Add no mock repository runtime governance

ToolboxAid · ToolboxAid · commit 744f9364bab4 · 2026-06-26T15:07:48.000-04:00
diff --git a/docs_build/dev/ProjectInstructions/PROJECT_INSTRUCTIONS.md b/docs_build/dev/ProjectInstructions/PROJECT_INSTRUCTIONS.md
@@ -58,6 +58,8 @@ Existing Project Instructions outside `docs_build/dev/ProjectInstructions/` rema
 
 `docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md` defines the Creator-facing stacked PR standard for tool MVP work.
 
+`docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md` defines the Browser → API → Database product-data rule and mock repository technical debt boundary.
+
 ## Single Source and Main Lock Governance
 
 `docs_build/dev/ProjectInstructions/addendums/project_instructions_single_source_eod_lock.md` defines the single active Project Instructions source, canonical START / WORK / END branch lifecycle, EOD main lock, next-day reset, team branch creation gate, daily synchronization baseline, and mandatory hard stops.
diff --git a/docs_build/dev/ProjectInstructions/README.txt b/docs_build/dev/ProjectInstructions/README.txt
@@ -60,3 +60,4 @@ Addendum index:
 - Samples2Tools Adapter Guidance: docs_build/dev/ProjectInstructions/addendums/samples2tools_adapter_guidance.md
 - King of the Iceberg Layout Contract: docs_build/dev/ProjectInstructions/addendums/koti_layout_contract.md
 - Tool MVP Stacked PR Standard: docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md
+- No Mock Repository Runtime Source: docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md
diff --git a/docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md b/docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md
@@ -0,0 +1,49 @@
+# No Mock Repository Runtime Source
+
+Status: Approved
+Owner: OWNER
+
+## Required Product-Data Flow
+
+```text
+Browser → API → Database
+```
+
+Runtime product data must flow through the API/service contract backed by the database.
+
+## Rules
+
+- Mock repositories are 100% technical debt.
+- "Mock repository ready" is not a valid Creator-testable completion state.
+- Page arrays are not product-data sources of truth.
+- JSON source files are not product-data sources of truth.
+- `/tmp` files are not product-data sources of truth.
+- Browser storage is not product-data source of truth.
+- Runtime tool data must come from the API/service contract backed by the database.
+- Seed data is allowed only if it seeds the database.
+- Seed execution must be owned by server/API/setup flow.
+- Browser pages must not seed authoritative records directly.
+
+## Temporary Mock Repository Exception
+
+If a temporary mock repository exists for transition, it must be documented as technical debt with:
+
+- why it exists
+- affected files
+- removal PR
+- replacement API/DB path
+- Creator-testable limitation
+
+Temporary mock repositories do not make a feature complete. They may only document a transition state.
+
+## Game Configuration Example
+
+"Game Configuration mock repository ready" does not count as complete.
+
+Completion requires Game Configuration data to load through:
+
+```text
+Browser → API → Database
+```
+
+The Creator-testable completion state must prove that browser-visible Game Configuration data was read back through the API/service contract backed by the database.
diff --git a/docs_build/dev/ProjectInstructions/addendums/release_gate.md b/docs_build/dev/ProjectInstructions/addendums/release_gate.md
@@ -45,6 +45,7 @@ The release gate should confirm these files when relevant to the PR:
 - `docs_build/dev/ProjectInstructions/addendums/samples2tools_adapter_guidance.md`
 - `docs_build/dev/ProjectInstructions/addendums/koti_layout_contract.md`
 - `docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md`
+- `docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md`
 - `docs_build/dev/ProjectInstructions/team_assignments/team_ownership.md`
 - `docs_build/dev/admin-notes/Installs required.txt` when present
 - `docs_build/dev/admin-notes/Table layout.txt` when present
diff --git a/docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md b/docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md
@@ -48,6 +48,20 @@ Each tool MVP PR must state:
 - Previous PR dependency
 - Next PR dependency
 
+## Runtime Data Completion Boundary
+
+A PR outcome must not be described as complete if the visible data is coming from:
+
+- mock repositories
+- page arrays
+- JSON source files
+- browser storage
+- `/tmp`
+
+Seeded demo data is fine only when it is stored in the database and read back through the API.
+
+Tool MVPs must follow `docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md`.
+
 ## Hitboxes MVP Example Stack
 
