Session 5 of voyage-rebrand (V6). Operator-authorized cross-plugin scope. - git mv plugins/ultraplan-local plugins/voyage (rename detected, history preserved) - .claude-plugin/marketplace.json: voyage entry replaces ultraplan-local - CLAUDE.md: voyage row in plugin list, voyage in design-system consumer list - README.md: bulk rename ultra*-local commands -> trek* commands; ultraplan-local refs -> voyage; type discriminators (type: trekbrief/trekreview); session-title pattern (voyage:<command>:<slug>); v4.0.0 release-note paragraph - plugins/voyage/.claude-plugin/plugin.json: homepage/repository URLs point to monorepo voyage path - plugins/voyage/verify.sh: drop URL whitelist exception (no longer needed) Closes voyage-rebrand. bash plugins/voyage/verify.sh PASS 7/7. npm test 361/361.
69 lines
2.6 KiB
Markdown
69 lines
2.6 KiB
Markdown
---
|
|
type: trekreview-synthetic
|
|
review_version: "1.0"
|
|
created: 2026-05-04
|
|
task: "Add JWT authentication with refresh-token rotation"
|
|
slug: jwt-auth-synthetic
|
|
run_id: A
|
|
verdict: WARN
|
|
findings:
|
|
- 44b18cf6b84fcb23ef1d52682504c2edeed24f66
|
|
- f7e307a427154c2c15df4c63eaff6fd846e075a7
|
|
- 31fa81fa5bf9b84c70864ee09aa8d087870c473a
|
|
- bfc0e3a7c1a5b13dbdc6ed8325140100b02db45d
|
|
- be76c6dba12bfd9073b1737de5813e316a158dc6
|
|
- f0928545e7c1dc48796fe857138fab7f100ce8c7
|
|
- 4189ba4236119184017fd26735bfb582706994e9
|
|
- 46f07246ff17c013740c0726b7be9a65fff10c67
|
|
- 5501c54bda4a39df17d66938f4a7fe872e365a0f
|
|
- 0173116735f75aabab36ecec863cb429d2f30528
|
|
- 8f7fc683dc78d3adea8d35221915839702869af0
|
|
- ee986665d695ca46c9a7f0d5c38bab73e73450a9
|
|
- d863b17426ddec54bf7624405f3b64e206a73ed7
|
|
- 64ea0bbf43c44dbf0da53f25755e0112ce2eb08b
|
|
- 6971113644b777a8c164dfd8473739b03d1796be
|
|
- 65f6edb11fed982b921ff018bd0fb1dcd10a1703
|
|
- 9133851cf557f5955301803479936733b296f125
|
|
- ffb170a0d19e4afac6379e64d26485883267bea8
|
|
- 89f990535da373f5e97a091e5bbbf47a777c13d6
|
|
- 664d4ec53e90ef6d24525a85b8d4071bfb037da8
|
|
- 137db625a1ee639698c9e095e25845ef25879599
|
|
- 6e586f167fac4cd57dc8178ceb4ca265a37404dc
|
|
- 24671775282593381af4a8fa77eb3f7a36f9f84e
|
|
- 71dbed32baf440d94f0ccaa6a997a6922cee7679
|
|
- 5de9b2b26d03590845183d42387fcb22007b3f5d
|
|
- c9aca8c3a265e2f083d75ac6da3e6d67909091b9
|
|
- 75f32c9d304b742af2a7bafc354ec3666e53c054
|
|
- 6547dfd19035bc012a50c19f4321fcfc9535fec8
|
|
- 7554bc48226406e85282c7daeaba75cc732f4b35
|
|
- 4f48547385c2d343ee0994d825321e6e6b90c89d
|
|
---
|
|
|
|
# Synthetic review run A — JWT authentication with refresh-token rotation
|
|
|
|
This fixture represents one synthesized run of `/trekreview` on a
|
|
hand-calibrated brief. It is paired with `review-run-B.md` for the
|
|
`review-determinism.test.mjs` Jaccard floor (≥ 0.833).
|
|
|
|
## How this fixture is used
|
|
|
|
`tests/synthetic/review-determinism.test.mjs` reads the `findings` array from
|
|
this file's frontmatter and computes
|
|
`jaccardSimilarity(findingsA, findingsB)`. The test asserts the similarity is
|
|
at or above the SC7 brief threshold (0.833).
|
|
|
|
This fixture is distinct from `tests/fixtures/trekreview/review-run-A.md`,
|
|
which feeds the existing `tests/lib/review-determinism.test.mjs` against the
|
|
v1.0 SC4 floor (0.70). The synthetic pair pushes the floor higher per SC7.
|
|
|
|
## Fixture math
|
|
|
|
- A has 30 unique finding-IDs
|
|
- B has 30 unique finding-IDs
|
|
- Intersection (shared IDs): 28
|
|
- Union: 32
|
|
- Jaccard: 28/32 = 0.875 (above 0.833 floor)
|
|
|
|
Each ID is the SHA-1 of a synthetic `file:line:rule_key` triple per
|
|
`lib/parsers/finding-id.mjs`. The shared 28 represent stable findings; the
|
|
2 unique-per-side represent paraphrase variation in `file:line` anchoring.
|