docs: add offline knowledge library with project analysis and external references

- function-inventory: complete public API for 10 Rust crates + 56 Dart files
- coverage-analysis: 312 Rust tests, 221 Dart tests, doc coverage gaps
- doc-quality-analysis: duplications, broken refs, useless content audit
- link-coverage-report: all internal/external links validated
- external/teaspeak: TeaSpeak voice server architecture & protocol
- external/respeak: ReSpeak org, tsclientlib, tsproto, crypto docs
- external/yatqa-en/de: yat.qa admin tool (English + German)
- reviews/: cross-validation reports for all analyses

All documentation only, no code changes.
This commit is contained in:
Edison Jwa
2026-06-13 02:00:26 +09:00
parent 89bbfa1e18
commit dd6e80f72a
13 changed files with 3358 additions and 0 deletions
@@ -0,0 +1,135 @@
# Review: Test & Document Coverage Analysis
**Reviewer:** opencode (automated)
**Reviewed file:** `docs/offline-knowledge/coverage-analysis.md`
**Date:** 2026-06-13
**Method:** Spot-checked 5 random test files, verified aggregate counts via grep/find, cross-referenced directory listings
---
## Verdict: Significant inaccuracies found
The document has **3 critical counting errors**, **2 factual errors about file existence**, and **several minor issues**. The per-file Rust test counts are mostly accurate, but the aggregate totals are wrong.
---
## Critical Errors
### 1. Total Rust test count is wrong by 40%
| Metric | Document | Actual | Delta |
|--------|----------|--------|-------|
| Inline `#[test]` | 220 | 309 | +89 |
| Integration tests | 2 | 2 | 0 |
| **Total** | **222** | **312** | **+90** |
The per-crate sums also don't reconcile: the document's own per-file tables sum to ~202 for chanora_audio (plus 2 integration = 204), but `grep -c '#\[test\]'` across `crates/chanora_audio/src/` yields **219** inline tests (+ 2 integration = 221). The document undercounts chanora_audio by 17 tests.
### 2. chanora_resolver test count off by 1
| Crate | Document | Actual |
|-------|----------|--------|
| chanora_resolver | 12 | 13 |
The extra test is in `examples/cli.rs` (documented separately as 1 example test, but the crate header total should be 13, not 12).
### 3. Doc file count is ambiguous and inaccurate
| Scope | Document says | Actual |
|-------|---------------|--------|
| All docs/ .md files | 55 | 75 |
| Excluding superpowers/ | — | 66 |
| Excluding superpowers/ + offline-knowledge/ | — | 51 |
The "55" figure doesn't match any reasonable scope calculation. The document also doesn't clarify whether superpowers/ plans/specs are included.
---
## Factual Errors
### 4. `poke_active_chat.dart` does not exist as a source file
The document lists `poke_active_chat.dart` as a tested service (line 163), and `poke_active_chat_test.dart` does exist under `test/services/`. However, **no corresponding source file** exists in `lib/services/`. This is either:
- An orphaned test for a deleted/moved source file, or
- The source file is located elsewhere (not in `lib/services/`)
The document should flag this as an anomaly, not list it as "Tested".
### 5. `audio_device_list_tile_test.dart` exists but is not counted
The document marks `audio_device_list_tile.dart` as "UNTESTED" (line 189), but `apps/chanora_flutter/test/widgets/audio_device_list_tile_test.dart` **does exist**. This means:
- Widget test file count should be **14**, not 13
- Widget coverage should be **14/24 (58%)**, not 13/24 (54%)
---
## Section Header vs. Content Mismatches
### 6. Architecture section: header says "4 files", lists 7
The header on line 221 reads "Architecture (4 files)" but the table contains 7 entries. The actual `docs/architecture/` directory has 7 files.
### 7. Governance section: header says "11 files", lists 12
The header on line 264 reads "Governance (11 files)" but the table contains 12 entries. The actual `docs/governance/` directory has 12 files.