 Example Hitboxes MVP stack:
diff --git a/docs_build/dev/pr/BUILD_PR.md b/docs_build/dev/pr/BUILD_PR.md
@@ -20,6 +20,8 @@ This `docs_build/dev/pr/BUILD_PR.md`, `docs_build/dev/pr/PLAN_PR.md`, and the us
 - Delete stale one-off bundle metadata from `docs_build/dev/` root.
 - Add Tool MVP Stacked PR Standard under `docs_build/dev/ProjectInstructions/`.
 - Update PR planning/template and report requirements for tool MVP PRs.
+- Add No Mock Repository Runtime Source governance under `docs_build/dev/ProjectInstructions/`.
+- Update Creator-testable stacked MVP standard to reject mock/page-array/JSON/browser-storage/tmp completion states.
 - Keep preserved historical ProjectInstructions material reference-only.
 - Keep `project-instructions/` out of this PR except for a tiny deprecated pointer.
 - Update active team start/governance docs to reference only `docs_build/dev/ProjectInstructions/`.
@@ -37,6 +39,7 @@ This `docs_build/dev/pr/BUILD_PR.md`, `docs_build/dev/pr/PLAN_PR.md`, and the us
 - `docs_build/dev/ProjectInstructions/team_assignments/TEAM_ASSIGNMENTS.md`
 - `docs_build/dev/ProjectInstructions/addendums/*.md`
 - `docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md`
+- `docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md`
 - `docs_build/dev/reports/audits/*.md`
 - `project-instructions/README.md` (tiny deprecated pointer only)
 - `docs_build/dev/PROJECT_INSTRUCTIONS.md` (delete)
@@ -90,6 +93,7 @@ Test-Path docs_build/dev/bundle_readme.md
 Test-Path docs_build/dev/validation_checklist.txt
 rg -n 'only active Project Instructions source|docs_build/dev/ProjectInstructions/' docs_build/dev/ProjectInstructions
 rg -n 'Tool MVP Stacked PR Standard|Creator-testable outcome|What can Mr\\. Q test after applying this ZIP|What Playwright tests|What Mr\\. Q should manually test|Previous PR dependency|Next PR dependency' docs_build/dev/ProjectInstructions
+rg -n 'No Mock Repository Runtime Source|Browser → API → Database|Mock repositories are 100% technical debt|Game Configuration mock repository ready|Seeded demo data is fine only when it is stored in the database and read back through the API' docs_build/dev/ProjectInstructions
 rg -n 'docs_build/dev/PROJECT_INSTRUCTIONS.md.*source of truth|Codex must always read `docs_build/dev/PROJECT_INSTRUCTIONS.md`|Read `docs_build/dev/PROJECT_INSTRUCTIONS.md`' docs_build/dev/ProjectInstructions project-instructions
 git diff --name-status $(git merge-base HEAD origin/main) -- project-instructions
 git diff --name-status $(git merge-base HEAD origin/main) -- docs_build/dev/pr docs_build/dev/ProjectInstructions/addendums docs_build/dev/reports/audits
diff --git a/docs_build/dev/pr/PLAN_PR.md b/docs_build/dev/pr/PLAN_PR.md
@@ -15,6 +15,8 @@ Make `docs_build/dev/ProjectInstructions/` the only active Project Instructions
 - Delete stale one-off bundle metadata from `docs_build/dev/` root.
 - Add Tool MVP Stacked PR Standard under `docs_build/dev/ProjectInstructions/`.
 - Update PR planning/template and report requirements for tool MVP PRs.
+- Add No Mock Repository Runtime Source governance under `docs_build/dev/ProjectInstructions/`.
+- Update Creator-testable stacked MVP standard to reject mock/page-array/JSON/browser-storage/tmp completion states.
 - Preserve historical ProjectInstructions-style sources only as deprecated reference material.
 - Keep `project-instructions/` out of the PR except for a tiny deprecated pointer.
 - Move active legacy addendums into `docs_build/dev/ProjectInstructions/addendums/`.
@@ -39,6 +41,8 @@ Make `docs_build/dev/ProjectInstructions/` the only active Project Instructions
 6. Confirm moved audit outputs are under `docs_build/dev/reports/audits/`.
 7. Confirm Tool MVP Stacked PR Standard appears in active ProjectInstructions.
 8. Confirm tool MVP PR template/report requirements include Creator-testable outcome, Playwright tests, Mr. Q manual test, stack membership, and previous/next dependency.
-9. Confirm EOD/Next Day and canonical START / WORK / END branch lifecycle rules appear in active governance docs.
-10. Confirm no product/runtime files changed.
-11. Run `git diff --check`.
+9. Confirm No Mock Repository Runtime Source governance appears in active ProjectInstructions.
+10. Confirm Creator-testable stacked MVP standard rejects mock/page-array/JSON/browser-storage/tmp completion states.
+11. Confirm EOD/Next Day and canonical START / WORK / END branch lifecycle rules appear in active governance docs.
+12. Confirm no product/runtime files changed.
+13. Run `git diff --check`.
diff --git a/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock.md b/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock.md
@@ -2,7 +2,7 @@
 
