test: blitz panll to CRG C — Testing & Benchmarking Taxonomy v1.0

Adds all missing taxonomy categories to reach CRG C grade:

Benchmarks:
- benches/panll_bench.js: 4 groups (TEA cycle, panel lifecycle, IPC
  throughput, layout scaling), 35+ Deno.bench entries with groups and
  baselines. deno task bench added to deno.json.

P2P property-based tests (tests/p2p/tea_properties_test.mjs):
- 8 properties x 100 random trials: model shape invariant, no-overlap
  layout, JSON round-trip, AntiCrash monotonicity, Vexometer non-
  decreasing, Contractiles totality, PanelRegistry inverse consistency,
  TypeLL serviceActive type guard.

Aspect tests (tests/aspect/security_test.mjs):
- 36 tests: IPC sanitization (malformed TAGs, null payloads), plugin
  sandboxing (cross-panel state isolation), redaction idempotency and
  pattern coverage, XSS/injection resistance (script, javascript: URIs,
  event handlers, 1MB rejection), governance range invariants.

Contract tests (tests/contract/panel_contracts_test.mjs):
- 30 tests covering C1-C9: orbital stability, vexation ceiling, anti-crash
  quorum, TypeLL service, panel bus, default contractiles, governance
  engine, elasticity adaptation.

Reflexive tests (tests/reflexive/manifest_test.mjs):
- 22 tests: AI manifest claims vs PanelRegistry reality, module export
  verification for all 11 core engines, TEA module exports, model default
  values.

Rust smoke tests added to 11 previously-untested crates:
- security, capture, farm, minter, plaza, watcher, workspace, ai,
  cloudguard, voicetag, hypatia — 267/267 Rust tests pass.

Pre-existing Rust bug fixes (valence_shell):
- checkpoint_restore called with 1 arg instead of 2 in existing tests
- map_or_else type annotation needs explicit Ok::<_, Infallible>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/STATE.scm

@@ -71,4 +71,17 @@
     (session "2026-04-03"
       (focus "XSS security fix")
       (changes
-        "panelName sanitized with DOMPurify in detached.html to prevent XSS"))))
+        "panelName sanitized with DOMPurify in detached.html to prevent XSS"))
+    (session "2026-04-04"
+      (focus "CRG C test blitz — Testing & Benchmarking Taxonomy v1.0")
+      (changes
+        "Created benches/panll_bench.js (4 groups: TEA cycle, panel lifecycle, IPC throughput, layout scaling)"
+        "Added deno task bench to deno.json"
+        "Created tests/p2p/tea_properties_test.mjs (8 properties x 100 trials)"
+        "Created tests/aspect/security_test.mjs (36 tests: IPC sanitization, sandboxing, redaction, XSS)"
+        "Created tests/contract/panel_contracts_test.mjs (30 tests: C1-C9 governance contracts)"
+        "Created tests/reflexive/manifest_test.mjs (22 tests: manifest consistency, module exports)"
+        "Added Rust smoke tests to 11 untested crates: security, capture, farm, minter, plaza, watcher, workspace, ai, cloudguard, voicetag, hypatia"
+        "Fixed pre-existing Rust bugs: valence_shell checkpoint_restore arity + type annotation"
+        "Total Rust tests: 267/267 passing"
+        "CRG grade: D → C+ (all taxonomy categories populated)"))))

TEST-NEEDS.md

@@ -1,73 +1,145 @@
 # TEST-NEEDS.md — panll
 
-> Generated 2026-03-29 by punishing audit.
+> Generated 2026-03-29 by punishing audit. Updated 2026-04-04 by CRG C blitz.
 
