# KBX Foundation v35 Validation Report

## Result

`node scripts/validate-kbx.mjs` 전체 누적 Governance Pipeline PASS.

## Counts

| Item | Result |
|---|---:|
| Foundation iteration | 35 |
| Contract version | 1.21.0 |
| TS/Vue script units | 299 |
| Screen Definitions | 20 |
| Screen Recipes | 9 |
| Component Definitions | 84 |
| Component Catalog entries | 66 |
| Core Component APIs | 34 |
| Design Tokens | 153 |
| Canonical Fields | 51 |
| API Operations | 66 |
| Permissions | 54 |
| Navigation Entries | 16 |
| Canonical Test Scenarios | 27 |
| Test Fixture Sets | 16 |
| Design Debt | 131 / baseline 131 |
| Release Impact | required major / declared major |
| Tracked contract changes | 253 |

## v35 dedicated gate

Verified:

- exactly 9 T01~T09 Screen Recipes
- Recipe type mapping
- Recipe Data/Recovery/Security policy presence
- Recipe Canonical Scenario references exist
- all 20 screens carry a valid `templateCode`
- `screen.type` and `templateCode` match
- Screen Recipe generator and generated manifest exist
- `KbxScreenFrame` validates runtime template identity
- T09 validates `templateCode === T09`
- Scaffolder consumes Recipe source of truth
- no duplicated hard-coded `commandMap`
- mutating scaffold types require explicit `--write-permission`
- Home Attention contract and builder exist
- runtime operation/notification items are permission filtered
- notification route is revalidated with `safeWorkspacePath`

## Accumulated gates

Passed v29 through v35 Template/Home Navigation gates plus:

- Screen governance
- Field/API/Integration/Provider/External Data governance
- Migration and Deployment safety
- Authorization
- Telemetry
- Experiments
- Test governance
- Scaffolder
- Architecture
- Operations / Process coverage
- Production readiness guard
- Application shell
- Template completeness
- Interaction contracts
- Grid productivity
- Golden T04/T05
- Record lifecycle
- Component catalog
- Design-code parity
- Release governance

## Runtime boundary

This repository validation does not claim execution of:

- .NET 10 API Host
- PostgreSQL / Npgsql live database
- Hangfire / SignalR infrastructure
- full Vitest runtime suite
- Playwright browser suite

The source includes unit/E2E contracts and static governance evidence; those runtime suites remain CI/integration-environment responsibilities.
