strip `>` prefixes and docsGoFences checks lang == "go" only Collect fences from the goldmark AST (*ast.FencedCodeBlock) for snippet, policy and command checks, or refuse src= and Go fences that are not top-level blocks of a docs page Refuse (or check) src= fences in module READMEs, or stop fenceAnnotator captioning them Normalise the fence language through chroma so any Go-lexer alias needs src= Planted fixtures in internal/docsite/testdata/violations for a callout src= fence with a drifted body, a callout src= fence naming a missing file, a callout go fence without src=, and a golang fence; update the acceptance scanner to strip `>` truth status reason artifacts missing D-07 proof of execution: a src= target must be compiled source, and a region or helper that no Test or Example function runs is a snippet problem (plan 01 truth 12; SC4 'compiled and run by go test') partial isRoot counts every Example* function as a root, but go test never runs an Example without an // Output: comment. Extract checks only that a non-test .go file sits in the root module next to a _test.go; it ignores //go:build constraints and GOOS/GOARCH suffixes. Reproduced on a copy of HEAD: Example_neverRun (no Output) calling neverRunHelper made src=...#neverRunHelper pass `--check`; modules/bonfire/broken.go with `//go:build ignore` and a call to an undefined function passed as src=...#Broken. No real target is affected today: an AST scan of every example*_test.go and docs/examples test file found no Example without Output, and no src= target has a build constraint. (Review WR-01, WR-02.) path issue internal/docsite/snippet.go isRoot treats Examples without output as run; Extract does not consult go/build for build constraints Build the reachability roots from Test* functions plus Examples that doc.Examples reports with Output or EmptyOutput Confirm a non-test src= file is in the default build via go/build ImportDir (GoFiles/TestGoFiles/XTestGoFiles) Planted fixtures for both cases truth status reason artifacts missing DOCS-05 / plan 02 truths 1 and 3: an inline pkg.Ident whose Ident does not exist fails, and a `summer <cmd>` token in an sh fence must be a toolCommands() name partial The identifier checker falls back to `go doc ./<dir> <query>` without -c, and go doc matches a lowercase query letter case-insensitively. Reproduced on a copy of HEAD: `lagoon.Openfromapp` passed `--check`, although the identifier does not exist in modules/lagoon (`go doc -c` exits 1). The command checker matches `summer <name>` only at the start of a command with no flag first: `FOO=1 summer no:such` and `summer --root . no:such2` in an sh fence both passed. Links, anchors and forbidden names fail correctly (mutation-tested). No real page exploits these holes: all 704 module-package spans in docs/, module READMEs and the root README resolve with `go doc -c`, and no sh fence uses an env-var prefix, a flag before the command, `go run ./cmd/summer` or `bin/` without `./`. (Review WR-03, WR-05.) path issue internal/docsite/check_identifiers.go goDoc runs `go doc` without -c (line 301) path issue internal/docsite/check_commands.go commandToken skips VAR=value prefixes, flags before the command name, `go run ./cmd/summer` and `bin/<app>` Pass -c to the go doc fallback Strip leading VAR=value assignments and a `go run ./cmd/summer` prefix, skip flags before the command word, accept bin/<app> Planted fixtures for a wrong-case identifier and each command form	test expected why_human Run `summer docs:serve`, open the printed address, press the search trigger, search for a module name (e.g. lagoon) and a CLI command (e.g. migrate:status); use the arrow keys and Enter. Rows show section › title, heading and a 2-line excerpt with <mark> highlights; arrow keys move the selection and Enter opens the linked page; the live region announces the result count; empty and zero-result states show the UI-SPEC copy. search.js has no JS test runner (no Node toolchain by design); Go tests only assert markup and asset presence. test expected why_human In docs:serve, cycle the theme toggle through light, dark and system; reload in each mode; check a guide page and an API reference page at 1280px, 1024px and 375px. No flash of the wrong theme on reload (theme-init.js applies the mode before first paint); the choice persists; UI-SPEC contrast pairs hold in both themes. Visual and timing behaviour; not observable by grep or Go tests. test expected why_human Disable JavaScript and load a guide page below 1024px. The sidebar renders above the content; the search and theme buttons are hidden. Visual no-JS layout (plan 02 backstop truth). test expected why_human Read llms.txt, one page's .md and llms-full.txt as an AI agent would (raw fetch). Spec shape (H1, blockquote, H2 link lists) with predictable .md URLs that are useful without the HTML. Plan 01 backstop truth (usefulness is non-inferable from structure). test expected why_human Read the Setup, Backend, Database and Services pages and follow docs/setup/porting-a-plugin.md top to bottom as a WinterCMS developer. WinterCMS docs tone; accurate to the module READMEs; the walkthrough ends with the same acme.blog plugin as docs/examples/blog. Plan 03/04/05 backstop truths (editorial quality and followability). test expected why_human Review the six judgment-tier prohibitions listed under Prohibitions in the report body. Each holds (the verifier's non-authoritative LLM-judge verdict is 'holds' for all six). Judgment-tier prohibitions need explicit human resolution; the verifier's verdict is not authoritative.

