V40 Gate 7: Browser E2E Visual Accessibility Proof

Adds the package-backed V40BrowserE2eVisualProof artifact and checker, focused Playwright coverage for Terminal, Conversations, Exchange, Docs, and Auxillaries, and deterministic browser proof contracts for the app.

Wires Gate 7 into V40 gate/canon quality workflows, updates V40 specification documents and README guidance, and hardens the Gate 6 roadmap predicate so prior-gate checks stay green as V40 advances.

Proof: pnpm run check:v40-gate7; pnpm --dir uapi run test:e2e:browser-proof; pnpm --filter @bitcode/protocol typecheck; pnpm run check:v40-gate1; pnpm run check:v40-gate2; pnpm run check:v40-gate3; pnpm run check:v40-gate4 --skip-integration-tests; pnpm run check:v40-gate5 --skip-integration-tests; pnpm run check:v40-gate6 --skip-integration-tests; git diff --check.

Author: geraldarthurdavis

.bitcode/v40-browser-e2e-visual-proof.json

@@ -238,6 +238,9 @@ jobs:
               if [ -f scripts/check-v40-gate6-conversation-terminal-integration.mjs ]; then
                 node scripts/check-v40-gate6-conversation-terminal-integration.mjs --skip-branch-check --skip-integration-tests
               fi
+              if [ -f scripts/check-v40-gate7-browser-e2e-visual-proof.mjs ]; then
+                node scripts/check-v40-gate7-browser-e2e-visual-proof.mjs --skip-branch-check --skip-browser-tests
+              fi
             fi
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2

.github/workflows/bitcode-canon-quality.yml

@@ -367,6 +367,9 @@ jobs:
               if [ -f scripts/check-v40-gate6-conversation-terminal-integration.mjs ]; then
                 node scripts/check-v40-gate6-conversation-terminal-integration.mjs --skip-branch-check --skip-integration-tests
               fi
+              if [ -f scripts/check-v40-gate7-browser-e2e-visual-proof.mjs ]; then
+                node scripts/check-v40-gate7-browser-e2e-visual-proof.mjs --skip-branch-check --skip-browser-tests
+              fi
             fi
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
@@ -541,6 +544,7 @@ jobs:
             tests/terminalTransactionDetailCards.test.tsx \
             tests/terminalTransactionDetailSnapshot.test.ts \
             tests/terminalUxBrowserProof.test.tsx \
+            tests/bitcodeBrowserProof.test.ts \
             tests/bitcodeBrowserAccessibilityResponsiveProof.test.ts \
             tests/readingOperationalTelemetryPipelineLog.test.tsx \
             tests/pipelineExecutionLogHeader.test.tsx \
@@ -558,6 +562,10 @@ jobs:
         if: vars.BITCODE_ENABLE_GATE_BROWSER_PROOF == '1'
         run: pnpm --dir uapi run test:e2e:v32-browser-proof
 
+      - name: Browser proof product surfaces
+        if: vars.BITCODE_ENABLE_GATE_BROWSER_PROOF == '1'
+        run: pnpm --dir uapi run test:e2e:browser-proof
+
       - name: Test pipeline readback verifier
         run: pnpm test:qa:v28:pipeline-readback
 

.github/workflows/bitcode-gate-quality.yml

@@ -9,7 +9,7 @@
 - Prior canonical anchor: `BITCODE_SPEC_V39.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V39_PROVEN.md`
 - Active canonical pointer during draft opening: `BITCODE_SPEC.txt` -> `V39`
-- Generated structured artifact inventory: draft `.bitcode/v40-spec-family-report.json`, `.bitcode/v40-canonical-input-report.json`, `.bitcode/v40-test-inventory-coverage-matrix.json`, `.bitcode/v40-unit-coverage-inventory.json`, `.bitcode/v40-api-integration-contracts.json`, `.bitcode/v40-reading-pipeline-integration-coverage.json`, plus later V40 gate artifacts for E2E, visual, synchronization, rehearsal, proof, and promotion readiness coverage
+- Generated structured artifact inventory: draft `.bitcode/v40-spec-family-report.json`, `.bitcode/v40-canonical-input-report.json`, `.bitcode/v40-test-inventory-coverage-matrix.json`, `.bitcode/v40-unit-coverage-inventory.json`, `.bitcode/v40-api-integration-contracts.json`, `.bitcode/v40-reading-pipeline-integration-coverage.json`, `.bitcode/v40-conversation-terminal-integration.json`, `.bitcode/v40-browser-e2e-visual-proof.json`, plus later V40 gate artifacts for synchronization, rehearsal, prompt benchmark, and promotion readiness coverage
 - Source parity state: V40 opens testing-system specification over active V39; package, API, pipeline, conversation, Terminal, Auxillaries, Exchange, interface, ledger/database/storage, and demonstration tests remain to be hardened gate by gate
 - Notes companion: `BITCODE_SPEC_V40_NOTES.md`
 - Delta companion: `BITCODE_SPEC_V40_DELTA.md`
@@ -136,6 +136,14 @@ The package-owned `V40ConversationTerminalIntegration` emits `.bitcode/v40-conve
 The focused UAPI integration test carries a source-safe Conversation `finding_fits` handoff into Terminal route readback, verifies the five-stage enterprise Reading state at `request-fit`, adapts a Conversation stream tool event into execution-log metadata, and projects that event through the Terminal harness stream snapshot without serializing protected source, raw prompt payload, or unpaid AssetPack source.
 Gate 6 permits no missing, blocked, or exempt critical Conversation/Terminal row; proof rows may include route parameters, proof roots, event ids, telemetry posture, command ids, fixture roots, and coverage flags, but must not include secrets, protected source, raw protected prompts, raw model/provider responses, wallet private material, or unpaid AssetPack source.
 
