docs: refresh maturity tracker + scripts index to merged reality

[BigSimmo]

Summary

A documentation-accuracy pass — the living maturity backlog tracker had drifted from what
actually shipped across the recent maturity PRs. No source, config, or behaviour changes.

• docs/maturity-backlog-workorders.md
  • N2 (dependency-report) and X1 (import-boundary lint) → DONE, both landed in ci: enforce mockup import boundary + enable dependency report (maturity X1, N2) #986.
  • L3 (single gate manifest) → DONE, landed in ci: enforce the local verify:cheap gate set in CI + gate-manifest self-test (maturity L3) #1002.
  • X3 (monolith decomposition) annotated with its first extraction landing (refactor(rag): extract evidence-gate predicates into rag-evidence-gates (maturity X3) #997) and
    refreshed line counts (rag.ts now 5,018; components untouched).
  • Corrected the stale "197 flat files" claim to the 176 top-level .ts files that
    remain after the rag cluster moved into src/lib/rag/ (refactor(rag): extract the rag cluster into src/lib/rag/ (maturity X2) #994).
  • Replaced this PR placeholders with the PR numbers each item actually landed in
    (N1 → docs+chore: implement safe maturity-backlog items + work orders for the rest #985, X2 → refactor(rag): extract the rag cluster into src/lib/rag/ (maturity X2) #994, L2 → ci: enforce one SHA per action across workflows + composites (maturity L2) #992, L5 → docs+chore: implement safe maturity-backlog items + work orders for the rest #985), and refreshed the progress-summary table.
• docs/scripts-index.md
  • Added check-gate-manifest.mjs to the verification-gate building blocks with a one-line
    description of what it guards (CI ↔ local gate-list parity).

Performance and broader repo-wide review were considered as part of this "final wins" sweep;
there is no safe, easy performance win here — the remaining perf-relevant surfaces are the
runtime/RAG lane, which is deliberately out of scope for a maintainability pass. That is
recorded honestly rather than padded with a speculative change.

Verification

• npm run verify:pr-local

Verification not run: docs-only accuracy change with no source/config/behaviour edits. Ran the
documentation gates instead, all green:

• npm run docs:check-links — 1032 repo path references resolve.

• npm run docs:check-scripts — 319 npm run references resolve to real scripts.

• npm run docs:check-index — codebase-index coverage OK (41 modules/routes + all schema tables).

• npx prettier --check on both edited files — clean.

• npm run verify:ui — N/A (no UI/routing/styling change)

• npm run verify:release — N/A (not a release/handoff claim)

Risk and rollout

• Risk: negligible — Markdown-only edits to two tracking docs; every fact was verified against
  the repo state and the merged PR history before writing.
• Rollback: revert the single commit.
• Provider or production effects: None.

Clinical Governance Preflight

Not applicable — this change touches no ingestion, answer generation, search/ranking, source
rendering, document access, privacy, production env, or clinical output. Documentation only.

Notes

• Part of the repository-maturity sweep; complements the already-merged docs+chore: implement safe maturity-backlog items + work orders for the rest #985/ci: enforce mockup import boundary + enable dependency report (maturity X1, N2) #986/ci: enforce one SHA per action across workflows + composites (maturity L2) #992/refactor(rag): extract the rag cluster into src/lib/rag/ (maturity X2) #994/refactor(rag): extract evidence-gate predicates into rag-evidence-gates (maturity X3) #997/ci: enforce the local verify:cheap gate set in CI + gate-manifest self-test (maturity L3) #1002.
• X4 (SAST-blocking on the parser path) remains PROVIDER-GATED (triage-first) — it needs a
  Semgrep-capable environment to triage findings before the gate can flip, so it is intentionally
  left as an open work order rather than forced here.

🤖 Generated with Claude Code

---

Generated by Claude Code

Summary by CodeRabbit

• Documentation
  • Updated maturity backlog statuses and progress summaries to reflect recently completed work.
  • Documented completed dependency reporting, import-boundary checks, domain extraction, monolith decomposition, and gate-manifest work.
  • Clarified verification gate documentation, including checks that local and CI gate lists remain aligned.

[supabase]

This pull request has been ignored for the connected project sjrfecxgysukkwxsowpy because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

[coderabbitai]

📝 Walkthrough

Walkthrough

The PR updates maturity backlog statuses and landed-work details, revises the progress summary, and documents check-gate-manifest.mjs in the verification gate chain and CI coverage.

Changes

Maturity and verification documentation

Layer / File(s)	Summary
Record landed maturity work docs/maturity-backlog-workorders.md	Dependency, import-boundary, RAG extraction, monolith decomposition, tooling, WCAG, and progress-summary entries now reflect landed work and updated statuses.
Document gate-manifest verification docs/maturity-backlog-workorders.md, docs/scripts-index.md	The gate-manifest implementation and verification chain now document cross-checking local gates against CI’s static-pr job.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• BigSimmo/Database#454: Introduced or refactored the risk-scoped verification workflow referenced by the gate-manifest documentation.
• BigSimmo/Database#985: Added earlier versions of the maturity backlog and verification gate documentation updated here.
• BigSimmo/Database#1002: Added the gate-manifest enforcement wired into CI and package scripts.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly matches the doc-only update to the maturity tracker and scripts index.
Description check	✅ Passed	The description follows the template and includes summary, verification, risk/rollback, clinical preflight, and notes.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/maturity-final-wins

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.