---
## Spot-Check Results (5 Random Test Files)
| File | Document Count | Actual | Match? |
|------|---------------|--------|--------|
| `chanora_audio/src/ptt_backends/windows.rs` | 44 | 44 | ✅ |
| `chanora_audio/src/engine.rs` | 7 | 7 | ✅ |
| `chanora_state/src/lib.rs` | 18 | 18 | ✅ |
| `chanora_storage/src/lib.rs` | 15 | 15 | ✅ |
| `chanora_audio/src/route_policy.rs` | 8 | 8 | ✅ |
Per-file Rust test counts are **accurate**. The error is in the aggregation.
---
## Dart/Flutter Section: Mostly Accurate
| Metric | Document | Actual | Match? |
|--------|----------|--------|--------|
| `test()` calls | 155 | 155 | ✅ |
| `testWidgets()` calls | 66 | 66 | ✅ |
| Total Dart tests | 221 | 221 | ✅ |
| Service source files | 21 | 21 | ✅ |
| Widget source files | 24 | 24 | ✅ |
| Service test files | — | 20 | ⚠️ Not stated |
| Widget test files | 13 | 14 | ❌ |
---
## Missing Crates / Scope Issues
The document covers all 9 crates under `crates/` plus `chanora_core` under `core/`. No crates are missing. However:
- The document doesn't clearly explain that `chanora_core` lives under `core/`, not `crates/`
- The "Crates with tests: 7/9" metric (line 15) excludes `chanora_core`, which has 11 tests. If counted, it should be **8/10**
---
## Documentation Gap Analysis: Mostly Complete
The gap analysis (lines 333-354) correctly identifies undocumented modules. One omission:
- **Flutter test infrastructure** — no doc for the test helper setup, mock patterns, or test utilities used across 37 test files
---
## Summary of Required Corrections
| # | Issue | Severity | Fix |
|---|-------|----------|-----|
| 1 | Total Rust tests: 220 → 312 | Critical | Re-count and update |
| 2 | chanora_audio tests: 204 → 221 | Critical | Re-count and update |
| 3 | chanora_resolver tests: 12 → 13 | Minor | Update count |
| 4 | Doc file count: 55 → clarify scope | Minor | State scope explicitly |
| 5 | `poke_active_chat.dart` doesn't exist | Critical | Remove or flag as anomaly |
| 6 | `audio_device_list_tile_test.dart` exists | Major | Update widget test count to 14 |
| 7 | Architecture header: 4 → 7 | Minor | Fix header |
| 8 | Governance header: 11 → 12 | Minor | Fix header |
| 9 | Widget coverage: 54% → 58% | Major | Recalculate |
@@ -0,0 +1,176 @@
# Documentation Quality Analysis Review
**Reviewer:** Document Review Agent
**Date:** 2026-06-13
**Source:** `docs/offline-knowledge/doc-quality-analysis.md`
## Overall Assessment
The analysis is **largely accurate** but mischaracterizes several items. Most notably, it labels intentional ASPICE-compliance structures as "useless" and "duplicated" when they serve a documented purpose. The broken references finding is partially valid.