 Date: 2026-06-26
 Branch: PR_26177_OWNER_007-project-instructions-single-source-eod-lock
-Scope: Project Instructions single-source governance, EOD main lock, branch lifecycle governance, docs_build/dev root cleanup, and Tool MVP stacked PR governance
+Scope: Project Instructions single-source governance, EOD main lock, branch lifecycle governance, docs_build/dev root cleanup, Tool MVP stacked PR governance, and no-mock runtime source governance
 Status: PASS
 
 ## Summary
@@ -17,13 +17,29 @@ Status: PASS
 - Moved audit outputs into docs_build/dev/reports/audits/.
 - Deleted stale one-off bundle metadata from docs_build/dev root.
 - Added docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md.
+- Added docs_build/dev/ProjectInstructions/addendums/no_mock_repository_runtime_source.md.
+- Updated Creator-testable stacked MVP governance so PR outcomes cannot be complete when visible data comes from mock repositories, page arrays, JSON source files, browser storage, or /tmp.
 - Updated PR workflow governance so tool MVP PR plans/templates include Creator-testable outcome, Playwright test scope, Mr. Q manual test scope, stacked MVP sequence membership, and previous/next PR dependencies.
 - Updated Codex artifact/reporting governance so every tool MVP PR report includes those same fields and answers what Mr. Q can test after applying the ZIP.
 - Corrected project-instructions/** scope so the PR only adds a tiny deprecated pointer README there.
 - Preserved project-instructions/addendums/** unchanged in the PR; unique current governance content is carried by docs_build/dev/ProjectInstructions/addendums/.
 - Confirmed docs_build/dev root no longer contains active loose instruction, audit, contract, or PR files.
 - No product/runtime, start_of_day, feature, or legacy SQLite file changes were made.
 
+## No Mock Repository Runtime Source
+
+Added governance:
+- Required product-data flow: Browser → API → Database.
+- Mock repositories are 100% technical debt.
+- "Mock repository ready" is not a valid Creator-testable completion state.
+- Page arrays, JSON source files, /tmp files, and browser storage are not product-data sources of truth.
+- Runtime tool data must come from the API/service contract backed by the database.
+- Seed data is allowed only if it seeds the database.
+- Seed execution must be owned by server/API/setup flow.
+- Browser pages must not seed authoritative records directly.
+- Temporary mock repositories must document why they exist, affected files, removal PR, replacement API/DB path, and Creator-testable limitation.
+- "Game Configuration mock repository ready" does not count as complete; completion requires Game Configuration data to load through Browser → API → Database.
+
 ## Tool MVP Stacked PR Standard
 
 Added governance:
@@ -34,6 +50,8 @@ Added governance:
 - Each PR answers: What can Mr. Q test after applying this ZIP?
 - Codex continues through the stack unless blocked by branch state, failed validation, missing source files, Project Instructions conflict, or unresolved prior-PR dependency.
 - Visible acceptance for tool MVP planning is Creator-facing first.
+- A PR outcome cannot be complete if visible data comes from mock repositories, page arrays, JSON source files, browser storage, or /tmp.
+- Seeded demo data is fine only when it is stored in the database and read back through the API.
 - Hitboxes MVP example stack is included.
 
