woostack-qa

Exploratory-QA a running application the way a user would. Where woostack-audit inspects standing code at rest and woostack-review gates a diff, woostack-qa drives the live app in a real browser: it walks the core journeys, attacks edge cases, watches an always-on assertion floor, reproduces every suspected bug once before logging it, and emits a severity-ranked, sanitized, non-authoritative report-only findings document under .woostack/qa/.

It is report-only—it never writes application code or tests, mutates an artifact, commits, posts to a code host, or merges. Its sanitized local report is diagnostic evidence, not a spec, fix contract, acceptance record, lifecycle state, or permission to remediate. Each verified defect includes a proposed bounded remediation contract and may link an exact caller-supplied issue artifact. Neither form establishes scope, acceptance, assignment, or implementation authority. QA is an on-demand local engine with no CI delivery or gate. It is not a test-suite author (woostack-tdd owns durable test work), not a load/perf/security scanner, and it never starts, builds, or restarts the target app.