From 94143f58f6948f6227f117b49b0ab6b2d6def22b Mon Sep 17 00:00:00 2001
From: PM Palles <pallespm@upmc.edu>
Date: Sat, 6 Dec 2025 03:07:51 -0500
Subject: [PATCH] feat: 2k series fixtures added

---
 .../architect/expected.json                   | 12 +++++
 .../architect/prompt.md                       |  4 ++
 .../architect/verify.ts                       | 15 ++++++
 .../coder/expected.patch                      | 26 ++++++++++
 .../coder/prompt.md                           |  2 +
 .../coder/repo/src/components/Welcome.tsx     |  9 ++++
 .../coder/repo/src/locales/en.json            |  3 ++
 .../coder/verify.ts                           | 17 +++++++
 .../planner/expected.json                     | 24 ++++++++++
 .../planner/prompt.md                         |  8 ++++
 .../planner/verify.ts                         | 19 ++++++++
 .../reviewer/expected.json                    | 11 +++++
 .../reviewer/prompt.md                        |  5 ++
 .../reviewer/verify.ts                        | 14 ++++++
 .../architect/expected.json                   | 11 +++++
 .../architect/prompt.md                       |  4 ++
 .../architect/verify.ts                       | 15 ++++++
 .../coder/expected.patch                      | 17 +++++++
 .../coder/prompt.md                           |  3 ++
 .../coder/repo/src/components/SignupForm.tsx  | 11 +++++
 .../coder/verify.ts                           | 17 +++++++
 .../planner/expected.json                     | 14 ++++++
 .../planner/prompt.md                         |  8 ++++
 .../planner/verify.ts                         | 19 ++++++++
 .../reviewer/expected.json                    | 11 +++++
 .../reviewer/prompt.md                        |  4 ++
 .../reviewer/verify.ts                        | 14 ++++++
 .../architect/expected.json                   | 20 ++++++++
 .../architect/prompt.md                       |  5 ++
 .../architect/verify.ts                       | 18 +++++++
 .../coder/expected.patch                      | 48 +++++++++++++++++++
 .../coder/prompt.md                           |  5 ++
 .../coder/repo/src/services/payment.ts        | 11 +++++
 .../coder/repo/src/tests/payment.test.ts      |  7 +++
 .../coder/verify.ts                           | 17 +++++++
 .../planner/expected.json                     | 34 +++++++++++++
 .../planner/prompt.md                         | 10 ++++
 .../planner/verify.ts                         | 19 ++++++++
 .../reviewer/expected.json                    | 11 +++++
 .../reviewer/prompt.md                        |  5 ++
 .../reviewer/verify.ts                        | 14 ++++++
 .../architect/expected.json                   | 10 ++++
 .../architect/prompt.md                       |  7 +++
 .../architect/verify.ts                       | 15 ++++++
 .../coder/expected.patch                      | 31 ++++++++++++
 .../coder/prompt.md                           |  5 ++
 .../coder/repo/src/services/registration.ts   | 17 +++++++
 .../coder/repo/src/tests/registration.test.ts |  7 +++
 .../coder/verify.ts                           | 17 +++++++
 .../planner/expected.json                     | 24 ++++++++++
 .../planner/prompt.md                         | 11 +++++
 .../planner/verify.ts                         | 15 ++++++
 .../reviewer/expected.json                    | 11 +++++
 .../reviewer/prompt.md                        |  4 ++
 .../reviewer/verify.ts                        | 14 ++++++
 .../architect/expected.json                   | 18 +++++++
 .../architect/prompt.md                       |  4 ++
 .../architect/verify.ts                       | 15 ++++++
 .../coder/expected.patch                      | 26 ++++++++++
 .../coder/prompt.md                           |  7 +++
 .../coder/repo/src/routes/adminRoutes.ts      | 13 +++++
 .../coder/repo/src/tests/adminRoutes.test.ts  |  5 ++
 .../coder/verify.ts                           | 17 +++++++
 .../planner/expected.json                     | 24 ++++++++++
 .../planner/prompt.md                         |  6 +++
 .../planner/verify.ts                         | 22 +++++++++
 .../reviewer/expected.json                    | 11 +++++
 .../reviewer/prompt.md                        |  3 ++
 .../reviewer/verify.ts                        | 20 ++++++++
 .../architect/expected.json                   | 18 +++++++
 .../architect/prompt.md                       |  9 ++++
 .../architect/verify.ts                       | 18 +++++++
 .../coder/expected.patch                      | 32 +++++++++++++
 .../coder/prompt.md                           |  5 ++
 .../coder/repo/src/controllers/comments.ts    | 10 ++++
 .../coder/repo/src/tests/comments.test.ts     |  5 ++
 .../coder/verify.ts                           | 17 +++++++
 .../planner/expected.json                     | 24 ++++++++++
 .../planner/prompt.md                         | 11 +++++
 .../planner/verify.ts                         | 15 ++++++
 .../reviewer/expected.json                    | 17 +++++++
 .../reviewer/prompt.md                        |  4 ++
 .../reviewer/verify.ts                        | 14 ++++++
 83 files changed, 1119 insertions(+)
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/expected.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/expected.patch
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/components/Welcome.tsx
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/locales/en.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/expected.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/expected.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/expected.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/expected.patch
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/repo/src/components/SignupForm.tsx
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/expected.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/verify.ts
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/expected.json
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/prompt.md
 create mode 100644 fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/expected.json
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/expected.patch
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/services/payment.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/tests/payment.test.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/expected.json
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/expected.json
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/expected.json
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/expected.patch
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/services/registration.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/tests/registration.test.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/expected.json
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/verify.ts
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/expected.json
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/prompt.md
 create mode 100644 fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/expected.json
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/expected.patch
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/routes/adminRoutes.ts
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/tests/adminRoutes.test.ts
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/expected.json
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/expected.json
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/expected.json
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/expected.patch
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/controllers/comments.ts
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/tests/comments.test.ts
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/expected.json
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/verify.ts
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/expected.json
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/prompt.md
 create mode 100644 fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/verify.ts

diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/expected.json b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/expected.json
new file mode 100644
index 0000000..101e03d
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/expected.json
@@ -0,0 +1,12 @@
+{
+    "highLevelSummary": "Refactor `Welcome.tsx` to use i18n. Add `welcome_message` to `src/locales/en.json`. Replace literal string 'Welcome to our App' with `t('welcome_message')`.",
+    "pagesOrScreens": [
+        "Welcome Screen"
+    ],
+    "apis": [],
+    "dataModels": [],
+    "recommendedFileStructure": [
+        "src/components/Welcome.tsx",
+        "src/locales/en.json"
+    ]
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/prompt.md b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/prompt.md
new file mode 100644
index 0000000..8533951
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/prompt.md
@@ -0,0 +1,4 @@
+The `Welcome` component in `src/components/Welcome.tsx` has hardcoded text "Welcome to our App".
