Repair first-time user reporting truthfulness journeys

docs/implplan/SPRINT_20260315_006_Web_first_time_user_operator_journey_grouped_remediation.md

@@ -84,7 +84,7 @@ Completion criteria:
 - [ ] Retained Playwright journeys cover keys, issuers, certificates, analytics, and destructive-action confirmations.
 
 ### FTU-OPS-005 - Align onboarding, context, empty states, and naming across the product
-Status: TODO
+Status: DOING
 Dependency: FTU-OPS-001
 Owners: Product Manager, Architect, Developer, Documentation author
 Task description:
@@ -154,6 +154,7 @@ Completion criteria:
 | 2026-03-15 | Recorded the product and architecture decisions for the first grouped implementation batch: upgrade the setup identity surface to expose the real Authority admin contract, replace trust prompt-based actions with modal workflows, and stop relying on dead trust analytics endpoints. | Product / Architect |
 | 2026-03-15 | Shipped the grouped identity/trust operator batch on the current live stack: scope catalog and role detail, truthful user and tenant lifecycle actions, in-app trust create/block/unblock/verify/revoke workflows, and derived trust analytics that no longer call dead endpoints. Focused backend/frontend test slices passed before live retest. | Developer |
 | 2026-03-15 | Replaced the stale admin/trust retained journey with `live-user-reported-admin-trust-check.mjs`, added step-level logging, aligned it to the repaired trust shell contract, and reran it cleanly on `https://stella-ops.local` with `failedCheckCount=0`. | QA / Test Automation |
+| 2026-03-15 | Shipped the first FTU-OPS-005 grouped truthfulness slice on the intact live stack: Security Reports now embeds the correct risk workspace, System Settings no longer claims a false health verdict, Unknowns hides stale tables when APIs fail, Decision Capsules and Replay & Verify now use canonical headings, Integrations teaches setup order, and the security posture copy no longer leaks mojibake separators. Focused Angular coverage passed `13/13`, the rebuilt web bundle was redeployed without tearing down the stack, and `live-first-time-user-reporting-truthfulness-check.mjs` now passes with `failedCheckCount=0` and `runtimeIssueCount=0`. | Developer / QA |
 
 ## Decisions & Risks
 - Decision: the operator’s first-time setup and release-confidence journey is now the primary quality bar; broad green route sweeps are supporting evidence only.