Bite 31.2 — Common Shell, Authentication, and Administration Translation - RodrigoMattosoSilveira/EnterpriseRemoteSystems GitHub Wiki

Bite 31.2 — Common Shell, Authentication, and Administration Translation

Manual Verification Before Promotion

Branch: 862-bite-312-common-shell-authentication-and-administration-translation
Committed HEAD SHA: 35af6f9fb6965dfb790e99db4fcb6ba7ce3b10ec

1. Automated Prerequisites

Before beginning this manual suite, confirm:

make local-check passes.
CI passes.
Playwright passes.
The committed HEAD ZIP matches SHA 35af6f9fb6965dfb790e99db4fcb6ba7ce3b10ec.

2. Scope of This Manual Verification

Bite 31.2 translates the prospect-visible shared and control-plane surfaces:

sign-in;
password reset/change presentation;
common application shell;
common navigation;
visible language selector;
Administration context selector;
Tenant selector;
common actions and states;
Tenant Administration;
Authentication Administration;
Authentication Account / Person / Actor / Membership terminology.

Bite 31.2 is presentation-only.

Changing locale must not change:

Authentication Account;
AccountActor;
effective Actor;
Person;
Membership;
Collaborator;
Tenant;
selected Administration context;
Support Access Lease;
permissions;
Role Grants;
persisted domain values.

The following business screens are not required to be fully translated in Bite 31.2:

People;
Collaborators;
Collaborator Journey;
Planning;
Work Plans;
Expenses;
Balances / Ledger;
Receipts;
Settlement.

Those business-workflow translations belong primarily to Bite 31.3.

Do not fail Bite 31.2 merely because the body of one of those business screens still contains English.

3. Deterministic LOCAL Manual-Test Environment

For the most reproducible manual run, use a dedicated database.

Terminal 1 — Backend

From the repository root:

ERS_DATABASE_PATH=data/manual-31-2.db \
ERS_RESET_DATABASE=true \
ERS_PROVISION_E2E_ADMIN=true \
[email protected] \
E2E_ADMIN_PASSWORD='Local-E2E-Administrator-28D!' \
E2E_TENANT_ADMIN_PASSWORD='Local-E2E-Administrator-28D!' \
make local-backend

After the first successful startup, if you restart the backend during this suite, remove:

ERS_RESET_DATABASE=true

so that disposable data created during this suite is not erased.

Terminal 2 — Frontend

make local-frontend

Use Microsoft Edge in normal browsing mode.

Do not use InPrivate for this suite.

4. Test Identities

Application Administrator

Use exactly:

Role:     Application Administrator
Login:    [email protected]
Password: Local-E2E-Administrator-28D!
Actor:    e2e-application-admin
Scope:    APPLICATION
Context:  Global administration

This Account must remain identity-neutral:

ordinary Tenant Actor: none
Person binding:        none
Tenant Membership:     none
Collaborator:          none

Tenant Administrator

Use exactly:

Role:        Tenant Administrator
Login:       [email protected]
Password:    Local-E2E-Administrator-28D!
Actor:       e2e-default-tenant-admin
Tenant:      default
Tenant name: Default Tenant
Tenant code: DEFAULT
Scope:       TENANT

Test 01 — Visible Language Selector on the Unauthenticated Sign-In Screen

Identity

Do not sign in yet.

Required Context

Unauthenticated.

Prerequisites

Use a normal Microsoft Edge tab.
Open the ERS application normally.
If ERS opens an authenticated session left from an earlier test, click Sign out / Sair first.

Procedure

Confirm the sign-in screen is visible.
Locate the language selector on the authentication screen.
If the current UI is Portuguese, select:
```
Inglês (Estados Unidos)
```
Confirm the English sign-in screen visibly contains:
```
Language
Sign in
Login
Password
Reset a password
```
Open the Language selector.

Confirm the choices include:

Browser language
English (United States)
Português (Brasil)

Select:
```
Português (Brasil)
```
Do not reload the page.
Confirm the same sign-in screen immediately changes to Portuguese.

Confirm the visible Portuguese labels include:

Idioma
Entrar
Login
Senha
Redefinir uma senha

Confirm changing locale did not:
- submit the authentication form;
- authenticate the user;
- populate Login;
- populate Password;
- navigate away from the sign-in screen.
Visually inspect the screen for raw translation keys or unresolved interpolation values.

