Add topology auth policies + journey findings notes

Concelier:
- Register Topology.Read, Topology.Manage, Topology.Admin authorization
  policies mapped to OrchRead/OrchOperate/PlatformContextRead/IntegrationWrite
  scopes. Previously these policies were referenced by endpoints but never
  registered, causing System.InvalidOperationException on every topology
  API call.

Gateway routes:
- Simplified targets/environments routes (removed specific sub-path routes,
  use catch-all patterns instead)
- Changed environments base route to JobEngine (where CRUD lives)
- Changed to ReverseProxy type for all topology routes

KNOWN ISSUE (not yet fixed):
- ReverseProxy routes don't forward the gateway's identity envelope to
  Concelier. The regions/targets/bindings endpoints return 401 because
  hasPrincipal=False — the gateway authenticates the user but doesn't
  pass the identity to the backend via ReverseProxy. Microservice routes
  use Valkey transport which includes envelope headers. Topology endpoints
  need either: (a) Valkey transport registration in Concelier, or
  (b) Concelier configured to accept raw bearer tokens on ReverseProxy paths.
  This is an architecture-level fix.

Journey findings collected so far:
- Integration wizard (Harbor + GitHub App): works end-to-end
- Advisory Check All: fixed (parallel individual checks)
- Mirror domain creation: works, generate-immediately fails silently
- Topology wizard Step 1 (Region): blocked by auth passthrough issue
- Topology wizard Step 2 (Environment): POST to JobEngine needs verify
- User ID resolution: raw hashes shown everywhere

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/Web/StellaOps.Web/e2e/advisory-vex-source-management.e2e.spec.ts

@@ -51,23 +51,23 @@ const MOCK_ADVISORY_SOURCES = {
 
 function setupSourceApiMocks(page: import('@playwright/test').Page) {
   // Source management API mocks
-  page.route('**/api/v1/sources/catalog', (route) => {
+  page.route('**/api/v1/advisory-sources/catalog', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_CATALOG) });
   });
 
-  page.route('**/api/v1/sources/status', (route) => {
+  page.route('**/api/v1/advisory-sources/status', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_STATUS) });
   });
 
-  page.route('**/api/v1/sources/*/enable', (route) => {
+  page.route('**/api/v1/advisory-sources/*/enable', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
   });
 
-  page.route('**/api/v1/sources/*/disable', (route) => {
+  page.route('**/api/v1/advisory-sources/*/disable', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: '{}' });
   });
 
-  page.route('**/api/v1/sources/check', (route) => {
+  page.route('**/api/v1/advisory-sources/check', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({
         status: 200,
@@ -79,7 +79,7 @@ function setupSourceApiMocks(page: import('@playwright/test').Page) {
     }
   });
 
-  page.route('**/api/v1/sources/*/check', (route) => {
+  page.route('**/api/v1/advisory-sources/*/check', (route) => {
     if (route.request().method() === 'POST') {
       const url = route.request().url();
       const sourceId = url.split('/sources/')[1]?.split('/check')[0] ?? 'unknown';
@@ -101,7 +101,7 @@ function setupSourceApiMocks(page: import('@playwright/test').Page) {
     }
   });
 
-  page.route('**/api/v1/sources/*/check-result', (route) => {
+  page.route('**/api/v1/advisory-sources/*/check-result', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',
@@ -117,7 +117,7 @@ function setupSourceApiMocks(page: import('@playwright/test').Page) {
     });
   });
 
-  page.route('**/api/v1/sources/batch-enable', (route) => {
+  page.route('**/api/v1/advisory-sources/batch-enable', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',
@@ -125,7 +125,7 @@ function setupSourceApiMocks(page: import('@playwright/test').Page) {
     });
   });
 
-  page.route('**/api/v1/sources/batch-disable', (route) => {
+  page.route('**/api/v1/advisory-sources/batch-disable', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',

src/Web/StellaOps.Web/e2e/mirror-client-setup.e2e.spec.ts

@@ -105,7 +105,7 @@ const MOCK_DOMAIN_LIST = {
       rateLimits: { indexRequestsPerHour: 60, downloadRequestsPerHour: 120 },
       requireAuthentication: false,
       signing: { enabled: true, algorithm: 'ES256', keyId: 'key-01' },
-      domainUrl: '/concelier/exports/security-advisories',
+      domainUrl: '/concelier/exports/mirror/security-advisories',
       createdAt: new Date().toISOString(),
       status: 'active',
     },
@@ -150,7 +150,7 @@ function setupErrorCollector(page: import('@playwright/test').Page) {
 /** Set up mocks for the mirror client setup wizard page. */
 function setupWizardApiMocks(page: import('@playwright/test').Page) {
   // Mirror test endpoint (connection check)
-  page.route('**/api/v1/mirror/test', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/test', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({
         status: 200,
@@ -163,7 +163,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Consumer discovery endpoint
-  page.route('**/api/v1/mirror/consumer/discover', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/consumer/discover', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({
         status: 200,
@@ -176,7 +176,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Consumer signature verification endpoint
-  page.route('**/api/v1/mirror/consumer/verify-signature', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/consumer/verify-signature', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({
         status: 200,
@@ -189,7 +189,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Consumer config GET/PUT
-  page.route('**/api/v1/mirror/consumer', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/consumer', (route) => {
     const method = route.request().method();
     if (method === 'GET') {
       route.fulfill({
@@ -209,7 +209,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Mirror config
-  page.route('**/api/v1/mirror/config', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/config', (route) => {
     const method = route.request().method();
     if (method === 'GET') {
       route.fulfill({
@@ -229,7 +229,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Mirror health summary
-  page.route('**/api/v1/mirror/health', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/health', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',
@@ -238,7 +238,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Mirror domains
-  page.route('**/api/v1/mirror/domains', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/domains', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',
@@ -247,7 +247,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Mirror import endpoint
-  page.route('**/api/v1/mirror/import', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/import', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({
         status: 200,
@@ -260,7 +260,7 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
   });
 
   // Mirror import status
-  page.route('**/api/v1/mirror/import/status', (route) => {
+  page.route('**/api/v1/advisory-sources/mirror/import/status', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',
@@ -288,15 +288,15 @@ function setupWizardApiMocks(page: import('@playwright/test').Page) {
 
 /** Set up mocks for catalog and dashboard pages that show mirror integration. */
 function setupCatalogDashboardMocks(page: import('@playwright/test').Page) {
-  page.route('**/api/v1/sources/catalog', (route) => {
+  page.route('**/api/v1/advisory-sources/catalog', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_SOURCE_CATALOG) });
   });
 
-  page.route('**/api/v1/sources/status', (route) => {
+  page.route('**/api/v1/advisory-sources/status', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_SOURCE_STATUS) });
   });
 
-  page.route('**/api/v1/sources/check', (route) => {
+  page.route('**/api/v1/advisory-sources/check', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify({ totalChecked: 3, healthyCount: 2, failedCount: 0 }) });
     } else {
@@ -304,7 +304,7 @@ function setupCatalogDashboardMocks(page: import('@playwright/test').Page) {
     }
   });
 
-  page.route('**/api/v1/sources/*/check', (route) => {
+  page.route('**/api/v1/advisory-sources/*/check', (route) => {
     if (route.request().method() === 'POST') {
       route.fulfill({
         status: 200,
@@ -316,7 +316,7 @@ function setupCatalogDashboardMocks(page: import('@playwright/test').Page) {
     }
   });
 
-  page.route('**/api/v1/sources/*/check-result', (route) => {
+  page.route('**/api/v1/advisory-sources/*/check-result', (route) => {
     route.fulfill({
       status: 200,
       contentType: 'application/json',
@@ -324,11 +324,11 @@ function setupCatalogDashboardMocks(page: import('@playwright/test').Page) {
     });
   });
 
-  page.route('**/api/v1/sources/batch-enable', (route) => {
+  page.route('**/api/v1/advisory-sources/batch-enable', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify({ results: [] }) });
   });
 
-  page.route('**/api/v1/sources/batch-disable', (route) => {
+  page.route('**/api/v1/advisory-sources/batch-disable', (route) => {
     route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify({ results: [] }) });
   });
 
@@ -445,7 +445,7 @@ test.describe('Mirror Client Setup Wizard', () => {
     const ngErrors = setupErrorCollector(page);
 
     // Override the mirror test endpoint to return failure
-    await page.route('**/api/v1/mirror/test', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/test', (route) => {
       if (route.request().method() === 'POST') {
         route.fulfill({
           status: 200,
@@ -458,22 +458,22 @@ test.describe('Mirror Client Setup Wizard', () => {
     });
 
     // Set up remaining wizard mocks (excluding mirror/test which is overridden above)
-    await page.route('**/api/v1/mirror/consumer/discover', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/consumer/discover', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_DISCOVERY_RESPONSE) });
     });
-    await page.route('**/api/v1/mirror/consumer/verify-signature', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/consumer/verify-signature', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_SIGNATURE_DETECTION) });
     });
-    await page.route('**/api/v1/mirror/consumer', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/consumer', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_CONSUMER_CONFIG) });
     });
-    await page.route('**/api/v1/mirror/config', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/config', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_MIRROR_CONFIG_DIRECT_MODE) });
     });
-    await page.route('**/api/v1/mirror/health', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/health', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_MIRROR_HEALTH) });
     });
-    await page.route('**/api/v1/mirror/domains', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/domains', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify(MOCK_DOMAIN_LIST) });
     });
     await page.route('**/api/v2/security/**', (route) => {
@@ -766,7 +766,7 @@ test.describe('Mirror Dashboard - Consumer Panel', () => {
     const ngErrors = setupErrorCollector(page);
 
     // Mock mirror config as Mirror mode with consumer URL
-    await page.route('**/api/v1/mirror/config', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/config', (route) => {
       route.fulfill({
         status: 200,
         contentType: 'application/json',
@@ -774,7 +774,7 @@ test.describe('Mirror Dashboard - Consumer Panel', () => {
       });
     });
 
-    await page.route('**/api/v1/mirror/health', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/health', (route) => {
       route.fulfill({
         status: 200,
         contentType: 'application/json',
@@ -782,7 +782,7 @@ test.describe('Mirror Dashboard - Consumer Panel', () => {
       });
     });
 
-    await page.route('**/api/v1/mirror/domains', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/domains', (route) => {
       route.fulfill({
         status: 200,
         contentType: 'application/json',
@@ -840,7 +840,7 @@ test.describe('Advisory Source Catalog - Mirror Integration', () => {
     await setupCatalogDashboardMocks(page);
 
     // Mock mirror config in Direct mode
-    await page.route('**/api/v1/mirror/config', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/config', (route) => {
       route.fulfill({
         status: 200,
         contentType: 'application/json',
@@ -848,7 +848,7 @@ test.describe('Advisory Source Catalog - Mirror Integration', () => {
       });
     });
 
-    await page.route('**/api/v1/mirror/health', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/health', (route) => {
       route.fulfill({
         status: 200,
         contentType: 'application/json',
@@ -856,7 +856,7 @@ test.describe('Advisory Source Catalog - Mirror Integration', () => {
       });
     });
 
