woostack-qa
woostack-qa
Exploratory-QA a running application the way a user would. woostack-qa drives the live
app in a real browser: it walks the core journeys, attacks edge cases, gathers the evidence each
step warrants, reproduces every suspected bug once before logging it, and emits a
severity-ranked, sanitized, non-authoritative report-only findings document under
.woostack/qa/.
It is report-only—it never writes application code or tests, mutates GitHub, commits, posts to a code
host, or merges. Its sanitized local report is diagnostic evidence, not a spec, fix contract,
acceptance record, lifecycle state, or permission to remediate. Each verified defect includes a
proposed bounded remediation contract and may link an exact caller-supplied GitHub issue. Neither
form establishes scope, acceptance, assignment, or implementation authority.
QA is an on-demand local engine with no CI delivery or gate. It is not a test-suite author
(woostack-execute owns durable test work under its
testing guidance), not a load/perf/security scanner,
and it never starts, builds, or restarts the target app.