qa-report

Export a QA report

Export an already recorded QA run. This workflow publishes a report package; it does not create test results or reinterpret evidence commands. Read workflow, safety, artifacts, evidence, and reports first.

Inputs

• An explicit private manifest path and an explicit project root path. Never infer either path from the current directory, a run ID, or a prior conversation.
• The explicit objective or intent for the export, target identity, contract source/hash, complete acceptance-criterion catalog, cases, evidence, defects, limitations, recorded authorization, and existing QA verdict carried by that manifest.
• Explicit authorization to create a new report package beneath the supplied project root. The manifest's run ID must identify a new destination; export never grants any other authority.

Procedure

1. Preserve the explicit objective or intent, target, contract, criteria, cases, evidence, defects, limitations, authorization, and recorded results. Do not infer missing criteria, applicability, assessments, execution, approval, or risk acceptance.
2. Identify the affected QA surfaces and consult installed applicable qa-specialist-requirements, qa-specialist-defects, or other qa-specialist-* skills only to expose semantic gaps already present in the supplied record. An unavailable applicable specialist is a limitation. Specialist guidance does not expand authorization or change the normalized manifest.
3. Before export, require a complete acceptance criteria catalog that preserves all criterion IDs, text, applicability and reason, assessment expected and observed values, and referenced case IDs. Confirm the identified contract and completed criteria review are recorded. Missing semantic confirmation remains a limitation and prevents a newly inferred PASS.
4. Use the explicit manifest and project root unchanged. The workflow invokes the exporter exactly once and never permits a second exporter invocation. Its only process invocation is qa_report.py report --manifest PATH --project-root PATH. Replace each PATH with its separately supplied path; do not add another subcommand, omit either option, or reuse an implicit root.
5. Let the exporter enforce schema and verdict precedence. Before HTML or PDF rendering, the exporter must validate acceptance criteria, confinement, limits, hashes, target/contract binding, sanitization, and evidence safety. The exporter renders HTML and PDF from the same normalized manifest. It publishes only a complete validated package. Never edit the private or public manifest around validation.
6. Preserve returned diagnostics, sanitization outcomes, and verdict without suppressing, repairing, or reclassifying them. Preserve export_status, output_dir, publication digest, and snapshot when present. Exit code 0 means both formats exported; it does not mean the QA verdict is PASS. Exit codes 2 and 3 remain refusal and incomplete export respectively.
7. Stored command values are inert text. It never executes or re-executes tests, manifest commands, or evidence commands. It never uses a stored command to fill a missing result and never retries the export after a failure or collision.