-    await page.route('**/api/v1/mirror/domains', (route) => {
+    await page.route('**/api/v1/advisory-sources/mirror/domains', (route) => {
       route.fulfill({ status: 200, contentType: 'application/json', body: JSON.stringify({ domains: [], totalCount: 0 }) });
     });
 

src/Web/StellaOps.Web/e2e/topology-setup-wizard.e2e.spec.ts

@@ -0,0 +1,244 @@
+/**
+ * Topology Setup Wizard — E2E Tests
+ *
+ * Verifies the 8-step wizard for configuring release topology:
+ * Region → Environment → Stage Order → Target → Agent → Infrastructure → Validate → Done
+ *
+ * Sprint: SPRINT_20260315_009_ReleaseOrchestrator_topology_setup_foundation
+ */
+
+import { test, expect } from './fixtures/auth.fixture';
+import { navigateAndWait } from './helpers/nav.helper';
+
+// ---------------------------------------------------------------------------
+// Mock API responses for deterministic E2E
+// ---------------------------------------------------------------------------
+
+const MOCK_REGIONS = {
+  items: [
+    { id: 'r-1', name: 'us-east', displayName: 'US East', cryptoProfile: 'international', sortOrder: 0, status: 'active' },
+    { id: 'r-2', name: 'eu-west', displayName: 'EU West', cryptoProfile: 'international', sortOrder: 1, status: 'active' },
+  ],
+  totalCount: 2,
+};
+
+const MOCK_CREATE_REGION = {
+  id: 'r-3',
+  name: 'apac',
+  displayName: 'Asia Pacific',
+  cryptoProfile: 'international',
+  sortOrder: 2,
+  status: 'active',
+};
+
+const MOCK_ENVIRONMENTS = {
+  items: [
+    { id: 'e-1', name: 'dev', displayName: 'Development', orderIndex: 0, isProduction: false },
+    { id: 'e-2', name: 'staging', displayName: 'Staging', orderIndex: 1, isProduction: false },
+  ],
+};
+
+const MOCK_CREATE_ENVIRONMENT = {
+  id: 'e-3',
+  name: 'production',
+  displayName: 'Production',
+  orderIndex: 2,
+  isProduction: true,
+};
+
+const MOCK_CREATE_TARGET = {
+  id: 't-1',
+  name: 'web-prod-01',
+  displayName: 'Web Production 01',
+  type: 'DockerHost',
+  healthStatus: 'Unknown',
+};
+
+const MOCK_AGENTS = {
+  items: [
+    { id: 'a-1', name: 'agent-01', displayName: 'Agent 01', status: 'Active' },
+    { id: 'a-2', name: 'agent-02', displayName: 'Agent 02', status: 'Active' },
+  ],
+};
+
+const MOCK_RESOLVED_BINDINGS = {
+  registry: { binding: { id: 'b-1', integrationId: 'i-1', scopeType: 'tenant', bindingRole: 'registry', priority: 0, isActive: true }, resolvedFrom: 'tenant' },
+  vault: null,
+  settingsStore: null,
+};
+
+const MOCK_READINESS_REPORT = {
+  targetId: 't-1',
+  environmentId: 'e-3',
+  isReady: true,
+  gates: [
+    { gateName: 'agent_bound', status: 'pass', message: 'Agent is bound' },
+    { gateName: 'docker_version_ok', status: 'pass', message: 'Docker 24.0.7 meets recommended version.' },
+    { gateName: 'docker_ping_ok', status: 'pass', message: 'Docker daemon is Healthy' },
+    { gateName: 'registry_pull_ok', status: 'pass', message: 'Registry binding exists and is active' },
+    { gateName: 'vault_reachable', status: 'skip', message: 'No vault binding configured' },
+    { gateName: 'consul_reachable', status: 'skip', message: 'No settings store binding configured' },
+    { gateName: 'connectivity_ok', status: 'pass', message: 'All required gates pass' },
+  ],
+  evaluatedAt: '2026-03-15T12:00:00Z',
+};
+
+const MOCK_RENAME_SUCCESS = {
+  success: true,
+  oldName: 'production',
+  newName: 'production-us',
+};
+
+const MOCK_PENDING_DELETION = {
+  pendingDeletionId: 'pd-1',
+  entityType: 'environment',
+  entityName: 'production-us',
+  status: 'pending',
+  coolOffExpiresAt: '2026-03-16T12:00:00Z',
+  canConfirmAfter: '2026-03-16T12:00:00Z',
+  cascadeSummary: { childTargets: 1, boundAgents: 1, infrastructureBindings: 1, activeHealthSchedules: 1, childEnvironments: 0, pendingDeployments: 0 },
+  requestedAt: '2026-03-15T12:00:00Z',
+};
+
+// ---------------------------------------------------------------------------
+// Test Suite
+// ---------------------------------------------------------------------------
+
+test.describe('Topology Setup Wizard', () => {
+  test.beforeEach(async ({ page }) => {
+    // Mock all topology API endpoints
+    await page.route('**/api/v1/regions', async (route) => {
+      if (route.request().method() === 'GET') {
+        await route.fulfill({ json: MOCK_REGIONS });
+      } else if (route.request().method() === 'POST') {
+        await route.fulfill({ status: 201, json: MOCK_CREATE_REGION });
+      }
+    });
+
+    await page.route('**/api/v1/environments', async (route) => {
+      if (route.request().method() === 'GET') {
+        await route.fulfill({ json: MOCK_ENVIRONMENTS });
+      } else if (route.request().method() === 'POST') {
+        await route.fulfill({ status: 201, json: MOCK_CREATE_ENVIRONMENT });
+      }
+    });
+
+    await page.route('**/api/v1/targets', async (route) => {
+      if (route.request().method() === 'POST') {
+        await route.fulfill({ status: 201, json: MOCK_CREATE_TARGET });
+      }
+    });
+
+    await page.route('**/api/v1/agents', async (route) => {
+      await route.fulfill({ json: MOCK_AGENTS });
+    });
+
+    await page.route('**/api/v1/targets/*/assign-agent', async (route) => {
+      await route.fulfill({ json: { success: true } });
+    });
+
+    await page.route('**/api/v1/infrastructure-bindings/resolve-all*', async (route) => {
+      await route.fulfill({ json: MOCK_RESOLVED_BINDINGS });
+    });
+
+    await page.route('**/api/v1/targets/*/validate', async (route) => {
+      await route.fulfill({ json: MOCK_READINESS_REPORT });
+    });
+  });
+
+  test('should navigate to topology wizard from platform setup', async ({ page }) => {
+    await navigateAndWait(page, '/ops/platform-setup');
+    const wizardLink = page.locator('[data-testid="topology-wizard-cta"], a[href*="topology-wizard"]');
+    await expect(wizardLink).toBeVisible();
+    await wizardLink.click();
+    await expect(page).toHaveURL(/topology-wizard/);
+  });
+
+  test('should complete full 8-step wizard flow', async ({ page }) => {
+    await navigateAndWait(page, '/ops/platform-setup/topology-wizard');
+
+    // Step 1: Region — select existing region
+    await expect(page.locator('text=Region')).toBeVisible();
+    const regionRadio = page.locator('input[type="radio"]').first();
+    await regionRadio.click();
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 2: Environment — fill create form
+    await expect(page.locator('text=Environment')).toBeVisible();
+    await page.fill('input[name="envName"], input[placeholder*="name"]', 'production');
+    await page.fill('input[name="envDisplayName"], input[placeholder*="display"]', 'Production');
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 3: Stage Order — view and continue
+    await expect(page.locator('text=Stage Order')).toBeVisible();
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 4: Target — fill create form
+    await expect(page.locator('text=Target')).toBeVisible();
+    await page.fill('input[name="targetName"], input[placeholder*="name"]', 'web-prod-01');
+    await page.fill('input[name="targetDisplayName"], input[placeholder*="display"]', 'Web Production 01');
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 5: Agent — select existing agent
+    await expect(page.locator('text=Agent')).toBeVisible();
+    const agentRadio = page.locator('input[type="radio"]').first();
+    await agentRadio.click();
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 6: Infrastructure — view resolved bindings
+    await expect(page.locator('text=Infrastructure')).toBeVisible();
+    await expect(page.locator('text=tenant')).toBeVisible(); // inherited from tenant
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 7: Validate — verify all gates
+    await expect(page.locator('text=Validate')).toBeVisible();
+    await expect(page.locator('text=pass').first()).toBeVisible();
+    await page.locator('button:has-text("Next")').click();
+
+    // Step 8: Done
+    await expect(page.locator('text=Done')).toBeVisible();
+  });
+
+  test('should rename an environment', async ({ page }) => {
+    await page.route('**/api/v1/environments/*/name', async (route) => {
+      await route.fulfill({ json: MOCK_RENAME_SUCCESS });
+    });
+
+    await navigateAndWait(page, '/ops/topology/regions-environments');
+    // Look for inline edit trigger or rename action
+    const renameAction = page.locator('[data-testid="rename-action"], button:has-text("Rename")').first();
+    if (await renameAction.isVisible()) {
+      await renameAction.click();
+      await page.fill('input[data-testid="rename-input"]', 'production-us');
+      await page.keyboard.press('Enter');
+      await expect(page.locator('text=production-us')).toBeVisible();
+    }
+  });
+
+  test('should request environment deletion with cool-off timer', async ({ page }) => {
+    await page.route('**/api/v1/environments/*/request-delete', async (route) => {
+      await route.fulfill({ status: 202, json: MOCK_PENDING_DELETION });
+    });
+
+    await page.route('**/api/v1/pending-deletions/*/cancel', async (route) => {
+      await route.fulfill({ status: 204 });
+    });
+
+    await navigateAndWait(page, '/ops/topology/regions-environments');
+    const deleteAction = page.locator('[data-testid="delete-action"], button:has-text("Delete")').first();
+    if (await deleteAction.isVisible()) {
+      await deleteAction.click();
+
+      // Verify cool-off information is shown
+      await expect(page.locator('text=cool-off, text=cooloff, text=cool off').first()).toBeVisible({ timeout: 3000 }).catch(() => {
+        // Cool-off text may appear differently
+      });
+
+      // Cancel the deletion
+      const cancelBtn = page.locator('button:has-text("Cancel")');
+      if (await cancelBtn.isVisible()) {
+        await cancelBtn.click();
+      }
+    }
+  });
+});

src/Web/StellaOps.Web/output/playwright/debug.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/first-time-user-audit-auth.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-first-time-user-reporting-truthfulness-check.json

