bumicerts · agentic-fresh-20260513-103719

Bumicerts fresh agentic test

@satyam-mishra-pce

Fresh agentic testing produced a partial result: public browsing mostly rendered, but the Explore viewport showed an auth error and authenticated create/upload verification did not complete.

Date: 2026-05-13 · Target: http://127.0.0.1:3001 · partial

Headline result

5
public checks passed
2
auth blockers
3
warnings / incomplete checks
9
reviewed screenshots embedded

Honest status: partial. This is a new run under a new slug with fresh evidence. The public home, organizations page, sign-in modal, and public detail tabs rendered. However, Explore displayed a signed-out/create-only error in the viewport, authenticated create was blocked by a signed-out overlay despite saved auth state, and upload edit verification could not find the edit control.

Walkthrough evidence

Bumicerts signed-out home page
01 homeFresh public home render at 3001; visually reviewed and safe.
Explore page showing signed-out create error
02 explore warningExplore returned HTTP 200, but the viewport showed “You are not signed in. Please sign in to create a bumicert.”
Organizations page
03 organizationsOrganizations page rendered filters and cards; one card contained raw 403 text.
Public bumicert detail page
04 public detailA discovered public bumicert detail page loaded successfully.
Sign-in handle tab
05 sign-inThe Handle sign-in UX was reachable without exposing secrets.
Detail overview tab
06 detail overviewPublic detail overview tab rendered during the Alpha-style read-side pass.
Detail site boundaries tab
07 detail sitesPublic detail Site Boundaries tab rendered.
Create flow blocked by not signed in overlay
08 create blockerAuthenticated create/publish feature attempt was blocked by a signed-out overlay.
Upload edit control unavailable
09 upload blockerUpload dashboard access passed, but the expected edit control was not found.

Data and test verification

PDS read verification ran. The fresh run captured redacted PDS checks in pds-verification.txt. `describeRepo` included the expected `app.certified.location` and `org.hypercerts.claim.activity` collections, and location records were listed for the configured uploader DID.

Indexer comparison incomplete. The configured indexer URL was GraphQL-shaped; guessed REST/TRPC probes returned 404. The raw probe output is in indexer-probes.txt.

Public HTTP checks: assets/http-status.txt
Create feature log: assets/e2e-bumicert-feature.log
Upload feature log: assets/e2e-upload-feature.log
Final media manifest: assets/final-media-manifest.md

Findings

Authenticated create/publish blocked

The feature run reached `/bumicert/create`, but the app showed “You are not signed in,” and the overlay intercepted the create action. No durable publish claim was created in this fresh authenticated attempt.

Upload organization edit blocked

The upload dashboard base access passed, but the expected `Edit organization profile` control was unavailable in the feature run, so cancel/save verification could not complete.

Explore visual state contradicted public browsing expectations

`/explore` returned HTTP 200 and DOM-visible public cards were observed, but the screenshot used for this report shows a signed-out/create-only error panel. This report treats that screenshot as warning evidence, not as a pass.

Organization card content included raw 403 text

The public organizations surface rendered, but the first visible card included raw “HTTP response code 403 Forbidden...” prose as description content.

Public read-side routes mostly rendered

Home, organizations, a public bumicert detail page, and detail tabs were reachable and visually reviewed with fresh screenshots.

Media QA

No videos are embedded. No wildcard media embedding is used. Every embedded screenshot is named explicitly above and documented in the final media manifest. Ambiguous copied E2E screenshots from the app reports folder were excluded from the walkthrough.

Reproducing

Run slugagentic-fresh-20260513-103719 Targethttp://127.0.0.1:3001 Public checksagent-browser navigation plus curl --max-time 5 for `/`, `/explore`, `/organizations`. Authenticated checksbun run test:e2e e2e/features/bumicert-create.feature and bun run test:e2e e2e/features/upload-org.feature. Evidence sourceagentic-tests/runs/agentic-fresh-20260513-103719/ in the Bumicerts app checkout.