woostack-qa

Exploratory-QA a running application the way a user would. woostack-qa drives the live app in a real browser: it walks the core journeys, attacks edge cases, gathers the evidence each step warrants, reproduces every suspected bug once before logging it, and emits a severity-ranked, sanitized, non-authoritative report-only findings document under .woostack/qa/.

It is report-only—it never writes application code or tests, mutates GitHub, commits, posts to a code host, or merges. Its sanitized local report is diagnostic evidence, not a spec, fix contract, acceptance record, lifecycle state, or permission to remediate. Each verified defect includes a proposed bounded remediation contract and may link an exact caller-supplied GitHub issue. Neither form establishes scope, acceptance, assignment, or implementation authority. QA is an on-demand local engine with no CI delivery or gate. It is not a test-suite author — durable test work belongs to a separately authorized implementation workflow with its own testing guidance — not a load/perf/security scanner, and it never starts, builds, or restarts the target app.

Commands