Phase 11.1: SummerCMS documentation for humans and AI agents Verification Report

Phase Goal: SummerCMS has a WinterCMS-style documentation set that serves both humans and AI agents. The Markdown source lives in summercms.go/docs/ and a summer CLI command builds it into a static site with sidebar navigation, search, llms.txt/llms-full.txt and a raw .md per page. Every code example compiles and is tested, and a "Coming from WinterCMS" map plus an acme/blog porting walkthrough cover the migration path. It documents the framework as it stands after Phase 11 and never names a consuming application. Verified: 2026-09-30T23:06:42Z Status: gaps_found Re-verification: No, initial verification

Verdict in one paragraph

The documentation set exists and is correct today. There are 50 guide pages in 8 Winter-mirroring sections and 22 API reference pages ingested from the module READMEs. The build writes HTML, a .md per page, llms.txt and llms-full.txt, with no Node toolchain. Every one of the 106 Go fences in docs/ is a src= copy that is byte-checked against source that go test ./... compiles and runs. The concept map and the Docker-tested acme/blog walkthrough are in place, and no consuming application is named anywhere. The gaps are in the enforcement that DOCS-04 and DOCS-05 promise: "a test fails on a missing or drifted snippet" and "checkers fail on stale identifiers and unknown commands". I reproduced every review finding the orchestrator asked about on a git archive HEAD copy of the real tree, and each checker fails open. The worst case is CR-01: a src= fence inside a callout is published with a "verified source" caption over code nobody checked. No current page exploits any of these holes, so these gaps concern guard-rail correctness, not content correctness. Each fix is small and local to internal/docsite.

