# Vuln Signal Manual Test Matrix

Use this after large batches or before publishing.

## Desktop Pass

- Home: hero actions, mission cards, search, threat map, latest CVEs, tools rail.
- Navigation: top menu hover/focus, right-side dropdowns, long Tools dropdown scroll.
- Site Map: area cards, workflow paths, strategic hubs, operating model links.
- Threat Map: filters, map visuals, campaign list, full-map link, empty/unavailable state.
- Detail: title, enrichment, next actions, handoff templates, related links.
- Tools: directory search/filter, one parser, one calculator, one lookup, one detection helper.
- Status: runtime state, feed freshness, provenance, unavailable wording.
- Diagnostics: quality cards, readiness cards, route manifest, manual QA sections.

## Mobile Pass

- Navigation opens, scrolls, and closes after tapping a link.
- Hero headings do not overflow.
- Cards collapse to one column cleanly.
- Tools inputs and outputs are usable without horizontal scrolling.
- Threat map remains readable and does not create a stuck blank block.
- Page guidance bands do not crowd the first content section.

## Workflow Pass

- Search for a vendor or CVE-like term.
- Open a result detail page.
- Save/bookmark a record.
- Add a note in Saved.
- Add at least two records to Compare.
- Open a relevant tool from the detail or Tools hub.
- Return to Status or Diagnostics if something looks empty.

## Trust Pass

- Confirm live data, unavailable data, and filtered-empty states have different wording.
- Confirm inferred views do not sound like confirmed telemetry.
- Confirm disputed/rejected/low-confidence content points users toward validation.
- Confirm copy-ready summaries do not overstate certainty.

## Release Decision

Ship only if:

- `scripts/check-site.ps1` passes.
- Critical desktop and mobile flows are usable.
- No top navigation or major workflow link is broken.
- Empty or unavailable live-data sections are understandable.