+Please extract this to `src/locales/en.json` with key `welcome_message`.
+Replace the hardcoded text with a call to the translation function `t('welcome_message')`.
+Do not change valid layout or behavior.
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/verify.ts b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/verify.ts
new file mode 100644
index 0000000..a08687a
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/architect/verify.ts
@@ -0,0 +1,15 @@
+import {
+    verifyArchitect,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyArchitect(ctx, (parsed) => {
+        const summary = parsed.highLevelSummary.toLowerCase();
+        if (!summary.includes("locales") && !summary.includes("json")) {
+            return { ok: false, message: "Summary should mention locale file" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/expected.patch b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/expected.patch
new file mode 100644
index 0000000..f201d32
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/expected.patch
@@ -0,0 +1,26 @@
+diff --git a/src/components/Welcome.tsx b/src/components/Welcome.tsx
+index ...
+--- a/src/components/Welcome.tsx
++++ b/src/components/Welcome.tsx
+@@ -1,7 +1,8 @@
+ import React from 'react';
++import { t } from '../i18n'; // or similar import
+ 
+ export const Welcome = () => {
+   return (
+     <div>
+-      <h1>Welcome to our App</h1>
++      <h1>{t('welcome_message')}</h1>
+     </div>
+   );
+ };
+diff --git a/src/locales/en.json b/src/locales/en.json
+index ...
+--- a/src/locales/en.json
++++ b/src/locales/en.json
+@@ -1,3 +1,4 @@
+ {
+-  "app_name": "My App"
++  "app_name": "My App",
++  "welcome_message": "Welcome to our App"
+ }
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/prompt.md b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/prompt.md
new file mode 100644
index 0000000..3bfcd58
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/prompt.md
@@ -0,0 +1,2 @@
+Update `src/locales/en.json` to include `"welcome_message": "Welcome to our App"`.
+Update `src/components/Welcome.tsx` to use `t('welcome_message')`. Assume a global `t` function or import `useTranslation`. For this task, just assume `t` is available or import it from `i18n`.
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/components/Welcome.tsx b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/components/Welcome.tsx
new file mode 100644
index 0000000..e65b8c6
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/components/Welcome.tsx
@@ -0,0 +1,9 @@
+import React from 'react';
+
+export const Welcome = () => {
+    return (
+        <div>
+            <h1>Welcome to our App</h1>
+        </div>
+    );
+};
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/locales/en.json b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/locales/en.json
new file mode 100644
index 0000000..312bf4e
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/repo/src/locales/en.json
@@ -0,0 +1,3 @@
+{
+    "app_name": "My App"
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/verify.ts b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/verify.ts
new file mode 100644
index 0000000..e9014ca
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/coder/verify.ts
@@ -0,0 +1,17 @@
+import {
+    verifyCoder,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyCoder(ctx, (patch) => {
+        if (!patch.includes("welcome_message")) {
+            return { ok: false, message: "Patch should add welcome_message key" };
+        }
+        if (!patch.includes("t('welcome_message')") && !patch.includes('t("welcome_message")')) {
+            return { ok: false, message: "Patch should use translation function" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/expected.json b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/expected.json
new file mode 100644
index 0000000..48ee031
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/expected.json
@@ -0,0 +1,24 @@
+{
+    "tasks": [
+        {
+            "id": "1",
+            "type": "fix",
+            "description": "Add welcome_message to en.json",
+            "file": "src/locales/en.json",
+            "complexity": "low",
+            "dependsOn": []
+        },
+        {
+            "id": "2",
+            "type": "fix",
+            "description": "Replace hardcoded text with translation key in Welcome.tsx",
+            "file": "src/components/Welcome.tsx",
+            "complexity": "low",
+            "dependsOn": [
+                "1"
+            ]
+        }
+    ],
+    "ambiguities": [],
+    "invalidTaskCount": 0
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/prompt.md b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/prompt.md
new file mode 100644
index 0000000..6e881cc
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/prompt.md
@@ -0,0 +1,8 @@
+# Architect Plan
+Extract "Welcome to our App" from `src/components/Welcome.tsx` to `src/locales/en.json` (key: `welcome_message`).
+Use `t('welcome_message')`.
