TenantAtlas/specs/408-review-evidence-decision/quickstart.md
2026-05-29 02:08:50 +02:00

186 lines
4.9 KiB
Markdown

# Quickstart: Customer-safe Review, Evidence & Decision Story
## 1. Confirm Scope
Work from repository root:
```bash
cd /Users/ahmeddarrazi/Documents/projects/wt-website
git status --short --branch
cat package.json
cat pnpm-workspace.yaml 2>/dev/null || true
cat apps/website/package.json
find apps/website -maxdepth 3 -type f | sort | sed -n '1,260p'
```
Scope boundaries:
- Allowed: `/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/**`
- Allowed: `/Users/ahmeddarrazi/Documents/projects/wt-website/specs/408-review-evidence-decision/**`
- Forbidden: `/Users/ahmeddarrazi/Documents/projects/wt-website/apps/platform/**`
- Forbidden: root workspace script contract changes
## 2. Implement The Route
Preferred routes:
- `/platform/review-packs`
- `/en/platform/review-packs`
Expected files:
```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/pages/platform/review-packs.astro
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/pages/en/platform/review-packs.astro
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/components/pages/ReviewPacksPage.astro
```
Follow the existing `PlatformPage.astro` product-page pattern and keep the locale files thin.
## 3. Add Localized Content
Use the existing copy file:
```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/data_files/site-copy.ts
```
Add German and English review-story copy with:
- page metadata
- hero copy and CTA labels
- problem cards
- governance workflow steps
- review-pack anatomy cards
- Evidence cards
- decision-summary cards
- customer-safe boundary content
- MSP and Enterprise IT value cards
- trust teaser copy
- final CTA labels and routes
## 4. Keep Discovery Light
Preferred discovery surfaces:
- homepage teaser
- compact platform-page teaser
- MSP use-case crosslink
- Mittelstand / Enterprise IT use-case crosslink
- footer link
Do not add a main-nav item unless implementation proves the current IA still reads cleanly.
## 5. Keep Claims Soft Where Runtime Truth Is Unverified
Use soft wording for export or availability claims:
- "helps prepare"
- "can"
- "if available"
- "review-ready"
- "audit-ready"
Do not introduce hard claims for:
- completed customer portal
- automatic Review Pack generation
- automatic exports
- immutable Evidence
- complete audit trail
- `DSGVO-konform`
- `ISO-zertifiziert`
- `real-time drift`
- `automatic remediation`
- `automatic restore`
- Google/AWS support
## 6. Update Smoke Coverage
Expected test updates:
```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/public-routes.spec.ts
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/interaction.spec.ts
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/smoke-helpers.ts
```
Cover:
- `/platform/review-packs`
- `/en/platform/review-packs`
- metadata for both routes
- homepage/platform/use-case/footer discovery links as implemented
- no placeholder links
- no forbidden public claims
- no horizontal overflow
- readable desktop/mobile layout
## 7. Run Validation
Run only scripts that currently exist:
```bash
corepack pnpm --filter @tenantatlas/website build
corepack pnpm --filter @tenantatlas/website test tests/smoke/public-routes.spec.ts
corepack pnpm --filter @tenantatlas/website test tests/smoke/interaction.spec.ts
```
Optional if formatting was touched broadly:
```bash
corepack pnpm --filter @tenantatlas/website format:check
```
Run the static scan from the plan against source:
```bash
grep -RIn \
-e 'href="#"' \
-e 'lorem ipsum' \
-e 'customer-safe consumption productization' \
-e 'route-owned' \
-e 'artifact taxonomy' \
-e 'source family' \
-e 'capability registry' \
-e 'repo-real foundation' \
-e 'lueckenlose Evidence' \
-e 'lueckenlose Evidenz' \
-e 'gerichtsfeste Nachweise' \
-e 'immutable evidence' \
-e 'immutable review packs' \
-e 'complete audit trail' \
-e 'guarantees audit success' \
-e 'macht Sie compliant' \
-e 'DSGVO-konform' \
-e 'ISO-zertifiziert' \
-e 'real-time drift' \
-e 'automatic remediation' \
-e 'automatic restore' \
-e 'Google supported' \
-e 'AWS supported' \
apps/website/src apps/website/public 2>/dev/null || true
```
If generated output is committed, scan `apps/website/dist` as well.
## 8. Browser Smoke
If local preview is available:
```bash
WEBSITE_PORT=${WEBSITE_PORT:-4321} corepack pnpm --filter @tenantatlas/website preview
```
Verify:
- `/platform/review-packs` loads
- `/en/platform/review-packs` loads
- homepage/platform/use-case/footer links work if implemented
- trust teaser points to a real route
- Review Pack story is understandable
- Evidence story is understandable
- customer-safe versus internal-only boundary is understandable
- no fake portal/export/automation claims appear
- no false compliance/provider claims appear
- desktop and mobile layouts remain readable