Expected Results

Language selection is available before authentication.
Changing language updates the screen immediately.
No browser reload is required.
No raw translation key such as auth.signIn.title is visible.
No unresolved value such as {login}, {name}, or {count} is visible.
Locale switching does not change authentication state.

PASS Criteria

PASS only if the sign-in chrome switches cleanly between English and Brazilian Portuguese without affecting authentication state.

Promotion Blockers

Do not promote if:

language selection requires DevTools;
changing locale submits the form;
changing locale authenticates the user;
a raw translation key appears;
an unresolved interpolation token appears;
obvious 31.2-owned sign-in text remains English in pt-BR.

Test 02 — Portuguese Authentication Error and Password-Reset Presentation

Identity

Remain unauthenticated.

Required Context

Brazilian Portuguese selected.

Prerequisites

Test 01 passed.

Procedure

Confirm the Language selector shows:
```
Português (Brasil)
```
In Login, enter:
```
[email protected]
```
In Senha, enter this deliberately incorrect password:
```
Definitely-Wrong-31.2!
```
Click:
```
Entrar
```
Observe the authentication error.
Confirm the error is:
```
O login ou a senha está incorreto.
```
Confirm you remain unauthenticated.
Click:
```
Redefinir uma senha
```

Confirm the password-reset screen visibly contains:

Redefinir senha
Token de redefinição
Nova senha
Confirmar nova senha
Voltar para entrar

Do not enter a reset token.
Do not submit a password reset.
Click:
```
Voltar para entrar
```
Confirm the sign-in screen remains in Brazilian Portuguese.
Confirm no Authentication Account state was changed.

Expected Results

Known invalid-credential presentation is Portuguese.
Password-reset chrome is Portuguese.
No password is changed.
Locale remains pt-BR when navigating back.
No Account status changes.

PASS Criteria

PASS only if all authentication chrome involved in this scenario is Portuguese and the failed sign-in produces no Account mutation.

Promotion Blockers

Do not promote if:

invalid-credential presentation appears in English;
password-reset labels unexpectedly revert to English;
navigation back changes locale;
the failed sign-in changes Account state;
a password is changed without an intentional reset submission.

Test 03 — Application Administrator Signs In and Retains Portuguese Shell

Identity

Role:     Application Administrator
Login:    [email protected]
Password: Local-E2E-Administrator-28D!

Required Context

After authentication:

Global administration
APPLICATION scope

Prerequisites

Test 02 passed.
Sign-in screen is currently Portuguese.

Procedure

Enter:

Login: [email protected]
Senha: Local-E2E-Administrator-28D!

Click:
```
Entrar
```
Wait until the signed-in application shell finishes loading.
Confirm the top bar identifies the authenticated account as:
```
[email protected]
```
Confirm the language selector remains:
```
Português (Brasil)
```
Confirm the Administration-context presentation uses Portuguese.
Confirm the sign-out control reads:
```
Sair
```
Inspect the primary navigation.

Confirm available administrative navigation labels use Portuguese where applicable, including items such as:

Tenants
Autenticação
Autorização
Acesso de suporte
Logs de auditoria
Dados de referência
Alterar senha

Record:

Authenticated login:
Selected Administration context:

Refresh the browser normally.
Wait for the shell to reload.
Confirm:
- you are still authenticated;
- authenticated login is still [email protected];
- the locale remains Portuguese;
- the selected Administration context did not change.
Confirm the Application Administrator did not acquire an ordinary Tenant identity after reload.

Expected Results

Locale persists through successful authentication.
Locale persists through normal reload.
Authentication Account remains unchanged.
Effective Application Administrator identity remains unchanged.
Administration context remains unchanged.
Common shell/navigation presentation is Portuguese.

PASS Criteria

PASS only if authentication and reload preserve both identity/context and pt-BR.

Promotion Blockers

Do not promote if changing/persisting locale:

changes Authentication Account;
changes effective Actor;
selects a Tenant;
creates a Tenant identity;
creates a Person binding;
logs the administrator out unexpectedly;
falls back to English unexpectedly.

Test 04 — Administration Context Selector Remains Identity-Safe While Translated

Identity

Remain signed in as:

Role:  Application Administrator
Login: [email protected]

Required Context

Global administration

Prerequisites

Test 03 passed.
No Support Access Lease is expected in the fresh manual database.