+
+# Context
+Files:
+- src/components/Welcome.tsx
+- src/locales/en.json
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/verify.ts b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/verify.ts
new file mode 100644
index 0000000..c0b10eb
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/planner/verify.ts
@@ -0,0 +1,19 @@
+import {
+    verifyPlanner,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyPlanner(ctx, (parsed) => {
+        const tasks = parsed.tasks;
+        if (tasks.length < 2) {
+            return { ok: false, message: "Expected 2 tasks: update json and update component" };
+        }
+        const hasJson = tasks.some(t => t.file.includes("en.json"));
+        if (!hasJson) {
+            return { ok: false, message: "Must update locale file" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/expected.json b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/expected.json
new file mode 100644
index 0000000..ef2c596
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/expected.json
@@ -0,0 +1,11 @@
+{
+    "comments": [
+        {
+            "path": "src/components/Welcome.tsx",
+            "line": 6,
+            "message": "Correctly replaces hardcoded string with translation key.",
+            "blocking": false
+        }
+    ],
+    "decision": "approve"
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/prompt.md b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/prompt.md
new file mode 100644
index 0000000..b72e077
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/prompt.md
@@ -0,0 +1,5 @@
+Review the patch.
+Verify:
+1. `welcome_message` is added to en.json.
+2. Hardcoded text is replaced.
+3. No behavior change (text remains same via lookup).
diff --git a/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/verify.ts b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/verify.ts
new file mode 100644
index 0000000..835dfe9
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2201-internationalize-static-copy/reviewer/verify.ts
@@ -0,0 +1,14 @@
+import {
+    verifyReviewer,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyReviewer(ctx, (result) => {
+        if (result.decision !== "approve") {
+            return { ok: false, message: "Reviewer should approve valid patch" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/expected.json b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/expected.json
new file mode 100644
index 0000000..93e517f
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/expected.json
@@ -0,0 +1,11 @@
+{
+    "highLevelSummary": "Update `SignupForm.tsx` to improve accessibility. Change the submit `div` to a `<button type=\"submit\">`. Add `aria-label` or `<label>` tags to inputs.",
+    "pagesOrScreens": [
+        "Signup Screen"
+    ],
+    "apis": [],
+    "dataModels": [],
+    "recommendedFileStructure": [
+        "src/components/SignupForm.tsx"
+    ]
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/prompt.md b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/prompt.md
new file mode 100644
index 0000000..7c05732
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/prompt.md
@@ -0,0 +1,4 @@
+The `SignupForm` in `src/components/SignupForm.tsx` has accessibility issues:
+1. Inputs missing `aria-label` or associated label.
+2. Submit button is a `div` not a `button`.
+Please improve accessibility without breaking the layout or logic.
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/verify.ts b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/verify.ts
new file mode 100644
index 0000000..1af3f1c
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/architect/verify.ts
@@ -0,0 +1,15 @@
+import {
+    verifyArchitect,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyArchitect(ctx, (parsed) => {
+        const summary = parsed.highLevelSummary.toLowerCase();
+        if (!summary.includes("accessibility") && !summary.includes("aria") && !summary.includes("label")) {
+            return { ok: false, message: "Summary should mention accessibility improvements" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/expected.patch b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/expected.patch
new file mode 100644
index 0000000..20227a5
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/expected.patch
@@ -0,0 +1,17 @@
+diff --git a/src/components/SignupForm.tsx b/src/components/SignupForm.tsx
+index ...
+--- a/src/components/SignupForm.tsx
++++ b/src/components/SignupForm.tsx
+@@ -3,8 +3,8 @@ import React from 'react';
+ export const SignupForm = () => {
+   return (
+     <form>
+-      <input type="text" placeholder="Email" />
+-      <input type="password" placeholder="Password" />
+-      <div onClick={() => alert('submit')}>Sign Up</div>
++      <input type="text" placeholder="Email" aria-label="Email" />
++      <input type="password" placeholder="Password" aria-label="Password" />
++      <button type="submit" onClick={() => alert('submit')}>Sign Up</button>
+     </form>
+   );
+ };
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/prompt.md b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/prompt.md
new file mode 100644
index 0000000..6f8a966
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/prompt.md
@@ -0,0 +1,3 @@
+Update `src/components/SignupForm.tsx` to be accessible:
+1. Replace `<div onClick...>` with `<button type="submit">`.
+2. Add `aria-label` to inputs.
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/repo/src/components/SignupForm.tsx b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/repo/src/components/SignupForm.tsx
new file mode 100644
index 0000000..70f2e02
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/repo/src/components/SignupForm.tsx
@@ -0,0 +1,11 @@
+import React from 'react';
+
+export const SignupForm = () => {
+    return (
+        <form>
+            <input type="text" placeholder="Email" />
+            <input type="password" placeholder="Password" />
+            <div onClick={() => alert('submit')}>Sign Up</div>
+        </form>
+    );
+};
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/verify.ts b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/verify.ts
new file mode 100644
index 0000000..959ff47
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/coder/verify.ts
@@ -0,0 +1,17 @@
+import {
+    verifyCoder,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyCoder(ctx, (patch) => {
+        if (!patch.includes("aria-label")) {
+            return { ok: false, message: "Patch should add aria-label" };
+        }
+        if (!patch.includes("<button") && !patch.includes("type=\"submit\"")) {
+            return { ok: false, message: "Patch should use button element" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/expected.json b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/expected.json
new file mode 100644
index 0000000..dd2ef53
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/expected.json
@@ -0,0 +1,14 @@
+{
+    "tasks": [
+        {
+            "id": "1",
+            "type": "fix",
+            "description": "Improve accessibility markup in SignupForm",
+            "file": "src/components/SignupForm.tsx",
+            "complexity": "low",
+            "dependsOn": []
+        }
+    ],
+    "ambiguities": [],
+    "invalidTaskCount": 0
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/prompt.md b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/prompt.md
new file mode 100644
index 0000000..fb2b0ba
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/prompt.md
@@ -0,0 +1,8 @@
+# Architect Plan
+Update `src/components/SignupForm.tsx`:
+1. Change `div` button to `<button>`.
+2. Add labels/aria-labels to inputs.