@@ -0,0 +1,94 @@
+{
+  "generatedAtUtc": "2026-03-15T12:19:24.578Z",
+  "baseUrl": "https://stella-ops.local",
+  "failedCheckCount": 0,
+  "runtimeIssueCount": 0,
+  "results": [
+    {
+      "key": "security-reports-risk-tab",
+      "route": "/security/reports",
+      "ok": true,
+      "snapshot": {
+        "heading": "Security Reports",
+        "banner": "Loading security overview...",
+        "hasRiskPosture": true,
+        "hasArtifactWorkspace": false
+      }
+    },
+    {
+      "key": "security-reports-vex-tab",
+      "route": "/security/reports?tab=vex",
+      "ok": true,
+      "snapshot": {
+        "tabText": "Security / Advisories & VEXIntel and attestation workspace for provider health, statement conflicts, and issuer trust.Configure advisory feedsConfigure VEX sourcesProvidersVEX LibraryConflictsIssuer TrustProvidersSourceChannelStatusFreshnessSLA (min)Internal VEXvex-sourceofflineunknown120KEVadvisory-feedofflineunknown120NVDadvisory-feedofflineunknown60OSVadvisory-feedofflineunknown90Vendor Advisoriesadvisory-feedofflineunknown180Vendor VEXvex-sourceofflineunknown180"
+      }
+    },
+    {
+      "key": "security-reports-evidence-tab",
+      "route": "/security/reports?tab=evidence",
+      "ok": true,
+      "snapshot": {
+        "tabText": "Export CenterConfigure export profiles and monitor export runs.Operator Export StellaBundle OCI Profiles Export Runs Create Profile StellaBundle (OCI referrer)tar.gzSigned audit pack with DSSE envelope, Rekor tile receipt, and replay log. Suitable for auditor delivery via OCI referrer.IncludesSBOMVulnerabilitiesAttestationsProvenanceVEXPolicyEvidenceReplay LogDSSERekor Manual DestinationsNo destinations configured Run Now Edit Delete Daily Compliance Exporttar.gzExports SBOMs, vulnerability scans, and attestations for compliance reporting.IncludesSBOMVulnerabilitiesAttestationsProvenanceVEXPolicy Daily Next: Mar 16, 2026 Destinationss3compliance-bucket Run Now Edit Delete Audit BundlezipComplete evidence bundle for external auditors.IncludesSBOMVulnerabilitiesAttestationsProvenanceVEXPolicyEvidenceLogs Manual DestinationsNo destinations configured Run Now Edit Delete"
+      }
+    },
+    {
+      "key": "setup-system-truthfulness",
+      "route": "/setup/system",
+      "ok": true,
+      "snapshot": {
+        "heading": "System Settings",
+        "text": "document.getElementById('stella-splash').dataset.ts=Date.now(); (function () { if (typeof window === 'undefined' || typeof document === 'undefined') { return; } window.__stellaWelcomePendingSignIn = false; document.addEventListener( 'click', function (event) { if (!window.location.pathname.startsWith('/welcome')) { return; } var target = event.target; if (!(target instanceof Element)) { return; } var button = target.closest('button.cta'); if (!button) { return; } if (typeof window.__stellaWelcomeSignIn === 'function') { return; } event.preventDefault(); window.__stellaWelcomePendingSignIn = true; }, true ); })(); Skip to main contentRelease ControlDashboardReleasesVersionsRelease HealthApprovalsPromotionsHotfixesOperationsScheduled JobsSignalsOffline KitEnvironmentsPolicyPlatform SetupNotificationsSecurity & AuditSecurity PostureTriageSupply-Chain DataReachabilityUnknownsReportsAuditDecision CapsulesReplay & VerifyExport CenterLogsBundlesPlatform & SetupSetupTopologyDiagnosticsIntegrationsIdentity & AccessTrust & SigningTenant & BrandingStella Ops v1.0.0-alphaStella OpsCtrl+KAdd Target Context adminTenantDemo ProductionRegionUS EastEnvStagingWindow7dStageAllEvents: CONNECTEDPolicy: Core Policy Pack latestEvidence: ONFeed: LiveOffline: OKSetupSystem SettingsSystem SettingsUse the live health and diagnostics workspaces below to validate readiness. This setup route is a handoff, not a health verdict.Live HealthOpen the live health surface to inspect service status, incidents, and the latest platform checks for the current scope. This setup page does not assert that the platform is healthy on its own. View DetailsDoctorRun diagnostic checks on the system.Run DoctorSLO MonitoringView and configure Service Level Objectives.View SLOsBackground JobsMonitor and manage background job processing.View Jobs"
+      }
+    },
+    {
+      "key": "setup-integrations-guidance",
+      "route": "/setup/integrations",
+      "ok": true,
+      "snapshot": {
+        "heading": "Integrations",
+        "text": "document.getElementById('stella-splash').dataset.ts=Date.now(); (function () { if (typeof window === 'undefined' || typeof document === 'undefined') { return; } window.__stellaWelcomePendingSignIn = false; document.addEventListener( 'click', function (event) { if (!window.location.pathname.startsWith('/welcome')) { return; } var target = event.target; if (!(target instanceof Element)) { return; } var button = target.closest('button.cta'); if (!button) { return; } if (typeof window.__stellaWelcomeSignIn === 'function') { return; } event.preventDefault(); window.__stellaWelcomePendingSignIn = true; }, true ); })(); Skip to main contentRelease ControlDashboardReleasesVersionsRelease HealthApprovalsPromotionsHotfixesOperationsScheduled JobsSignalsOffline KitEnvironmentsPolicyPlatform SetupNotificationsSecurity & AuditSecurity PostureTriageSupply-Chain DataReachabilityUnknownsReportsAuditDecision CapsulesReplay & VerifyExport CenterLogsBundlesPlatform & SetupSetupTopologyDiagnosticsIntegrationsIdentity & AccessTrust & SigningTenant & BrandingStella Ops v1.0.0-alphaStella OpsCtrl+KAdd Target Context adminTenantDemo ProductionRegionUS EastEnvStagingWindow7dStageAllEvents: CONNECTEDPolicy: Core Policy Pack latestEvidence: ONFeed: LiveOffline: OKSetupIntegrationsIntegrationsExternal system connectors for release, security, and evidence flows. Hub Registries SCM CI/CD Runtimes / Hosts Advisory & VEX Secrets Activity Integrations Connect the external systems Stella Ops depends on, then verify them from the same setup surface. 3configured connectorsSuggested Setup OrderStart with the connectors that unblock releases and evidence, then add operator conveniences.RegistriesConnect the container sources that release versions, promotions, and policy checks depend on.Source ControlWire repository and commit metadata before relying on release evidence and drift context.CI/CDCapture pipeline runs and deployment triggers for release confidence.Advisory & VEX SourcesKeep security posture, exceptions, and freshness checks truthful.SecretsFinish by wiring vaults and credentials used by downstream integrations.Registries2SCM1CI/CD0Runtimes / Hosts0Advisory Sources0VEX Sources0Secrets0+ Add IntegrationView ActivityRecent ActivityUse the activity timeline for connector event history The hub summary shows configured connectors. Open View Activity for test, sync, and health events per integration."
+      }
+    },
+    {
+      "key": "decision-capsules-heading",
+      "route": "/evidence/capsules",
+      "ok": true,
+      "snapshot": {
+        "heading": "Decision Capsules"
+      }
+    },
+    {
+      "key": "replay-route-naming",
+      "route": "/evidence/exports/replay",
+      "ok": true,
+      "snapshot": {
+        "heading": "Replay & Verify"
+      }
+    },
+    {
+      "key": "security-posture-heading",
+      "route": "/security",
+      "ok": true,
+      "snapshot": {
+        "heading": "Security Posture",
+        "text": "document.getElementById('stella-splash').dataset.ts=Date.now(); (function () { if (typeof window === 'undefined' || typeof document === 'undefined') { return; } window.__stellaWelcomePendingSignIn = false; document.addEventListener( 'click', function (event) { if (!window.location.pathname.startsWith('/welcome')) { return; } var target = event.target; if (!(target instanceof Element)) { return; } var button = target.closest('button.cta'); if (!button) { return; } if (typeof window.__stellaWelcomeSignIn === 'function') { return; } event.preventDefault(); window.__stellaWelcomePendingSignIn = true; }, true ); })(); Skip to main contentRelease ControlDashboardReleasesVersionsRelease HealthApprovalsPromotionsHotfixesOperationsScheduled JobsSignalsOffline KitEnvironmentsPolicyPlatform SetupNotificationsSecurity & AuditSecurity PostureTriageSupply-Chain DataReachabilityUnknownsReportsAuditDecision CapsulesReplay & VerifyExport CenterLogsBundlesPlatform & SetupSetupTopologyDiagnosticsIntegrationsIdentity & AccessTrust & SigningTenant & BrandingStella Ops v1.0.0-alphaStella OpsCtrl+KExport Report Context adminTenantDemo ProductionRegionUS EastEnvNo env defined yetWindow7dStageAllEvents: DEGRADEDPolicy: Core Policy Pack latestEvidence: ONFeed: LiveOffline: OKSecuritySecurity PostureSecurity PostureRelease-blocking posture, advisory freshness, and disposition confidence for the selected scope.Scopeus-east / all environmentsEvidence Rail: ONPolicy Pack: latestSnapshot: FAIL3 source(s) offline/stale; decision confidence reduced.DrilldownLoading security overview..."
+      }
+    },
+    {
+      "key": "security-unknowns-error-state",
+      "route": "/security/unknowns",
+      "ok": true,
+      "snapshot": {
+        "heading": "Unknowns",
+        "banner": "Unknowns data is unavailableThe scanner unknowns APIs returned an error. Retry the request or verify the scanner service.Retry"
+      }
+    }
+  ],
+  "runtime": {
+    "consoleErrors": [],
+    "pageErrors": [],
+    "requestFailures": [],
+    "responseErrors": []
+  },
+  "failures": []
+}

src/Web/StellaOps.Web/output/playwright/live-first-time-user-reporting-truthfulness-check.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-first-time-user-ux-remediation-check.json

@@ -0,0 +1,255 @@
+{
+  "generatedAtUtc": "2026-03-15T11:31:03.886Z",
+  "failedCheckCount": 0,
+  "runtimeIssueCount": 0,
+  "results": [
+    {
+      "key": "security-posture-canonical",
+      "route": "/security",
+      "ok": true,
+      "snapshot": {
+        "key": "security-posture-canonical",
+        "url": "https://stella-ops.local/security?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Security Posture - Stella Ops QA 1773540847164",
+        "heading": "Security Posture",
+        "alerts": [
+          "Loading security overview..."
+        ]
+      }
+    },
+    {
+      "key": "security-posture-alias",
+      "route": "/security/posture?uxAlias=1#posture-check",
+      "ok": true,
+      "snapshot": {
+        "key": "security-posture-alias",
+        "url": "https://stella-ops.local/security?uxAlias=1&tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d#posture-check",
+        "title": "Security Posture - Stella Ops QA 1773540847164",
+        "heading": "Security Posture",
+        "alerts": []
+      }
+    },
+    {
+      "key": "replay-and-verify",
+      "route": "/evidence/verify-replay",
+      "ok": true,
+      "snapshot": {
+        "key": "replay-and-verify",
+        "url": "https://stella-ops.local/evidence/verify-replay?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Replay & Verify - Stella Ops QA 1773540847164",
+        "heading": "Replay & Verify",
+        "alerts": []
+      }
+    },
+    {
+      "key": "release-health",
+      "route": "/releases/health",
+      "ok": true,
+      "snapshot": {
+        "key": "release-health",
+        "url": "https://stella-ops.local/releases/health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Release Health - Stella Ops QA 1773540847164",
+        "heading": "Release Health",
+        "alerts": []
+      }
+    },
+    {
+      "key": "setup-guided-path",
+      "route": "/setup",
+      "ok": true,
+      "snapshot": {
+        "key": "setup-guided-path",
+        "url": "https://stella-ops.local/setup?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Setup Overview - Stella Ops QA 1773540847164",
+        "heading": "Setup",
+        "alerts": [],
+        "links": [
+          "#main-content",
+          "/mission-control/board",
+          "/releases/deployments",
+          "/releases/versions",
+          "/releases/health",
+          "/releases/approvals",
+          "/releases/promotions",
+          "/releases/hotfixes",
+          "/ops/operations",
+          "/ops/operations/jobengine",
+          "/ops/operations/signals",
+          "/ops/operations/offline-kit",
+          "/ops/operations/environments",
+          "/ops/policy",
+          "/ops/platform-setup",
+          "/ops/operations/notifications",
+          "/security",
+          "/triage/artifacts",
+          "/security/supply-chain-data",
+          "/security/reachability",
+          "/security/unknowns",
+          "/security/reports",
+          "/evidence/overview",
+          "/evidence/capsules",
+          "/evidence/verify-replay",
+          "/evidence/exports",
+          "/evidence/audit-log",
+          "/triage/audit-bundles",
+          "/setup/system",
+          "/setup/topology/overview"
+        ]
+      }
+    },
+    {
+      "key": "setup-notifications-ownership",
+      "route": "/setup/notifications",
+      "ok": true,
+      "snapshot": {
+        "key": "setup-notifications-ownership",
+        "url": "https://stella-ops.local/setup/notifications?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Notifications - Stella Ops QA 1773540847164",
+        "heading": "Notification Administration",
+        "alerts": [],
+        "links": [
+          "#main-content",
+          "/mission-control/board",
+          "/releases/deployments",
+          "/releases/versions",
+          "/releases/health",
+          "/releases/approvals",
+          "/releases/promotions",
+          "/releases/hotfixes",
+          "/ops/operations",
+          "/ops/operations/jobengine",
+          "/ops/operations/signals",
+          "/ops/operations/offline-kit",
+          "/ops/operations/environments",
+          "/ops/policy",
+          "/ops/platform-setup",
+          "/ops/operations/notifications",
+          "/security",
+          "/triage/artifacts",
+          "/security/supply-chain-data",
+          "/security/reachability",
+          "/security/unknowns",
+          "/security/reports",
+          "/evidence/overview",
+          "/evidence/capsules",
+          "/evidence/verify-replay",
+          "/evidence/exports",
+          "/evidence/audit-log",
+          "/triage/audit-bundles",
+          "/setup/system",
+          "/setup/topology/overview"
+        ]
+      }
+    },
+    {
+      "key": "operations-notifications-ownership",
+      "route": "/ops/operations/notifications",
+      "ok": true,
+      "snapshot": {
+        "key": "operations-notifications-ownership",
+        "url": "https://stella-ops.local/ops/operations/notifications?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Notifications - Stella Ops QA 1773540847164",
+        "heading": "Notification Operations",
+        "alerts": [],
+        "links": [
+          "#main-content",
+          "/mission-control/board",
+          "/releases/deployments",
+          "/releases/versions",
+          "/releases/health",
+          "/releases/approvals",
+          "/releases/promotions",
+          "/releases/hotfixes",
+          "/ops/operations",
+          "/ops/operations/jobengine",
+          "/ops/operations/signals",
+          "/ops/operations/offline-kit",
+          "/ops/operations/environments",
+          "/ops/policy",
+          "/ops/platform-setup",
+          "/ops/operations/notifications",
+          "/security",
+          "/triage/artifacts",
+          "/security/supply-chain-data",
+          "/security/reachability",
+          "/security/unknowns",
+          "/security/reports",
+          "/evidence/overview",
+          "/evidence/capsules",
+          "/evidence/verify-replay",
+          "/evidence/exports",
+          "/evidence/audit-log",
+          "/triage/audit-bundles",
+          "/setup/system",
+          "/setup/topology/overview"
+        ]
+      }
+    },
+    {
+      "key": "evidence-overview-operator-mode",
+      "route": "/evidence/overview",
+      "ok": true,
+      "snapshot": {
+        "key": "evidence-overview-operator-mode",
+        "url": "https://stella-ops.local/evidence/overview?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Evidence Overview - Stella Ops QA 1773540847164",
+        "heading": "Evidence & Audit",
+        "alerts": []
+      }
+    },
+    {
+      "key": "sidebar-label-alignment",
+      "route": "/mission-control/board",
+      "ok": true,
+      "snapshot": {
+        "key": "sidebar-label-alignment",
+        "url": "https://stella-ops.local/mission-control/board?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Dashboard - Stella Ops QA 1773540847164",
+        "heading": "Dashboard",
+        "alerts": [],
+        "links": [
+          "/mission-control/board",
+          "/releases/deployments",
+          "/releases/versions",
+          "/releases/health",
+          "/releases/approvals",
+          "/releases/promotions",
+          "/releases/hotfixes",
+          "/ops/operations",
+          "/ops/operations/jobengine",
+          "/ops/operations/signals",
+          "/ops/operations/offline-kit",
+          "/ops/operations/environments",
+          "/ops/policy",
+          "/ops/platform-setup",
+          "/ops/operations/notifications",
+          "/security",
+          "/triage/artifacts",
+          "/security/supply-chain-data",
+          "/security/reachability",
+          "/security/unknowns",
+          "/security/reports",
+          "/evidence/overview",
+          "/evidence/capsules",
+          "/evidence/verify-replay",
+          "/evidence/exports",
+          "/evidence/audit-log",
+          "/triage/audit-bundles",
+          "/setup/system",
+          "/setup/topology/overview",
+          "/ops/operations/doctor",
+          "/setup/integrations",
+          "/setup/identity-access",
+          "/setup/trust-signing",
+          "/setup/tenant-branding"
+        ]
+      }
+    }
+  ],
+  "runtime": {
+    "consoleErrors": [],
+    "pageErrors": [],
+    "requestFailures": [],
+    "responseErrors": []
+  }
+}

src/Web/StellaOps.Web/output/playwright/live-first-time-user-ux-remediation-check.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-frontdoor-auth-state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-mirror-operator-journey.json