Procedure

Record the currently selected Administration context.
Click the Administration-context selector in the top bar.
Confirm the selector is collapsed by default and opens only after interaction.
Confirm the selector contains Portuguese presentation for filtering Administration contexts.
Confirm explanatory text indicates that Tenant entries are temporary Support Access contexts requiring an appropriate lease.
In the context filter, type:
```
default
```
Confirm ordinary:
```
Default Tenant
```
is not offered as an ordinary selectable Tenant identity for the Application Administrator when no Support Access Lease exists.
Clear the filter.
Press:
```
Escape
```
Confirm the selector closes.
Confirm the selected Administration context did not change.
Reopen the selector.
Click somewhere outside the selector.
Confirm it closes.
Confirm the selected Administration context still did not change.
Reopen the selector one more time.
Type several characters into the filter.
Confirm filtering changes the displayed choices only and does not silently alter the selected context.

Expected Results

Administration-context selector presentation is Portuguese.
Selector follows the ERS collapsed combobox/filter interaction pattern.
Application Administrator remains global-only.
Translation does not expose an ordinary Tenant identity.
Escape does not change selection.
Click-away does not change selection.
Filtering does not change selection.

The server-provided context name/code itself may remain a canonical/domain value. This test concerns the surrounding translated presentation and the identity boundary.

PASS Criteria

PASS only if selector behavior is correct and no unauthorized ordinary Tenant identity becomes available.

Promotion Blockers

Do not promote if:

Default Tenant becomes ordinarily selectable without a Support Access Lease;
filtering silently changes selected context;
Escape changes selected context;
click-away changes selected context;
locale changes context availability;
the selector is permanently expanded.

Test 05 — Tenant Administration Catalog and Disposable Tenant Lifecycle in Portuguese

Identity

Remain signed in as:

Role:  Application Administrator
Login: [email protected]

Required Context

Global administration

Prerequisites

Tests 01–04 passed.

Procedure

From the primary navigation, click:
```
Tenants
```
Do not navigate by manually typing a URL.
Confirm the page visibly contains Portuguese Administration/Tenant-management presentation, including:
```
Administração
Tenants
Criar Tenant
```
Inspect the Create Tenant form.

Confirm the form includes Portuguese labels equivalent to:

Código
Nome
Descrição
Ativar imediatamente
Criar Tenant

Confirm the Tenant filter is collapsed/interactive according to the ERS filter standard rather than showing an always-expanded option list.
Activate the Tenant filter.
Type:
```
Default Tenant
```
Confirm Default Tenant remains discoverable.
Clear the filter using the UI.
Confirm clearing filter text does not silently select a different Tenant.

Create a disposable Tenant using exactly:

Código: B312PTBR
Nome: Bite 31.2 Manual pt-BR
Descrição: Tenant descartável para verificação manual da tradução 31.2.
Ativar imediatamente: checked

Click:
```
Criar Tenant
```
Confirm a localized success state appears.
If a success dialog appears, confirm it uses Portuguese common-action chrome.
Click the localized Continue action if required.
Filter the Tenant catalog using:
```
B312PTBR
```
Confirm the new Tenant appears.
Confirm its operational-status presentation is Portuguese.
Open the new Tenant using the UI's normal management action.

Confirm the Tenant detail screen contains Portuguese presentation equivalent to:

Voltar para Tenants
Administração do Tenant
Status operacional
Identidade do Tenant
Administradores do Tenant
Salvar Tenant

Confirm these persisted values remain exactly as entered:

B312PTBR
Bite 31.2 Manual pt-BR
Tenant descartável para verificação manual da tradução 31.2.

Confirm the Tenant Code itself has not been translated or modified.
Click the Portuguese action for:
```
Deactivate Tenant
```
Confirm the localized success state.
Continue past the success dialog if one appears.
Confirm the corresponding activation action is now available.
Reactivate the Tenant through the UI.
Confirm another localized success state.
Confirm the Tenant is active again.

Expected Results

Administrative headings/actions/states are Portuguese.
User-entered values are not translated or modified.
Tenant code remains exactly B312PTBR.
Locale does not alter Tenant lifecycle semantics.
Success-dialog chrome is localized.
Filter behavior follows the global ERS combobox standard.

