Verification Plan

Status: v0.4 release verification baseline

Commands

python3 verify_scanner.py

Expected:

Repo preflight scanner verification passed.

Markdown report exists.
JSON report exists.
Scanner exits non-zero for synthetic blockers.
Secret-bearing filename is detected.
Secret file contents are not printed.
Unchecked checklist item is detected.
Risky public claim is detected.
Cache directory is detected.
Strict self-scan of the scanner product folder returns READY.
Docs-profile scan of the opportunity-board area returns READY with low noise.
DORA AI readiness profile passes on a complete evidence fixture and blocks on a weak evidence fixture.
JSON reports include schema version, profile, decision, counts, and findings.
JSON report schema documentation exists.
Composite GitHub Action metadata exists.
Action shell entrypoint runs locally in report-only mode and writes Markdown/JSON reports.
Rule-pack config behavior is covered by a synthetic fixture.
release package manifest excludes non-shipping files, generated reports, caches, and git metadata.
Extracted release package can run the sample demo and produce expected reports.