Readiness
Quality

Quality command centre

Review QA, accessibility, performance, security, browser, mobile, routes, workflows, permissions, evidence, issues, and release gates in one place.

quality domains18

Routes, workflows, evidence, issues, release gates, and readiness

event hooks22

Audit, evidence, coverage, checks, issues, gates, and readiness events

governance controls16

Evidence validity, route, security, mobile, API, and launch policies

Quality command centre

Admins can inspect launch blockers, evidence validity, route and workflow coverage, security, mobile, accessibility, performance, API contracts, and release gates.

launch-gated
/admin/quality/readiness

Readiness

Launch blockers and quality readiness states

/admin/quality/audits

Audits

Scoped automated and review-required audit records

/admin/quality/evidence

Evidence

Evidence validity, expiry, and review status

/admin/quality/routes

Routes

Public, seller, buyer, admin, API, legal, and checkout routes

/admin/quality/workflows

Workflows

Seller, buyer, admin, migration, growth, and reliability QA

/admin/quality/accessibility

Accessibility

WCAG, keyboard, screen reader, contrast, and focus references

/admin/quality/performance

Performance

Budgets without fabricated Core Web Vitals proof

/admin/quality/security

Security

Auth, RBAC, secrets, tokens, headers, and unsafe mutation checks

/admin/quality/browsers

Browsers

Chromium, Firefox, Safari, Edge, and mobile browser evidence

/admin/quality/mobile

Mobile

Breakpoints, overflow, tap targets, tables, nav, and forms

/admin/quality/forms

Forms

Validation, error, success, privacy, and destructive-action states

/admin/quality/states

States

Empty, loading, failure, blocked, offline, and degraded states

/admin/quality/permissions

Permissions

Admin-only, owner-only, draft-only, approval-required access

/admin/quality/public-safe-payloads

Payloads

Private-field exposure checks for admin and public views

/admin/quality/api-contracts

API contracts

Auth, RBAC, validation, mapper, error, and mutation checks

/admin/quality/issues

Issues

Triage, remediation, evidence, fixed, verified, and accepted risk

/admin/quality/release-gates

Release gates

Final launch approval stays separate from routine QA

Quality safety rules

Quality review records evidence and blockers. It does not replace final launch approval or expose private data.

public-safe

Automated tests are not human QA approval.

Accessibility checks are not accessibility certification.

Security readiness is not a penetration test.

Local performance budgets are not production Core Web Vitals proof.

Route render checks are not payment, delivery, publishing, sending, or workflow success.

Checkout, delivery, publishing, sending, payout, and billing workflows require their own live QA evidence.

Emails, social posts, paid campaigns, public content, consent controls, and public claims require human approval.

Seller-facing and public views keep sensitive credentials, private file keys, payment details, buyer private data, and support notes out of display payloads.