Source-derived document; review findings and open questions with the application owner.

prsd-iws: Coverage and Confidence

No aggregate percentage conceals a critical gap.

• Critical: 0
• Material: 26
• Ordinary: 0

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-001

Question: What does the available evidence establish about this application concern: End-to-end runtime behavior is not fully demonstrated across controllers, handlers, repositories, persistence, transactions, state transitions, deployment composition, and external integrations?

• Review priority: material
• Recorded uncertainty: End-to-end runtime behavior is not fully demonstrated across controllers, handlers, repositories, persistence, transactions, state transitions, deployment composition, and external integrations.
• Supporting evidence: E0001, E0005, E0006, E0008, E0017, E0045, E0053, E0054, E0061, E0083, E0086, E0093, E0110, E0118, E0125, E0164, E0173, E0186, E0240, E0244, E0254, E0305, E0329, E0352, E0377, E0401, E0404, E0489, E0494
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-002

Question: What does the available evidence establish about this application concern: Authorization and ownership enforcement are not fully established for all request, repository, controller, mutation, deletion, sharing, download, API, and client-supplied-identifier paths?

• Review priority: material
• Recorded uncertainty: Authorization and ownership enforcement are not fully established for all request, repository, controller, mutation, deletion, sharing, download, API, and client-supplied-identifier paths.
• Supporting evidence: E0008, E0011, E0017, E0041, E0045, E0061, E0083, E0092, E0125, E0127, E0158, E0164, E0240, E0257, E0262, E0265, E0273, E0358, E0383, E0414, E0489
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-003

Question: What does the available evidence establish about this application concern: The complete notification, assessment, movement, shipment, and status state machines remain unresolved; supplied tests and source examples cover selected transitions but not every lifecycle guard or invalid combination?

• Review priority: material
• Recorded uncertainty: The complete notification, assessment, movement, shipment, and status state machines remain unresolved; supplied tests and source examples cover selected transitions but not every lifecycle guard or invalid combination.
• Supporting evidence: E0006, E0013, E0015, E0053, E0093, E0096, E0196, E0269, E0279, E0287, E0289, E0305, E0311, E0372, E0377, E0439
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-004

Question: What does the available evidence establish about this application concern: Database deployment, migration execution, rollback, post-migration validation, schema integrity, uniqueness, referential integrity, concurrency, and multi-statement transaction behavior are not fully established?

• Review priority: material
• Recorded uncertainty: Database deployment, migration execution, rollback, post-migration validation, schema integrity, uniqueness, referential integrity, concurrency, and multi-statement transaction behavior are not fully established.
• Supporting evidence: E0006, E0007, E0053, E0062, E0078, E0093, E0173, E0182, E0329, E0414, E0453
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-005

Question: What does the available evidence establish about this application concern: Validation completeness and error semantics remain uncertain for identifiers, dates, quantities, strings, collections, byte arrays, cross-entity relationships, dimensions, precision boundaries, overflow cases, and malformed inputs?

• Review priority: material
• Recorded uncertainty: Validation completeness and error semantics remain uncertain for identifiers, dates, quantities, strings, collections, byte arrays, cross-entity relationships, dimensions, precision boundaries, overflow cases, and malformed inputs.
• Supporting evidence: E0006, E0015, E0053, E0056, E0068, E0093, E0096, E0145, E0158, E0177, E0254, E0269, E0273, E0279, E0287, E0304, E0311, E0351, E0404
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-006

Question: What does the available evidence establish about this application concern: Test reliability and coverage are not fully established. The supplied evidence does not consistently prove successful execution, exact state transitions, persistence outcomes, real database behavior, concurrency, failure handling, or complete integration coverage?

• Review priority: material
• Recorded uncertainty: Test reliability and coverage are not fully established. The supplied evidence does not consistently prove successful execution, exact state transitions, persistence outcomes, real database behavior, concurrency, failure handling, or complete integration coverage.
• Supporting evidence: E0020, E0078, E0118, E0123, E0130, E0190, E0212, E0326, E0352, E0388, E0401, E0408, E0437, E0444, E0453, E0477, E0494, E0507
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-007

Question: What does the available evidence establish about this application concern: Document-generation, virus-scanning, email, maintenance, and tooling behavior depends on omitted implementations, configuration, templates, registrations, deployment settings, or operational procedures?

• Review priority: material
• Recorded uncertainty: Document-generation, virus-scanning, email, maintenance, and tooling behavior depends on omitted implementations, configuration, templates, registrations, deployment settings, or operational procedures.
• Supporting evidence: E0004, E0050, E0149, E0150, E0180, E0193, E0256, E0300, E0334, E0347, E0405, E0409, E0412, E0457
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-008

Question: What does the available evidence establish about this application concern: Build, deployment, framework compatibility, runtime composition, effective API surface, dependency registration, and production configuration are not conclusively established from the supplied source?

