TenantAtlas/specs/406-provider-policy-domain-public-taxonomy/quickstart.md

# Quickstart: Provider & Policy Domain Public Taxonomy

## 1. Confirm Scope

Work from repository root:

```bash
cd /Users/ahmeddarrazi/Documents/projects/wt-website
git status --short --branch
cat package.json
cat pnpm-workspace.yaml 2>/dev/null || true
cat apps/website/package.json
find apps/website -maxdepth 3 -type f | sort | sed -n '1,220p'
```

Scope boundaries:

- Allowed: `/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/**`
- Allowed: `/Users/ahmeddarrazi/Documents/projects/wt-website/specs/406-provider-policy-domain-public-taxonomy/**`
- Forbidden: `/Users/ahmeddarrazi/Documents/projects/wt-website/apps/platform/**`
- Forbidden: root workspace script contract changes

## 2. Implement The Route

Preferred route:

- `/platform/domains`
- `/en/platform/domains`

Expected files:

```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/pages/platform/domains.astro
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/pages/en/platform/domains.astro
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/components/pages/DomainTaxonomyPage.astro
```

Follow the existing `PlatformPage.astro` and `TrustPage.astro` route/component pattern.

## 3. Add Localized Content

Use the existing copy file:

```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/src/data_files/site-copy.ts
```

Add German and English taxonomy copy with:

- hero copy
- metadata
- status legend
- Microsoft 365 domain matrix
- future-provider rows
- buyer-facing cards
- CTA labels and destinations

## 4. Use Safe Status Defaults

Use these public status meanings:

- Current focus / Aktueller Fokus
- Planned domain / Geplante Domaene
- Architecture direction / Architektur-Richtung
- Not currently available / Derzeit nicht verfuegbar
- Not claimed / Nicht beansprucht

Default statuses:

- Intune / Endpoint Policies: current focus only if repo/product truth supports it
- Entra / Identity & Access: planned domain unless verified current
- Conditional Access: planned domain unless verified current
- SharePoint / OneDrive Sharing: planned domain unless verified current
- Enterprise Apps / Service Principals: planned domain unless verified current
- Security Posture Evidence: planned domain unless verified current
- Provider Permissions & Readiness: current or planned based on repo/product truth
- Review Packs & Governance Evidence: current or planned based on repo/product truth
- Google Workspace / Google Cloud: architecture direction unless verified current
- AWS: architecture direction unless verified current
- Okta / Identity Providers: architecture direction unless verified current
- Other SaaS policy systems: architecture direction unless verified current

## 5. Integrate Lightly

Add only light discoverability:

- homepage teaser if it fits current copy structure
- platform-page teaser or CTA
- footer/nav link only if current IA supports it without clutter

Every CTA must use a real route, real anchor, or real contact destination.

## 6. Update Smoke Coverage

Expected test updates:

```text
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/public-routes.spec.ts
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/interaction.spec.ts
/Users/ahmeddarrazi/Documents/projects/wt-website/apps/website/tests/smoke/smoke-helpers.ts
```

Cover:

- `/platform/domains`
- `/en/platform/domains`
- metadata for both routes
- public links
- mobile readability
- no horizontal overflow
- status labels
- no false provider claims

## 7. Run Validation

Run only scripts that exist:

```bash
corepack pnpm --filter @tenantatlas/website build
corepack pnpm --filter @tenantatlas/website test
```

Optional if formatting changed broadly:

```bash
corepack pnpm --filter @tenantatlas/website format:check
```

Run static source scan:

```bash
grep -RIn \
  -e 'href="#"' \
  -e 'Intune Management Tool' \
  -e 'Google supported' \
  -e 'AWS supported' \
  -e 'Okta supported' \
  -e 'multi-cloud supported' \
  -e 'all cloud providers' \
  -e 'every SaaS platform' \
  -e 'provider-agnostic restore' \
  -e 'universal policy governance' \
  -e 'automatic remediation' \
  -e 'automatic restore' \
  -e 'self-healing' \
  -e 'real-time drift' \
  -e 'immutable backups' \
  -e 'gerichtsfeste Nachweise' \
  -e 'lueckenlose Evidenz' \
  apps/website/src apps/website/public 2>/dev/null || true
```

If generated output is committed, scan it too:

```bash
grep -RIn \
  -e 'href="#"' \
  -e 'Intune Management Tool' \
  -e 'Google supported' \
  -e 'AWS supported' \
  -e 'Okta supported' \
  -e 'multi-cloud supported' \
  -e 'all cloud providers' \
  -e 'every SaaS platform' \
  -e 'provider-agnostic restore' \
  -e 'universal policy governance' \
  -e 'automatic remediation' \
  -e 'automatic restore' \
  -e 'self-healing' \
  -e 'real-time drift' \
  -e 'immutable backups' \
  -e 'gerichtsfeste Nachweise' \
  -e 'lueckenlose Evidenz' \
  apps/website/dist 2>/dev/null || true
```

## 8. Browser Smoke

If preview is available:

```bash
WEBSITE_PORT=${WEBSITE_PORT:-4321} corepack pnpm --filter @tenantatlas/website preview
```

Verify:

- `/platform/domains` loads
- `/en/platform/domains` loads
- homepage/platform teaser link works
- nav/footer links work if added
- desktop layout is readable
- mobile layout is readable
- status labels are understandable
- Intune is not the whole product category
- Google/AWS/Okta are not presented as live support
- no CTA uses a fake route