+
+# Context
+File:
+- src/components/SignupForm.tsx
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/verify.ts b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/verify.ts
new file mode 100644
index 0000000..204984f
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/planner/verify.ts
@@ -0,0 +1,19 @@
+import {
+    verifyPlanner,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyPlanner(ctx, (parsed) => {
+        const tasks = parsed.tasks;
+        if (tasks.length < 1) {
+            return { ok: false, message: "Expected at least 1 task" };
+        }
+        const hasComponent = tasks.some(t => t.file.includes("SignupForm"));
+        if (!hasComponent) {
+            return { ok: false, message: "Must update SignupForm" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/expected.json b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/expected.json
new file mode 100644
index 0000000..6620df0
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/expected.json
@@ -0,0 +1,11 @@
+{
+    "comments": [
+        {
+            "path": "src/components/SignupForm.tsx",
+            "line": 6,
+            "message": "Good use of aria-label and semantic button element.",
+            "blocking": false
+        }
+    ],
+    "decision": "approve"
+}
\ No newline at end of file
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/prompt.md b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/prompt.md
new file mode 100644
index 0000000..395914c
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/prompt.md
@@ -0,0 +1,4 @@
+Review the patch.
+Verify:
+1. Inputs have accessibility labels.
+2. Submit is a button.
diff --git a/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/verify.ts b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/verify.ts
new file mode 100644
index 0000000..835dfe9
--- /dev/null
+++ b/fixtures/i18n-and-accessibility/task-2202-accessibility-form-improvements/reviewer/verify.ts
@@ -0,0 +1,14 @@
+import {
+    verifyReviewer,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyReviewer(ctx, (result) => {
+        if (result.decision !== "approve") {
+            return { ok: false, message: "Reviewer should approve valid patch" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/expected.json b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/expected.json
new file mode 100644
index 0000000..fded65c
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/expected.json
@@ -0,0 +1,20 @@
+{
+    "highLevelSummary": "Modify `processPayment` to handle idempotency and retries. Check a store for `idempotencyKey`. If missing, call external API with exponential backoff retry (3 attempts) on transient errors. Save result before returning.",
+    "pagesOrScreens": [],
+    "apis": [],
+    "dataModels": [
+        {
+            "name": "IdempotencyRecord",
+            "fields": [
+                "key",
+                "result",
+                "createdAt"
+            ],
+            "primaryKey": "key"
+        }
+    ],
+    "recommendedFileStructure": [
+        "src/services/payment.ts",
+        "src/utils/retry.ts"
+    ]
+}
\ No newline at end of file
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/prompt.md b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/prompt.md
new file mode 100644
index 0000000..d06d876
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/prompt.md
@@ -0,0 +1,5 @@
+The `processPayment` function in `src/services/payment.ts` calls an external API. It is currently unreliable.
+Please implement:
+1. Idempotency: Use the `idempotencyKey` provided in the arguments. Check if we already processed this key. If so, return the stored result. If not, proceed.
+2. Retries: Wrap the external API call. Retry up to 3 times if it fails with a network error or 5xx status. Do not retry on 4xx.
+3. Persistence: Save the result (success or failure) associated with the key so future calls return it.
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/verify.ts b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/verify.ts
new file mode 100644
index 0000000..5f6cc42
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/architect/verify.ts
@@ -0,0 +1,18 @@
+import {
+    verifyArchitect,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyArchitect(ctx, (parsed) => {
+        const summary = parsed.highLevelSummary.toLowerCase();
+        if (!summary.includes("idempotency") && !summary.includes("key")) {
+            return { ok: false, message: "Summary should mention idempotency" };
+        }
+        if (!summary.includes("retry") && !summary.includes("retries")) {
+            return { ok: false, message: "Summary should mention retries" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/expected.patch b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/expected.patch
new file mode 100644
index 0000000..8ad49ee
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/expected.patch
@@ -0,0 +1,48 @@
+diff --git a/src/services/payment.ts b/src/services/payment.ts
+index ...
+--- a/src/services/payment.ts
++++ b/src/services/payment.ts
+@@ -1,11 +1,24 @@
++const idempotencyStore = new Map<string, any>();
++
+ export async function processPayment(amount: number, idempotencyKey: string) {
++  if (idempotencyStore.has(idempotencyKey)) {
++    return idempotencyStore.get(idempotencyKey);
++  }
++
+   // Call external API
+-  const response = await fetch('https://api.gateway.com/charge', {
+-    method: 'POST',
+-    body: JSON.stringify({ amount })
+-  });
+-  if (!response.ok) {
+-    throw new Error('Payment failed');
++  let response;
++  for (let i = 0; i < 3; i++) {
++    response = await fetch('https://api.gateway.com/charge', {
++      method: 'POST',
++      body: JSON.stringify({ amount })
++    });
++    if (response.ok || response.status < 500) break;
++    if (i === 2) throw new Error('Payment failed after retries');
+   }
+-  return response.json();
++
++  if (!response || !response.ok) throw new Error('Payment failed');
++
++  const result = await response.json();
++  idempotencyStore.set(idempotencyKey, result);
++  return result;
+ }
+diff --git a/src/tests/payment.test.ts b/src/tests/payment.test.ts
+index ...
+--- a/src/tests/payment.test.ts
++++ b/src/tests/payment.test.ts
+@@ -4,4 +4,7 @@ describe('Payment Service', () => {
+   it('charges the card', async () => {
+     // mock fetch
+   });
++  it('is idempotent', async () => {
++    // test
++  });
+ });
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/prompt.md b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/prompt.md
new file mode 100644
index 0000000..c3eccd4
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/prompt.md
@@ -0,0 +1,5 @@
+Update `processPayment` in `src/services/payment.ts`:
+1. Check `idempotencyKey` against a simple in-memory map. If found, return stored result.