• Review priority: material
• Recorded uncertainty: Build, deployment, framework compatibility, runtime composition, effective API surface, dependency registration, and production configuration are not conclusively established from the supplied source.
• Supporting evidence: E0005, E0008, E0010, E0011, E0047, E0060, E0092, E0230, E0273, E0312, E0358, E0485
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::EMAIL-TRANSPORT-FAILURE-SEMANTICS

Question: What does the available evidence establish about this application concern: The email evidence supports template rendering, message construction, and asynchronous sending through a sender component, but does not establish transport configuration, SMTP failure handling, retry behavior, or whether a false result represents durable delivery failure?

• Review priority: material
• Recorded uncertainty: The email evidence supports template rendering, message construction, and asynchronous sending through a sender component, but does not establish transport configuration, SMTP failure handling, retry behavior, or whether a false result represents durable delivery failure.
• Supporting evidence: E0022
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::SHIPMENT-MIGRATION-EXECUTION

Question: What does the available evidence establish about this application concern: The reported Shipment migration ends with a trailing comma before the closing parenthesis of CREATE TABLE. If the supplied text matches the executable file, the migration may fail under ordinary SQL Server syntax; execution, rollback, and resulting schema state were not demonstrated?

• Review priority: material
• Recorded uncertainty: The reported Shipment migration ends with a trailing comma before the closing parenthesis of CREATE TABLE. If the supplied text matches the executable file, the migration may fail under ordinary SQL Server syntax; execution, rollback, and resulting schema state were not demonstrated.
• Supporting evidence: E0007
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-001

Question: What does the available evidence establish about this application concern: The supplied material does not establish the application's complete business domain, API endpoints, data models, waste-shipment validation rules, or broader controller behavior?

• Review priority: material
• Recorded uncertainty: The supplied material does not establish the application's complete business domain, API endpoints, data models, waste-shipment validation rules, or broader controller behavior.
• Supporting evidence: E0209, E0360
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-002

Question: What does the available evidence establish about this application concern: Deployment architecture, hosting environment, production configuration, persistence details, external integrations, and operational monitoring are not established by the supplied material?

• Review priority: material
• Recorded uncertainty: Deployment architecture, hosting environment, production configuration, persistence details, external integrations, and operational monitoring are not established by the supplied material.
• Supporting evidence: E0159, E0280, E0360, E0504
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-003

Question: What does the available evidence establish about this application concern: Database integration remains incomplete: the IwsContext implementation and schema, ELMAH database configuration, exact database-operation semantics, migration or idempotence behavior, and external-process failure handling are not established?

• Review priority: material
• Recorded uncertainty: Database integration remains incomplete: the IwsContext implementation and schema, ELMAH database configuration, exact database-operation semantics, migration or idempotence behavior, and external-process failure handling are not established.
• Supporting evidence: E0084, E0209, E0513
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-004

Question: What does the available evidence establish about this application concern: Event-dispatching, mediation, and dependency-registration details are incomplete. The supplied evidence does not identify all concrete event, handler, request, and response types or establish missing-handler behavior for the mediator?

• Review priority: material
• Recorded uncertainty: Event-dispatching, mediation, and dependency-registration details are incomplete. The supplied evidence does not identify all concrete event, handler, request, and response types or establish missing-handler behavior for the mediator.
• Supporting evidence: E0094, E0159, E0260
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-005

Question: What does the available evidence establish about this application concern: Email behavior is only partially evidenced. Complete domain-event coverage, sender and SMTP failure semantics, template-resolution behavior, configuration values, and the authoritative telephone number remain unresolved?

• Review priority: material
• Recorded uncertainty: Email behavior is only partially evidenced. Complete domain-event coverage, sender and SMTP failure semantics, template-resolution behavior, configuration values, and the authoritative telephone number remain unresolved.
• Supporting evidence: E0022, E0247
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-006

Question: What does the available evidence establish about this application concern: Scanner runtime behavior and deployment are not fully established. Base URLs, certificate paths, timeout defaults, endpoint behavior, dependency wiring, external service requirements, and production error handling remain unresolved?

• Review priority: material
• Recorded uncertainty: Scanner runtime behavior and deployment are not fully established. Base URLs, certificate paths, timeout defaults, endpoint behavior, dependency wiring, external service requirements, and production error handling remain unresolved.
• Supporting evidence: E0179, E0280, E0504
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-007

Question: What does the available evidence establish about this application concern: Successful runtime operation and compatibility with external authorization, API, and persistence services are not demonstrated. Token-bearing client lifetime and security behavior, malformed-response handling, base-URL normalization, and downstream token-claim controls remain unconfirmed?

• Review priority: material
• Recorded uncertainty: Successful runtime operation and compatibility with external authorization, API, and persistence services are not demonstrated. Token-bearing client lifetime and security behavior, malformed-response handling, base-URL normalization, and downstream token-claim controls remain unconfirmed.
• Supporting evidence: E0378, E0403
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-008

Question: What does the available evidence establish about this application concern: The supplied test evidence does not independently establish build or test success, complete MVC property-name semantics, actual CSS/class generation, or the behavior of the database integration executable?

