PRODUCTION FOUNDATION · MAKER CATALOG OWNERSHIP

A maker can own a shop and listings without owning everybody else’s.

v0.12.11 adds a real moderation-review state machine and frozen public catalog snapshots on top of the authenticated D1/R2 maker workflow. Shopper reads now come from an approved snapshot instead of the maker's live editable listing record.

TEST NOW — SERVER CATALOG + REAL MAKER UIApply migration 0010, deploy, run catalog + R2 + moderation + public-snapshot self-tests, then publish one disposable QA listing and open it through View as shopper. Edit the live maker record afterward and confirm the shopper snapshot changes only after a new promotion.

PRODUCTION LATERDo not mark the catalog production gate complete yet. Real Maker capability issuance, trusted production Admin authentication/MFA, automated image-content moderation, real Cart/Checkout reservation wiring, order snapshots, and retirement of the browser fallback are still upcoming work.

SERVER HEALTH

Catalog schema + authorization contract

These calls hit the deployed Pages Function and D1. The self-test creates two disposable maker fixtures plus a shopper fixture, tests ownership and capability denial, then removes the test records.

LIVE ROLE BOUNDARY

Shopper does not equal Maker

Use an active QA Shopper Session from Identity QA, then test this endpoint. The server should return 403 because that account has Shopper capability only.

Open Identity QA →

If you already revoked your QA session, start a new Shopper Session in Identity QA first. A 401 means there is no active session; a 403 with Shopper-only capabilities is the PASS condition here.

Authenticated Maker CRUD

Then start a QA Maker Session in Identity QA and run a disposable server create → read → update → list → delete probe. The fixture cleans itself up.

Open Real Maker Listings →

TEST NOW

Maker catalog ownership checks

Record only evidence you actually perform on clarawidetest.

PRODUCTION LATER

Real shop/listing migration gates

Leave these Not Checked until each remaining production control is genuinely complete. The staging Maker UI connection alone is not a production credential or media system.

CATALOG ISSUE LOG

Record ownership / listing defects

OPEN FINDINGS

Catalog blockers & defects

RECENT SERVER RUNS

EVIDENCE BACKUP

Export or reset this QA layer

Export captures checks, findings and server-run evidence from this browser.

Catalog boundaryPassing this QA proves authenticated maker writes, private R2 ownership, optimized/resilient uploads, QA-only moderation approval, frozen public snapshots, and shopper reads from those snapshots. It does not yet make production Admin credentials/MFA, automated image-content moderation, real Cart/Checkout inventory wiring, order snapshots, or browser-fallback retirement complete.