+2. If not found, call API. Wrap call in retry logic (3 retries on 5xx).
+3. Save result to map.
+4. Update tests.
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/services/payment.ts b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/services/payment.ts
new file mode 100644
index 0000000..95f8e5e
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/services/payment.ts
@@ -0,0 +1,11 @@
+export async function processPayment(amount: number, idempotencyKey: string) {
+    // Call external API
+    const response = await fetch('https://api.gateway.com/charge', {
+        method: 'POST',
+        body: JSON.stringify({ amount })
+    });
+    if (!response.ok) {
+        throw new Error('Payment failed');
+    }
+    return response.json();
+}
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/tests/payment.test.ts b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/tests/payment.test.ts
new file mode 100644
index 0000000..ade5bbb
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/repo/src/tests/payment.test.ts
@@ -0,0 +1,7 @@
+import { processPayment } from '../services/payment';
+
+describe('Payment Service', () => {
+    it('charges the card', async () => {
+        // mock fetch
+    });
+});
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/verify.ts b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/verify.ts
new file mode 100644
index 0000000..31fabe6
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/coder/verify.ts
@@ -0,0 +1,17 @@
+import {
+    verifyCoder,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyCoder(ctx, (patch) => {
+        if (!patch.includes("idempotencyKey")) {
+            return { ok: false, message: "Patch should check idempotencyKey" };
+        }
+        if (!patch.includes("for") && !patch.includes("retry")) {
+            return { ok: false, message: "Patch should implement retry loop" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/expected.json b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/expected.json
new file mode 100644
index 0000000..a5a56d6
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/expected.json
@@ -0,0 +1,34 @@
+{
+    "tasks": [
+        {
+            "id": "1",
+            "type": "fix",
+            "description": "Implement retry logic utility",
+            "file": "src/utils/retry.ts",
+            "complexity": "low",
+            "dependsOn": []
+        },
+        {
+            "id": "2",
+            "type": "fix",
+            "description": "Update processPayment to use retry and enforce idempotency",
+            "file": "src/services/payment.ts",
+            "complexity": "medium",
+            "dependsOn": [
+                "1"
+            ]
+        },
+        {
+            "id": "3",
+            "type": "fix",
+            "description": "Add tests for retries and idempotency",
+            "file": "src/tests/payment.test.ts",
+            "complexity": "low",
+            "dependsOn": [
+                "2"
+            ]
+        }
+    ],
+    "ambiguities": [],
+    "invalidTaskCount": 0
+}
\ No newline at end of file
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/prompt.md b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/prompt.md
new file mode 100644
index 0000000..5d2a5f8
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/prompt.md
@@ -0,0 +1,10 @@
+# Architect Plan
+Implement idempotency and retries in `src/services/payment.ts`.
+Use `src/utils/retry.ts` for retry logic (create if needed).
+Store idempotency keys in a mock DB/Map.
+
+# Context
+Existing code makes a single raw call.
+Files:
+- src/services/payment.ts
+- src/tests/payment.test.ts
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/verify.ts b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/verify.ts
new file mode 100644
index 0000000..2ab4071
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/planner/verify.ts
@@ -0,0 +1,19 @@
+import {
+    verifyPlanner,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyPlanner(ctx, (parsed) => {
+        const tasks = parsed.tasks;
+        if (tasks.length < 2) {
+            return { ok: false, message: "Expected at least 2 tasks" };
+        }
+        const hasPayment = tasks.some(t => t.file.includes("payment.ts"));
+        if (!hasPayment) {
+            return { ok: false, message: "Must update payment service" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/expected.json b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/expected.json
new file mode 100644
index 0000000..af3575d
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/expected.json
@@ -0,0 +1,11 @@
+{
+    "comments": [
+        {
+            "path": "src/services/payment.ts",
+            "line": 10,
+            "message": "Retry logic correctly targets 5xx errors. Ensure 'fetch' throws on network error for the catch block if used, or check response.ok.",
+            "blocking": false
+        }
+    ],
+    "decision": "approve"
+}
\ No newline at end of file
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/prompt.md b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/prompt.md
new file mode 100644
index 0000000..a876fbe
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/prompt.md
@@ -0,0 +1,5 @@
+Review the patch.
+Verify:
+1. Idempotency is enforced.
+2. Retries happen only on 5xx or network errors.
+3. No Infinite loops.
diff --git a/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/verify.ts b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/verify.ts
new file mode 100644
index 0000000..835dfe9
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2101-idempotent-retryable-operation/reviewer/verify.ts
@@ -0,0 +1,14 @@
+import {
+    verifyReviewer,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyReviewer(ctx, (result) => {
+        if (result.decision !== "approve") {
+            return { ok: false, message: "Reviewer should approve valid patch" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/expected.json b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/expected.json
new file mode 100644
index 0000000..8e1ea93
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/expected.json
@@ -0,0 +1,10 @@
+{
+    "highLevelSummary": "Update `registerUser` in `src/services/registration.ts` to handle partial failures. If `createWallet` fails, catch the error, execute `deleteUser` to compensate (rollback), and then rethrow the error.",
+    "pagesOrScreens": [],
+    "apis": [],
+    "dataModels": [],
+    "recommendedFileStructure": [
+        "src/services/registration.ts",
+        "src/tests/registration.test.ts"
+    ]
+}
\ No newline at end of file
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/prompt.md b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/prompt.md
new file mode 100644
index 0000000..d335757
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/prompt.md
@@ -0,0 +1,7 @@
+The `registerUser` function performs two steps:
+1. `createUser(email)`
+2. `createWallet(userId)`
+
+If `createWallet` fails, the user remains in the system without a wallet, which is an invalid state.
+Please update `registerUser` to catch errors from `createWallet`. If it fails, call `deleteUser(userId)` to roll back the first step, then re-throw the error.
