3 files changed
src/api/invoices/[id]/route.tssrc/services/invoices.tstests/invoices.test.tsPRODUCT / SYSTEM From changed line to release decision
Software changed.Prove the promise didn’t.
MaruCheck connects approved behavior, the real Git diff, historical failures, targeted checks, and reproducible evidence in one accountable chain.
INPUTgit diff→OUTPUTship / block
ACT 01 — DEFINE
First, make the promise executable.
Quality Contracts preserve the behavior that must remain true—even when an agent rewrites both code and tests.
feature: subscription-management
criticality: high
owners: [product, engineering]
requirements:
- id: SUB-004
statement: Cancellation keeps Pro active
until the current billing period ends.
evidence_policy:
blocking: [SUB-004]SUB-004
Protected behavior
- Approved by an accountable owner
- Mapped to Vitest + Playwright
- Versioned when intent changes
ACT 02 — CHALLENGE
Then, spend proof where the change can hurt.
Risk is deterministic. Changed paths, critical contracts, coverage gaps, and QA Memory each explain their contribution.
MEM-0143 recalled
A previous invoice-ownership bypass touched the same authorization boundary.
+25 RISKCritical
Security, API, contract regression, and the recorded cross-account test enter the plan.
ACT 03 — DECIDE
A gate you can argue with.
Every result resolves to expected behavior, observed behavior, reproduction, and the evidence that supports the decision.
Requirementinvoice-access#INV-001
ExpectedUsers only read invoices owned by their account.
ObservedCross-account invoice payload returned.
Reproduce
npx vitest run tests/regressions/cross-account.test.tsOPERATING RULES
The author does not grade the work.
Independent by design
The coding agent can request verification. It cannot approve product intent.
Inconclusive stays visible
A missing tool, test, or requirement never gets rewritten into a pass.
Source stays local
Execution happens in the repository or CI; teams choose which evidence becomes shared proof.