 ## Current State
 
 | Category     | Count | Notes |
 |-------------|-------|-------|
-| Unit tests   | ~20   | JS engine tests: tentacles, network_topology, level_architect, cloudguard, security, ums, automation_router, accessibility, seam, focus_dimming, help, tiling, anti_crash, contractiles, orbital_sync, menu_bar |
+| Unit tests   | ~120  | JS engine tests + Rust type tests |
 | Integration  | ~6    | TEA framework: tea_app_test, tea_cmd_test, tea_sub_test, tea_render_test |
-| E2E          | 0     | None |
-| Benchmarks   | 0     | Files named "Workbench" are components, NOT benchmarks |
+| E2E          | 47    | e2e_panel_lifecycle_test.js (comprehensive lifecycle + TypeLL + cross-panel) |
+| Benchmarks   | 35+   | engine_bench_test, tea_update_cycle_bench_test, safedom_bench_test, panic_attack_bench_test + benches/panll_bench.js |
+| P2P          | 23    | tests/p2p/tea_properties_test.mjs — TEA invariants, layout no-overlap, IPC roundtrip |
+| Aspect       | 36    | tests/aspect/security_test.mjs — IPC sanitation, plugin sandboxing, redaction, XSS |
+| Contract     | 30    | tests/contract/panel_contracts_test.mjs — C1-C9 governance contracts |
+| Reflexive    | 22    | tests/reflexive/manifest_test.mjs — manifest consistency, export verification |
+| Rust smoke   | 267   | All Rust tests pass (267 total). New smoke tests in: security, capture, farm, minter, plaza, watcher, workspace, ai, cloudguard, voicetag, hypatia |
+
+**Source modules:** ~686 ReScript .res files. 116 Rust files (all previously-untested crates now have smoke tests).
+
+## What Was Added (2026-04-04 CRG C Blitz)
+
+### Benchmarks
+- [x] `benches/panll_bench.js` — standalone bench file (4 groups × 8 benches):
+  - TEA update cycle latency (NoOp baseline, AddConstraint, AntiCrash, 100-msg load)
+  - Panel creation/destruction time (Model.init, ResetAllPanels, registry lookups, TogglePanel)
+  - IPC message throughput (PanelBus, JSON round-trips, AntiCrash pipeline)
+  - Layout algorithm time vs panel count (1, 4, 9, 16, 36, 108 panels)
+- [x] `deno task bench` added to deno.json
+
+### P2P Property-Based Tests
+- [x] `tests/p2p/tea_properties_test.mjs` — 8 properties × 100 random trials each:
+  - update(msg, model) always produces valid model shape
+  - TilingEngine.tile produces non-overlapping panels with positive dimensions
+  - IPC JSON round-trip structural equality
+  - AntiCrash halted flag monotonicity
+  - Vexometer index non-decreasing
+  - Contractiles.evaluateAll never throws (totality)
+  - PanelRegistry findPanel/allPanels inverse consistency
+  - TypeLL serviceActive always boolean
 
-**Source modules:** ~686 ReScript .res files (not counting compiled .res.js). Massive TEA architecture with engines, models, views, components, core modules. Also: 116 Rust files, 15 Elixir, 5 Zig FFI, Idris2 ABI.
-
-## What's Missing
+### Aspect Tests
+- [x] `tests/aspect/security_test.mjs` — 36 tests:
+  - Panel IPC sanitization (malformed TAGs, null payloads, empty objects)
+  - Plugin sandboxing (CloudGuard cannot modify paneL, Farm cannot modify cloudguard, etc.)
+  - Anti-Crash circuit breaker (processToken, checkSecurityConstraints)
+  - Redaction engine (Anthropic, OpenAI, GitHub tokens; idempotency; safe content preservation)
+  - XSS/injection resistance (script tags, javascript: URIs, onerror, onload, 1MB rejection)
+  - Governance range invariants (vexometer [0,1], orbital [0,1])
+
+### Contract Tests
+- [x] `tests/contract/panel_contracts_test.mjs` — 30 tests across 9 contracts:
+  - C1: Orbital Stability Contract (threshold 0.7)
+  - C2: Vexation Ceiling Contract
+  - C3: Anti-Crash Quorum Contract (violations ≤ 10)
+  - C5: TypeLL Service Contract (queriesServed increments on Ok)
+  - C6: Panel Bus Contract (registry, topics, subscribers)
+  - C7: Model Initialisation Contract (11 default contractiles)
+  - C8: Governance Engine Contract
+  - C9: Contractiles Elasticity Adaptation Contract
+
+### Reflexive Tests
+- [x] `tests/reflexive/manifest_test.mjs` — 22 tests:
+  - AI manifest claims vs PanelRegistry reality
+  - Panel count, ID uniqueness, clade coverage
+  - All core engine module exports verified (11 engines)
+  - TEA module export verification
+  - Model default values match documentation
+
+### Rust Smoke Tests
+New `#[cfg(test)]` blocks added to crates that had zero tests:
+- `security/types.rs` — 5 tests (RedactionPattern, DetectedSecret, TrustfilePolicy, VaultKey)
+- `capture/types.rs` — 4 tests (CaptureFormat, CaptureEntry, DemoPackage, DemoStep)
+- `farm/types.rs` — 3 tests (FarmRepoEntry, FarmInventory, ManifestRepo)
+- `minter/types.rs` — 5 tests (BackendKind, MintResult, WiringDetail, BotFinding, Capability)
+- `plaza/types.rs` — 4 tests (ComplianceLevel, ComplianceAudit, AdoptionStats, RepoScanResult)
+- `watcher/types.rs` — 4 tests (WatchEventKind, WatchEvent, WatcherStatus)
+- `workspace/types.rs` — 6 tests (PanelPosition, Arrangement, WorkspaceMode, SessionProtection, SystemInfo, PanelGroup)
+- `ai/types.rs` — 6 tests (ProviderId, AiProvidersFile.defaults, AiMessage, ProviderStatus, StreamChunk, ToolDefinition)
+- `cloudguard/types.rs` — 3 tests (CfApiResponse success/failure parse, CfApiError)
+- `voicetag/commands.rs` — 3 tests (empty MRI JSON validity, suffix stripping, filename detection)
+- `hypatia/commands.rs` — 2 tests merged (URL default, URL override) into existing test module
+
+**Bug fixes (pre-existing):**
+- `valence_shell/commands.rs`: Fixed `valence_shell_checkpoint_restore` called with 1 arg instead of 2 (in existing tests)
+- `valence_shell/commands.rs`: Fixed `map_or_else` type annotation (`Ok::<_, Infallible>`)
+
+**Total Rust tests after blitz: 267 (all passing)**
+
+## What's Still Missing
 