+Ensure `deleteUser` is called even if `createWallet` throws a network error.
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/verify.ts b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/verify.ts
new file mode 100644
index 0000000..ae35ab9
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/architect/verify.ts
@@ -0,0 +1,15 @@
+import {
+    verifyArchitect,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyArchitect(ctx, (parsed) => {
+        const summary = parsed.highLevelSummary.toLowerCase();
+        if (!summary.includes("rollback") && !summary.includes("compensat")) {
+            return { ok: false, message: "Summary should mention rollback or compensation" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/expected.patch b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/expected.patch
new file mode 100644
index 0000000..6f55f57
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/expected.patch
@@ -0,0 +1,31 @@
+diff --git a/src/services/registration.ts b/src/services/registration.ts
+index ...
+--- a/src/services/registration.ts
++++ b/src/services/registration.ts
+@@ -1,6 +1,11 @@
+ export async function registerUser(email: string) {
+   const user = await createUser(email);
+-  const wallet = await createWallet(user.id);
+-  return { user, wallet };
++  try {
++    const wallet = await createWallet(user.id);
++    return { user, wallet };
++  } catch (error) {
++    await deleteUser(user.id);
++    throw error;
++  }
+ }
+ 
+ async function createUser(email: string) {
+diff --git a/src/tests/registration.test.ts b/src/tests/registration.test.ts
+index ...
+--- a/src/tests/registration.test.ts
++++ b/src/tests/registration.test.ts
+@@ -4,4 +4,7 @@ describe('Registration', () => {
+   it('registers user', async () => {
+     // test
+   });
++  it('rolls back on failure', async () => {
++    // test
++  });
+ });
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/prompt.md b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/prompt.md
new file mode 100644
index 0000000..667310b
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/prompt.md
@@ -0,0 +1,5 @@
+Update `registerUser` in `src/services/registration.ts`:
+1. Call `createUser`.
+2. Try calling `createWallet`.
+3. If `createWallet` fails, catch error, call `deleteUser` to rollback `createUser`, then throw error.
+4. Update tests.
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/services/registration.ts b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/services/registration.ts
new file mode 100644
index 0000000..0af9996
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/services/registration.ts
@@ -0,0 +1,17 @@
+export async function registerUser(email: string) {
+    const user = await createUser(email);
+    const wallet = await createWallet(user.id);
+    return { user, wallet };
+}
+
+async function createUser(email: string) {
+    return { id: '123', email };
+}
+
+async function createWallet(userId: string) {
+    throw new Error('Wallet service down');
+}
+
+async function deleteUser(userId: string) {
+    console.log('Deleting user', userId);
+}
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/tests/registration.test.ts b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/tests/registration.test.ts
new file mode 100644
index 0000000..1462c5c
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/repo/src/tests/registration.test.ts
@@ -0,0 +1,7 @@
+import { registerUser } from '../services/registration';
+
+describe('Registration', () => {
+    it('registers user', async () => {
+        // test
+    });
+});
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/verify.ts b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/verify.ts
new file mode 100644
index 0000000..7d21659
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/coder/verify.ts
@@ -0,0 +1,17 @@
+import {
+    verifyCoder,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyCoder(ctx, (patch) => {
+        if (!patch.includes("try") || !patch.includes("catch")) {
+            return { ok: false, message: "Patch should use try-catch" };
+        }
+        if (!patch.includes("deleteUser")) {
+            return { ok: false, message: "Patch should call deleteUser" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/expected.json b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/expected.json
new file mode 100644
index 0000000..133ecf5
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/expected.json
@@ -0,0 +1,24 @@
+{
+    "tasks": [
+        {
+            "id": "1",
+            "type": "fix",
+            "description": "Implement rollback logic in registerUser",
+            "file": "src/services/registration.ts",
+            "complexity": "low",
+            "dependsOn": []
+        },
+        {
+            "id": "2",
+            "type": "fix",
+            "description": "Add tests for rollback on wallet failure",
+            "file": "src/tests/registration.test.ts",
+            "complexity": "low",
+            "dependsOn": [
+                "1"
+            ]
+        }
+    ],
+    "ambiguities": [],
+    "invalidTaskCount": 0
+}
\ No newline at end of file
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/prompt.md b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/prompt.md
new file mode 100644
index 0000000..ad122ea
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/prompt.md
@@ -0,0 +1,11 @@
+# Architect Plan
+Update `registerUser` in `src/services/registration.ts`.
+Wrap `createWallet` in try-catch.
+On error, call `deleteUser(userId)`.
+Rethrow error.
+
+# Context
+Existing code calls create functions sequentially without error handling.
+Files:
+- src/services/registration.ts
+- src/tests/registration.test.ts
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/verify.ts b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/verify.ts
new file mode 100644
index 0000000..04c261f
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/planner/verify.ts
@@ -0,0 +1,15 @@
+import {
+    verifyPlanner,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyPlanner(ctx, (parsed) => {
+        const tasks = parsed.tasks;
+        if (tasks.length < 2) {
+            return { ok: false, message: "Expected task and test" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/expected.json b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/expected.json
new file mode 100644
index 0000000..5949888
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/expected.json
@@ -0,0 +1,11 @@
+{
+    "comments": [
+        {
+            "path": "src/services/registration.ts",
+            "line": 4,
+            "message": "Correctly implements try-catch for rollback.",
+            "blocking": false
+        }
+    ],
+    "decision": "approve"
+}
\ No newline at end of file
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/prompt.md b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/prompt.md
new file mode 100644
index 0000000..f4e7e47
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/prompt.md
@@ -0,0 +1,4 @@
+Review the patch.
+Verify:
+1. Rollback (`deleteUser`) is called on failure.