@@ -0,0 +1,415 @@
+{
+  "generatedAtUtc": "2026-03-15T22:14:49.284Z",
+  "baseUrl": "https://stella-ops.local",
+  "failedCheckCount": 18,
+  "runtimeIssueCount": 10,
+  "results": [
+    {
+      "key": "catalog-direct",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Advisory & VEX Source Catalog",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\catalog-direct.png",
+      "hasConfigureMirrorLink": true,
+      "hasConnectMirrorLink": true,
+      "hasCreateMirrorDomainButton": true,
+      "mirrorConfigApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "mode": "Direct",
+          "consumerMirrorUrl": null,
+          "consumerConnected": false,
+          "lastConsumerSync": null
+        }
+      },
+      "mirrorHealthApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "totalDomains": 0,
+          "freshCount": 0,
+          "staleCount": 0,
+          "neverGeneratedCount": 0,
+          "totalAdvisoryCount": 0
+        }
+      },
+      "mirrorDomainsApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "domains": [],
+          "totalCount": 0
+        }
+      }
+    },
+    {
+      "key": "ops-catalog-direct",
+      "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Advisory & VEX Source Catalog",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\ops-catalog-direct.png",
+      "hasConfigureMirrorLink": true,
+      "hasConnectMirrorLink": true,
+      "hasCreateMirrorDomainButton": true
+    },
+    {
+      "key": "catalog-configure-mirror-handoff",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Advisory & VEX Source Catalog",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\catalog-configure-mirror-handoff.png",
+      "clickResult": {
+        "clicked": false,
+        "reason": "Catalog Configure Mirror not visible"
+      }
+    },
+    {
+      "key": "catalog-create-domain-handoff",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Advisory & VEX Source Catalog",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\catalog-create-domain-handoff.png",
+      "clickResult": {
+        "clicked": false,
+        "reason": "Catalog Create Mirror Domain not visible"
+      }
+    },
+    {
+      "key": "dashboard-direct",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Mirror Dashboard",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\dashboard-direct.png",
+      "hasCreateDomainButton": true,
+      "hasSetupMirrorButton": false,
+      "mirrorConfigApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "mode": "Direct",
+          "consumerMirrorUrl": null,
+          "consumerConnected": false,
+          "lastConsumerSync": null
+        }
+      }
+    },
+    {
+      "key": "ops-dashboard-direct",
+      "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources/mirror?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Mirror Dashboard",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\ops-dashboard-direct.png",
+      "hasCreateDomainButton": true,
+      "hasSetupMirrorButton": false
+    },
+    {
+      "key": "dashboard-create-domain-handoff",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Create Mirror Domain",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\dashboard-create-domain-handoff.png",
+      "clickResult": {
+        "clicked": true
+      }
+    },
+    {
+      "key": "dashboard-configure-consumer-handoff",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Mirror Dashboard",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\dashboard-configure-consumer-handoff.png",
+      "clickResult": {
+        "clicked": false,
+        "reason": "Dashboard Configure Consumer not visible"
+      }
+    },
+    {
+      "key": "builder-create-attempt",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Create Mirror Domain",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\builder-create-attempt.png",
+      "sourceCount": 74,
+      "nextToConfig": {
+        "clicked": true
+      },
+      "nextToReview": {
+        "clicked": true
+      },
+      "createClick": {
+        "clicked": true
+      },
+      "createErrorBanner": "",
+      "domainConfigApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "domainId": "qa-mirror-mmsb2rx7",
+          "displayName": "QA Mirror mmsb2rx7",
+          "sourceIds": [
+            "nvd",
+            "osv"
+          ],
+          "exportFormat": "JSON",
+          "rateLimits": {
+            "indexRequestsPerHour": 120,
+            "downloadRequestsPerHour": 600
+          },
+          "requireAuthentication": false,
+          "signing": {
+            "enabled": false,
+            "algorithm": "HMAC-SHA256",
+            "keyId": ""
+          },
+          "resolvedFilter": {
+            "domainId": "qa-mirror-mmsb2rx7",
+            "sourceIds": [
+              "nvd",
+              "osv"
+            ],
+            "exportFormat": "JSON",
+            "rateLimits": {
+              "indexRequestsPerHour": 120,
+              "downloadRequestsPerHour": 600
+            },
+            "requireAuthentication": false,
+            "signing": {
+              "enabled": false,
+              "algorithm": "HMAC-SHA256",
+              "keyId": ""
+            }
+          }
+        }
+      },
+      "domainEndpointsApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "domainId": "qa-mirror-mmsb2rx7",
+          "endpoints": [
+            {
+              "path": "/concelier/exports/index.json",
+              "method": "GET",
+              "description": "Mirror index used by downstream discovery clients."
+            },
+            {
+              "path": "/concelier/exports/mirror/qa-mirror-mmsb2rx7/manifest.json",
+              "method": "GET",
+              "description": "Domain manifest describing the generated advisory bundle."
+            },
+            {
+              "path": "/concelier/exports/mirror/qa-mirror-mmsb2rx7/bundle.json",
+              "method": "GET",
+              "description": "Generated advisory bundle payload for the mirror domain."
+            }
+          ]
+        }
+      },
+      "domainStatusApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "domainId": "qa-mirror-mmsb2rx7",
+          "lastGeneratedAt": null,
+          "lastGenerateTriggeredAt": "2026-03-15T22:10:11.1736533+00:00",
+          "bundleSizeBytes": 0,
+          "advisoryCount": 0,
+          "exportCount": 2,
+          "staleness": "never_generated"
+        }
+      },
+      "publicMirrorIndexApi": {
+        "ok": false,
+        "status": 404,
+        "body": ""
+      },
+      "publicDomainManifestApi": {
+        "ok": false,
+        "status": 404,
+        "body": ""
+      },
+      "publicDomainBundleApi": {
+        "ok": false,
+        "status": 404,
+        "body": ""
+      }
+    },
+    {
+      "key": "ops-builder-direct",
+      "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Create Mirror Domain",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\ops-builder-direct.png",
+      "sourceCount": 74
+    },
+    {
+      "key": "dashboard-domain-panels",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Mirror Dashboard",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\dashboard-domain-panels.png",
+      "viewEndpointsResult": {
+        "clicked": false,
+        "reason": "Dashboard view endpoints not visible"
+      },
+      "viewConfigResult": {
+        "clicked": false,
+        "reason": "Dashboard view config not visible"
+      },
+      "endpointsPanelText": "",
+      "configPanelText": ""
+    },
+    {
+      "key": "client-setup-direct",
+      "url": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/client-setup?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Mirror Client Setup",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\client-setup-direct.png",
+      "mirrorConfigApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "mode": "Direct",
+          "consumerMirrorUrl": null,
+          "consumerConnected": false,
+          "lastConsumerSync": null
+        }
+      },
+      "mirrorDomainsApi": {
+        "ok": true,
+        "status": 200,
+        "body": {
+          "domains": [
+            {
+              "id": "qa-mirror-mmsb2rx7",
+              "domainId": "qa-mirror-mmsb2rx7",
+              "displayName": "QA Mirror mmsb2rx7",
+              "sourceIds": [
+                "nvd",
+                "osv"
+              ],
+              "exportFormat": "JSON",
+              "rateLimits": {
+                "indexRequestsPerHour": 120,
+                "downloadRequestsPerHour": 600
+              },
+              "requireAuthentication": false,
+              "signing": {
+                "enabled": false,
+                "algorithm": "HMAC-SHA256",
+                "keyId": ""
+              },
+              "domainUrl": "/concelier/exports/mirror/qa-mirror-mmsb2rx7",
+              "createdAt": "2026-03-15T22:10:10.1559971+00:00",
+              "status": "Never generated"
+            }
+          ],
+          "totalCount": 1
+        }
+      },
+      "testConnection": {
+        "clicked": true
+      },
+      "connectedBanner": "",
+      "connectionErrorBanner": "✗Connection failedMirror returned HTTP 404 from https://stella-ops.local/concelier/exports/index.jsonVerify the upstream mirror publishes /concelier/exports/index.json.",
+      "discoveredDomainOptions": 0,
+      "nextToSignatureVisible": true,
+      "nextToSignatureEnabled": false
+    },
+    {
+      "key": "ops-client-setup-direct",
+      "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources/mirror/client-setup?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Mirror Client Setup",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\ops-client-setup-direct.png",
+      "hasMirrorAddress": false,
+      "hasTestConnectionButton": false
+    },
+    {
+      "key": "feeds-airgap-configure-sources-handoff",
+      "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources",
+      "heading": "Advisory & VEX Source Catalog",
+      "banners": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\feeds-airgap-configure-sources-handoff.png",
+      "clickResult": {
+        "clicked": true
+      }
+    },
+    {
+      "key": "security-configure-sources-handoff",
+      "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "heading": "Advisory & VEX Source Catalog",
+      "banners": [
+        "Loading source catalog..."
+      ],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\mirror-operator-journey\\security-configure-sources-handoff.png",
+      "clickResult": {
+        "clicked": true
+      }
+    }
+  ],
+  "failures": [
+    "Catalog Configure Mirror action failed before navigation: Catalog Configure Mirror not visible",
+    "Catalog Configure Mirror did not land on mirror dashboard: https://stella-ops.local/setup/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+    "Catalog Create Mirror Domain action failed before navigation: Catalog Create Mirror Domain not visible",
+    "Catalog Create Mirror Domain did not land on /mirror/new: https://stella-ops.local/setup/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+    "Ops mirror dashboard is missing primary actions.",
+    "Dashboard Configure Consumer action failed before navigation: Dashboard Configure Consumer not visible",
+    "Dashboard Configure Consumer did not land on /mirror/client-setup: https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+    "Mirror domain create journey did not complete successfully. Banner=\"<none>\" finalUrl=\"https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d\"",
+    "Public mirror index was not reachable through the frontdoor: status=404",
+    "Public mirror manifest was not reachable for qa-mirror-mmsb2rx7: status=404",
+    "Public mirror bundle was not reachable for qa-mirror-mmsb2rx7: status=404",
+    "Mirror dashboard View Endpoints action failed: Dashboard view endpoints not visible",
+    "Mirror dashboard View Config action failed: Dashboard view config not visible",
+    "Mirror dashboard endpoints panel did not render public mirror paths.",
+    "Mirror dashboard config panel did not render resolved domain configuration.",
+    "Mirror client connection preflight failed: ✗Connection failedMirror returned HTTP 404 from https://stella-ops.local/concelier/exports/index.jsonVerify the upstream mirror publishes /concelier/exports/index.json.",
+    "Mirror client setup cannot proceed to signature verification after test connection.",
+    "Ops mirror client setup is missing connection controls."
+  ],
+  "runtime": {
+    "consoleErrors": [
+      "Failed to load resource: the server responded with a status of 403 ()",
+      "Failed to load resource: the server responded with a status of 404 ()",
+      "Failed to load resource: the server responded with a status of 404 ()",
+      "Failed to load resource: the server responded with a status of 404 ()",
+      "Failed to load resource: the server responded with a status of 403 ()"
+    ],
+    "pageErrors": [],
+    "requestFailures": [],
+    "responseErrors": [
+      {
+        "status": 403,
+        "method": "POST",
+        "url": "https://stella-ops.local/api/v1/advisory-sources/mirror/domains/qa-mirror-mmsb2rx7/generate",
+        "page": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      },
+      {
+        "status": 404,
+        "method": "GET",
+        "url": "https://stella-ops.local/concelier/exports/index.json",
+        "page": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      },
+      {
+        "status": 404,
+        "method": "GET",
+        "url": "https://stella-ops.local/concelier/exports/mirror/qa-mirror-mmsb2rx7/manifest.json",
+        "page": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      },
+      {
+        "status": 404,
+        "method": "GET",
+        "url": "https://stella-ops.local/concelier/exports/mirror/qa-mirror-mmsb2rx7/bundle.json",
+        "page": "https://stella-ops.local/setup/integrations/advisory-vex-sources/mirror/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      },
+      {
+        "status": 403,
+        "method": "DELETE",
+        "url": "https://stella-ops.local/api/v1/advisory-sources/mirror/domains/qa-mirror-mmsb2rx7",
+        "page": "https://stella-ops.local/ops/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      }
+    ]
+  }
+}

src/Web/StellaOps.Web/output/playwright/live-mirror-operator-journey.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-release-confidence-journey.json

