---
uai: "1.0"
type: test-plan
status: active
project: iarpg.com
updated_utc: "2026-07-19T11:40:35Z"
---
# Test Plan
## Static validation

- Lint every PHP file with `php -l`.
- Validate JavaScript with `node --check`.
- Parse every JSON manifest.
- Verify all 147 canonical report files and hashes.
- Verify all 219 original source files and hashes.
- Verify every UAI `/docs/report/<slug>#<section>` link against the report headings.
- Confirm no `.zip`, `.7z`, or `.rar` exists inside the deployment tree.

## HTTP and interface validation

- Render all primary marketing, docs, source inventory, report, UAI, and error pages.
- Confirm security headers and CSP.
- Confirm the Spiralist AI and UAIX banners precede the footer.
- Confirm responsive navigation, keyboard focus, reduced motion, and no horizontal overflow.
- Confirm signup success, duplicate, validation, rate-limit, and invalid-CSRF behavior; remove test records.

## Deployment validation

- ZIP root contains `index.php`; no enclosing project directory.
- Hidden `.htaccess`, `.uai/`, and `.well-known/` files are included.
- Final archive itself contains no nested archive containers.
- ZIP integrity test passes and SHA-256 is published.

## Standards validation

- Parse the catalog, mission schema, example, discovery JSON, and every record JSON.
- Verify every human and machine route.
- Verify every research deep link resolves to an existing report slug and heading anchor.
- Confirm the local validator reaches Level C for the canonical example and reports failures for malformed briefs.
- Confirm supplied partner images remain byte-identical and render with intrinsic ratio.
- Confirm the flat deployment ZIP contains no nested archives.