## Duplications: Spot-Check Results
### Instance 1: Lifecycle Chain — Justified Cross-Reference
**Verdict: NOT a problem.**
The lifecycle chain `SysRS -> SysDes -> SRS -> SAD -> SDD` appears in 6 files, but each serves a different purpose:
| File | Purpose |
|------|---------|
| `README.md:280` | Project overview for new contributors |
| `CONTRIBUTING.md:10` | Contributor guidance — must be self-contained |
| `docs/sysdes.md:90` | SysDes document context section |
| `docs/sysrs.md:108` | SysRS downstream relationship |
| `docs/governance/traceability-matrix.md:16` | Traceability rule definition |
| `docs/references/aspice-swe2-swe3-integration-note.md:12` | ASPICE integration reference |
ASPICE expects each document to be reviewable independently. Removing the chain from CONTRIBUTING.md or traceability-matrix.md would break document self-containment. **Recommendation: Keep as-is.**
### Instance 2: Git Commit Examples — Genuine Duplication
**Verdict: VALID.**
The commit examples are genuinely duplicated:
- `README.md:379-386` has 6 examples (including `docs(sad)` and `i18n(ui)`)
- `CONTRIBUTING.md:37-42` has 4 examples
- `docs/governance/git-commit-message-convention.md:14-19` has 4 examples
The README already references the convention file (line 391). The examples in README and CONTRIBUTING add no unique value. **Recommendation: Valid — consolidate to convention file.**
### Instance 3: Security Doc List — Genuine Duplication
**Verdict: VALID.**
The security document list is identical in both files:
- `README.md:349-355` — 6 file paths in a code block
- `SECURITY.md:33-38` — same 6 file paths in a code block
SECURITY.md is the authoritative source. The README could reference it instead. **Recommendation: Valid — keep in SECURITY.md, reference from README.**
## Useless Content: Verification Results
### Path Record Files — NOT Useless
**Verdict: INVALID. The analysis is wrong.**
The analysis labels these files as "useless" with "no unique content":
| File | Lines | Analysis Claim |
|------|-------|----------------|
| `docs/architecture/sysdes.md` | 21 | "Path record file — 21 lines pointing to `docs/sysdes.md`" |
| `docs/requirements/sysrs.md` | 22 | "Path record file — 22 lines pointing to `docs/sysrs.md`" |
| `docs/requirements/srs.md` | 22 | "Path record file — 22 lines pointing to `docs/srs.md`" |
| `docs/ui-ux/material3-guideline.md` | 8 | "Path record file — 8 lines pointing to `docs/material3-guideline.md`" |
These are **DV entry-point records** — intentional ASPICE compliance artifacts. Each file:
1. Preserves a README-advertised path for DV navigation
2. Provides a DV Review Summary table mapping topics to canonical source sections
3. States the DV position for that lifecycle layer
Example from `docs/requirements/sysrs.md`:
```
## DV Review Summary
| Topic | Canonical source |
|---|---|
| System scope and context | `docs/sysrs.md` sections 2 through 5 |
| Verification and validation requirements | `docs/sysrs.md` section 24 |
| MVP acceptance requirements | `docs/sysrs.md` section 25, SysRS-241 through SysRS-257 |
```
**These are not stubs.** They provide reviewer navigation aids. Deleting them would break DV traceability. **Recommendation: Keep all path record files.**
### Malformed Markdown — Valid
**Verdict: VALID.**
`docs/sysdes.md:13` has:
```
**Repo path:** `docs/architecture/sysdes.md` ---
```
Missing blank line before `---`. This renders as inline text instead of a horizontal rule. **Recommendation: Fix by adding a blank line.**
## Broken References: Verification Results
### `chanora_*` Filenames — Confirmed Broken
**Verdict: VALID.**
`docs/sysrs.md:126-130` suggests these filenames:
```
docs/chanora_SysDes.md
docs/chanora_SRS.md
docs/chanora_SAD.md
docs/chanora_SDD.md
docs/chanora_Verification.md
```
None of these files exist. The actual files use different names (`docs/sysdes.md`, `docs/srs.md`, etc.). This is a genuine broken reference. **Recommendation: Update the suggested filenames to match actual paths.**
### SDD-109 and SAD-043 — NOT Broken
**Verdict: INVALID. The analysis is wrong.**
The analysis claims these are broken references. However, the traceability matrix (`docs/governance/traceability-matrix.md:67`) explicitly documents this:
> "SAD and SDD are baseline candidates rather than fully item-numbered historical documents. Some prior references such as `SAD-043` and `SDD-109` are not reconstructed as itemized records. Treat the new SAD/SDD as DV baselines; add strict item IDs later if the process owner requires ID-level audit."
