דלג לתוכן הראשי

Education Edition — Submission Closure Gate

Phase 4 E2E readiness: role matrix, QA fixtures, consent bypass hardening, manual evidence capture.

Closure Gate: INCOMPLETE

Complete all checks below and sign off to pass the closure gate.

0/5

Role Flows Passed

0/10

QA Fixtures Passed

0/4

Consent Checks Passed

0

Evidence Entries

Role Matrix — E2E Flow Coverage
student
not_tested
Onboarding wizardAssessment interviewGame sessionBloomy block enforcedNeutral results

No diagnosis, no publish, no mutate

teacher
not_tested
Teacher consent gateClassroom strategy assignmentStudent identity isolationApproved catalog only

Consent required before any student data

parent
not_tested
Family share inviteParent practice reportWeekly summaryChild profile view

RLS scoped to own children

admin
not_tested
Migration hubGate dashboardsAudit centerUser management

Full access, audit logged

therapist
not_tested
Client workspaceGFIE verificationIntervention planSession outcomes

Professional scope, client-linked

QA Fixtures — Manual Browser Verification
QA-EDU-01

Student onboarding completes without diagnosis language

student
not_tested
QA-EDU-02

Bloomy AI block prevents diagnosis/publish/mutate

student
not_tested
QA-EDU-03

Teacher consent gate blocks until accepted

teacher
not_tested
QA-EDU-04

Student identity isolated across teacher views

teacher
not_tested
QA-EDU-05

Approved catalog only — no unapproved strategies

teacher
not_tested
QA-EDU-06

Parent sees only own children (RLS)

parent
not_tested
QA-EDU-07

Neutral claims in all result/report text

student
not_tested
QA-EDU-08

Admin audit log captures all destructive ops

admin
not_tested
QA-EDU-09

Therapist client linkage enforced

therapist
not_tested
QA-EDU-10

Consent bypass hardening — no header bypass works

admin
not_tested
Consent Bypass Hardening
CON-01

Teacher consent record exists before student data access

not_tested
CON-02

No x-mindbloom-reconcile-secret bypass accepted

not_tested
CON-03

No x-mindbloom-internal-secret bypass accepted

not_tested
CON-04

Consent revocation immediately revokes access

not_tested
Human Sign-Off

Sign-off required to pass the closure gate.

base44
Edit with Base44