Goal Achievement

Observable Truths

#	Truth	Status	Evidence
1	SC1: docs/ holds Markdown pages with frontmatter in Setup, Architecture, Plugins, Backend, Database, Services, Console, API reference, and every framework module is reachable from the sidebar	✓ VERIFIED	docs/site.yaml lists the 8 sections in that order; 50 guide pages; built site has api/<m>.html for all 22 top-level modules. TestPhase11_1Acceptance/SC1 PASS (run by me, -count=1). Sub-packages (attach, typesense, centrifugo) are documented inside their parent README, not as separate pages (see Info).
2	SC2: a summer command builds a self-contained static site with sidebar, TOC, prev/next, client-side search and dark mode, no Node toolchain; only new dep is approved	✓ VERIFIED (static); interaction to human UAT	summer docs:build --out <scratch> wrote 72 pages; theme markers asserted by SC2 PASS; no exec of node/npm/npx (SC2 AST scan); git log of 11.1 commits shows go.mod gained only alecthomas/chroma/v2 + indirect dlclark/regexp2/v2 (goldmark predates the phase, from 04-03). Built HTML/CSS/JS loads nothing from a third-party origin (fonts vendored under /assets/fonts). Search interaction and theme flash are routed to human verification.
3	SC3/DOCS-03: llms.txt, llms-full.txt and a clean .md per page, with a test asserting sync with the page tree	✓ VERIFIED	Built output inspected: llms.txt has # SummerCMS, a blockquote, H2 link lists; setup/installation.md starts # Installation / > description, no frontmatter. TestDocsAIOutputsInSync and SC3 PASS.
4	SC4 (current content): every Go example in a docs/ page is compiled and run by go test ./...	✓ VERIFIED	106 go fences, 0 without `src=`, none inside blockquotes, no golang fences. All src= targets are in root-module packages (SC4 go-list check). AST scan (go/doc): no Example in any example*_test.go or docs/examples test lacks // Output:. No src= target has a build constraint. `go test -count=1 -run '^(Example
5	SC5 / DOCS-07: the concept map and the acme/blog walkthrough exist, and the walkthrough's code is verified under SC4	✓ VERIFIED	docs/setup/porting-a-plugin.md (829 lines) covers plugin registration, model, migrations (plus a rollback column), routes, admin controller and console command; its fences are src= copies from docs/examples/blog (in-root package, no go.mod). go test -count=1 -v ./docs/examples/blog/... ran TestMigrateUpAndRollback, TestPostsRouteAgainstDatabase, TestPublishCommandAgainstDatabase and TestScaffoldLayout on Docker, all PASS, none skipped. SC5 PASS.
6	DOCS-04 enforcement: a test fails on a missing or drifted snippet; every Go fence must carry src=	✗ FAILED	Top-level fences are enforced: drift in the page and drift in the source both refuse, and docs:sync repairs them (mutation-tested). Fences inside callouts and blockquotes are never checked but are still captioned as verified source (CR-01, reproduced on real tree copy). ```golang bypasses the src= policy (WR-04, reproduced). README src= fences are captioned without being checked.
7	D-07 proof of execution: src= must name compiled source, and code no Test or Example runs is a snippet problem	✗ FAILED (partial)	An Example without Output counts as a root (WR-01, reproduced). //go:build ignore files pass as compiled (WR-02, reproduced). Not exploited on the real tree.
8	DOCS-05: checkers fail on stale identifiers, broken links/anchors, unknown command names and forbidden names	✗ FAILED (partial)	Links, anchors, forbidden names, unknown identifiers and plain summer x/./bin/app x forms all refuse (mutation-tested). Wrong-case identifiers pass via the go doc fallback without -c (WR-03: lagoon.Openfromapp passed). FOO=1 summer no:such and summer --root . no:such2 pass (WR-05). Not exploited: all 704 module spans resolve with go doc -c.
9	DOCS-06: "Coming from WinterCMS" maps Winter concepts to SummerCMS, with checker-verified identifiers and explicit Not provided rows	✓ VERIFIED	Concept table covers Plugin.php, $require, permissions/navigation, version.yaml, Eloquent, fields/columns.yaml, backend controllers, routes.php, middleware, config, lang, events, App::make, artisan, queues, scheduler, mail, settings, broadcasting, Scout, the HTTP client. A Not provided table covers CMS pages/themes, components, AJAX/Snowboard, media manager, import/export, reorder, collections, behaviours, cache and session, linking frontend-and-ajax.md. All pkg.Ident spans resolve case-sensitively.
10	DOCS-08: CLAUDE.md records the docs update rule and names the checkers	✓ VERIFIED	CLAUDE.md ## Documentation (HEAD, clean worktree) has the rule for "affected pages under docs/", names go test ./cmd/summer -run TestDocsTree and summer docs:build --check, and notes that config-key checking is deferred. The gate's --claude stage passes.
11	D-11: no page, snippet or built output names a consuming application	✓ VERIFIED	grep -rliE over docs/, all module READMEs, the root README and the full built site finds nothing, except the checker's own pattern in check_forbidden.go. A planted name is refused (mutation-tested).
12	Phase-end tests: docsite coverage ≥85%, a planted fixture per rule, and acceptance subtests SC1–SC5	✓ VERIFIED	go test -cover ./internal/docsite gives 94.8%. TestPlantedViolations has 68 passing subtests. TestPhase11_1Acceptance SC1–SC5 PASS.
13	The gate: check-phase11.1.sh --all is green and --named refuses skipped or zero-match runs	✓ VERIFIED	I ran bash scripts/check-phase11.1.sh --all. Every stage passed (preconditions, deps, self-test, docs, forbidden, claude, named, go) and it printed phase11.1 all passed, exit 0. go_json_named refuses skips and "no tests to run" (script lines 172–211).

