test: rerun TakeProfit with causal deep-audit skills

[safal207]

Summary

Runs a fresh, exact-time, evidence-only TakeProfit public audit on top of the causal deep-audit skill family from PR #112.

This is not a relabeling of evidence from PR #87. Historical memory selected discriminating tests; only the current exact run authorizes current reproduction status.

Skill path

causal-deep-audit
  -> evidence-capture
  -> causal-adjudication
  -> exact-head-governance
  -> replay-memory
  -> product-impact
  -> transition-next-action

Exact result

• verdict: CONFIRMED_DEFECT / ESCALATE;
• coverage: 16/16 observations;
• exact head: 1ea81eece27b7eeb72f19f4f821e6e20a2ddd833;
• run: 29963192069, attempt 1;
• artifact: 8546884109 (takeprofit-causal-rerun-29963192069-1);
• artifact digest: sha256:98c57322edadb6400e5f2396f3f5c3a6698ad35787b8e42f9ff3bb6e3f28e165;
• all workflow stages passed: exact checkout, SHA binding, bounded observation, enrichment discriminators, JSON Schema validation, evidence manifest, secret scan and artifact upload.

Reproduced findings

ID	Severity	Claim	Result
TP-FRESHNESS-04	HIGH	confirmed defect	During a 90-second browser outage the public financial chart remained visible and textually unchanged, while no visible offline/stale/reconnecting boundary appeared.
TP-RESPONSIVE-07	HIGH	confirmed defect	/platform produced 2016 px document-root overflow at 1440 px and 3044 px at 412 px.
TP-A11Y-NAME-08	HIGH	defect candidate	The accessibility tree contained 145/144 unnamed interactive nodes on the desktop/mobile homepage and 70 on /platform; DOM-level sampling remains the next discriminating test.
TP-PUBLIC-IDENTITY-01	MEDIUM	confirmed defect	Desktop and mobile each exposed five visible USERNAME_NOT_SET author links and twenty accessibility-tree matches.
TP-CHARTSTORE-02	MEDIUM	confirmed defect	Desktop and mobile public indicator pages emitted the same missing required ChartStore settings family.
TP-REWARDS-05	MEDIUM	product signal	The same public rewards surface presents “No minimum, no cap” and a $200 withdrawal threshold; scope clarification is required before calling it contradictory.
TP-SCOPE-06	MEDIUM	product signal	The public platform markets a broader stock/AI/screener capability set than the cryptocurrency-centered platform description in the current Terms. This is a product/legal review signal, not a legal conclusion.
TP-PRELOAD-03	LOW	confirmed defect	Seventeen invalid preload elements/warnings remained across the app-shell public surfaces in both profiles.

Important audit correction

The first exact attempt (29962735916) used the obsolete /terms route and correctly produced a 404. It is retained as audit history but superseded for the Terms comparison. The final run uses https://takeprofit.com/terms-and-conditions, requires HTTP 200 in both profiles and fails closed otherwise.

Bounded scope

• eight public TakeProfit surfaces;
• desktop and mobile profiles;
• rendered state, accessibility tree, console/network signals, screenshots and directional browser timings;
• one 90-second browser-level offline transition on the public indicator chart;
• no authentication, personal data, direct API testing, form submission, alerts, orders, financial operations, fuzzing, load testing, active security testing, server-state change or external submission.

Recommended first remediation experiment

Expose a persistent user-visible quote state with Live, Reconnecting, Delayed/Stale and last-update timestamp. Re-run the same 90-second offline trajectory. Acceptance requires the state to change visibly within the agreed detection window while the stale chart remains on screen.

Authority

Evidence only. This PR grants no ownership, approval, disclosure, deployment or merge authority. It remains draft for human adjudication.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 5a79490c-0526-4402-8eab-3af9919f9f24

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch agent/takeprofit-causal-rerun-2026-07-23

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}