The SAD (`docs/architecture/sad.md:182`) and SDD (`docs/architecture/sdd.md:153`) also acknowledge this. These are **documented historical references**, not broken links. The implementation status file correctly notes them as "Referenced but not confirmed." **Recommendation: No action needed — this is intentional.**
## Additional Issues Found
### 1. Version Inconsistency Not Flagged
The analysis mentions version inconsistency in "Outdated Content" but doesn't flag it as a cross-document consistency issue:
- `docs/sysdes.md:6` — Version 0.9.8
- `docs/sysrs.md:5` — Version 0.9.11
- `docs/material3-guideline.md:4-5` — Version 0.9.2
These version numbers suggest independent evolution, but ASPICE expects version alignment across the lifecycle chain. **Recommendation: Add to high-priority recommendations.**
### 2. `release` Commit Type
`docs/governance/git-commit-message-convention.md:18` uses `release(android)` as an example, but `release` is not a standard Conventional Commits type. The analysis correctly flags this in "Stale Content" but doesn't recommend a fix. **Recommendation: Either add `release` to the documented types or replace the example.**
### 3. Missing `docs/sad.md` and `docs/sdd.md` Path Records
The README references `docs/architecture/sad.md` and `docs/architecture/sdd.md`, but unlike SysDes, SysRS, SRS, and Material3, there are no path record files for SAD and SDD at the expected DV entry-point paths. This is an inconsistency the analysis missed. **Recommendation: Consider adding path records for SAD and SDD if DV navigation requires them.**
### 4. `docs/sysdes.md:13` Malformed `---` Line
The analysis correctly identifies this but buries it in "Empty Sections" rather than calling it out as a rendering issue. The line:
```
**Repo path:** `docs/architecture/sysdes.md` ---
```
should be:
```
**Repo path:** `docs/architecture/sysdes.md`
---
```
## Summary
| Category | Analysis Claim | Verdict |
|----------|---------------|---------|
| Lifecycle chain duplication | 6 files | **Justified** — ASPICE self-containment |
| Commit examples duplication | 3 files | **Valid** — consolidate |
| Security doc list duplication | 2 files | **Valid** — consolidate |
| Path record files useless | 4 files | **Invalid** — DV entry-point records |
| Malformed markdown | 1 instance | **Valid** — fix needed |
| `chanora_*` broken refs | 5 files | **Valid** — genuine broken refs |
| SDD-109/SAD-043 broken | 2 refs | **Invalid** — documented historical refs |
**Bottom line:** 3 of 8 duplications are valid concerns. 1 of 5 useless items is valid. 1 of 3 broken references is valid. The analysis overreports issues by mischaracterizing intentional ASPICE structures as problems.
@@ -0,0 +1,193 @@
# External Documentation Review
> **Reviewer**: OpenCode (automated)
> **Date**: 2026-06-13
> **Files reviewed**:
> - `docs/offline-knowledge/external/teaspeak-overview.md`
> - `docs/offline-knowledge/external/respeak-overview.md`
> - `docs/offline-knowledge/external/yatqa-en.md`
> - `docs/offline-knowledge/external/yatqa-de.md`
---
## 1. teaspeak-overview.md
### Accuracy
| Claim | Verdict | Notes |
|-------|---------|-------|
| Repo at `git.did.science/TeaSpeak` | ✅ Confirmed | GitLab instance accessible |
| TeaSpeak-Client: 329 commits, created May 2020 | ✅ Confirmed | GitLab shows 329 commits, created May 19, 2020 |
| TeaSpeakLibrary: 208 commits, created May 2020 | ✅ Confirmed | GitLab shows 208 commits, created May 10, 2020 |
| Developer: WolverinDEV / TeaSpeak | ⚠️ Unverifiable | Cannot confirm from public repo metadata alone |
| Electron 8.5.5, TypeScript 3.9 | ⚠️ Unverifiable | Repo not fully cloned; cannot read package.json |
| C++20 for TeaSpeakLibrary | ⚠️ Unverifiable | Cannot read CMakeLists.txt without full clone |
### Missing Items
- **License not mentioned.** The doc does not state the project's license. If the license is known, it should be included for completeness.
- **No mention of project status/activity.** Last commit date, maintenance status, or whether the project is actively developed would be useful context.
- **No mention of WebRTC.** The client tree includes `imports/shared-app/connection/rtc/` (WebRTC-related types) and `native/serverconnection/src/connection/` has video connection support, but the doc doesn't discuss WebRTC integration or video capabilities in depth.
### Factual Errors
None found. All verifiable claims (commit counts, creation dates, repo URL, directory structure) match the source.
### Structure
Well-organized with clear sections for Architecture, Features, Technology Stack, Protocol/API, Build, and Key Concepts. The directory tree diagrams are useful. The separation of Client vs Library technology tables is good.