Score: 10/13 truths verified (0 present, behavior-unverified).

Five backstop truths from the plans, which cover editorial usefulness, followability of the walkthrough, search rows and keys, no theme flash, contrast and the no-JS layout, are non-inferable. They are routed to human verification and not scored.

Required Artifacts

Artifact	Expected	Status	Details
internal/docsite/docsite.go	Build, Check, Sync entry points	✓ VERIFIED	Called from cmd/summer/docs.go
internal/docsite/load.go	strict frontmatter, README ingestion	✓ VERIFIED	loadModules discovers modules dynamically
internal/docsite/render.go	goldmark with shared slug IDs	✓ VERIFIED (with gap)	parser.WithIDs; scanFences is the root of gap 1
internal/docsite/emit.go	html, .md, llms*, search index	✓ VERIFIED	outputs inspected
internal/docsite/snippet.go	src= parse, confine, extract, drift	✓ VERIFIED (with gaps)	drift works top-level; gaps 1 and 2
internal/docsite/check_identifiers.go	identifier index with go doc fallback	✓ VERIFIED (with gap)	gap 3 (case)
internal/docsite/check_links.go	links and anchors	✓ VERIFIED	mutation-tested
internal/docsite/check_commands.go	command names from toolCommands and runtime set	✓ VERIFIED (with gap)	gap 3 (forms)
internal/docsite/check_forbidden.go	forbidden names over sources and outputs	✓ VERIFIED	mutation-tested
internal/docsite/highlight.go	chroma/v2 NodeRenderer	✓ VERIFIED	tok-* classes in built HTML
internal/docsite/serve.go	loopback server, 404, rebuild	✓ VERIFIED	serve tests pass; flag --allow-remote registered
cmd/summer/docs.go	docs:build, docs:sync, docs:serve	✓ VERIFIED	in toolCommands(); binary built and run
docs/setup/coming-from-wintercms.md	concept map	✓ VERIFIED
docs/setup/porting-a-plugin.md	walkthrough	✓ VERIFIED
docs/examples/blog/*	in-root verified plugin	✓ VERIFIED	Docker tests ran
internal/docsite/violations_test.go	TestPlantedViolations	✓ VERIFIED	has no fixtures for gaps 1–3
cmd/summer/phase11_1_acceptance_test.go	SC1–SC5	✓ VERIFIED (with gap)	scanner shares the blind spot in gap 1
scripts/check-phase11.1.sh	--self-test, --named, --all	✓ VERIFIED	ran --all

Key Link Verification

From	To	Via	Status
cmd/summer/docs.go	internal/docsite	docsite.Build / Sync / Check	WIRED
cmd/summer/docs.go	check_commands.go	docsCommands() → toolCommands() + module command constructors	WIRED
render.go	goldmark	parser.WithIDs(slug IDs), shared with check_links	WIRED
highlight.go	chroma/v2	lexers + tokenise → tok-*	WIRED
docs/setup/installation.md	modules/bonfire/example_test.go	src=…#ExampleCall	WIRED (drift is detected)
docs/setup/porting-a-plugin.md	docs/examples/blog/*	15+ src= fences	WIRED
docs/examples/blog/scaffold_layout_test.go	internal/build	build.Make*	WIRED (TestScaffoldLayout PASS)
docs/setup/coming-from-wintercms.md	docs/services/frontend-and-ajax.md	Not provided rows link it	WIRED
scripts/check-phase11.1.sh	TestPlantedViolations	--self-test / --named	WIRED