• Review priority: material
• Recorded uncertainty: The supplied test evidence does not independently establish build or test success, complete MVC property-name semantics, actual CSS/class generation, or the behavior of the database integration executable.
• Supporting evidence: E0084, E0242, E0272, E0493, E0513
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::ANONYMOUS-WASTE-GENERATION-PATH

Question: What does the available evidence establish about this business_rules concern: WasteGenerationProcessController.Index(Guid id) is reported as AllowAnonymous despite controller-level authorization. The supplied evidence does not include the NotificationReadOnlyFilter implementation or routing context, so the effective exposure and intended authorization of this GET action remain unresolved?

• Review priority: material
• Recorded uncertainty: WasteGenerationProcessController.Index(Guid id) is reported as AllowAnonymous despite controller-level authorization. The supplied evidence does not include the NotificationReadOnlyFilter implementation or routing context, so the effective exposure and intended authorization of this GET action remain unresolved.
• Supporting evidence: E0017
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::BR-GAP-001

Question: What does the available evidence establish about this business_rules concern: The evidence identifies notification statuses and movement transitions, but does not establish the complete permitted transition graph, whether numeric status order has business meaning, or whether all guards are consistently applied across external, internal, handler, and persistence paths?

• Review priority: material
• Recorded uncertainty: The evidence identifies notification statuses and movement transitions, but does not establish the complete permitted transition graph, whether numeric status order has business meaning, or whether all guards are consistently applied across external, internal, handler, and persistence paths.
• Supporting evidence: E0006, E0013, E0020
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::BR-GAP-002

Question: What does the available evidence establish about this business_rules concern: Authorization declarations and controller attributes are present, but effective ownership, competent-authority, and permission enforcement is not demonstrated for every request, mutation, deletion, sharing, download, and anonymous-access path?

• Review priority: material
• Recorded uncertainty: Authorization declarations and controller attributes are present, but effective ownership, competent-authority, and permission enforcement is not demonstrated for every request, mutation, deletion, sharing, download, and anonymous-access path.
• Supporting evidence: E0001, E0011, E0017
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::JOURNEY-ASSESSMENT-RULES

Question: What does the available evidence establish about this business_rules concern: The supplied consent and financial-guarantee handlers demonstrate selected calls and persistence, but do not establish the complete decision rules, authorization conditions, valid state transitions, or failure semantics for the assessment journey?

• Review priority: material
• Recorded uncertainty: The supplied consent and financial-guarantee handlers demonstrate selected calls and persistence, but do not establish the complete decision rules, authorization conditions, valid state transitions, or failure semantics for the assessment journey.
• Supporting evidence: E0008, E0010
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::JOURNEY-MOVEMENT-ACTOR-RULES

Question: What does the available evidence establish about this business_rules concern: Movement receipt and completion handlers or domain methods are evidenced, but the initiating actor, effective authorization, and complete cross-layer guard enforcement are not established?

• Review priority: material
• Recorded uncertainty: Movement receipt and completion handlers or domain methods are evidenced, but the initiating actor, effective authorization, and complete cross-layer guard enforcement are not established.
• Supporting evidence: E0013, E0017
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::API-AUTHORIZATION-SEMANTICS

Question: What does the available evidence establish about this semantic concern concern: The API startup configures bearer validation with RequiredScopes set to api1 and api3, but the supplied evidence does not establish whether both scopes, either scope, or another library-defined condition is required. Controllers and endpoint registrations are also incomplete, so the effective authorization surface remains unresolved?

• Review priority: material
• Recorded uncertainty: The API startup configures bearer validation with RequiredScopes set to api1 and api3, but the supplied evidence does not establish whether both scopes, either scope, or another library-defined condition is required. Controllers and endpoint registrations are also incomplete, so the effective authorization surface remains unresolved.
• Supporting evidence: E0011, E0017
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::JOURNEY-STATE-DECISION-SEMANTICS

Question: What does the available evidence establish about this semantic concern concern: The supplied evidence now connects the two journeys to observed state and decision artifacts, but it still does not establish complete transition graphs, actor authorization, failure semantics, or consistent enforcement across handlers, domain methods, repositories, and persistence?

• Review priority: material
• Recorded uncertainty: The supplied evidence now connects the two journeys to observed state and decision artifacts, but it still does not establish complete transition graphs, actor authorization, failure semantics, or consistent enforcement across handlers, domain methods, repositories, and persistence.
• Supporting evidence: E0006, E0008, E0010, E0013
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

GAP-UNSUPPORTED-620f240cbf2fb4edb8a75c7a

Question: What does the available evidence establish about this unsupported model inference concern: Claim not accepted: unknown evidence references: LEV-139-ea-iws-requesthandlers?

• Review priority: material
• Recorded uncertainty: Claim not accepted: unknown evidence references: LEV-139-ea-iws-requesthandlers
• Supporting evidence: E0001, E0002, E0003, E0004, E0005, E0006, E0007, E0008
• Status: open for human review; not an execution failure.
• Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.