---
phase: 24
slug: public-access-infrastructure
status: draft
nyquist_compliant: false
wave_0_complete: false
created: 2026-04-10
---

# Phase 24 — Validation Strategy

> Per-phase validation contract for feedback sampling during execution.

---

## Test Infrastructure

| Property | Value |
|----------|-------|
| **Framework** | Bun test (built-in) |
| **Config file** | `bunfig.toml` (if present) or none — `bun test` discovers `tests/**/*.test.ts` |
| **Quick run command** | `bun test tests/middleware/rateLimit.test.ts tests/routes/global-items.test.ts tests/routes/profiles.test.ts` |
| **Full suite command** | `bun test` |
| **Estimated runtime** | ~15 seconds |

---

## Sampling Rate

- **After every task commit:** Run `bun test tests/middleware/rateLimit.test.ts tests/routes/global-items.test.ts tests/routes/profiles.test.ts`
- **After every plan wave:** Run `bun test`
- **Before `/gsd:verify-work`:** Full suite must be green
- **Max feedback latency:** 15 seconds

---

## Per-Task Verification Map

| Task ID | Plan | Wave | Requirement | Test Type | Automated Command | File Exists | Status |
|---------|------|------|-------------|-----------|-------------------|-------------|--------|
| 24-01-01 | 01 | 1 | INFR-01 | unit | `bun test tests/middleware/rateLimit.test.ts` | ⚠️ Partial | ⬜ pending |
| 24-01-02 | 01 | 1 | PUBL-01 | unit | `bun test tests/routes/global-items.test.ts` | ✅ | ⬜ pending |
| 24-01-03 | 01 | 1 | PUBL-02 | unit | `bun test tests/routes/profiles.test.ts` | ✅ | ⬜ pending |
| 24-01-04 | 01 | 1 | PUBL-03 | unit | `bun test tests/routes/profiles.test.ts` | ✅ | ⬜ pending |
| 24-02-01 | 02 | 1 | PUBL-04 | e2e | `bun run test:e2e` | ❌ W0 | ⬜ pending |
| 24-02-02 | 02 | 1 | PUBL-05 | e2e | `bun run test:e2e` | ❌ W0 | ⬜ pending |

*Status: ⬜ pending · ✅ green · ❌ red · ⚠️ flaky*

---

## Wave 0 Requirements

- [ ] `tests/middleware/rateLimit.test.ts` — extend with `createRateLimit` factory tests (configurable max/window)
- [ ] `e2e/public-access.spec.ts` — covers PUBL-04 (no spinner on anonymous load) and PUBL-05 (auth prompt on write action)

*Existing infrastructure covers PUBL-01 through PUBL-03 and INFR-01 base cases.*

---

## Manual-Only Verifications

| Behavior | Requirement | Why Manual | Test Instructions |
|----------|-------------|------------|-------------------|
| No auth spinner on first load | PUBL-04 | Visual timing check | Visit root URL in incognito, verify content renders without spinner flash |

---

## Validation Sign-Off

- [ ] All tasks have `<automated>` verify or Wave 0 dependencies
- [ ] Sampling continuity: no 3 consecutive tasks without automated verify
- [ ] Wave 0 covers all MISSING references
- [ ] No watch-mode flags
- [ ] Feedback latency < 15s
- [ ] `nyquist_compliant: true` set in frontmatter

**Approval:** pending