v0.1.7 - QA-ONLY mode
v0.1.7 — QA-ONLY mode
A sixth mode for when you want QA, data verification, or a data comparison and explicitly no code change. Trigger it with "QA only", "검증만", "데이터 정합성 / 데이터 비교", "API 수정 전후 확인", or "A/B".
It exercises an already-running app (and a read-only, DB-independent database) like a user, writes no production code, creates no worktree, and runs none of the implementation gates. It produces a human-friendly report.md (what worked / what didn't / what it discovered) and persists a reusable, indexed QA suite under .domain-agent/qa/ so the same check re-runs fast.
Highlights
- Pipeline: Intake → Target & Access → Scenario checkpoint → Exercise → Cross-check → Report → Persist. No worktree, no delivery gate.
- Browser driver:
agent-browserby default; attach-to-browser (Playwright CLI, attach-to-browser-skill) for authenticated / real logged-in sessions. Theagent-browser doctorpreflight is always recorded. - Read-only, DB-independent DB access: MySQL / PostgreSQL / SQLite via an intelligence skill if installed (e.g. aidt-mysql-cli, postgres-intelligence), else the raw CLI. SELECT-class only — enforced both in the agent prompt and by a gate SQL scan (per-
DB:-line read-only; blocks INSERT/UPDATE/DELETE/MERGE/REPLACE/DDL/GRANT/REVOKE/CALL). - Two isolated subagents:
qa-auditordrives the app,db-readerreads the DB — raw rows/PII never enter the browser agent. Conductor-mediated handoff via a small sanitizedqa/expected.md(which also serves as thebefore-afterbaseline); auth is transient and never written to a file. - Action cap (default 100): each browser interaction and DB query counts as one action; summed across both agents and gate-enforced so a run stays scoped and the user does not get lost in an unbounded crawl.
- New terminal gate
templates/qa-only-gate.sh: report anchors +qa-gate.shbrowser/CLI evidence +action_count <= action_cap+ DB read-only backstop.
Wiring & tests
New files: reference/qa-only.md, reference/db-access.md, agents/qa-auditor.md, agents/db-reader.md, templates/qa-report.md, templates/qa-only-gate.sh, tests/qa-only-contract.test.sh. Wired into SKILL / pipeline / qa / experts / domain-context / index template / vault / state.json / README.
Tests: qa-only-contract 56/0; full contract suite 293/0, no regressions. Dogfooded end-to-end against a live Cloudflare-protected site — the mode correctly tried agent-browser, recorded an honest BLOCKED verdict (no fake pass), recommended attach-to-browser as the remediation, and its gate passed on truthful evidence.
Full rationale: docs/changelog/changelog-2026-06-05.md.
Full changelog: v0.1.6...v0.1.7