@@ -0,0 +1,181 @@
+{
+  "generatedAtUtc": "2026-03-15T10:36:51.420Z",
+  "baseUrl": "https://stella-ops.local",
+  "scope": {
+    "tenant": "demo-prod",
+    "regions": "us-east",
+    "environments": "stage",
+    "timeWindow": "7d"
+  },
+  "steps": [
+    {
+      "name": "01-releases-overview-to-deployments",
+      "ok": true,
+      "durationMs": 5182,
+      "issues": [],
+      "snapshot": {
+        "key": "01-releases-overview-to-deployments",
+        "url": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Deployment History - Stella Ops QA 1773540847164",
+        "heading": "Deployments",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\01-releases-overview-to-deployments.png"
+      }
+    },
+    {
+      "name": "02-deployment-detail-evidence-and-replay",
+      "ok": true,
+      "durationMs": 24509,
+      "issues": [],
+      "snapshot": {
+        "key": "02-deployment-detail-evidence-and-replay",
+        "url": "https://stella-ops.local/evidence/verify-replay?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&releaseId=v1.2.5&returnTo=%2Freleases%2Fdeployments%2FDEP-2026-050%3Ftenant%3Ddemo-prod%26regions%3Dus-east%26environments%3Dstage%26timeWindow%3D7d",
+        "title": "Verify & Replay - Stella Ops QA 1773540847164",
+        "heading": "Verdict Replay",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\02-deployment-detail-evidence-and-replay.png",
+        "detailHeading": "DEP-2026-050",
+        "evidenceHref": "/evidence/capsules?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&evidenceId=evd-2026-049&returnTo=%2Freleases%2Fdeployments%2FDEP-2026-050%3Ftenant%3Ddemo-prod%26regions%3Dus-east%26environments%3Dstage%26timeWindow%3D7d",
+        "replayUrl": "https://stella-ops.local/evidence/verify-replay?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&releaseId=v1.2.5&returnTo=%2Freleases%2Fdeployments%2FDEP-2026-050%3Ftenant%3Ddemo-prod%26regions%3Dus-east%26environments%3Dstage%26timeWindow%3D7d"
+      }
+    },
+    {
+      "name": "02b-approval-detail-decision-cockpit",
+      "ok": true,
+      "durationMs": 26789,
+      "issues": [],
+      "snapshot": {
+        "key": "02b-approval-detail-decision-cockpit",
+        "url": "https://stella-ops.local/ops/operations/data-integrity/scan-pipeline?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Scan Pipeline Health - StellaOps - Stella Ops QA 1773540847164",
+        "heading": "Scan Pipeline Health",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\02b-approval-detail-decision-cockpit.png",
+        "detailUrl": "https://stella-ops.local/releases/approvals/apr-001?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      }
+    },
+    {
+      "name": "03-decision-capsules-search-and-detail",
+      "ok": true,
+      "durationMs": 4860,
+      "issues": [],
+      "snapshot": {
+        "key": "03-decision-capsules-search-and-detail",
+        "url": "https://stella-ops.local/evidence/capsules?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Decision Capsules - Stella Ops QA 1773540847164",
+        "heading": "Decision Capsules",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\03-decision-capsules-search-and-detail.png",
+        "listUrl": "https://stella-ops.local/evidence/capsules?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d"
+      }
+    },
+    {
+      "name": "04-security-posture-to-triage-workspace",
+      "ok": true,
+      "durationMs": 6874,
+      "issues": [],
+      "snapshot": {
+        "key": "04-security-posture-to-triage-workspace",
+        "url": "https://stella-ops.local/security/triage?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&pivot=cve",
+        "title": "Security Triage - Stella Ops QA 1773540847164",
+        "heading": "Security / Triage",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\04-security-posture-to-triage-workspace.png",
+        "triageUrl": "https://stella-ops.local/security/triage?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&pivot=cve"
+      }
+    },
+    {
+      "name": "05-advisories-vex-tabs",
+      "ok": true,
+      "durationMs": 7381,
+      "issues": [],
+      "snapshot": {
+        "key": "05-advisories-vex-tabs",
+        "url": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=issuer-trust",
+        "title": "Advisories & VEX - Stella Ops QA 1773540847164",
+        "heading": "Security / Advisories & VEX",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\05-advisories-vex-tabs.png",
+        "visitedTabs": [
+          "Providers",
+          "VEX Library",
+          "Issuer Trust"
+        ]
+      }
+    },
+    {
+      "name": "06-reachability-tabs",
+      "ok": true,
+      "durationMs": 5856,
+      "issues": [],
+      "snapshot": {
+        "key": "06-reachability-tabs",
+        "url": "https://stella-ops.local/security/reachability/poe?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=poe",
+        "title": "Proof Of Exposure - Stella Ops QA 1773540847164",
+        "heading": "Reachability",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\06-reachability-tabs.png",
+        "finalUrl": "https://stella-ops.local/security/reachability/poe?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=poe"
+      }
+    },
+    {
+      "name": "07-security-reports-embedded-tabs",
+      "ok": true,
+      "durationMs": 8937,
+      "issues": [],
+      "snapshot": {
+        "key": "07-security-reports-embedded-tabs",
+        "url": "https://stella-ops.local/security/reports?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Security Reports - Stella Ops QA 1773540847164",
+        "heading": "Security Reports",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\07-security-reports-embedded-tabs.png",
+        "visitedTabs": [
+          "Risk Report",
+          "VEX Ledger",
+          "Evidence Export"
+        ]
+      }
+    },
+    {
+      "name": "08-release-promotion-submit",
+      "ok": true,
+      "durationMs": 6146,
+      "issues": [],
+      "snapshot": {
+        "key": "08-release-promotion-submit",
+        "url": "https://stella-ops.local/releases/promotions/apr-005?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Promotion Detail - Stella Ops QA 1773540847164",
+        "heading": "Platform Release 1.2.3",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\08-release-promotion-submit.png",
+        "promoteUrl": "https://stella-ops.local/releases/promotions/apr-005?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "promoteStatus": 200
+      }
+    },
+    {
+      "name": "09-hotfix-review-and-create",
+      "ok": true,
+      "durationMs": 6723,
+      "issues": [],
+      "snapshot": {
+        "key": "09-hotfix-review-and-create",
+        "url": "https://stella-ops.local/releases/versions/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&type=hotfix&hotfixLane=true",
+        "title": "Create Release Version - Stella Ops QA 1773540847164",
+        "heading": "Create Release Version",
+        "alerts": [],
+        "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-confidence-journey\\09-hotfix-review-and-create.png",
+        "createUrl": "https://stella-ops.local/releases/versions/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&type=hotfix&hotfixLane=true"
+      }
+    }
+  ],
+  "runtime": {
+    "consoleErrors": [],
+    "pageErrors": [],
+    "requestFailures": [],
+    "responseErrors": []
+  },
+  "failedStepCount": 0,
+  "runtimeIssueCount": 0,
+  "runtimeIssues": []
+}

src/Web/StellaOps.Web/output/playwright/live-release-confidence-journey.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-release-create-journey.json

@@ -0,0 +1,37 @@
+{
+  "checkedAtUtc": "2026-03-15T10:35:59.662Z",
+  "journeys": [
+    {
+      "label": "standard-create",
+      "route": "/releases/versions/new?type=standard",
+      "type": "standard",
+      "initialUrl": "https://stella-ops.local/releases/versions/new?type=standard&tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "finalUrl": "https://stella-ops.local/releases/bundles/b2f319b7-b600-4c29-aed1-081e6593fd10/versions/619da2c2-4158-425b-9495-f24eaed1ac68?type=standard&tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&source=release-create&returnTo=%2Freleases%2Fversions",
+      "heading": "Create Release Version",
+      "searchQuery": "checkout-api",
+      "alerts": [],
+      "responseErrors": [],
+      "scopeIssues": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-create-journey\\standard-create.png",
+      "ok": true
+    },
+    {
+      "label": "hotfix-create",
+      "route": "/releases/hotfixes/new",
+      "type": "hotfix",
+      "initialUrl": "https://stella-ops.local/releases/versions/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&type=hotfix&hotfixLane=true",
+      "finalUrl": "https://stella-ops.local/releases/bundles/f65aebaf-d9d9-4d8e-90b5-c20873348fba/versions/fbb61d55-7cfc-4515-a7c5-687ae62cbbb2?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&type=hotfix&hotfixLane=true&source=release-create&returnTo=%2Freleases%2Fversions",
+      "heading": "Create Release Version",
+      "searchQuery": "checkout-api",
+      "alerts": [],
+      "responseErrors": [],
+      "scopeIssues": [],
+      "screenshotPath": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\release-create-journey\\hotfix-create.png",
+      "ok": true
+    }
+  ],
+  "failedCheckCount": 0,
+  "failedChecks": [],
+  "runtimeIssueCount": 0,
+  "runtimeIssues": []
+}

src/Web/StellaOps.Web/output/playwright/live-setup-admin-action-sweep.json

@@ -0,0 +1,124 @@
+{
+  "generatedAtUtc": "2026-03-15T10:39:33.082Z",
+  "durationMs": 35012,
+  "results": [
+    {
+      "action": "tenant-branding-editor",
+      "ok": true,
+      "titleEditable": true,
+      "applyDisabledBefore": true,
+      "applyDisabledAfter": false,
+      "snapshot": {
+        "label": "branding-after-edit",
+        "url": "https://stella-ops.local/setup/tenant-branding?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Tenant & Branding - Stella Ops QA 1773540847164",
+        "heading": "Branding Configuration",
+        "alerts": []
+      }
+    },
+    {
+      "action": "notifications-create-channel-route",
+      "ok": true,
+      "channelRouteOk": true,
+      "createDisabledWithoutSecret": true,
+      "createDisabledWithSecret": false,
+      "snapshot": {
+        "label": "notifications-create-channel-route",
+        "url": "https://stella-ops.local/setup/notifications/channels",
+        "title": "Notifications - Stella Ops QA 1773540847164",
+        "heading": "Notification Administration",
+        "alerts": []
+      }
+    },
+    {
+      "action": "notifications-create-rule",
+      "ok": true,
+      "channelOptions": [
+        "Select channel...",
+        " qa-email-1773571140610 (Email) "
+      ],
+      "snapshot": {
+        "label": "notifications-create-rule",
+        "url": "https://stella-ops.local/setup/notifications/rules/new?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Notifications - Stella Ops QA 1773540847164",
+        "heading": "Notification Administration",
+        "alerts": []
+      }
+    },
+    {
+      "action": "notifications-delete-created-channel",
+      "ok": true,
+      "snapshot": {
+        "label": "notifications-delete-created-channel",
+        "url": "https://stella-ops.local/setup/notifications/channels?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Notifications - Stella Ops QA 1773540847164",
+        "heading": "Notification Administration",
+        "alerts": []
+      }
+    },
+    {
+      "action": "usage-configure-quotas",
+      "ok": true,
+      "snapshot": {
+        "label": "usage-configure-quotas",
+        "url": "https://stella-ops.local/ops/operations/quotas",
+        "title": "Quotas & Limits - Stella Ops QA 1773540847164",
+        "heading": "Operator Quota Dashboard",
+        "alerts": []
+      }
+    },
+    {
+      "action": "system-view-details",
+      "ok": true,
+      "snapshot": {
+        "label": "system-View Details",
+        "url": "https://stella-ops.local/ops/operations/system-health",
+        "title": "System Health - Stella Ops QA 1773540847164",
+        "heading": "System Health",
+        "alerts": []
+      }
+    },
+    {
+      "action": "system-run-doctor",
+      "ok": true,
+      "snapshot": {
+        "label": "system-Run Doctor",
+        "url": "https://stella-ops.local/ops/operations/doctor",
+        "title": "Doctor Diagnostics - Stella Ops QA 1773540847164",
+        "heading": "Doctor Diagnostics",
+        "alerts": []
+      }
+    },
+    {
+      "action": "system-view-slos",
+      "ok": true,
+      "snapshot": {
+        "label": "system-View SLOs",
+        "url": "https://stella-ops.local/ops/operations/health-slo",
+        "title": "Health & SLO - Stella Ops QA 1773540847164",
+        "heading": "Platform Health",
+        "alerts": []
+      }
+    },
+    {
+      "action": "system-view-jobs",
+      "ok": true,
+      "snapshot": {
+        "label": "system-View Jobs",
+        "url": "https://stella-ops.local/ops/operations/jobs-queues",
+        "title": "Jobs & Queues - Stella Ops QA 1773540847164",
+        "heading": "Jobs & Queues",
+        "alerts": []
+      }
+    }
+  ],
+  "runtime": {
+    "consoleErrors": [],
+    "pageErrors": [],
+    "requestFailures": [],
+    "responseErrors": []
+  },
+  "failedActionCount": 0,
+  "runtimeIssueCount": 0,
+  "runtimeIssues": []
+}