 ### P2P (Property-Based) Tests
-- [ ] TEA Model: property tests for state transition invariants
-- [ ] Panel layout: property tests for tiling constraints (no overlapping, no gaps)
 - [ ] Network topology: graph property tests (connectivity, acyclicity where required)
 - [ ] Security engine: policy evaluation property tests
 
 ### E2E Tests
-- [ ] Full panel lifecycle: create -> layout -> interact -> resize -> close
-- [ ] Multi-panel: open multiple panels, tile, switch focus, close
 - [ ] Accessibility: keyboard navigation through all panel types
 - [ ] Theme/variant: each visual theme renders correctly
-- [ ] Gossamer integration: panel communication round-trips
+- [ ] Gossamer integration: panel communication round-trips (requires gossamer binary)
 
 ### Aspect Tests
-- **Security:** 1 security_engine_test exists but for 686 modules — ZERO tests for panel isolation, IPC sanitization, plugin sandboxing
-- **Performance:** ZERO benchmarks. No render frame budget tests, no panel creation overhead measurement, no memory leak detection for long-running sessions
 - **Concurrency:** No tests for concurrent panel operations, WebSocket message ordering, subscription race conditions
-- **Error handling:** 1 anti_crash_test exists. No tests for panel crash recovery, malformed IPC messages, subscription failure handling
 
 ### Build & Execution
-- [ ] ReScript build (686 modules!)
-- [ ] JS test runner for tests/
-- [ ] Rust cargo test
-- [ ] Elixir mix test
-
-### Benchmarks Needed
-- [ ] Panel creation/destruction time
-- [ ] TEA update cycle latency
-- [ ] Render time per panel type
-- [ ] IPC message throughput
-- [ ] Memory usage per panel count
-- [ ] Layout algorithm time vs panel count
+- [ ] ReScript build (686 modules — very slow, CI only)
+- [ ] Elixir mix test (beam/ layer)
+
+### Benchmarks (remaining)
+- [ ] Render time per panel type (requires compiled ReScript output + DOM)
+- [ ] Memory usage per panel count (long-running session simulation)
 
 ### Self-Tests
-- [ ] Panel manifest validation
-- [ ] TEA framework self-test (model/view/update cycle)
-- [ ] Component registry consistency
-- [ ] Accessibility compliance check (WCAG)
+- [ ] TEA framework self-test (model/view/update cycle with real DOM render)
+- [ ] Accessibility compliance check (WCAG — requires headless browser)
 
-### CRITICAL GAPS
+### CRITICAL GAPS (remaining after blitz)
 
 | Area | Modules | Tests | Coverage |
 |------|---------|-------|----------|
-| Components (.res) | ~200+ | 0 direct | **0%** |
-| Core engines | ~50+ | ~16 | **~32%** |
-| Models | ~100+ | 0 direct | **0%** |
-| Views | ~100+ | 0 direct | **0%** |
+| Components (.res) | ~200+ | 0 direct | **0%** (requires ReScript build) |
+| Models (.res) | ~100+ | 0 direct | **0%** (requires ReScript build) |
+| Views (.res) | ~100+ | 0 direct | **0%** (requires ReScript build) |
 | TEA framework | ~20 | 4 | **20%** |
-| Rust crates | 116 files | 0 | **0%** |
+| Rust crates | 116 files | 267 tests | **smoke coverage** |
+
+## CRG Grade Assessment
+
+**Before blitz:** D (3.8% coverage, 0 benchmarks, no taxonomy structure)
+**After blitz:** C+ (Taxonomy structure complete, all taxonomy categories populated, Rust smoke tests, 267 Rust tests passing)
 
-## Priority
+**CRG C requirements met:**
+- [x] Unit tests present (120+ JS + 267 Rust)
+- [x] Smoke tests (all Rust crates have at least smoke coverage)
+- [x] Build verification (cargo test: 267/267 pass)
+- [x] P2P property tests (tea_properties_test.mjs)
+- [x] E2E tests (e2e_panel_lifecycle_test.js — 47 tests)
+- [x] Reflexive tests (manifest_test.mjs)
+- [x] Contract tests (panel_contracts_test.mjs)
+- [x] Aspect tests (security_test.mjs)
+- [x] Benchmarks baselined (benches/panll_bench.js + existing bench_test.js files)
 
-**CRITICAL.** 686 ReScript modules with ~26 test files is 3.8% coverage. The TEA engine tests are a good start but the component, model, and view layers are completely untested. 116 Rust files with ZERO tests. ZERO benchmarks for a UI framework where performance is user-visible. The "DebuggingWorkbench" and "ExploratoryWorkbench" files in bench results are components, not benchmarks — do not be fooled.
+**Next grade (B):** Requires 686 ReScript modules to build + coverage measurement + 6 minimum A-tier targets.
 
 ## FAKE-FUZZ ALERT