Problem / motivation
The vendor boundary, parser semantics, save gating, safe DOM behavior, and existing static-site contracts need deterministic regression protection.
Scope
Add small constructed JPEG/PNG/WebP integration fixtures and extend release, security, input, category, UX, i18n, and runner registries.
Non-goals
No network fixtures, new test framework, package manager, large binaries, or redundant library-internal test suite.
Acceptance criteria
- Inspection, grouping, exact rational, opaque/decoded, partial, diagnostics, clean, ICC preservation, verification, errors, naming, MIME, immutability, and save gating are covered.
- Vendor provenance/hash and approved files are pinned.
- No unsafe DOM sink, Canvas/re-encoding, external runtime URL, or direct vendor import outside metadata.js is allowed.
- node tests/run-all.mjs and git diff --check pass.
Problem / motivation
The vendor boundary, parser semantics, save gating, safe DOM behavior, and existing static-site contracts need deterministic regression protection.
Scope
Add small constructed JPEG/PNG/WebP integration fixtures and extend release, security, input, category, UX, i18n, and runner registries.
Non-goals
No network fixtures, new test framework, package manager, large binaries, or redundant library-internal test suite.
Acceptance criteria