Behavioral Spot-Checks

Behavior	Command	Result	Status
Real tree is clean	summer docs:build --check on a git archive HEAD copy	no problems found	✓ PASS
Page-side drift refused	add a line to the bonfire fence in installation.md	snippet: body differs … (run: summer docs:sync)	✓ PASS
Source-side drift refused + sync repairs	edit the ExampleCall description	refused; docs:sync updated 2 snippets; then clean	✓ PASS
Unknown identifier (docs and README)	lagoon.NoSuchThing	identifier: … does not exist in modules/lagoon	✓ PASS
Broken link and anchor	../nope.md, #no-such-anchor	both refused	✓ PASS
Unknown command	summer no:such, ./bin/acme nope:cmd	both refused	✓ PASS
Go fence without src=	top-level ```go	refused	✓ PASS
Forbidden name	planted in page	forbidden: consuming-application name in output	✓ PASS
CR-01 callout src= fence with BOGUS body	> ```go src=…#ExampleCall	passes --check; build publishes BOGUS under the source caption	✗ FAIL
WR-04 golang fence without src=	```golang	passes	✗ FAIL
WR-01 helper reached only by an Example without Output	src=…#neverRunHelper	passes	✗ FAIL
WR-02 //go:build ignore source	src=modules/bonfire/broken.go#Broken	passes	✗ FAIL
WR-03 wrong-case identifier	lagoon.Openfromapp	passes	✗ FAIL
WR-05 env prefix / flag-first command	FOO=1 summer no:such, summer --root . no:such2	passes	✗ FAIL
Walkthrough Docker tests	go test -count=1 -v ./docs/examples/blog/...	7 top-level PASS in blog, sub-packages ok, 0 SKIP	✓ PASS
Module docs Examples/regions	go test -count=1 -run '^(Example|TestDocs)' ./modules/...	57 PASS, 0 SKIP	✓ PASS

Probe Execution

Probe	Command	Result	Status
scripts/check-phase11.1.sh	bash scripts/check-phase11.1.sh --all	all 8 stages passed, phase11.1 all passed, exit 0 (the full go test ./... stage was served from Go's content-addressed test cache; the docs-critical packages were re-run uncached separately above)	PASS

Requirements Coverage

Requirement	Source Plan	Description	Status	Evidence
DOCS-01	01, 03, 04, 06	Markdown pages with strict frontmatter in Winter sections; every module reachable via API page	✓ SATISFIED	Truth 1
DOCS-02	01, 02, 06	self-contained site, docs:serve on loopback, no Node, only chroma/v2 added	✓ SATISFIED (runtime UI pending human UAT)	Truth 2; serve tests
DOCS-03	01, 06	llms.txt, llms-full.txt, .md per page, sync test	✓ SATISFIED	Truth 3
DOCS-04	01–06	every Go fence src=; a test fails on a missing or drifted snippet; Examples carry Output and run	✗ BLOCKED (partial)	Content satisfies it (truth 4). Enforcement fails open (truths 6, 7). The REQUIREMENTS.md tick is premature.
DOCS-05	02, 06	checkers fail on stale identifiers, broken links/anchors, unknown commands, forbidden names	✗ BLOCKED (partial)	Truth 8. The REQUIREMENTS.md tick is premature.
DOCS-06	03, 04, 06	concept map with checker-verified identifiers	✓ SATISFIED	Truth 9
DOCS-07	05, 06	acme/blog walkthrough as a real in-root package verified by DOCS-04	✓ SATISFIED	Truth 5. Its fences are all top-level go/yaml src= fences, so they are unaffected by gaps 1–2 today.
DOCS-08	02, 06	CLAUDE.md documentation rule naming the checkers	✓ SATISFIED	Truth 10

No orphaned requirements: REQUIREMENTS.md maps exactly DOCS-01..08 to Phase 11.1, and every ID is claimed by at least one plan.