+2. Error is re-thrown.
diff --git a/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/verify.ts b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/verify.ts
new file mode 100644
index 0000000..835dfe9
--- /dev/null
+++ b/fixtures/resilience-and-idempotency/task-2102-partial-failure-and-rollback/reviewer/verify.ts
@@ -0,0 +1,14 @@
+import {
+    verifyReviewer,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyReviewer(ctx, (result) => {
+        if (result.decision !== "approve") {
+            return { ok: false, message: "Reviewer should approve valid patch" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/expected.json b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/expected.json
new file mode 100644
index 0000000..c3c0128
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/expected.json
@@ -0,0 +1,18 @@
+{
+    "highLevelSummary": "Identify the route handler for `/api/admin/system-stats` and insert a check to verify that `req.user.role` is 'ADMIN'. If not, return a 403 Forbidden error. Ensure no changes are made to global authentication.",
+    "pagesOrScreens": [],
+    "apis": [
+        {
+            "name": "Get System Stats",
+            "description": "Returns system stats",
+            "method": "GET",
+            "path": "/api/admin/system-stats",
+            "authRequired": true
+        }
+    ],
+    "dataModels": [],
+    "recommendedFileStructure": [
+        "src/routes/adminRoutes.ts",
+        "src/tests/adminRoutes.test.ts"
+    ]
+}
\ No newline at end of file
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/prompt.md b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/prompt.md
new file mode 100644
index 0000000..d27c2a4
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/prompt.md
@@ -0,0 +1,4 @@
+The endpoint `GET /api/admin/system-stats` is currently accessible to any authenticated user. It exposes sensitive system metrics.
+Please restrict this endpoint so that only users with the `ADMIN` role can access it.
+Do not modify the authentication middleware or any other endpoints.
+Just add the authorization check to this specific route handler.
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/verify.ts b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/verify.ts
new file mode 100644
index 0000000..dde3adf
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/architect/verify.ts
@@ -0,0 +1,15 @@
+import {
+    verifyArchitect,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyArchitect(ctx, (parsed) => {
+        const summary = parsed.highLevelSummary.toLowerCase();
+        if (!summary.includes("admin") && !summary.includes("role")) {
+            return { ok: false, message: "Architect summary should mention check for ADMIN role" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/expected.patch b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/expected.patch
new file mode 100644
index 0000000..69128cc
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/expected.patch
@@ -0,0 +1,26 @@
+diff --git a/src/routes/adminRoutes.ts b/src/routes/adminRoutes.ts
+index e69de29..d954848 100644
+--- a/src/routes/adminRoutes.ts
++++ b/src/routes/adminRoutes.ts
+@@ -4,6 +4,9 @@ const router = Router();
+ 
+ router.get('/system-stats', (req, res) => {
+   // TODO: Add role check
++  if ((req as any).user?.role !== 'ADMIN') {
++    return res.status(403).json({ error: 'Forbidden' });
++  }
+   res.json({
+     uptime: process.uptime(),
+     cpuUsage: process.cpuUsage()
+diff --git a/src/tests/adminRoutes.test.ts b/src/tests/adminRoutes.test.ts
+index e69de29..d954848 100644
+--- a/src/tests/adminRoutes.test.ts
++++ b/src/tests/adminRoutes.test.ts
+@@ -2,4 +2,7 @@ describe('Admin Routes', () => {
+   it('should be implemented', () => {
+     expect(true).toBe(true);
+   });
++  it('should return 403 for non-admins', () => {
++    // test implementation
++  });
+ });
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/prompt.md b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/prompt.md
new file mode 100644
index 0000000..bcfcc6e
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/prompt.md
@@ -0,0 +1,7 @@
+# Plan
+1. Edit `src/routes/adminRoutes.ts`: Add a check for `req.user.role === 'ADMIN'`. If not, return status 403.
+2. Edit `src/tests/adminRoutes.test.ts`: Add a test case ensuring 403 is returned for non-admin users.
+
+# Context
+The architect has identified that removing the gap is critical.
+Please implement the changes.
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/routes/adminRoutes.ts b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/routes/adminRoutes.ts
new file mode 100644
index 0000000..a603dbe
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/routes/adminRoutes.ts
@@ -0,0 +1,13 @@
+import { Router } from 'express';
+
+const router = Router();
+
+router.get('/system-stats', (req, res) => {
+    // TODO: Add role check
+    res.json({
+        uptime: process.uptime(),
+        cpuUsage: process.cpuUsage()
+    });
+});
+
+export default router;
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/tests/adminRoutes.test.ts b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/tests/adminRoutes.test.ts
new file mode 100644
index 0000000..7896726
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/repo/src/tests/adminRoutes.test.ts
@@ -0,0 +1,5 @@
+describe('Admin Routes', () => {
+    it('should be implemented', () => {
+        expect(true).toBe(true);
+    });
+});
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/verify.ts b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/verify.ts
new file mode 100644
index 0000000..d93a1ab
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/coder/verify.ts
@@ -0,0 +1,17 @@
+import {
+    verifyCoder,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyCoder(ctx, (patch) => {
+        if (!patch.includes("403") && !patch.includes("Forbidden")) {
+            return { ok: false, message: "Patch must implement 403 Forbidden check" };
+        }
+        if (!patch.includes("role") && !patch.includes("ADMIN")) {
+            return { ok: false, message: "Patch check for ADMIN role" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/expected.json b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/expected.json
new file mode 100644
index 0000000..61cbf6e
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/expected.json
@@ -0,0 +1,24 @@
+{
+    "tasks": [
+        {
+            "id": "1",
+            "type": "fix",
+            "description": "Add role check to system-stats handler to enforce ADMIN role",
+            "file": "src/routes/adminRoutes.ts",
+            "complexity": "low",
+            "dependsOn": []
+        },
+        {
+            "id": "2",
+            "type": "fix",
+            "description": "Add test case ensuring non-admin users receive 403 Forbidden",
+            "file": "src/tests/adminRoutes.test.ts",
+            "complexity": "low",
+            "dependsOn": [
+                "1"
+            ]
+        }
+    ],
+    "ambiguities": [],
+    "invalidTaskCount": 0
+}
\ No newline at end of file
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/prompt.md b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/prompt.md
new file mode 100644
index 0000000..b12148d
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/prompt.md
@@ -0,0 +1,6 @@
+# Context
+The user wants to restrict `/api/admin/system-stats` to ADMIN role only.