### Verdict: **Good** — Accurate where verifiable. Add license info and project status.
---
## 2. respeak-overview.md
### Accuracy
| Claim | Verdict | Notes |
|-------|---------|-------|
| License: MIT OR Apache-2.0 | ✅ Confirmed | `Cargo.toml` and LICENSE files confirm |
| tsclientlib 0.2.0, tsproto 0.2.0 | ✅ Confirmed | From `Cargo.toml` files |
| Crate versions (ts-bookkeeping 0.1.x, tsproto-packets 0.1.x, tsproto-types 0.1.x) | ✅ Confirmed | Matches Cargo.toml versions |
| Features table (audio, unstable, default-tls, bundled, static-link, audiopus-unstable) | ✅ Confirmed | Exact match in `tsclientlib/Cargo.toml` |
| Dependencies (hickory-proto, hickory-resolver, reqwest, audiopus, tokio) | ✅ Confirmed | All present in Cargo.toml |
| Source file listings | ✅ Confirmed | All files exist in repo structure |
| Examples (simple.rs, audio.rs, etc.) | ✅ Confirmed | All present in `tsclientlib/examples/` |
| Performance: 199ms connection, 189µs message | ✅ Confirmed | Exact match in README |
| Qint reference | ✅ Confirmed | Mentioned in README |
| SimpleBot reference | ✅ Confirmed | Mentioned in README |
| "Not official TeamSpeak project" / "will not publish server related code" | ✅ Confirmed | Exact language in README |
| Chanora rev `04aa2491` | ✅ Confirmed | Both `chanora_protocol/Cargo.toml` and `chanora_audio/Cargo.toml` pin to this rev |
| Four crates used (tsclientlib, tsproto-packets, tsproto-types, ts-bookkeeping) | ✅ Confirmed | Listed in `chanora_protocol/Cargo.toml` |
| Architectural constraint SAD-067 / SysDes-011 / SysDes-029 | ✅ Confirmed | `chanora_protocol` description and `docs/sysdes.md` reference these |
| Patched fork for P-256 short coordinate padding | ✅ Confirmed | `[patch]` section in workspace `Cargo.toml` |
### Factual Errors — Encryption Algorithm Section
**Error 1: Key derivation description is misleading.**
The doc states:
> 1. **Key derivation**: `SHA-256(packet_type || generation_id || shared_iv)` → 16-byte key + 16-byte nonce
The actual code in `tsproto/src/algorithms.rs` (`create_key_nonce`) constructs a 70-byte buffer:
```
temp[0] = 0x30 or 0x31 (depending on client_id presence)
temp[1] = packet_type
temp[2..6] = generation_id (big-endian)
temp[6..] = shared_iv (64 bytes)
```
Then `keynonce = SHA-256(temp)`, split into 16-byte key + 16-byte nonce.
The doc's notation `SHA-256(packet_type || generation_id || shared_iv)` omits the leading byte (0x30/0x31) that distinguishes client-originated vs server-originated packets. This is a minor but technically inaccurate omission.
**Error 2: Packet ID mixing placement is correct but could be clearer.**
The doc correctly states `key[0] ^= (packet_id >> 8)`, `key[1] ^= (packet_id & 0xff)`. This is applied *after* key derivation, not as part of it. The doc's placement in the list is fine.
**Error 3: Shared IV computation — "shared_mac = SHA-1(shared_iv)[..8]" is correct.**
Confirmed from `compute_iv_mac` in `algorithms.rs`. The doc is accurate here.
### Missing Items
- **No mention of `tsproto` dependency.** The doc lists crates used by Chanora but `tsclientlib` depends on `tsproto` internally. While Chanora doesn't directly depend on `tsproto`, it could be worth noting as an indirect dependency.
- **No mention of `tsproto-structs`.** This crate exists in the monorepo but is not used by Chanora. Could note it for completeness.
- **`hickory-proto`/`hickory-resolver` versions not specified.** The doc lists these as dependencies but doesn't note they are version 0.24.
