# Scan problems

| ID | Class | Scope | Finding | Evidence | Disposition |
|---|---|---|---|---|---|
| SP-001 | implementation-defect | UJ-001 | Dashboard proxy permits decision POSTs, but collector exposes only `/actions/:verb`; decision answer falls through to `404 not found`. Fixture collector invents a separate success route. | `apps/web/src/pages/api/collector/[...path].ts:70`, `collector/src/server.ts:60`, `collector/src/server.ts:94`, `apps/web/tests/fixture-collector.ts:177` | Blocked |
| SP-002 | missing-fault-seam | UJ-002 | No read endpoint exposes `actions.jsonl`; successful reaps cannot receive a fresh durable-read oracle. | `collector/src/actions.ts:121`, `collector/src/server.ts:43` | Blocked |
| SP-003 | implementation-defect | UJ-002 | Reap requests have no idempotency key or replay guard; repeated confirmations invoke `reaper-ctl` repeatedly. | `collector/src/actions.ts:166`, `collector/src/actions.ts:186`, `collector/src/actions.ts:301` | Blocked |
| CO-001 | coverage-omission | Catalog | Read-only dashboards, filters, route rendering, theme, map, and static panels deferred: no durable outcome boundary. | `apps/web/tests/pages.spec.ts:29` | Deferred |
| SP-004 | implementation-defect | UJ-005 | Dashboard proxy permits project-color GET and POST, but collector exposes neither route; both fall through to `404 not found`. Fixture collector invents config routes. | `apps/web/src/pages/api/collector/[...path].ts:12`, `collector/src/server.ts:43`, `collector/src/server.ts:94`, `apps/web/tests/fixture-collector.ts:124` | Blocked |
| CO-002 | coverage-omission | Catalog | CI rerun and harness steering have gateway handlers but no reachable dashboard fixture action; no evidence-backed UI trigger contract exists. | `collector/src/actions.ts:197`, `collector/src/actions.ts:228`, `apps/web/tests/fixtures/collector-fixtures.ts:46` | Deferred |
| CO-003 | coverage-omission | Catalog | Map selection, page filters, run inspection, digest dismissal, and navigation change transient UI only; no durable terminal actor outcome. | `packages/deck-ui/src/MapNode.tsx:43`, `apps/web/src/components/inbox/InboxFilterRail.tsx:27`, `apps/web/src/components/plans/PlansContent.tsx:52`, `apps/web/src/components/overview/MorningDigestBanner.tsx:32` | Deferred |