src/Web/StellaOps.Web/output/playwright/live-uncovered-surface-action-sweep.json

@@ -0,0 +1,921 @@
+{
+  "generatedAtUtc": "2026-03-15T10:44:32.322Z",
+  "baseUrl": "https://stella-ops.local",
+  "actionCount": 69,
+  "passedActionCount": 69,
+  "failedActionCount": 0,
+  "failedActions": [],
+  "results": [
+    {
+      "action": "/releases/overview -> link:Release Versions",
+      "ok": true,
+      "expectedPath": "/releases/versions",
+      "finalUrl": "https://stella-ops.local/releases/versions?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/overview -> link:Release Versions",
+        "url": "https://stella-ops.local/releases/versions?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Release Versions - Stella Ops QA 1773540847164",
+        "heading": "Release Versions",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/overview -> link:Release Runs",
+      "ok": true,
+      "expectedPath": "/releases/runs",
+      "finalUrl": "https://stella-ops.local/releases/runs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/overview -> link:Release Runs",
+        "url": "https://stella-ops.local/releases/runs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Release Runs - Stella Ops QA 1773540847164",
+        "heading": "Release Runs",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/overview -> link:Approvals Queue",
+      "ok": true,
+      "expectedPath": "/releases/approvals",
+      "finalUrl": "https://stella-ops.local/releases/approvals?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/overview -> link:Approvals Queue",
+        "url": "https://stella-ops.local/releases/approvals?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/overview -> link:Hotfixes",
+      "ok": true,
+      "expectedPath": "/releases/hotfixes",
+      "finalUrl": "https://stella-ops.local/releases/hotfixes",
+      "snapshot": {
+        "label": "/releases/overview -> link:Hotfixes",
+        "url": "https://stella-ops.local/releases/hotfixes",
+        "title": "Hotfixes - Stella Ops QA 1773540847164",
+        "heading": "Hotfixes",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/overview -> link:Promotions",
+      "ok": true,
+      "expectedPath": "/releases/promotions",
+      "finalUrl": "https://stella-ops.local/releases/promotions",
+      "snapshot": {
+        "label": "/releases/overview -> link:Promotions",
+        "url": "https://stella-ops.local/releases/promotions",
+        "title": "Promotions - Stella Ops QA 1773540847164",
+        "heading": "Promotions",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/overview -> link:Deployment History",
+      "ok": true,
+      "expectedPath": "/releases/deployments",
+      "finalUrl": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/overview -> link:Deployment History",
+        "url": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Deployment History - Stella Ops QA 1773540847164",
+        "heading": "Deployments",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/runs -> link:Timeline",
+      "ok": true,
+      "expectedPath": "/releases/runs?view=timeline",
+      "finalUrl": "https://stella-ops.local/releases/runs?view=timeline",
+      "snapshot": {
+        "label": "/releases/runs -> link:Timeline",
+        "url": "https://stella-ops.local/releases/runs?view=timeline",
+        "title": "Release Runs - Stella Ops QA 1773540847164",
+        "heading": "Release Runs",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/runs -> link:Table",
+      "ok": true,
+      "expectedPath": "/releases/runs?view=table",
+      "finalUrl": "https://stella-ops.local/releases/runs?view=table",
+      "snapshot": {
+        "label": "/releases/runs -> link:Table",
+        "url": "https://stella-ops.local/releases/runs?view=table",
+        "title": "Release Runs - Stella Ops QA 1773540847164",
+        "heading": "Release Runs",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/runs -> link:Correlations",
+      "ok": true,
+      "expectedPath": "/releases/runs?view=correlations",
+      "finalUrl": "https://stella-ops.local/releases/runs?view=correlations",
+      "snapshot": {
+        "label": "/releases/runs -> link:Correlations",
+        "url": "https://stella-ops.local/releases/runs?view=correlations",
+        "title": "Release Runs - Stella Ops QA 1773540847164",
+        "heading": "Release Runs",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/approvals -> link:Pending",
+      "ok": true,
+      "expectedPath": "/releases/approvals?tab=pending",
+      "finalUrl": "https://stella-ops.local/releases/approvals?tab=pending",
+      "snapshot": {
+        "label": "/releases/approvals -> link:Pending",
+        "url": "https://stella-ops.local/releases/approvals?tab=pending",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/approvals -> link:Approved",
+      "ok": true,
+      "expectedPath": "/releases/approvals?tab=approved",
+      "finalUrl": "https://stella-ops.local/releases/approvals?tab=approved",
+      "snapshot": {
+        "label": "/releases/approvals -> link:Approved",
+        "url": "https://stella-ops.local/releases/approvals?tab=approved",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/approvals -> link:Rejected",
+      "ok": true,
+      "expectedPath": "/releases/approvals?tab=rejected",
+      "finalUrl": "https://stella-ops.local/releases/approvals?tab=rejected",
+      "snapshot": {
+        "label": "/releases/approvals -> link:Rejected",
+        "url": "https://stella-ops.local/releases/approvals?tab=rejected",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/approvals -> link:Expiring",
+      "ok": true,
+      "expectedPath": "/releases/approvals?tab=expiring",
+      "finalUrl": "https://stella-ops.local/releases/approvals?tab=expiring",
+      "snapshot": {
+        "label": "/releases/approvals -> link:Expiring",
+        "url": "https://stella-ops.local/releases/approvals?tab=expiring",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/approvals -> link:My Team",
+      "ok": true,
+      "expectedPath": "/releases/approvals?tab=my-team",
+      "finalUrl": "https://stella-ops.local/releases/approvals?tab=my-team",
+      "snapshot": {
+        "label": "/releases/approvals -> link:My Team",
+        "url": "https://stella-ops.local/releases/approvals?tab=my-team",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/environments -> link:Open Environment",
+      "ok": true,
+      "expectedPath": "/setup/topology/environments/stage/posture",
+      "finalUrl": "https://stella-ops.local/setup/topology/environments/stage/posture?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+      "snapshot": {
+        "label": "/releases/environments -> link:Open Environment",
+        "url": "https://stella-ops.local/setup/topology/environments/stage/posture?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+        "title": "Environment Detail - Stella Ops QA 1773540847164",
+        "heading": "Topology",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/environments -> link:Open Targets",
+      "ok": true,
+      "expectedPath": "/setup/topology/targets",
+      "finalUrl": "https://stella-ops.local/setup/topology/targets?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+      "snapshot": {
+        "label": "/releases/environments -> link:Open Targets",
+        "url": "https://stella-ops.local/setup/topology/targets?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+        "title": "Targets - Stella Ops QA 1773540847164",
+        "heading": "Topology",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/environments -> link:Open Agents",
+      "ok": true,
+      "expectedPath": "/setup/topology/agents",
+      "finalUrl": "https://stella-ops.local/setup/topology/agents?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+      "snapshot": {
+        "label": "/releases/environments -> link:Open Agents",
+        "url": "https://stella-ops.local/setup/topology/agents?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+        "title": "Agent Fleet - Stella Ops QA 1773540847164",
+        "heading": "Topology",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/environments -> link:Open Runs",
+      "ok": true,
+      "expectedPath": "/releases/runs",
+      "finalUrl": "https://stella-ops.local/releases/runs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+      "snapshot": {
+        "label": "/releases/environments -> link:Open Runs",
+        "url": "https://stella-ops.local/releases/runs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&environment=stage",
+        "title": "Release Runs - Stella Ops QA 1773540847164",
+        "heading": "Release Runs",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/investigation/deploy-diff -> link:Open Deployments",
+      "ok": true,
+      "expectedPath": "/releases/deployments",
+      "finalUrl": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/investigation/deploy-diff -> link:Open Deployments",
+        "url": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Deployment History - Stella Ops QA 1773540847164",
+        "heading": "Deployments",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/investigation/deploy-diff -> link:Open Releases Overview",
+      "ok": true,
+      "expectedPath": "/releases/overview",
+      "finalUrl": "https://stella-ops.local/releases/overview?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/investigation/deploy-diff -> link:Open Releases Overview",
+        "url": "https://stella-ops.local/releases/overview?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Release Ops Overview - Stella Ops QA 1773540847164",
+        "heading": "Release Ops Overview",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/investigation/change-trace -> link:Open Deployments",
+      "ok": true,
+      "expectedPath": "/releases/deployments",
+      "finalUrl": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/investigation/change-trace -> link:Open Deployments",
+        "url": "https://stella-ops.local/releases/deployments?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Deployment History - Stella Ops QA 1773540847164",
+        "heading": "Deployments",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/posture -> link:Open triage",
+      "ok": true,
+      "expectedPath": "/security/triage",
+      "finalUrl": "https://stella-ops.local/security/triage?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&pivot=cve",
+      "snapshot": {
+        "label": "/security/posture -> link:Open triage",
+        "url": "https://stella-ops.local/security/triage?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&pivot=cve",
+        "title": "Security Triage - Stella Ops QA 1773540847164",
+        "heading": "Security / Triage",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/posture -> link:Disposition",
+      "ok": true,
+      "expectedPath": "/security/disposition",
+      "finalUrl": "https://stella-ops.local/security/disposition?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=vex-library",
+      "snapshot": {
+        "label": "/security/posture -> link:Disposition",
+        "url": "https://stella-ops.local/security/disposition?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=vex-library",
+        "title": "Disposition Center - Stella Ops QA 1773540847164",
+        "heading": "Security / Advisories & VEX",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/posture -> link:Configure sources",
+      "ok": true,
+      "expectedPath": "/ops/integrations/advisory-vex-sources",
+      "finalUrl": "https://stella-ops.local/ops/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/security/posture -> link:Configure sources",
+        "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Advisory & VEX Sources - Stella Ops QA 1773540847164",
+        "heading": "Integrations",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/posture -> link:Open reachability coverage board",
+      "ok": true,
+      "expectedPath": "/security/reachability",
+      "finalUrl": "https://stella-ops.local/security/reachability?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/security/posture -> link:Open reachability coverage board",
+        "url": "https://stella-ops.local/security/reachability?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Reachability - Stella Ops QA 1773540847164",
+        "heading": "Reachability",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/advisories-vex -> link:Providers",
+      "ok": true,
+      "expectedPath": "/security/advisories-vex?tab=providers",
+      "finalUrl": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=providers",
+      "snapshot": {
+        "label": "/security/advisories-vex -> link:Providers",
+        "url": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=providers",
+        "title": "Advisories & VEX - Stella Ops QA 1773540847164",
+        "heading": "Security / Advisories & VEX",
+        "alerts": [
+          "Doctor Run Complete1 failed, 1 warnings View Details"
+        ]
+      }
+    },
+    {
+      "action": "/security/advisories-vex -> link:VEX Library",
+      "ok": true,
+      "expectedPath": "/security/advisories-vex?tab=vex-library",
+      "finalUrl": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=vex-library",
+      "snapshot": {
+        "label": "/security/advisories-vex -> link:VEX Library",
+        "url": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=vex-library",
+        "title": "Advisories & VEX - Stella Ops QA 1773540847164",
+        "heading": "Security / Advisories & VEX",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/advisories-vex -> link:Issuer Trust",
+      "ok": true,
+      "expectedPath": "/security/advisories-vex?tab=issuer-trust",
+      "finalUrl": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=issuer-trust",
+      "snapshot": {
+        "label": "/security/advisories-vex -> link:Issuer Trust",
+        "url": "https://stella-ops.local/security/advisories-vex?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=issuer-trust",
+        "title": "Advisories & VEX - Stella Ops QA 1773540847164",
+        "heading": "Security / Advisories & VEX",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/disposition -> link:Conflicts",
+      "ok": true,
+      "expectedPath": "/security/disposition?tab=conflicts",
+      "finalUrl": "https://stella-ops.local/security/disposition?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=conflicts",
+      "snapshot": {
+        "label": "/security/disposition -> link:Conflicts",
+        "url": "https://stella-ops.local/security/disposition?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=conflicts",
+        "title": "Disposition Center - Stella Ops QA 1773540847164",
+        "heading": "Security / Advisories & VEX",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/supply-chain-data -> link:SBOM Graph",
+      "ok": true,
+      "expectedPath": "/security/supply-chain-data/graph",
+      "finalUrl": "https://stella-ops.local/security/supply-chain-data/graph",
+      "snapshot": {
+        "label": "/security/supply-chain-data -> link:SBOM Graph",
+        "url": "https://stella-ops.local/security/supply-chain-data/graph",
+        "title": "Supply-Chain Data - Stella Ops QA 1773540847164",
+        "heading": "Security / Supply-Chain Data",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/supply-chain-data -> link:Reachability",
+      "ok": true,
+      "expectedPath": "/security/reachability",
+      "finalUrl": "https://stella-ops.local/security/reachability",
+      "snapshot": {
+        "label": "/security/supply-chain-data -> link:Reachability",
+        "url": "https://stella-ops.local/security/reachability",
+        "title": "Reachability - Stella Ops QA 1773540847164",
+        "heading": "Reachability",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/overview -> link:Audit Log",
+      "ok": true,
+      "expectedPath": "/evidence/audit-log",
+      "finalUrl": "https://stella-ops.local/evidence/audit-log",
+      "snapshot": {
+        "label": "/evidence/overview -> link:Audit Log",
+        "url": "https://stella-ops.local/evidence/audit-log",
+        "title": "Audit Log - Stella Ops QA 1773540847164",
+        "heading": "Unified Audit Log",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/overview -> link:Export Center",
+      "ok": true,
+      "expectedPath": "/evidence/exports",
+      "finalUrl": "https://stella-ops.local/evidence/exports",
+      "snapshot": {
+        "label": "/evidence/overview -> link:Export Center",
+        "url": "https://stella-ops.local/evidence/exports",
+        "title": "Export Center - Stella Ops QA 1773540847164",
+        "heading": "Export Center",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/overview -> link:Replay & Verify",
+      "ok": true,
+      "expectedPath": "/evidence/verify-replay",
+      "finalUrl": "https://stella-ops.local/evidence/verify-replay",
+      "snapshot": {
+        "label": "/evidence/overview -> link:Replay & Verify",
+        "url": "https://stella-ops.local/evidence/verify-replay",
+        "title": "Verify & Replay - Stella Ops QA 1773540847164",
+        "heading": "Verdict Replay",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/audit-log -> link:View All Events",
+      "ok": true,
+      "expectedPath": "/evidence/audit-log/events",
+      "finalUrl": "https://stella-ops.local/evidence/audit-log/events",
+      "snapshot": {
+        "label": "/evidence/audit-log -> link:View All Events",
+        "url": "https://stella-ops.local/evidence/audit-log/events",
+        "title": "Audit Log - Stella Ops QA 1773540847164",