PASS Criteria

PASS only if the disposable Tenant can be created, inspected, deactivated, and reactivated through translated UI without data corruption or behavioral change.

Promotion Blockers

Do not promote if:

translated UI alters Tenant code/name/description;
lifecycle actions execute the wrong operation;
obvious 31.2-owned English chrome unexpectedly appears;
raw translation keys appear;
filtering silently changes selected records.

Test 06 — Authentication Administration Terminology and Application Administrator Identity Boundary

Identity

Remain signed in as:

Role:  Application Administrator
Login: [email protected]

Required Context

Global administration

Prerequisites

Tests 01–05 passed.

Procedure

From the primary navigation click:
```
Autenticação
```
Do not navigate by manually typing the route.
Confirm the page heading is:
```
Contas de Autenticação
```
Confirm the account-creation card heading is:
```
Criar conta
```

Confirm the form includes translated presentation for:

Tenant de destino
E-mail de login da Pessoa
Senha temporária

Confirm the search/filter presentation includes:
```
Filtro de Ator/conta
```
Search for:
```
[email protected]
```
Inspect the [email protected] Authentication Account.
Confirm the Portuguese terminology visibly distinguishes:
```
Conta de Autenticação
Pessoa
Ator
```
Confirm the Application Administrator account indicates no linked ordinary Person.
Confirm it indicates an Application/global Actor rather than an ordinary Tenant Actor.
Confirm there is no ordinary Tenant Actor binding for the Application Administrator.
Confirm no Tenant Membership is shown as the Application Administrator's identity.
Confirm the actual login remains exactly:
```
[email protected]
```
Confirm canonical values are not translated, including:
- Actor IDs;
- Actor keys;
- Tenant IDs;
- Membership IDs;
- role codes;
- Authentication Account identifiers.
Observe the explicit identity labels.
Confirm the Authentication Administration presentation still distinguishes:
```
Actor ID
Actor Key
```
where that capitalization is the established presentation contract.
Do not suspend the Application Administrator.
Do not reset its password.
Do not create an ordinary Tenant Actor for it.

Expected Results

Presentation terminology is Portuguese.
Canonical identity values remain unchanged.
Application Administrator remains Application/global-only.
Translation does not fabricate Person, Membership, or Tenant Actor bindings.
Authentication Administration remains behaviorally identical in Portuguese.

PASS Criteria

PASS only if Portuguese presentation makes the Account/Person/Actor boundary understandable without modifying the underlying identity.

Promotion Blockers

Do not promote if:

Application Administrator appears to acquire a Person;
Application Administrator appears to acquire a Tenant Actor;
Application Administrator appears to acquire a Tenant Membership;
canonical IDs or codes are translated;
Authentication Administration behavior depends on the English caption Create account;
a raw translation key is visible.

Test 07 — Change Locale While Signed In Without Changing Authentication or Administration State

Identity

Remain signed in as:

Role:  Application Administrator
Login: [email protected]

Required Context

Global administration

Remain on Authentication Administration.

Prerequisites

Test 06 passed.

Values to Record Before Changing Locale

Record:

Authenticated login:
Selected Administration context:
Current page:
Account being inspected:

Expected values should include:

Authenticated login: [email protected]
Selected Administration context: Global administration

Procedure

Confirm current language is:
```
Português (Brasil)
```
Confirm you are still inspecting the expected Authentication Account.
Using the top-bar language selector, select:
```
Inglês (Estados Unidos)
```
Do not click another page or context selector.
Confirm the authenticated login is still:
```
[email protected]
```
Confirm the selected Administration context is unchanged.
Confirm the current page remains Authentication Administration.
Confirm the same Authentication Account data remains displayed.
Confirm no Account was created.
Confirm no Account was modified.

Confirm common headings return to English, including:

Authentication Accounts
Create account
Actor/account filter

Switch the language back to:
```
Português (Brasil)
```

Confirm headings return to Portuguese, including:

Contas de Autenticação
Criar conta
Filtro de Ator/conta

Confirm throughout both changes:
- Authentication Account remained [email protected];
- effective Actor remained unchanged;
- selected context remained unchanged;
- authorization remained unchanged;
- no Person/Membership/Actor was created or modified.

Expected Results

Locale behaves strictly as presentation state.

PASS Criteria

PASS only if the same authenticated identity, Administration context, authorization, and Account data remain in place throughout both language changes.