 ## Moved To ProjectInstructions SSoT
@@ -91,6 +109,8 @@ Deleted stale one-off root files:
 - PASS: project-instructions/** PR diff is limited to project-instructions/README.md.
 - PASS: active moved governance/contract docs are indexed in docs_build/dev/ProjectInstructions/PROJECT_INSTRUCTIONS.md and README.txt.
 - PASS: Tool MVP Stacked PR Standard exists and includes required governance text.
+- PASS: No Mock Repository Runtime Source exists and includes required governance text.
+- PASS: Tool MVP standard rejects mock/page-array/JSON/browser-storage/tmp completion states and allows seeded demo data only when stored in DB and read through API.
 - PASS: PR workflow/template requirements include Creator-testable outcome, Playwright tests, Mr. Q manual test, stack membership, and previous/next dependency.
 - PASS: Codex report requirements include Creator-testable outcome, Playwright tests, Mr. Q manual test, stack membership, and previous/next dependency.
 - PASS: targeted grep found no active duplicate ProjectInstructions source-of-truth claim outside the active source.
diff --git a/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_branch-validation.md b/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_branch-validation.md
@@ -7,6 +7,7 @@ Status: PASS
 - PASS: Worktree changes are scoped to governance/docs cleanup, reports, and the required delta artifact.
 - PASS: docs_build/dev root contains no loose files after moving PR docs, active addendums, and audit outputs.
 - PASS: Tool MVP Stacked PR Standard was added under docs_build/dev/ProjectInstructions/addendums/.
+- PASS: No Mock Repository Runtime Source was added under docs_build/dev/ProjectInstructions/addendums/.
 - PASS: project-instructions/** is limited to a tiny deprecated pointer README in the PR diff.
 - PASS: No product/runtime files changed.
 - PASS: No start_of_day files changed.
diff --git a/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_manual-validation-notes.md b/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_manual-validation-notes.md
@@ -11,6 +11,8 @@ Status: PASS
 - Moved audit outputs into docs_build/dev/reports/audits/.
 - Deleted stale bundle metadata from docs_build/dev root.
 - Added Tool MVP Stacked PR Standard as active ProjectInstructions governance.
+- Added No Mock Repository Runtime Source as active ProjectInstructions governance.
+- Updated Creator-testable stacked MVP PR standard to reject mock repository, page array, JSON source file, browser storage, and /tmp completion states.
 - Updated PR workflow/template and reporting governance for tool MVP PRs.
 - Reviewed ambiguous old project-instructions addendum files and left them unchanged in this PR.
 - Confirmed active/current governance content is under docs_build/dev/ProjectInstructions/.
diff --git a/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_requirement-checklist.md b/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_requirement-checklist.md
@@ -17,6 +17,18 @@ Status: PASS
 - PASS: Updated active references to moved paths.
 - PASS: docs_build/dev root no longer contains active loose instruction, audit, contract, or PR files.
 - PASS: Added Tool MVP Stacked PR Standard under docs_build/dev/ProjectInstructions/.
+- PASS: Added No Mock Repository Runtime Source governance under docs_build/dev/ProjectInstructions/.
+- PASS: Documented Browser → API → Database as the required product-data flow.
+- PASS: Documented mock repositories as 100% technical debt.
+- PASS: Documented "Mock repository ready" as not Creator-testable completion.
+- PASS: Documented page arrays, JSON source files, /tmp files, and browser storage as not product-data sources of truth.
+- PASS: Documented runtime tool data must come from API/service contract backed by database.
+- PASS: Documented seed data is allowed only when it seeds the database and is owned by server/API/setup flow.
+- PASS: Documented browser pages must not seed authoritative records directly.
+- PASS: Documented temporary mock repository debt metadata requirements.
+- PASS: Documented Game Configuration mock repository ready does not count as complete.
+- PASS: Updated Tool MVP standard to reject mock/page-array/JSON/browser-storage/tmp completion states.
+- PASS: Updated Tool MVP standard to allow seeded demo data only when stored in DB and read through API.