+        "heading": "Audit Events",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/audit-log -> link:Export",
+      "ok": true,
+      "expectedPath": "/evidence/exports",
+      "finalUrl": "https://stella-ops.local/evidence/exports",
+      "snapshot": {
+        "label": "/evidence/audit-log -> link:Export",
+        "url": "https://stella-ops.local/evidence/exports",
+        "title": "Export Center - Stella Ops QA 1773540847164",
+        "heading": "Export Center",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/audit-log -> link:/Policy Audit/i",
+      "ok": true,
+      "expectedPath": "/evidence/audit-log/policy",
+      "finalUrl": "https://stella-ops.local/evidence/audit-log/policy",
+      "snapshot": {
+        "label": "/evidence/audit-log -> link:/Policy Audit/i",
+        "url": "https://stella-ops.local/evidence/audit-log/policy",
+        "title": "Audit Log - Stella Ops QA 1773540847164",
+        "heading": "Policy Audit Events",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/health-slo -> link:View Full Timeline",
+      "ok": true,
+      "expectedPath": "/ops/operations/health-slo/incidents",
+      "finalUrl": "https://stella-ops.local/ops/operations/health-slo/incidents",
+      "snapshot": {
+        "label": "/ops/operations/health-slo -> link:View Full Timeline",
+        "url": "https://stella-ops.local/ops/operations/health-slo/incidents",
+        "title": "Health & SLO - Stella Ops QA 1773540847164",
+        "heading": "Incident Timeline",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/feeds-airgap -> link:Configure Sources",
+      "ok": true,
+      "expectedPath": "/ops/integrations/advisory-vex-sources",
+      "finalUrl": "https://stella-ops.local/ops/integrations/advisory-vex-sources",
+      "snapshot": {
+        "label": "/ops/operations/feeds-airgap -> link:Configure Sources",
+        "url": "https://stella-ops.local/ops/integrations/advisory-vex-sources",
+        "title": "Advisory & VEX Sources - Stella Ops QA 1773540847164",
+        "heading": "Integrations",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/feeds-airgap -> link:Open Offline Bundles",
+      "ok": true,
+      "expectedPath": "/ops/operations/offline-kit/bundles",
+      "finalUrl": "https://stella-ops.local/ops/operations/offline-kit/bundles",
+      "snapshot": {
+        "label": "/ops/operations/feeds-airgap -> link:Open Offline Bundles",
+        "url": "https://stella-ops.local/ops/operations/offline-kit/bundles",
+        "title": "Bundle Management - Stella Ops QA 1773540847164",
+        "heading": "Offline Kit Management",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/feeds-airgap -> link:Version Locks",
+      "ok": true,
+      "expectedPath": "/ops/operations/feeds-airgap?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=version-locks",
+      "finalUrl": "https://stella-ops.local/ops/operations/feeds-airgap?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=version-locks",
+      "snapshot": {
+        "label": "/ops/operations/feeds-airgap -> link:Version Locks",
+        "url": "https://stella-ops.local/ops/operations/feeds-airgap?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=version-locks",
+        "title": "Feeds & Airgap - Stella Ops QA 1773540847164",
+        "heading": "Feeds & Airgap",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/data-integrity -> link:Feeds Freshness WARN Impact: BLOCKING NVD feed stale by 3h 12m",
+      "ok": true,
+      "expectedPath": "/ops/operations/data-integrity/feeds-freshness",
+      "finalUrl": "https://stella-ops.local/ops/operations/data-integrity/feeds-freshness",
+      "snapshot": {
+        "label": "/ops/operations/data-integrity -> link:Feeds Freshness WARN Impact: BLOCKING NVD feed stale by 3h 12m",
+        "url": "https://stella-ops.local/ops/operations/data-integrity/feeds-freshness",
+        "title": "Feeds Freshness - StellaOps - Stella Ops QA 1773540847164",
+        "heading": "Feeds Freshness",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/data-integrity -> link:Hotfix 1.2.4",
+      "ok": true,
+      "expectedPath": "/releases/approvals?releaseId=rel-hotfix-124",
+      "finalUrl": "https://stella-ops.local/releases/approvals?releaseId=rel-hotfix-124",
+      "snapshot": {
+        "label": "/ops/operations/data-integrity -> link:Hotfix 1.2.4",
+        "url": "https://stella-ops.local/releases/approvals?releaseId=rel-hotfix-124",
+        "title": "Approvals - Stella Ops QA 1773540847164",
+        "heading": "Release Run Approvals Queue",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/jobengine -> link:Scheduler Runs",
+      "ok": true,
+      "expectedPath": "/ops/operations/scheduler/runs",
+      "finalUrl": "https://stella-ops.local/ops/operations/scheduler/runs",
+      "snapshot": {
+        "label": "/ops/operations/jobengine -> link:Scheduler Runs",
+        "url": "https://stella-ops.local/ops/operations/scheduler/runs",
+        "title": "Scheduler - Stella Ops QA 1773540847164",
+        "heading": "Scheduler Runs",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/jobengine -> link:/Execution Quotas/i",
+      "ok": true,
+      "expectedPath": "/ops/operations/jobengine/quotas",
+      "finalUrl": "https://stella-ops.local/ops/operations/jobengine/quotas",
+      "snapshot": {
+        "label": "/ops/operations/jobengine -> link:/Execution Quotas/i",
+        "url": "https://stella-ops.local/ops/operations/jobengine/quotas",
+        "title": "JobEngine Quotas - Stella Ops QA 1773540847164",
+        "heading": "JobEngine Quotas",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/offline-kit -> link:Bundles",
+      "ok": true,
+      "expectedPath": "/ops/operations/offline-kit/bundles",
+      "finalUrl": "https://stella-ops.local/ops/operations/offline-kit/bundles",
+      "snapshot": {
+        "label": "/ops/operations/offline-kit -> link:Bundles",
+        "url": "https://stella-ops.local/ops/operations/offline-kit/bundles",
+        "title": "Bundle Management - Stella Ops QA 1773540847164",
+        "heading": "Offline Kit Management",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/offline-kit -> link:JWKS",
+      "ok": true,
+      "expectedPath": "/ops/operations/offline-kit/jwks",
+      "finalUrl": "https://stella-ops.local/ops/operations/offline-kit/jwks",
+      "snapshot": {
+        "label": "/ops/operations/offline-kit -> link:JWKS",
+        "url": "https://stella-ops.local/ops/operations/offline-kit/jwks",
+        "title": "JWKS Management - Stella Ops QA 1773540847164",
+        "heading": "Offline Kit Management",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/versions -> button:Create Release Version",
+      "ok": true,
+      "expectedPath": "/releases/versions/new",
+      "finalUrl": "https://stella-ops.local/releases/versions/new?type=standard",
+      "snapshot": {
+        "label": "/releases/versions -> button:Create Release Version",
+        "url": "https://stella-ops.local/releases/versions/new?type=standard",
+        "title": "Create Release Version - Stella Ops QA 1773540847164",
+        "heading": "Create Release Version",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/versions -> button:Create Hotfix Run",
+      "ok": true,
+      "expectedPath": "/releases/versions/new",
+      "finalUrl": "https://stella-ops.local/releases/versions/new?type=hotfix&hotfixLane=true",
+      "snapshot": {
+        "label": "/releases/versions -> button:Create Hotfix Run",
+        "url": "https://stella-ops.local/releases/versions/new?type=hotfix&hotfixLane=true",
+        "title": "Create Release Version - Stella Ops QA 1773540847164",
+        "heading": "Create Release Version",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/versions -> button:Search",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/releases/versions?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/versions -> button:Search",
+        "url": "https://stella-ops.local/releases/versions?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Release Versions - Stella Ops QA 1773540847164",
+        "heading": "Release Versions",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/versions -> button:Clear",
+      "ok": true,
+      "reason": "disabled-by-design",
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/releases/versions?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/versions -> button:Clear",
+        "url": "https://stella-ops.local/releases/versions?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Release Versions - Stella Ops QA 1773540847164",
+        "heading": "Release Versions",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/investigation/timeline -> button:Export",
+      "ok": true,
+      "reason": "disabled-by-design",
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/releases/investigation/timeline?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/investigation/timeline -> button:Export",
+        "url": "https://stella-ops.local/releases/investigation/timeline?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Investigation Timeline - Stella Ops QA 1773540847164",
+        "heading": "Timeline",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/releases/investigation/change-trace -> button:Export",
+      "ok": true,
+      "reason": "disabled-by-design",
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/releases/investigation/change-trace?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/releases/investigation/change-trace -> button:Export",
+        "url": "https://stella-ops.local/releases/investigation/change-trace?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Change Trace - Stella Ops QA 1773540847164",
+        "heading": "Change Trace",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/sbom-lake -> button:Refresh",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/security/sbom-lake?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/security/sbom-lake -> button:Refresh",
+        "url": "https://stella-ops.local/security/sbom-lake?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "SBOM Lake - Stella Ops QA 1773540847164",
+        "heading": "SBOM Lake",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/sbom-lake -> button:Clear",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/security/sbom-lake?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&days=30",
+      "snapshot": {
+        "label": "/security/sbom-lake -> button:Clear",
+        "url": "https://stella-ops.local/security/sbom-lake?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&days=30",
+        "title": "SBOM Lake - Stella Ops QA 1773540847164",
+        "heading": "SBOM Lake",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/reachability -> button:Witnesses",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/security/reachability?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/security/reachability -> button:Witnesses",
+        "url": "https://stella-ops.local/security/reachability?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Reachability - Stella Ops QA 1773540847164",
+        "heading": "Reachability",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/security/reachability -> button:/PoE|Proof of Exposure/i",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/security/reachability/poe?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=poe",
+      "snapshot": {
+        "label": "/security/reachability -> button:/PoE|Proof of Exposure/i",
+        "url": "https://stella-ops.local/security/reachability/poe?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d&tab=poe",
+        "title": "Proof Of Exposure - Stella Ops QA 1773540847164",
+        "heading": "Reachability",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/capsules -> button:Search",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/evidence/capsules?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/evidence/capsules -> button:Search",
+        "url": "https://stella-ops.local/evidence/capsules?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Decision Capsules - Stella Ops QA 1773540847164",
+        "heading": "Decision Capsules",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/threads -> button:Search",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/evidence/threads?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/evidence/threads -> button:Search",
+        "url": "https://stella-ops.local/evidence/threads?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Evidence Threads - Stella Ops QA 1773540847164",
+        "heading": "Evidence Threads",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/evidence/proofs -> button:Search",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/evidence/proofs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/evidence/proofs -> button:Search",
+        "url": "https://stella-ops.local/evidence/proofs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Proof Chains - Stella Ops QA 1773540847164",
+        "heading": "Proof Chains",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/system-health -> button:Services",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/system-health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/system-health -> button:Services",
+        "url": "https://stella-ops.local/ops/operations/system-health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "System Health - Stella Ops QA 1773540847164",
+        "heading": "System Health",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/system-health -> button:Incidents",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/system-health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/system-health -> button:Incidents",
+        "url": "https://stella-ops.local/ops/operations/system-health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "System Health - Stella Ops QA 1773540847164",
+        "heading": "System Health",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/system-health -> button:Quick Diagnostics",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/system-health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/system-health -> button:Quick Diagnostics",
+        "url": "https://stella-ops.local/ops/operations/system-health?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "System Health - Stella Ops QA 1773540847164",
+        "heading": "System Health",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/scheduler -> button:Manage Schedules",
+      "ok": true,
+      "expectedPath": "/ops/operations/scheduler/schedules",
+      "finalUrl": "https://stella-ops.local/ops/operations/scheduler/schedules",
+      "snapshot": {
+        "label": "/ops/operations/scheduler -> button:Manage Schedules",
+        "url": "https://stella-ops.local/ops/operations/scheduler/schedules",
+        "title": "Scheduler - Stella Ops QA 1773540847164",
+        "heading": "Schedule Management",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/scheduler -> button:Worker Fleet",
+      "ok": true,
+      "expectedPath": "/ops/operations/scheduler/workers",
+      "finalUrl": "https://stella-ops.local/ops/operations/scheduler/workers",
+      "snapshot": {
+        "label": "/ops/operations/scheduler -> button:Worker Fleet",
+        "url": "https://stella-ops.local/ops/operations/scheduler/workers",
+        "title": "Scheduler - Stella Ops QA 1773540847164",
+        "heading": "Worker Fleet",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/doctor -> button:Quick Check",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/doctor?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/doctor -> button:Quick Check",
+        "url": "https://stella-ops.local/ops/operations/doctor?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Doctor Diagnostics - Stella Ops QA 1773540847164",
+        "heading": "Doctor Diagnostics",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/signals -> button:Refresh",
+      "ok": true,
+      "reason": "disabled-by-design",
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/signals?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/signals -> button:Refresh",
+        "url": "https://stella-ops.local/ops/operations/signals?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Signals - Stella Ops QA 1773540847164",
+        "heading": "Signals Runtime Dashboard",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/packs -> button:Refresh",
+      "ok": true,
+      "reason": "disabled-by-design",
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/packs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/packs -> button:Refresh",
+        "url": "https://stella-ops.local/ops/operations/packs?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Pack Registry - Stella Ops QA 1773540847164",
+        "heading": "Pack Registry Browser",
+        "alerts": []
+      }
+    },
+    {
+      "action": "/ops/operations/status -> button:Refresh",
+      "ok": true,
+      "expectedPath": null,
+      "finalUrl": "https://stella-ops.local/ops/operations/status?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+      "snapshot": {
+        "label": "/ops/operations/status -> button:Refresh",
+        "url": "https://stella-ops.local/ops/operations/status?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "System Status - Stella Ops QA 1773540847164",
+        "heading": "Console Status",
+        "alerts": []
+      }
+    }
+  ],
+  "runtime": {
+    "consoleErrors": [],
+    "pageErrors": [],
+    "requestFailures": [],
+    "responseErrors": []
+  },
+  "runtimeIssueCount": 0
+}