Prohibitions (judgment-tier, non-authoritative LLM-judge verdicts; flagged for human review)

#	Statement	Verdict	Evidence
1	The built site must not reference a third-party origin for assets (plans 01, 02)	holds	Built HTML has no external src=; CSS url() only points at vendored fonts; JS has no URLs. External hrefs are content links and the edit/source links (git host).
2	The theme must not load third-party fonts, icons or scripts, and has no analytics	holds	8 woff2 fonts plus licences are vendored; the Lucide licence ships in assets
3	The docs must not describe an unprovided WinterCMS feature as available (plans 03, 04)	holds	Not provided table; frontend-and-ajax.md; llms_notes state "headless … no frontend themes"
4	The docs must not present an insecure setting as the default	holds (spot-checked only)	needs a human read of mail, push, search and serve pages
5	The walkthrough must not show a write path without a fill allow-list, or an admin controller without a permission	holds	lagoon.Fill(post, post.Fillable(), …) in models/post.go; RequiredPermissions in controllers/posts.go; parameterised Where("slug = ?", slug)
6	The gate must not count a skipped, filtered or zero-match run as a pass	holds	go_json_named refuses skip, no-tests and missing names

Anti-Patterns Found

File	Line	Pattern	Severity	Impact
(all phase-modified files)	–	TBD/FIXME/XXX	–	none found
(all phase-modified files)	–	TODO/HACK/PLACEHOLDER	–	none found
internal/docsite/render.go	439–489	line-based fence scanner diverges from goldmark AST	🛑 Blocker	Gap 1 (CR-01)
internal/docsite/check_identifiers.go	301	case-insensitive go doc fallback	⚠️ Warning	Gap 3
internal/docsite/render.go	207–232	slug IDs not reserved against theme IDs (WR-06)	⚠️ Warning (hardening)	The current output has no collisions: every theme ID appears once per page, and # Search on services/search.md is an H1 without an id. Not a gap.
docs/examples/blog/*.go	1	"Code generated … DO NOT EDIT" on edited files (WR-07)	ℹ️ Info	Intentional and documented: porting-a-plugin.md "What the scaffolder leaves to you" explains that registry.gen.go regeneration depends on the header. Tracked in .planning/todos/pending/scaffold-generated-header-and-command-deps.md. Not a gap.

Review info items IN-01..IN-08 are hardening. None bears on a success criterion. IN-08 (spans with an unknown package prefix, &pkg.X{} forms) is outside the must-have's stated scope ("whose first segment is a discovered module").

Regression Check

• go vet ./... exits 0.
• examples/hello TestTypedItemRoute fails with surf: config http.body_limits.default_bytes is required. I reproduced the same failure on a git archive of 63bcbc3, the parent of the first 11.1 code commit (6dacddc). This is pre-existing and not a regression from this phase. It makes check-phase1.sh and check-phase4.sh fail and should be tracked separately.

Human Verification Required

These items are listed in the frontmatter. They are search interaction, the theme with no flash and correct contrast, the no-JS layout, the usefulness of llms.txt and the .md files to AI agents, editorial and walkthrough followability, and resolution of the six judgment-tier prohibitions. Because gaps were found, the overall status is gaps_found; these items still need running in /gsd-verify-work.

Gaps Summary

All three gaps share one root cause: the docs checkers fail open on Markdown and shell forms they do not model. They pass silently when they should refuse. None of them is exploited by the current content, which is fully verified. They matter because DOCS-04 and DOCS-05 are guard-rail requirements: the phase goal says every code example is compiled and tested, and CLAUDE.md now tells future changes to rely on TestDocsTree and docs:build --check.

1. Fence discovery (BLOCKER, CR-01 + WR-04). Switch snippet, policy and command fence collection from scanFences to the goldmark AST, or refuse non-top-level src= and Go fences. Normalise Go language aliases. Stop captioning unchecked README src= fences. Add planted fixtures and fix the acceptance scanner.
2. Proof of execution (WR-01 + WR-02). Only Examples with output are roots, and src= files must be in the default build.
3. Identifier and command forms (WR-03 + WR-05). Pass go doc -c, and parse env-prefix, flag-first and go run ./cmd/summer command forms.

All three are local to internal/docsite with small fixes, and fit one gap-closure plan that ends with planted-violation fixtures for each hole. No later milestone phase covers them. Phase 11.2 consumes the docs but does not harden the checkers, so none of the gaps is deferred.

---

Verified: 2026-09-30T23:06:42Z Verifier: Claude (gsd-verifier)