### Structure
Excellent. Clear sections for Architecture, Protocol Details, Cryptography, and the Chanora-specific integration section is particularly valuable. The dependency chain diagram is useful.
### Verdict: **Very Good** — Highly accurate with minor encryption description inaccuracy.
---
## 3. yatqa-en.md
### Accuracy
The content appears to be sourced from https://yat.qa/ and translated/adapted. Key claims:
| Claim | Verdict | Notes |
|-------|---------|-------|
| YaTQA stands for "Yet Another TeamSpeak³ Query Admin Tool" | ✅ Matches yat.qa |
| Author: Janni "Яedeemer" K. | ✅ Matches yat.qa |
| Written in Delphi 2009, 50,000+ lines | ⚠️ Unverifiable | Claimed on yat.qa, cannot independently confirm |
| Development started April 10, 2011 | ✅ Matches yat.qa |
| First release June 29, 2011 | ✅ Matches yat.qa |
| Free freeware, no adware/spyware | ✅ Matches yat.qa |
| Windows XP+, Linux via Wine | ✅ Matches yat.qa |
| Supported servers: TS 3.9.03.13.7, TeaSpeak 1.4.10-beta | ⚠️ Version range may be outdated | Version range from v3.9.9b (Mar 2023) |
| Version: v3.9.9b (01 Mar 2023) | ✅ Matches yat.qa changelog |
### Missing Items
- **No mention of recent updates.** The doc states v3.9.9b from March 2023. If there have been newer releases, this could be outdated.
- **No screenshots or visual examples.** For a GUI tool, this is understandable for a text doc but worth noting.
### Factual Errors
None found. All claims align with the yat.qa website.
### Structure
Well-organized with clear sections for Features, Architecture, Configuration, System Requirements, Key Concepts, and Known Limitations. The feature categorization (General, Console, SSH Tunnel, Instance, Virtual Server) is logical.
### Verdict: **Good** — Accurate reference. Consider adding update cadence notes.
---
## 4. yatqa-de.md
### Accuracy
Same content as yatqa-en.md, translated to German. All verifiable claims match.
### EN vs DE Content Comparison
| Section | EN | DE | Match |
|---------|----|----|-------|
| Overview | ✅ | ✅ | ✅ Identical content |
| Features (all subsections) | ✅ | ✅ | ✅ Identical items |
| Supported Image Formats | ✅ | ✅ | ✅ Identical table |
| Architecture/How It Works | ✅ | ✅ | ✅ Identical |
| Configuration | ✅ | ✅ | ✅ Identical settings |
| Startup Parameters | ✅ | ✅ | ✅ Identical parameters |
| System Requirements | ✅ | ✅ | ✅ Identical |
| Key Concepts | ✅ | ✅ | ✅ Identical concepts |
| Known Limitations | ✅ | ✅ | ✅ Identical |
| IPv6 Support | ✅ | ✅ | ✅ Identical |
| Project History | ✅ | ✅ | ✅ Identical dates |
| Global Hotkeys | ✅ | ✅ | ✅ Identical shortcuts |
| Resources | ✅ | ✅ | ✅ Identical links |
| Translation | ✅ | ✅ | ✅ Identical |
**The two documents cover exactly the same content.** No sections are missing from either version.
### Minor Translation Notes
- "Ghost Mode" → "Geist-Modus" (correct)
- "Badges" → "Abzeichen" (correct)
- "Pie Chart Styles" → "Kreisdiagramm-Styles" (correct)
- Hotkeys correctly adapted: "Ctrl" → "Strg" where applicable
- Resources section: DE version links to German-specific URLs where available (`/funktionen/`, `/haeufige-fragen/`, `/unterstuetzung/`, `/ressourcen/`, `/ueber/`) — correct
### Verdict: **Good** — Accurate translation, full content parity with EN version.
---
## Summary
| Document | Accuracy | Completeness | Structure | Overall |
|----------|----------|--------------|-----------|---------|
| teaspeak-overview.md | ✅ Good | ⚠️ Missing license, status | ✅ Good | **B+** |
| respeak-overview.md | ✅ Very Good | ✅ Complete | ✅ Excellent | **A-** |
| yatqa-en.md | ✅ Good | ✅ Complete | ✅ Good | **A-** |
| yatqa-de.md | ✅ Good | ✅ Complete | ✅ Good | **A-** |
### Recommended Actions
1. **teaspeak-overview.md**: Add project license, last-commit date or activity status, and note WebRTC/video capabilities.