+## V40 Gate 7 Browser E2E, Accessibility, Responsive, And Visual Proof
+
+Gate 7 closes source-safe browser proof across the rich website product surfaces without making screenshots the only proof.
+The package-owned `V40BrowserE2eVisualProof` emits `.bitcode/v40-browser-e2e-visual-proof.json` with eight source-safe rows: Terminal enterprise Reading and transaction browser flow, Conversations writing and stream-log browser flow, Auxillaries contained-pane accessibility flow, Exchange BTD market and rights browser flow, Docs public learning route browser flow, canonical responsive viewport overflow proof, visual screenshot baseline and trace proof, and keyboard/landmark/status accessibility proof.
+The app-owned `BITCODE_BROWSER_PROOF_CONTRACT` covers Terminal, Conversations, Auxillaries, Exchange, and Docs, thirteen route states, eighteen interaction states, four canonical viewports, eight accessibility assertions, and a visual strategy that requires deterministic screenshot baselines plus semantic assertions with `no-screenshot-only-approval`.
+The focused browser spec exercises five-stage Reading, selected activity detail, Conversation source-safe handoff, Exchange rights review, Docs navigation, Auxillaries live regions, reduced motion, and horizontal-overflow limits under local mock data.
+Gate 7 permits no missing, blocked, or exempt critical browser proof row; proof rows may include route ids, viewport ids, screenshot/trace posture, command ids, fixture roots, and source-safe coverage flags, but must not include secrets, protected source, raw protected prompts, raw provider/model responses, wallet private material, or unpaid AssetPack source.
+
 ## V40 canonical subsystem surfaces
 
 ### Depositing and asset supply
@@ -397,12 +405,15 @@ V40 inherits operator-quality artifact expectations for readable proof and repai
 | `.bitcode/v40-test-inventory-coverage-matrix.json` | protocol canonical package | Gate 2 source-safe test inventory and coverage matrix |
 | `.bitcode/v40-unit-coverage-inventory.json` | protocol canonical package | Gate 3 source-safe unit coverage inventory |
 | `.bitcode/v40-api-integration-contracts.json` | protocol canonical package | Gate 4 source-safe API and route integration contract inventory |
+| `.bitcode/v40-reading-pipeline-integration-coverage.json` | protocol canonical package | Gate 5 source-safe Reading pipeline integration coverage |
+| `.bitcode/v40-conversation-terminal-integration.json` | protocol canonical package | Gate 6 source-safe Conversation/Terminal integration coverage |
+| `.bitcode/v40-browser-e2e-visual-proof.json` | protocol canonical package | Gate 7 source-safe browser, visual, accessibility, and responsive proof |
 | `.bitcode/v40-promotion-readiness-report.json` | future V40 promotion gate | promotion readiness |
 
 ### V40 specifying generated artifacts
 
 V40 generated artifacts begin with `.bitcode/v40-spec-family-report.json` and `.bitcode/v40-canonical-input-report.json`.
-Later gates add browser, visual, integration, unit, disclosure, synchronization, prompt benchmark smoke, and promotion-readiness artifacts.
+Later gates add disclosure, synchronization, prompt benchmark smoke, rehearsal, and promotion-readiness artifacts.
 