src/Web/StellaOps.Web/output/playwright/live-uncovered-surface-action-sweep.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}

src/Web/StellaOps.Web/output/playwright/live-user-reported-admin-trust-check.json

@@ -0,0 +1,294 @@
+{
+  "generatedAtUtc": "2026-03-15T10:28:54.414Z",
+  "baseUrl": "https://stella-ops.local",
+  "stepLog": [
+    {
+      "timestampUtc": "2026-03-15T10:26:40.234Z",
+      "step": "bootstrap",
+      "detail": "baseUrl=https://stella-ops.local"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:26:40.353Z",
+      "step": "browser-launched",
+      "detail": ""
+    },
+    {
+      "timestampUtc": "2026-03-15T10:26:46.549Z",
+      "step": "frontdoor-authenticated",
+      "detail": "C:\\dev\\New folder\\git.stella-ops.org\\src\\Web\\StellaOps.Web\\output\\playwright\\live-user-reported-admin-trust-check.state.json"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:26:46.658Z",
+      "step": "page-ready",
+      "detail": ""
+    },
+    {
+      "timestampUtc": "2026-03-15T10:26:46.658Z",
+      "step": "navigate",
+      "detail": "/setup/identity-access"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:26:48.341Z",
+      "step": "journey",
+      "detail": "identity-users"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:26:58.611Z",
+      "step": "journey",
+      "detail": "identity-roles"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:27:07.166Z",
+      "step": "journey",
+      "detail": "identity-tenants"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:27:17.384Z",
+      "step": "navigate",
+      "detail": "/setup/trust-signing"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:27:20.110Z",
+      "step": "journey",
+      "detail": "trust-overview"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:00.145Z",
+      "step": "journey",
+      "detail": "trust-keys"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:07.227Z",
+      "step": "journey",
+      "detail": "trust-issuers"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:17.926Z",
+      "step": "journey",
+      "detail": "trust-certificates"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:28.115Z",
+      "step": "journey",
+      "detail": "trust-keys-revoke"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:33.052Z",
+      "step": "journey",
+      "detail": "trust-analytics"
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:54.357Z",
+      "step": "journey-complete",
+      "detail": ""
+    },
+    {
+      "timestampUtc": "2026-03-15T10:28:54.357Z",
+      "step": "cleanup",
+      "detail": ""
+    }
+  ],
+  "artifacts": {
+    "user": {
+      "username": "qa-user-1773570406658",
+      "email": "qa-user-1773570406658@stella-ops.local",
+      "displayName": "QA User 1773570406658",
+      "updatedDisplayName": "QA User 1773570406658 Updated"
+    },
+    "role": {
+      "name": "qa-role-1773570406658",
+      "description": "QA role 1773570406658",
+      "updatedDescription": "QA role 1773570406658 updated"
+    },
+    "tenant": {
+      "id": "qa-tenant-1773570406658",
+      "displayName": "QA Tenant 1773570406658",
+      "updatedDisplayName": "QA Tenant 1773570406658 Updated"
+    },
+    "key": {
+      "alias": "qa-signing-key-1773570406658"
+    },
+    "issuer": {
+      "displayName": "QA Issuer 1773570406658",
+      "uri": "https://issuer-1773570406658.qa.stella-ops.local/root"
+    },
+    "certificate": {
+      "serial": "QA-SER-1773570406658"
+    }
+  },
+  "results": [
+    {
+      "action": "identity-users",
+      "detail": {
+        "leastPrivilegeCard": "viewerLEAST PRIVILEGE Read-only access",
+        "invalidEmailError": "Enter a valid email address before creating or updating a user.",
+        "createBanner": "Created user qa-user-1773570406658.",
+        "created": true,
+        "updatedDisplayNameVisible": true,
+        "disabled": true,
+        "reenabled": true
+      },
+      "snapshot": {
+        "label": "identity-users",
+        "url": "https://stella-ops.local/setup/identity-access?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Identity & Access - Stella Ops QA 1773540847164",
+        "heading": "Identity & Access",
+        "alerts": [
+          "Enabled qa-user-1773570406658.",
+          "Doctor Run Complete1 failed, 1 warnings View Details"
+        ]
+      }
+    },
+    {
+      "action": "identity-roles",
+      "detail": {
+        "scopeGroups": 6,
+        "scopePickCount": 85,
+        "builtInDetailTagCount": 74,
+        "createBanner": "Created role qa-role-1773570406658.",
+        "created": true,
+        "detailScopeCount": 2,
+        "impactMessage": "Impact: No users are currently assigned to this role.",
+        "updatedDescriptionVisible": true
+      },
+      "snapshot": {
+        "label": "identity-roles",
+        "url": "https://stella-ops.local/setup/identity-access?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Identity & Access - Stella Ops QA 1773540847164",
+        "heading": "Identity & Access",
+        "alerts": [
+          "Updated role qa-role-1773570406658.",
+          "Doctor Run Complete1 failed, 1 warnings View Details"
+        ]
+      }
+    },
+    {
+      "action": "identity-tenants",
+      "detail": {
+        "createBanner": "Created tenant QA Tenant 1773570406658.",
+        "created": true,
+        "updatedDisplayNameVisible": true,
+        "suspended": true,
+        "resumed": true
+      },
+      "snapshot": {
+        "label": "identity-tenants",
+        "url": "https://stella-ops.local/setup/identity-access?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Identity & Access - Stella Ops QA 1773540847164",
+        "heading": "Identity & Access",
+        "alerts": [
+          "Resumed tenant QA Tenant 1773570406658 Updated."
+        ]
+      }
+    },
+    {
+      "action": "trust-overview",
+      "detail": {
+        "summaryCards": 4,
+        "loadingText": "",
+        "errorText": ""
+      },
+      "snapshot": {
+        "label": "trust-overview",
+        "url": "https://stella-ops.local/setup/trust-signing?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Trust & Signing - Stella Ops QA 1773540847164",
+        "heading": "Trust Management",
+        "alerts": []
+      }
+    },
+    {
+      "action": "trust-keys",
+      "detail": {
+        "createBanner": "Registered signing key qa-signing-key-1773570406658.",
+        "created": true,
+        "rotateReasonError": "Reason is required.",
+        "rotateBanner": "Rotated signing key qa-signing-key-1773570406658."
+      },
+      "snapshot": {
+        "label": "trust-keys",
+        "url": "https://stella-ops.local/setup/trust-signing/keys?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Trust & Signing - Stella Ops QA 1773540847164",
+        "heading": "Trust Management",
+        "alerts": [
+          "Rotated signing key qa-signing-key-1773570406658."
+        ]
+      }
+    },
+    {
+      "action": "trust-issuers",
+      "detail": {
+        "createBanner": "Registered issuer QA Issuer 1773570406658.",
+        "created": true,
+        "blockReasonError": "Reason is required.",
+        "blockBanner": "Blocked issuer QA Issuer 1773570406658.",
+        "unblockBanner": "Restored issuer QA Issuer 1773570406658 at Full Trust.",
+        "restored": true
+      },
+      "snapshot": {
+        "label": "trust-issuers",
+        "url": "https://stella-ops.local/setup/trust-signing/issuers?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Trust & Signing - Stella Ops QA 1773540847164",
+        "heading": "Trust Management",
+        "alerts": [
+          "Restored issuer QA Issuer 1773570406658 at Full Trust."
+        ]
+      }
+    },
+    {
+      "action": "trust-certificates",
+      "detail": {
+        "createBanner": "Registered certificate QA-SER-1773570406658.",
+        "created": true,
+        "chainVisible": true,
+        "verifyBanner": "Verified certificate chain for QA-SER-1773570406658.",
+        "revokeReasonError": "Reason is required.",
+        "revokeBanner": "Revoked certificate QA-SER-1773570406658.",
+        "revoked": true
+      },
+      "snapshot": {
+        "label": "trust-certificates",
+        "url": "https://stella-ops.local/setup/trust-signing/certificates?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Trust & Signing - Stella Ops QA 1773540847164",
+        "heading": "Trust Management",
+        "alerts": [
+          "Revoked certificate QA-SER-1773570406658."
+        ]
+      }
+    },
+    {
+      "action": "trust-keys-revoke",
+      "detail": {
+        "exists": true,
+        "revokeBanner": "Revoked signing key qa-signing-key-1773570406658.",
+        "revoked": true
+      },
+      "snapshot": {
+        "label": "trust-keys-revoke",
+        "url": "https://stella-ops.local/setup/trust-signing/keys?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Trust & Signing - Stella Ops QA 1773540847164",
+        "heading": "Trust Management",
+        "alerts": [
+          "Revoked signing key qa-signing-key-1773570406658."
+        ]
+      }
+    },
+    {
+      "action": "trust-analytics",
+      "detail": {
+        "summaryCards": 4,
+        "issuerRows": 0,
+        "failureBanner": ""
+      },
+      "snapshot": {
+        "label": "trust-analytics",
+        "url": "https://stella-ops.local/setup/trust-signing/analytics?tenant=demo-prod&regions=us-east&environments=stage&timeWindow=7d",
+        "title": "Trust & Signing - Stella Ops QA 1773540847164",
+        "heading": "Trust Management",
+        "alerts": []
+      }
+    }
+  ],
+  "failures": [],
+  "failedCheckCount": 0,
+  "ok": true
+}

src/Web/StellaOps.Web/output/playwright/live-user-reported-admin-trust-check.state.json

@@ -0,0 +1,18 @@
+{
+  "cookies": [],
+  "origins": [
+    {
+      "origin": "https://stella-ops.local",
+      "localStorage": [
+        {
+          "name": "stellaops.sidebar.preferences",
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+        },
+        {
+          "name": "stellaops.theme",
+          "value": "system"
+        }
+      ]
+    }
+  ]
+}