 - PASS: Documented one large Codex command -> multiple focused stacked PRs -> each PR has a testable Creator outcome.
 - PASS: Documented no giant PR and no stopping after every small PR unless blocked.
 - PASS: Documented independently scoped Creator-testable PRs.
diff --git a/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_validation-lane.md b/docs_build/dev/reports/PR_26177_OWNER_007-project-instructions-single-source-eod-lock_validation-lane.md
@@ -21,8 +21,10 @@ Test-Path docs_build/dev/bundle_readme.md
 Test-Path docs_build/dev/validation_checklist.txt
 git diff --name-status $(git merge-base HEAD origin/main) -- project-instructions
 rg -n 'Tool MVP Stacked PR Standard|One large Codex command|Creator-testable outcome|What can Mr\. Q test after applying this ZIP|What Playwright tests|What Mr\. Q should manually test|stacked MVP sequence|Previous PR dependency|Next PR dependency|Hitboxes MVP' docs_build/dev/ProjectInstructions
+rg -n 'No Mock Repository Runtime Source|Browser → API → Database|Mock repositories are 100% technical debt|Mock repository ready|Page arrays are not product-data sources of truth|JSON source files are not product-data sources of truth|/tmp.*not product-data|Browser storage is not product-data|Runtime tool data must come from the API/service contract backed by the database|Seed data is allowed only if it seeds the database|Seed execution must be owned by server/API/setup flow|Browser pages must not seed authoritative records directly|Game Configuration mock repository ready' docs_build/dev/ProjectInstructions
+rg -n 'A PR outcome must not be described as complete|mock repositories|page arrays|JSON source files|browser storage|/tmp|Seeded demo data is fine only when it is stored in the database and read back through the API|no_mock_repository_runtime_source' docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md
 rg -n 'docs_build/dev/PROJECT_INSTRUCTIONS.md.*source of truth|Codex must always read `docs_build/dev/PROJECT_INSTRUCTIONS.md`|Read `docs_build/dev/PROJECT_INSTRUCTIONS.md`' docs_build/dev/ProjectInstructions project-instructions
-rg -n 'workspace_v2_playwright_gate|samples2tools_adapter_guidance|koti_layout_contract|tool_mvp_stacked_pr_standard' docs_build/dev/ProjectInstructions
+rg -n 'workspace_v2_playwright_gate|samples2tools_adapter_guidance|koti_layout_contract|tool_mvp_stacked_pr_standard|no_mock_repository_runtime_source' docs_build/dev/ProjectInstructions
 git diff --name-only -- src assets toolbox games api serverside package.json package-lock.json docs_build/dev/start_of_day
 git diff --check
 ```
@@ -33,6 +35,8 @@ Results:
 - PASS: Duplicate/stale/moved root path checks returned absent for every listed cleanup file.
 - PASS: project-instructions/** diff returned only A project-instructions/README.md.
 - PASS: Tool MVP Stacked PR Standard and required report/template fields appear in active ProjectInstructions docs.
+- PASS: No Mock Repository Runtime Source and required product-data flow rules appear in active ProjectInstructions docs.
+- PASS: Tool MVP standard rejects mock/page-array/JSON/browser-storage/tmp completion states.
 - PASS: Active-source grep did not find old root instruction source-of-truth wording.
 - PASS: Moved governance/contract addendum paths appear in active ProjectInstructions docs.
 - PASS: Product/runtime/start_of_day changed-file check returned no files.
diff --git a/docs_build/dev/reports/codex_changed_files.txt b/docs_build/dev/reports/codex_changed_files.txt
@@ -24,6 +24,7 @@ R100	docs_build/dev/samples2tools_adapter_guidance.md	docs_build/dev/ProjectInst
 M	docs_build/dev/ProjectInstructions/addendums/team_release_readiness.md
 M	docs_build/dev/ProjectInstructions/addendums/team_start_and_release.md
 A	docs_build/dev/ProjectInstructions/addendums/test_structure_standardization.md
+A	docs_build/dev/ProjectInstructions/addendums/tool_mvp_stacked_pr_standard.md
 R100	docs_build/dev/workspace_v2_playwright_gate.md	docs_build/dev/ProjectInstructions/addendums/workspace_v2_playwright_gate.md
 M	docs_build/dev/ProjectInstructions/team_assignments/TEAM_ASSIGNMENTS.md
 D	docs_build/dev/bundle_readme.md
diff --git a/docs_build/dev/reports/codex_review.diff b/docs_build/dev/reports/codex_review.diff