 ### Shared generated-artifact fields
 
@@ -428,7 +439,7 @@ Missing generated artifacts, stale reports, malformed JSON, invalid screenshots,
 
 ## V40 validation canon
 
-Validation canon includes `pnpm run check:v40-gate1`, `pnpm run check:v40-gate2`, `pnpm run check:v40-gate3`, `node scripts/check-bitcode-spec-family.mjs --version V40 --mode draft --current-target V39`, `node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V39 --draft-target V40`, package typechecks, protocol tests, route/API tests, browser E2E suites, visual/screenshot proof suites, integration suites, unit suites, prompt benchmark smoke tests, local/staging rehearsal commands, and diff hygiene.
+Validation canon includes `pnpm run check:v40-gate1`, `pnpm run check:v40-gate2`, `pnpm run check:v40-gate3`, `pnpm run check:v40-gate4`, `pnpm run check:v40-gate5`, `pnpm run check:v40-gate6`, `pnpm run check:v40-gate7`, `pnpm run check:v40-browser-e2e-visual-proof`, `node scripts/check-bitcode-spec-family.mjs --version V40 --mode draft --current-target V39`, `node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V39 --draft-target V40`, package typechecks, protocol tests, route/API tests, browser E2E suites, visual/screenshot proof suites, integration suites, unit suites, prompt benchmark smoke tests, local/staging rehearsal commands, and diff hygiene.
 
 ## V40 promotion canon
 

BITCODE_SPEC_V40.md

@@ -58,6 +58,7 @@ Gate 6 closes with package-backed `V40ConversationTerminalIntegration`, determin
 ### Gate 7: Browser E2E, Accessibility, Responsive, And Visual Proof
 
 Close Playwright/browser paths, visual baselines, accessibility, responsive viewports, and interaction-state matrices.
+Gate 7 closes with package-backed `V40BrowserE2eVisualProof`, deterministic `.bitcode/v40-browser-e2e-visual-proof.json`, protocol exports, app-owned current browser proof contract, source-safe rows for Terminal, Conversations, Auxillaries, Exchange, Docs, responsive viewport overflow, screenshot/trace baselines, keyboard/landmark/status accessibility, a focused browser spec, workflow wiring, and `check:v40-gate7`.
 
 ### Gate 8: Ledger, Database, Storage, Wallet, And Delivery Synchronization
 

BITCODE_SPEC_V40_DELTA.md

@@ -7,8 +7,8 @@
 - Current canonical/latest target: `V39`
 - Prior canonical anchor: `BITCODE_SPEC_V39.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V39_PROVEN.md`
-- Generated structured artifact inventory: draft `.bitcode/v40-spec-family-report.json`, `.bitcode/v40-canonical-input-report.json`, and later V40 testing artifacts
-- Source parity state: V40 testing gates are planned and not yet closed
+- Generated structured artifact inventory: draft `.bitcode/v40-spec-family-report.json`, `.bitcode/v40-canonical-input-report.json`, `.bitcode/v40-test-inventory-coverage-matrix.json`, `.bitcode/v40-unit-coverage-inventory.json`, `.bitcode/v40-api-integration-contracts.json`, `.bitcode/v40-reading-pipeline-integration-coverage.json`, `.bitcode/v40-conversation-terminal-integration.json`, `.bitcode/v40-browser-e2e-visual-proof.json`, and later V40 testing artifacts
+- Source parity state: V40 testing gates are closing progressively through generated artifacts
 
 ## Notes companion rule
 
@@ -98,3 +98,11 @@ Its generated `.bitcode/v40-conversation-terminal-integration.json` artifact bin
 The focused UAPI test executes the cross-surface path from a Conversation `finding_fits` handoff into Terminal query parsing, enterprise Reading `request-fit` state, Conversation stream tool-call log metadata, and Terminal harness stream projection.
 No missing, blocked, or exempt critical Conversation/Terminal integration row is allowed in the Gate 6 artifact; Conversation may carry source-safe intent only, while Terminal remains the transaction, wallet, ledger, settlement, and delivery cockpit.
 Prompt and PromptPart rewriting remains deferred to V41.
+
+## Gate 7 implementation notes
+
+Gate 7 is closed by `V40BrowserE2eVisualProof`.
+Its generated `.bitcode/v40-browser-e2e-visual-proof.json` artifact binds browser E2E, visual, accessibility, and responsive proof to eight source-safe rows: Terminal enterprise Reading and transaction flow, Conversations writing/stream-log flow, Auxillaries contained-pane accessibility flow, Exchange BTD market and rights flow, Docs public learning routes, canonical viewport overflow proof, screenshot/trace baseline proof, and keyboard/landmark/status accessibility proof.
+The app-owned `BITCODE_BROWSER_PROOF_CONTRACT` summarizes five product surfaces, thirteen route states, eighteen interaction states, four canonical viewports, eight accessibility assertions, and five visual proof strategies.
+The focused browser spec covers five-stage Reading, selected activity detail, Conversation source-safe handoff, Exchange rights review, Docs navigation, Auxillaries live regions, reduced motion, and horizontal overflow limits under local mock data.
+No missing, blocked, or exempt critical browser proof row is allowed in the Gate 7 artifact, and screenshot-only approval is explicitly rejected.