Promotion Blockers

Do not promote if language switching:

signs the user out;
changes Account;
changes Actor;
changes Administration context;
creates an Authentication Account;
creates/modifies a Person;
creates/modifies a Membership;
changes authorization;
triggers Tenant selection.

Test 08 — Tenant Administrator Sees Portuguese Common Shell and Tenant Selector

Identity

First sign out of the Application Administrator session.

Then sign in as:

Role:     Tenant Administrator
Login:    [email protected]
Password: Local-E2E-Administrator-28D!
Tenant:   default

Required Context

Default Tenant
TENANT scope

Prerequisites

Test 07 passed.

Procedure

Click:
```
Sair
```
Confirm the sign-in screen remains Portuguese.

Enter:

Login: [email protected]
Senha: Local-E2E-Administrator-28D!

Click:
```
Entrar
```
Wait for the authenticated shell to finish loading.
Confirm the authenticated login displayed is:
```
[email protected]
```
Confirm the selected Tenant is:
```
Default Tenant
```
Confirm the Tenant code displayed remains:
```
DEFAULT
```
Confirm the top-bar selector is a Tenant selector rather than the Application Administrator's Administration-context selector.
Open the Tenant selector.
Confirm its filter presentation is Portuguese.
Confirm the selector follows the ERS filter pattern:
- collapsed initially;
- clicking/focusing opens choices;
- typing filters;
- clearing text does not silently change selection;
- Escape closes without changing selection.
Inspect the Default Tenant option.
Confirm Tenant identity metadata uses translated presentation around canonical values, including Actor/Membership terminology where shown.
Confirm Actor key and Membership ID values themselves remain untranslated.
Press:
```
Escape
```
Confirm the selector closes.
Confirm Default Tenant remains selected.
Inspect the common navigation.

Confirm applicable common-navigation labels are Portuguese, such as:

Pessoas
Colaboradores
Despesas
Períodos de trabalho
Recibos pendentes
Autorização
Dados de referência
Alterar senha

Open one business page such as People using the UI.
If the body of that business screen still contains English, do not fail this test solely for that reason.
Confirm the shared shell surrounding the business screen remains Portuguese.

Expected Results

Tenant Administrator stays Tenant scoped.
Common shell/navigation is translated.
Tenant selector presentation is Portuguese.
Canonical Tenant identity values remain unchanged.
Business-page translation deferred to Bite 31.3 does not affect shell behavior.

PASS Criteria

PASS only if the Tenant Administrator's shared shell is Portuguese while the same canonical Tenant Actor/Membership remain in effect.

Promotion Blockers

Do not promote if:

Tenant Administrator unexpectedly becomes APPLICATION scoped;
Tenant changes merely because locale changes;
Tenant selector metadata becomes corrupted;
common shell controls remain unintentionally English;
selector behavior violates the ERS global combobox pattern.

Test 09 — Change-Password Screen Translation Without Changing the Password

Identity

Remain signed in as:

Role:  Tenant Administrator
Login: [email protected]

Required Context

Default Tenant

Prerequisites

Test 08 passed.

Procedure

From the primary navigation click:
```
Alterar senha
```

Confirm the screen visibly contains:

Alterar senha
Senha atual
Nova senha
Confirmar nova senha

Confirm accompanying user-facing instructions are Portuguese.
Do not enter the current password.
Do not enter a new password.
Do not submit the form.
Use the browser Back control once.
Confirm you return to the prior authenticated screen.
Confirm you remain signed in as:
```
[email protected]
```
Confirm:
```
Default Tenant
```
remains selected.
Confirm the locale remains:
```
Português (Brasil)
```
Confirm no password-change success state occurred.

Expected Results

Password-management presentation is Portuguese.
Merely opening the page does not change Account state.
Returning from the page preserves authentication.
Returning from the page preserves Tenant selection.
Returning from the page preserves locale.

PASS Criteria

PASS only if the screen is correctly translated and simply viewing it produces no Authentication Account mutation.

Promotion Blockers

Do not promote if:

the page falls back to English;
merely opening the page signs the user out;
Tenant context changes;
Account state changes without form submission;
locale changes unexpectedly.

Test 10 — Browser-Language Option and Final Visible-English Sweep

Identity

Begin signed in as:

Role:  Tenant Administrator
Login: [email protected]

You will also repeat selected portions after signing back in as the Application Administrator.