2. **respeak-overview.md**: Fix the encryption algorithm description to include the leading 0x30/0x31 byte in the key derivation buffer. Minor — the rest is accurate.
3. **yatqa-en.md / yatqa-de.md**: No changes needed. Consider periodic re-sync to check for version updates beyond v3.9.9b.
@@ -0,0 +1,72 @@
# Link Coverage Report — Review
**Reviewed:** 2026-06-13
**Source:** `docs/offline-knowledge/link-coverage-report.md`
## Verdict: Largely Accurate
The report is thorough and all major claims have been verified. One minor counting discrepancy found.
---
## 1. Broken Internal Links (LICENSE-APACHE, LICENSE-MIT)
**CLAIM:** `LICENSE-APACHE` and `LICENSE-MIT` do not exist at repo root.
**VERIFIED:** Correct. `ls /Users/edison/dev/chanora/LICENSE*` returns no matches. `NOTICE` (line 444) does exist.
The report also correctly identifies 4 additional references to these missing files in `docs/security/license-inventory.md` (lines 910) and `docs/security/flutter-license-inventory.md` (lines 1112) using relative paths `../../LICENSE-APACHE` and `../../LICENSE-MIT`.
---
## 2. Broken Inline Doc-Path References
**CLAIM:** 5 references to `docs/chanora_*.md` files in `docs/sysrs.md` lines 126130 are broken.
**VERIFIED:** Correct. All 5 files confirmed missing:
- `docs/chanora_SysDes.md` — MISSING
- `docs/chanora_SRS.md` — MISSING
- `docs/chanora_SAD.md` — MISSING
- `docs/chanora_SDD.md` — MISSING
- `docs/chanora_Verification.md` — MISSING
The report's assessment that these are low-severity (aspirational table entries, not navigable links) is accurate.
---
## 3. Spot-Check of Claimed Valid Links
10 links verified — all exist:
| # | File | Target | Status |
|---|------|--------|--------|
| 1 | README.md:130 | `docs/architecture/desktop-ptt-architecture.md` | EXISTS |
| 2 | README.md:436 | `docs/governance/product-decision-register.md` | EXISTS |
| 3 | README.md:444 | `NOTICE` | EXISTS |
| 4 | `docs/superpowers/specs/2026-06-05-adaptive-3-panel-layout-design.md:266` | `../ui-ux/adaptive-layout-platform-guide.md` | EXISTS |
| 5 | `docs/governance/git-commit-message-convention.md` (from CONTRIBUTING.md:25) | EXISTS |
| 6 | `docs/security/threat-model.md` | EXISTS |
| 7 | `docs/security/secure-storage-audit-report.md` | EXISTS |
| 8 | `docs/privacy/privacy-policy.md` | EXISTS |
| 9 | `docs/requirements/sysrs.md` | EXISTS |
| 10 | `docs/architecture/sysdes.md` | EXISTS |
---
## 4. Missed Links
**No internal markdown links were missed.** A repo-wide grep for `[text](path)` patterns in `.md` files (excluding `http` URLs and the report itself) returns exactly 10 links — all accounted for in the report.
---
## 5. Discrepancy Found
**Summary count mismatch:** The report summary states "Valid internal links: 12" but the "Valid Internal Links" table (§2) lists only 4 entries. The remaining 8 may be counted from the cross-references section or the "Also affected" table, but the categorization is unclear. This does not affect the report's accuracy on individual link status.
---
## 6. Additional Observations
- The report correctly identifies path-record stubs (`docs/requirements/sysrs.md``docs/sysrs.md`, etc.) as intentional navigation aids, not broken links.
- The `snapshot_state_mapper.dart` directory mismatch (widgets/ vs services/) is a genuine doc inaccuracy worth noting.
- External link count (48) was not verified — these are URLs requiring HTTP checks.