BITCODE_SPEC_V40_NOTES.md

@@ -30,8 +30,8 @@ This matrix records the V40 testing surfaces that must become promotion-grade be
 | Roadmap truth | Roadmap states V39 active, V40 draft, V41 prompt-program future | `SPECIFICATIONS_ROADMAP.md` | drafted |
 | Gate workflow | Gate quality knows active V39 and draft V40 | `.github/workflows/bitcode-gate-quality.yml` | drafted |
 | Canon workflow | Canon quality knows active V39 and draft V40 | `.github/workflows/bitcode-canon-quality.yml` | drafted |
-| Browser E2E | Critical website flows have browser proof | future V40 artifacts | not yet implemented |
-| Visual proof | Screenshot comparisons are deterministic and reviewable | future V40 artifacts | not yet implemented |
+| Browser E2E | Critical website flows have browser proof | `.bitcode/v40-browser-e2e-visual-proof.json` | implemented |
+| Visual proof | Screenshot comparisons are deterministic and reviewable | `.bitcode/v40-browser-e2e-visual-proof.json` | implemented |
 | API integration | Route and API contracts are parseable and source-safe | `.bitcode/v40-api-integration-contracts.json` | implemented |
 | Pipeline integration | Primitive and real Reading pipeline implementations are tested | `.bitcode/v40-reading-pipeline-integration-coverage.json` | implemented |
 | Conversation/Terminal integration | Conversation handoff, stream logs, Terminal Reading state, and authority boundaries are tested source-safely | `.bitcode/v40-conversation-terminal-integration.json` | implemented |
@@ -48,7 +48,7 @@ This matrix records the V40 testing surfaces that must become promotion-grade be
 | Gate 4 | API/route integration artifact | implemented |
 | Gate 5 | Reading pipeline integration artifact | implemented |
 | Gate 6 | Conversation/Terminal integration artifact | implemented |
-| Gate 7 | Browser/visual/accessibility/responsive artifact | not yet implemented |
+| Gate 7 | Browser/visual/accessibility/responsive artifact | implemented |
 | Gate 8 | Ledger/database/storage/wallet/delivery sync artifact | not yet implemented |
 | Gate 9 | Local/staging rehearsal artifact | not yet implemented |
 | Gate 10 | Prompt benchmark smoke and V41 readiness artifact | not yet implemented |
@@ -59,6 +59,7 @@ Gate 3 implementation evidence: package-backed `V40UnitCoverageInventory` emits
 Gate 4 implementation evidence: package-backed `V40ApiIntegrationContracts` emits `.bitcode/v40-api-integration-contracts.json` and is wired through `check:v40-gate4`.
 Gate 5 implementation evidence: package-backed `V40ReadingPipelineIntegrationCoverage` emits `.bitcode/v40-reading-pipeline-integration-coverage.json` and is wired through `check:v40-gate5`.
 Gate 6 implementation evidence: package-backed `V40ConversationTerminalIntegration` emits `.bitcode/v40-conversation-terminal-integration.json` and is wired through `check:v40-gate6`.
+Gate 7 implementation evidence: package-backed `V40BrowserE2eVisualProof` emits `.bitcode/v40-browser-e2e-visual-proof.json` and is wired through `check:v40-gate7`.
 
 ## V40 accepted boundaries
 

BITCODE_SPEC_V40_PARITY_MATRIX.md

@@ -553,6 +553,13 @@ handoff route contracts, Conversation stream-to-rich-log projection,
 Conversation route/API persistence and branch contracts, writing/source
 selector handoff, Terminal Reading state readback, Terminal harness log
 streaming, transaction-cockpit authority boundaries, and rehearsal/docs parity.
+V40 Gate 7 adds the package-backed `V40BrowserE2eVisualProof`, generated
+`.bitcode/v40-browser-e2e-visual-proof.json`, and `check:v40-gate7` to close
+source-safe browser proof coverage for Terminal, Conversations, Auxillaries,
+Exchange, Docs, responsive viewport overflow, screenshot/trace baselines, and
+keyboard/landmark/status accessibility. The current app browser proof contract
+binds five product surfaces, thirteen route states, eighteen interaction
+states, four canonical viewports, and no screenshot-only approval.
 V38 Gates 1 through 11 are wired through `pnpm run check:v38-gate1`,
 `pnpm run check:v38-gate2`, `pnpm run check:v38-gate3`,
 `pnpm run check:v38-gate4`, `pnpm run check:v38-gate5`,