Required Context

Initially:

Default Tenant

Later:

Global administration

Prerequisites

In Microsoft Edge settings, confirm the first browser language that matches an ERS-supported locale is:

English (United States)

for this test.

Do not use DevTools to change the ERS locale.

Procedure — Browser-Language Resolution

Open the ERS language selector.
Select:
```
Idioma do navegador
```
Confirm ERS immediately resolves to English.
Confirm the authenticated Account remains:
```
[email protected]
```
Confirm the selected Tenant remains:
```
Default Tenant
```
Confirm no new sign-in is required.
Open the language selector again.
Select:
```
Português (Brasil)
```
Confirm the shell returns to Portuguese.
Confirm Account and Tenant remain unchanged.

Procedure — Tenant-Administrator Visual Sweep

Through normal UI navigation, visually inspect:
- common top bar;
- Tenant selector;
- primary navigation;
- change-password presentation.
Look specifically for accidental English on 31.2-owned common chrome.

Procedure — Application-Administrator Visual Sweep

Sign out using:
```
Sair
```
Confirm the sign-in screen remains Portuguese.

[email protected]
Local-E2E-Administrator-28D!

Confirm the Application Administrator returns to:
```
Global administration
```
Through normal UI navigation, inspect:
- common shell;
- Administration-context selector;
- Tenants page;
- Tenant detail page;
- Authentication Administration;
- password-change presentation.
Inspect common:
- loading states;
- empty states where naturally encountered;
- retry actions where naturally encountered;
- success dialogs;
- confirmation dialogs.
Look specifically for obvious untranslated English that belongs to Bite 31.2.

Do Not Classify These as Translation Failures

These values may legitimately remain unchanged:

Tenant
proper names
user-entered values
Tenant names
logins
email addresses
IDs
Actor keys
Membership IDs
role codes such as APPLICATION_ADMIN
role codes such as TENANT_ADMIN
API/domain codes
persisted enum values

Business-page body text explicitly deferred to Bite 31.3 is also not a Bite 31.2 promotion blocker.

Examples include detailed body text on:

People
Collaborators
Collaborator Journey
Planning
Work Plans
Expenses
Balances / Ledger
Receipts
Settlement

Do Classify These as Bite 31.2 Defects

Examples of common/control-plane chrome that should not unexpectedly remain English while pt-BR is selected include:

Sign in
Password
Create account
Authentication Accounts
Actor/account filter
Sign out
Change password
Loading...
Retry
No tenants found

when those strings belong to a 31.2-owned translated surface.

Expected Results

Idioma do navegador restores browser-derived locale behavior.
Selecting Portuguese restores pt-BR.
Locale changes do not change identity.
Locale changes do not change Tenant/context.
Locale changes do not change authorization.
No obvious untranslated English remains on 31.2 common/authentication/administration chrome.
No raw translation keys are visible.
No unresolved interpolation tokens are visible.

PASS Criteria

PASS only if the prospect-visible Bite 31.2 shell/control-plane experience can be operated in Brazilian Portuguese without requiring an explanation for stray English common controls.

Promotion Blockers

Do not promote if:

obvious Bite 31.2-owned English chrome remains in Portuguese mode;
locale switching changes identity or authorization;
browser-language mode violates the Bite 31.1 locale contract;
raw translation keys appear;
unresolved interpolation tokens appear.

5. Browser Console and Network Sanity Check

Perform this check throughout Tests 01–10.

Procedure

Open Microsoft Edge DevTools.
Open:
```
Console
```
Also periodically inspect:
```
Network
```
While executing the manual suite, watch for:
- JavaScript exceptions;
- React rendering exceptions;
- failed API calls;
- unexpected HTTP 500 responses;
- translation-related runtime failures.
Ignore known browser-extension noise only when its source clearly originates from an extension such as:
```
chrome-extension://...
```
rather than ERS.

Expected Results

No unexpected ERS-origin JavaScript exceptions.
No unexpected HTTP 500.
No translation lookup/runtime failures.
Expected authorization failures, if any occur during normal boundary behavior, are clean 401/403 responses rather than 500.

PASS Criteria

PASS if the browser remains free of unexpected ERS application/runtime errors throughout the manual suite.

