docs: project docs, scripts, deployment configs, and evidence

docs/evidence/ops/2026-03-28/quality/COVERAGE_REMEDIATION_20260328-082843.md

@@ -0,0 +1,71 @@
+# 2026-03-28 Q-004 Coverage Remediation Pass 10
+
+## Scope
+
+- Continue strict `Q-004` closure work after Pass 9.
+- Fully close the remaining `RegisterPage` frontend page cluster before moving to the next task.
+- Re-verify closure through targeted tests plus full frontend validation.
+
+## Changes
+
+### Frontend
+
+- Expanded register-page behavior coverage in:
+  - `frontend/admin/src/pages/auth/RegisterPage/RegisterPage.test.tsx`
+- Newly covered behavior includes:
+  - fallback to default capabilities when capability loading fails
+  - footer rendering when password-reset capability is enabled
+  - sms-code send success, validation swallow path, and backend-failure path
+  - sms-backed registration payload submission
+  - submit blocking when sms-backed registration is missing a valid phone-code path
+  - registration failure handling
+  - inactive-account success summary with and without activation email
+  - first-admin bootstrap warning rendering
+
+### Backend
+
+- No backend code changes were required in this pass.
+
+## Verified Commands
+
+```powershell
+cd D:\project\frontend\admin
+npm.cmd run test:run -- src/pages/auth/RegisterPage/RegisterPage.test.tsx
+npm.cmd run lint
+npm.cmd run build
+npm.cmd run test:coverage
+```
+
+## Results
+
+### Frontend coverage
+
+- Overall:
+  - statements `78.91%`
+  - branches `66.06%`
+  - functions `77.07%`
+  - lines `79.73%`
+- Target areas:
+  - `src/pages/auth/RegisterPage/RegisterPage.tsx`: statements `93.42%`, branches `85.24%`, functions `87.5%`, lines `95.89%`
+  - `src/pages/admin/ProfileSecurityPage/ProfileSecurityPage.tsx`: statements `70.17%`, branches `48.97%`
+  - `src/lib/http/client.ts`: statements `52.17%`, branches `43.26%`
+  - `src/lib/http/csrf.ts`: statements `25.71%`, branches `19.23%`
+
+## Validation Notes
+
+- Frontend full coverage now completes with `41` passing test files and `163` passing tests.
+- The required sequential frontend validation path passed:
+  - `lint`
+  - `build`
+  - `test:coverage`
+- The successful frontend coverage run still emits one post-summary jsdom `AggregateError` network-noise line.
+  - It does not fail the command.
+  - It remains a real validation-hygiene issue and should continue to be tracked honestly.
+
+## Real Conclusion
+
+- `RegisterPage` is no longer an open `Q-004` gap.
+- `Q-004` still cannot be honestly declared closed.
+- The remaining highest-value frontend gaps are now more concentrated in:
+  - deeper remaining `ProfileSecurityPage` branches
+  - `lib/http`