TenantAtlas/specs/408-review-evidence-decision/quickstart.md

# Quickstart: Customer-safe Review, Evidence & Decision Story

## 1. Confirm Scope

Work from repository root:

```bash
cd /Users/ahmeddarrazi/Documents/projects/wt-website
git status --short --branch
cat package.json
cat pnpm-workspace.yaml 2>/dev/null || true
cat apps/website/package.json
find apps/website -maxdepth 3 -type f | sort | sed -n '1,260p'
```

Scope boundaries:

- Allowed: `/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/**`
- Allowed: `/Users/ahmeddarrazi/Documents/projects/wt-website/specs/408-review-evidence-decision/**`
- Forbidden: `/Users/ahmeddarrazi/Documents/projects/wt-website/apps/platform/**`
- Forbidden: root workspace script contract changes

## 2. Implement The Route

Preferred routes:

- `/platform/review-packs`
- `/en/platform/review-packs`

Expected files:

```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/pages/platform/review-packs.astro
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/pages/en/platform/review-packs.astro
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/components/pages/ReviewPacksPage.astro
```

Follow the existing `PlatformPage.astro` product-page pattern and keep the locale files thin.

## 3. Add Localized Content

Use the existing copy file:

```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/data_files/site-copy.ts
```

Add German and English review-story copy with:

- page metadata
- hero copy and CTA labels
- problem cards
- governance workflow steps
- review-pack anatomy cards
- Evidence cards
- decision-summary cards
- customer-safe boundary content
- MSP and Enterprise IT value cards
- trust teaser copy
- final CTA labels and routes

## 4. Keep Discovery Light

Preferred discovery surfaces:

- homepage teaser
- compact platform-page teaser
- MSP use-case crosslink
- Mittelstand / Enterprise IT use-case crosslink
- footer link

Do not add a main-nav item unless implementation proves the current IA still reads cleanly.

## 5. Keep Claims Soft Where Runtime Truth Is Unverified

Use soft wording for export or availability claims:

- "helps prepare"
- "can"
- "if available"
- "review-ready"
- "audit-ready"

Do not introduce hard claims for:

- completed customer portal
- automatic Review Pack generation
- automatic exports
- immutable Evidence
- complete audit trail
- `DSGVO-konform`
- `ISO-zertifiziert`
- `real-time drift`
- `automatic remediation`
- `automatic restore`
- Google/AWS support

## 6. Update Smoke Coverage

Expected test updates:

```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/public-routes.spec.ts
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/interaction.spec.ts
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/smoke-helpers.ts
```

Cover:

- `/platform/review-packs`
- `/en/platform/review-packs`
- metadata for both routes
- homepage/platform/use-case/footer discovery links as implemented
- no placeholder links
- no forbidden public claims
- no horizontal overflow
- readable desktop/mobile layout

## 7. Run Validation

Run only scripts that currently exist:

```bash
corepack pnpm --filter @tenantatlas/website build
corepack pnpm --filter @tenantatlas/website test tests/smoke/public-routes.spec.ts
corepack pnpm --filter @tenantatlas/website test tests/smoke/interaction.spec.ts
```

Optional if formatting was touched broadly:

```bash
corepack pnpm --filter @tenantatlas/website format:check
```

Run the static scan from the plan against source:

```bash
grep -RIn \
  -e 'href="#"' \
  -e 'lorem ipsum' \
  -e 'customer-safe consumption productization' \
  -e 'route-owned' \
  -e 'artifact taxonomy' \
  -e 'source family' \
  -e 'capability registry' \
  -e 'repo-real foundation' \
  -e 'lueckenlose Evidence' \
  -e 'lueckenlose Evidenz' \
  -e 'gerichtsfeste Nachweise' \
  -e 'immutable evidence' \
  -e 'immutable review packs' \
  -e 'complete audit trail' \
  -e 'guarantees audit success' \
  -e 'macht Sie compliant' \
  -e 'DSGVO-konform' \
  -e 'ISO-zertifiziert' \
  -e 'real-time drift' \
  -e 'automatic remediation' \
  -e 'automatic restore' \
  -e 'Google supported' \
  -e 'AWS supported' \
  apps/website/src apps/website/public 2>/dev/null || true
```

If generated output is committed, scan `apps/website/dist` as well.

## 8. Browser Smoke

If local preview is available:

```bash
WEBSITE_PORT=${WEBSITE_PORT:-4321} corepack pnpm --filter @tenantatlas/website preview
```

Verify:

- `/platform/review-packs` loads
- `/en/platform/review-packs` loads
- homepage/platform/use-case/footer links work if implemented
- trust teaser points to a real route
- Review Pack story is understandable
- Evidence story is understandable
- customer-safe versus internal-only boundary is understandable
- no fake portal/export/automation claims appear
- no false compliance/provider claims appear
- desktop and mobile layouts remain readable