- 8 P1 spine checks unchanged; 6 new API checks via fastapi.testclient
against create_app() on a temp COPY of the live DB (live file never
opened by tests): root/static, stats-live==active+health, deck page 1
monotonic + undecided-only + full cursor walk zero-overlap vs SQL truth,
swipe like->list->edit->delete lifecycle (+invalid payload rejection),
/img/{id} cached-200/hotlink-302/none-404, badge roundtrip
- bare-python run keeps the 8 P1 checks and notes the skipped P2 set
- known framework quirk documented: this fastapi+httpx TestClient pair
mangles RedirectResponse to a bare 404; real uvicorn serves the true 302
(proof run verifies over the wire)
778d1bfd4b