Skip to content

Commit db01cf1

Browse files
dknaussdknauss
authored
docs: sync planning summaries and manual guide status (#22)
1 parent 02a8034 commit db01cf1

4 files changed

Lines changed: 23 additions & 18 deletions

File tree

‎.planning/ROADMAP.md‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# Roadmap: Security Hardening Sprint
22

33
**Milestone:** Security Hardening Sprint
4+
**Status:** Complete (all 4 phases delivered)
45
**Created:** 2026-03-03
56
**Depth:** Standard (4 phases)
67
**Source:** ROADMAP.md section 12, .planning/review/03-03-2026/PROPOSED-NEXT-STEPS-Claude.md
@@ -37,7 +38,7 @@ Plans:
3738
Plans:
3839
- [x] 03-01-PLAN.md — Core TDD: normalize/validate filtered rules in `Action_Registry::get_rules()` and drop invalid rules fail-closed (Wave 1)
3940
- [x] 03-02-PLAN.md — MU-loader TDD: remove hardcoded basename/path assumptions and add resilient fallback resolution (Wave 2)
40-
- [ ] 03-03-PLAN.md — Integration + docs + full-gate verification for Phase 3 contracts (Wave 3)
41+
- [x] 03-03-PLAN.md — Integration + docs + full-gate verification for Phase 3 contracts (Wave 3)
4142

4243
### Phase 4: WPGraphQL Persisted Query Strategy and WSAL Sensor
4344

@@ -47,4 +48,4 @@ Plans:
4748
Plans:
4849
- [x] 04-01-PLAN.md — WPGraphQL TDD: add persisted-query classification strategy with preserved secure fallback behavior (Wave 1; depends on Phase 3)
4950
- [x] 04-02-PLAN.md — WSAL TDD: implement optional WSAL sensor bridge mapped from existing WP Sudo audit hooks (Wave 2)
50-
- [ ] 04-03-PLAN.md — Integration + docs + manual verification + full-gate closure for Phase 4 deliverables (Wave 3)
51+
- [x] 04-03-PLAN.md — Integration + docs + manual verification + full-gate closure for Phase 4 deliverables (Wave 3)

‎.planning/phases/03-rule-schema-validation-and-mu-loader-resilience/03-03-SUMMARY.md‎

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ Finalize Phase 3 with integration coverage for malformed filtered rules and alig
2525
- **`ROADMAP.md`**
2626
- Updated P2 entries (rule-schema validation and MU-loader resilience) to shipped/complete language with implemented fix/test details.
2727
- **`.planning/ROADMAP.md`**
28-
- Marked `03-01` and `03-02` checkboxes complete.
28+
- Marked Phase 3 checkboxes (`03-01`, `03-02`, `03-03`) complete.
2929

3030
## Verification Results
3131

@@ -36,10 +36,12 @@ Finalize Phase 3 with integration coverage for malformed filtered rules and alig
3636
- ✅ `vendor/bin/phpunit --configuration phpunit.xml.dist --do-not-cache-result tests/Unit/GateTest.php --filter test_match_request_matches_builtin_rule_with_malformed_custom_rule_present`
3737
- Passed (`1 test`, `2 assertions`).
3838

39-
## Blockers / Environment Notes
39+
## Final Closure Verification
4040

41-
- ⛔ Integration DB unavailable in this environment:
42-
- `composer test:integration -- tests/Integration/ActionRegistryTest.php --do-not-cache-result`
43-
- Failed with MySQL auth error (`Access denied for user 'root'@'localhost'`).
44-
- ⛔ `composer analyse:phpstan` remains intermittently stalled in this runner.
45-
- Unit scope for touched files is green; static-analysis rerun is still required in a clean local CI/dev environment.
41+
- ✅ Full quality gates were completed on `main` during release-readiness:
42+
- `composer test:unit`
43+
- `composer test:integration` (single-site)
44+
- `WP_MULTISITE=1 composer test:integration`
45+
- `composer analyse:phpstan`
46+
- `composer analyse:psalm`
47+
- `composer lint`

‎.planning/phases/04-wpgraphql-persisted-query-and-wsal-sensor/04-03-SUMMARY.md‎

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -18,15 +18,15 @@ Finalize Phase 4 contracts across integration coverage, docs, manual test guidan
1818
- Added persisted-query classifier contract (`wp_sudo_wpgraphql_classification`).
1919
- Updated persisted-query guidance to classifier-first model with secure fallback.
2020
- Added optional WSAL bridge section with hook→event ID mapping.
21-
- Added Stream parity note (planned next, WSAL-first delivery).
21+
- Added Stream parity note.
2222
- **`docs/security-model.md`**
2323
- Updated persisted-query section to reference classifier filter path and fallback posture.
2424
- Added MU loader path-resolution diagnostics note.
2525
- **`tests/MANUAL-TESTING.md`**
2626
- Added persisted-query classifier validation checklist (`16.6`).
2727
- Added WSAL bridge validation checklist (`19.6`).
2828
- **`.planning/ROADMAP.md`**
29-
- Marked `04-01` and `04-02` complete.
29+
- Marked Phase 4 checkboxes (`04-01`, `04-02`, `04-03`) complete.
3030

3131
## Verification Results
3232

@@ -39,10 +39,12 @@ Finalize Phase 4 contracts across integration coverage, docs, manual test guidan
3939
- ✅ `vendor/bin/phpunit --configuration phpunit.xml.dist --do-not-cache-result tests/Unit/PluginTest.php --filter test_mu_loader`
4040
- Passed (`5 tests`, `7 assertions`).
4141

42-
## Blockers / Environment Notes
42+
## Final Closure Verification
4343

44-
- ⛔ Integration tests are blocked by local DB auth in this environment:
45-
- `composer test:integration -- tests/Integration/ActionRegistryTest.php --do-not-cache-result`
46-
- `composer test:integration -- tests/Integration/WpGraphQLGatingTest.php --do-not-cache-result`
47-
- Failure: `Access denied for user 'root'@'localhost' (using password: NO)`.
48-
- ⛔ Full static/lint gates (`composer analyse:phpstan`, `composer lint`) remain intermittently stalled/timed out in this runner.
44+
- ✅ Full quality gates were completed on `main` during release-readiness:
45+
- `composer test:unit`
46+
- `composer test:integration` (single-site)
47+
- `WP_MULTISITE=1 composer test:integration`
48+
- `composer analyse:phpstan`
49+
- `composer analyse:psalm`
50+
- `composer lint`

‎tests/MANUAL-TESTING.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# WP Sudo Manual Testing Guide
22

3-
Manual verification tests for WP Sudo v2.6.0+. These complement the
3+
Manual verification tests for WP Sudo v2.12.0+. These complement the
44
automated PHPUnit suite (`composer test`) and should be run against a
55
real WordPress environment before each release.
66

0 commit comments

Comments
 (0)