Jyotisha/docs/testing/sidebar-navigation-baseline-failures-20260919.md

# 侧栏修复 · 同环境全量失败逐项对照

基线 `507ef959`：3481 tests / 3403 pass / 78 fail。修复：3486 tests / 3408 pass / 78 fail。按测试名及出现次数比较，新增/消失失败均为 0；下列 78 项在两边均失败，不作为通过。未收录原始输出或任何凭据。

| 测试名 | 基线 | 修复 |
| --- | --- | --- |
| `admin code functions reject immutable codes, revoked redemption, and roll back on audit failure` | fail | fail |
| `operation-level admin email reauthentication is removed from routes and UI` | fail | fail |
| `rectification agent maps setup failures without calling the rest of the handler` | fail | fail |
| `renders the persisted Beam avatar in the sidebar, account menu, and profile editor` | fail | fail |
| `public code never imports the internal dynamic choice contract` | fail | fail |
| `tests\\birth-time-guide-agent.test.ts` | fail | fail |
| `candidate scores stay out of the specified client ownership boundary` | fail | fail |
| `personal Agent exposes the Jyotish Skill and named server tool` | fail | fail |
| `general agent runtime has no Jyotish skill package and no personal chart tool` | fail | fail |
| `the route's own strict checklist reaches the answer, not just the package listing` | fail | fail |
| `a route the skill declares no checklist for is reported, not filled in with another route's` | fail | fail |
| `health uses the skill's health-timing-strict checklist` | fail | fail |
| `wealth uses finance-timing-strict as the live checklist, with the wealth alias in the heading` | fail | fail |
| `a multi-domain plan carries every executed route's checklist once` | fail | fail |
| `no plan can spend the answer's context on method` | fail | fail |
| `the widest legal plan still fits the budget` | fail | fail |
| `further reading offers the references the skill names, and only ones that exist` | fail | fail |
| `the delivered method is quoted from the live skill tree` | fail | fail |
| `tests\\consultation-workflow-request.test.ts` | fail | fail |
| `admin customer reset clears only rebuildable application state` | fail | fail |
| `service and restricted admin database identities stay separated` | fail | fail |
| `Owner recovery grants only one currently loginable synced identity admin` | fail | fail |
| `staging backups are encrypted, atomic, private, and retain the newest three` | fail | fail |
| `rejects destructive backup directory aliases and symlink components before mutation` | fail | fail |
| `rejects unsafe writable backup parents before creating the target` | fail | fail |
| `rejects a direct canonical sticky shared backup directory before chmod` | fail | fail |
| `creates every absent backup path component privately despite a permissive caller umask` | fail | fail |
| `same-second backups publish once without overwriting the completed archive` | fail | fail |
| `find enumeration failures preserve existing backups and do not report completion` | fail | fail |
| `refuses full disks and removes a failed-pipeline partial file` | fail | fail |
| `billing order adjustments and redemption reasons are atomic and audited` | fail | fail |
| `billing, subscriptions, usage authorization, RBAC, and model publication remain transactional` | fail | fail |
| `saving a published product forks a draft and delete retires or removes it` | fail | fail |
| `append_consultation_question ignores thinking fields and enforces the physical JSON cap` | fail | fail |
| `database env validator accepts punctuated literal required secrets` | fail | fail |
| `database env validator rejects symlinks and unsafe modes` | fail | fail |
| `database env validator enforces an explicit staging owner uid without printing values` | fail | fail |
| `database env validator accepts a private valid file without printing values` | fail | fail |
| `local PostgreSQL applies the reviewed business schema and serves authenticated business calls` | fail | fail |
| `personal_reports.card_summary is nullable, owner-read, service-written, and length-capped` | fail | fail |
| `personal report job migration is atomic, lease-bound, recoverable, and owner read-only` | fail | fail |
| `longform appendices are owner-read, service-written, and never change report status` | fail | fail |
| `personal report sections enforce owner-read RLS and service-owned durable transitions` | fail | fail |
| `block_scan RPCs are service_role-only and advance a declared period` | fail | fail |
| `redeem security: case-sensitive hashing, rate limiting, idempotency and order ownership` | fail | fail |
| `read_report_candidate_range is service_role-only, returns only the window, and stays empty without rows` | fail | fail |
| `self-hosted identity migration creates Better Auth tables with least privilege` | fail | fail |
| `every color token used as a Tailwind utility is exposed through @theme` | fail | fail |
| `staging model provider env preparation removes legacy settings and keeps one stable key` | fail | fail |
| `staging env validator rejects selector drift, duplicates, and unsafe permissions` | fail | fail |
| `production env validators accept only self-hosted production selectors and role URLs` | fail | fail |
| `Better Auth supports shared user OTP/password sessions for admins` | fail | fail |
| `job migration mirror is exact and preserves personal_reports as the document projection` | fail | fail |
| `document v2 and durable job migrations are exact db/supabase mirrors` | fail | fail |
| `document v2 migration preserves v1 reads and adds explicit product depth` | fail | fail |
| `durable job migration defines the complete state, lease, retry, and identity contract` | fail | fail |
| `durable job migration atomically enqueues reports and exposes lease RPCs only to service_role` | fail | fail |
| `ingest P0: education kinds, batch confirm, opening focus reuse, precision lock` | fail | fail |
| `PR-4 candidate decisions use server UUIDs, receipt-derived gates and separate acceptance/confirmation` | fail | fail |
| `tests\\rectification-v9-agent.test.ts` | fail | fail |
| `v9 migration applies on a fresh database and re-applies idempotently` | fail | fail |
| `v9 open is atomic, idempotent and allows separate homepage cases` | fail | fail |
| `v9 enforces profile gating, ownership and terminal read-only` | fail | fail |
| `v9 evidence lifecycle: quote grounding, idempotency, confirm and revision lineage` | fail | fail |
| `v9 legacy backfill maps statuses, keeps one resumable per user and is idempotent` | fail | fail |
| `v9 agent api migration applies, seeds the runtime flag and guards consent` | fail | fail |
| `v9 ignores a historical active minute and allows reselection within the live result` | fail | fail |
| `tests\\skill-binding.test.ts` | fail | fail |
| `immutable Skill migration enforces RPC-only identity, legacy adoption, and cascade-safe receipts` | fail | fail |
| `checked-in registry verifies hashed product packages and leaves consult on the live skill` | fail | fail |
| `path traversal and symlink escape fail closed` | fail | fail |
| `symbolic links are rejected even when their target stays inside the project root` | fail | fail |
| `live consult skill reads a hand-updated tree without a registry hash` | fail | fail |
| `changed staging workflows are syntactically valid YAML` | fail | fail |
| `live staging sync preserves env, state, incoming files, and encrypted backups` | fail | fail |
| `live staging sync repairs nested deploy-tree drift without preserving foreign ownership` | fail | fail |
| `first immutable deployment rolls back to validated local image IDs` | fail | fail |
| `is-docs-only-range.sh decides from local history and refuses non-ancestor ranges` | fail | fail |