Promotion Blockers

Do not promote if:

locale switching causes a React exception;
a translated page produces a 500;
a missing translation causes a runtime exception;
Administration/Authentication navigation becomes unstable.

6. Final Promotion Gate

Bite 31.2 is ready for promotion only when all of the following are true:

Test 01 — Visible sign-in language selection PASS.
Test 02 — Portuguese authentication error/reset presentation PASS.
Test 03 — Application Administrator Portuguese shell PASS.
Test 04 — Administration-context selector and identity boundary PASS.
Test 05 — Tenant Administration translation and lifecycle PASS.
Test 06 — Authentication Administration terminology and identity boundary PASS.
Test 07 — Locale switching preserves Account/Actor/context PASS.
Test 08 — Tenant Administrator Portuguese common shell PASS.
Test 09 — Change-password presentation PASS.
Test 10 — Browser-language behavior and final visual sweep PASS.
Browser Console sanity check PASS.
Network sanity check PASS.
No unexpected JavaScript exception occurs.
No unexpected HTTP 500 occurs.
No raw translation key is visible.
No unresolved {placeholder} interpolation token is visible.
No cross-Tenant identity or authorization change is caused by locale selection.
Application Administrator remains APPLICATION/global-only.
Application Administrator remains without ordinary Person/Tenant Membership/Collaborator identity.
Tenant Administrator remains TENANT scoped.
Tenant remains the intentional ERS domain term in Brazilian Portuguese.
Canonical IDs, keys, codes, logins, and stored values are not translated.
Business-screen body translation explicitly deferred to Bite 31.3 is not incorrectly treated as a 31.2 failure.

7. Promotion-Blocking Defects

Do not promote Bite 31.2 if any of the following occur:

Changing locale changes Authentication Account.
Changing locale changes effective Actor.
Changing locale changes Person.
Changing locale changes Membership.
Changing locale changes selected Tenant.
Changing locale changes Administration context.
Changing locale changes permissions or Role Grants.
Application Administrator acquires an ordinary Tenant Actor.
Application Administrator acquires a Person binding.
Application Administrator acquires a Tenant Membership.
Application Administrator acquires a Collaborator identity.
Tenant Administrator becomes APPLICATION scoped.
Tenant Administrator silently switches Tenant because locale changes.
Administration-context filtering silently changes selected context.
Tenant filtering silently changes selected Tenant.
Escape or click-away changes a selector's selected value.
Any 31.2 filter remains permanently expanded instead of following the ERS combobox pattern.
Visible common shell/authentication/administration chrome unexpectedly remains English in pt-BR.
Portuguese UI displays raw translation keys.
Portuguese UI displays unresolved {name}, {login}, {count}, or equivalent placeholders.
A translated button performs the wrong action.
Authentication Account creation behavior depends on the English caption Create account.
Tenant lifecycle behavior differs between English and Portuguese.
Locale choice is lost unexpectedly on ordinary reload/navigation.
A translated 31.2 screen throws an ERS-origin JavaScript exception.
A translated 31.2 workflow produces an unexpected HTTP 500.
Canonical Actor IDs, Actor keys, Tenant IDs, Membership IDs, role codes, logins, or domain values are translated or modified.
Any cross-Tenant authorization leak is observed.

8. Manual Verification Record

Record the result of each test before promotion.

Test	Result	Notes / Evidence
Test 01 — Sign-in language selector	PASS / FAIL
Test 02 — Auth error/reset presentation	PASS / FAIL
Test 03 — Application Administrator shell	PASS / FAIL
Test 04 — Administration context selector	PASS / FAIL
Test 05 — Tenant Administration	PASS / FAIL
Test 06 — Authentication Administration	PASS / FAIL
Test 07 — Signed-in locale switching	PASS / FAIL
Test 08 — Tenant Administrator shell	PASS / FAIL
Test 09 — Change-password presentation	PASS / FAIL
Test 10 — Browser language / visual sweep	PASS / FAIL
Console / Network sanity	PASS / FAIL

Promotion Decision

Bite 31.2 manual verification:
[ ] PASS — ready to promote
[ ] FAIL — promotion blocked

Tester:
Date:
Branch: 862-bite-312-common-shell-authentication-and-administration-translation
SHA: 35af6f9fb6965dfb790e99db4fcb6ba7ce3b10ec