+The architect recommends adding a check in `src/routes/adminRoutes.ts` and adding a test case.
+
+# Architect Plan
+Identify the route handler for `/api/admin/system-stats` and insert a check to verify that `req.user.role` is 'ADMIN'. If not, return a 403 Forbidden error. Ensure no changes are made to the global `authenticate` middleware.
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/verify.ts b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/verify.ts
new file mode 100644
index 0000000..d50ea8e
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/planner/verify.ts
@@ -0,0 +1,22 @@
+import {
+    verifyPlanner,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyPlanner(ctx, (parsed) => {
+        // parsed is the full object { tasks: [], ... }
+        const tasks = parsed.tasks;
+        if (tasks.length < 2) {
+            return { ok: false, message: "Expected at least 2 tasks (implementation and test)" };
+        }
+        const hasRoute = tasks.some(t => t.file.includes("adminRoutes.ts"));
+        const hasTest = tasks.some(t => t.file.includes("test"));
+
+        if (!hasRoute || !hasTest) {
+            return { ok: false, message: "Missing route update or test update task" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/expected.json b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/expected.json
new file mode 100644
index 0000000..be47701
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/expected.json
@@ -0,0 +1,11 @@
+{
+    "comments": [
+        {
+            "path": "src/routes/adminRoutes.ts",
+            "line": 6,
+            "message": "Correctly checks for ADMIN role and returns 403. Good use of explicit status code.",
+            "blocking": false
+        }
+    ],
+    "decision": "approve"
+}
\ No newline at end of file
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/prompt.md b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/prompt.md
new file mode 100644
index 0000000..4f028bf
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/prompt.md
@@ -0,0 +1,3 @@
+Please review the attached patch.
+Constraint: Only users with 'ADMIN' role should access the system-stats endpoint.
+Constraint: Do not modify global middleware.
diff --git a/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/verify.ts b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/verify.ts
new file mode 100644
index 0000000..30f3fba
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2001-fix-authorization-gap/reviewer/verify.ts
@@ -0,0 +1,20 @@
+import {
+    verifyReviewer,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyReviewer(ctx, (result) => {
+        if (result.decision !== "approve") {
+            return { ok: false, message: "Reviewer should approve the correct patch" };
+        }
+        const hasComment = result.comments.some(c => c.message.toLowerCase().includes("admin"));
+        if (!hasComment) {
+            // It's acceptable if they just say "LGTM" but better if they recognize the security fix.
+            // stricter check:
+            // return { ok: false, message: "Reviewer should mention the admin check" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/expected.json b/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/expected.json
new file mode 100644
index 0000000..7fc507d
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/expected.json
@@ -0,0 +1,18 @@
+{
+    "highLevelSummary": "Modify the `/api/comments` handler in `src/controllers/comments.ts` to validate the `content` field. Ensure it is a non-empty string with max length 500. Strip HTML tags to prevent XSS. Return 400 Bad Request for invalid input.",
+    "pagesOrScreens": [],
+    "apis": [
+        {
+            "name": "Create Comment",
+            "description": "Creates a new comment",
+            "method": "POST",
+            "path": "/api/comments",
+            "authRequired": true
+        }
+    ],
+    "dataModels": [],
+    "recommendedFileStructure": [
+        "src/controllers/comments.ts",
+        "src/tests/comments.test.ts"
+    ]
+}
\ No newline at end of file
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/prompt.md b/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/prompt.md
new file mode 100644
index 0000000..11836e3
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/prompt.md
@@ -0,0 +1,9 @@
+The `/api/comments` endpoint allows users to post comments. Currently it accepts any payload.
+Please enforce the following validation rules for the `content` field:
+1. Required.
+2. Must be a string.
+3. Minimum length 1 character, maximum 500 characters.
+4. Sanitize HTML tags to prevent XSS (e.g. using a sanitize library or simple regex strip).
+
+Do not add new dependencies if possible, or use standard ones.
+Do not change valid request handling.
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/verify.ts b/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/verify.ts
new file mode 100644
index 0000000..10f614d
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/architect/verify.ts
@@ -0,0 +1,18 @@
+import {
+    verifyArchitect,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyArchitect(ctx, (parsed) => {
+        const summary = parsed.highLevelSummary.toLowerCase();
+        if (!summary.includes("validate") && !summary.includes("check")) {
+            return { ok: false, message: "Summary should mention validation" };
+        }
+        if (!summary.includes("html") && !summary.includes("xss") && !summary.includes("sanitiz")) {
+            return { ok: false, message: "Summary should mention sanitization or XSS prevention" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/expected.patch b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/expected.patch
new file mode 100644
index 0000000..7a6280a
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/expected.patch
@@ -0,0 +1,32 @@
+diff --git a/src/controllers/comments.ts b/src/controllers/comments.ts
+index ...
+--- a/src/controllers/comments.ts
++++ b/src/controllers/comments.ts
+@@ -3,8 +3,13 @@ import { Request, Response } from 'express';
+ export const createComment = (req: Request, res: Response) => {
+   const { content } = req.body;
+ 
++  if (!content || typeof content !== 'string' || content.length < 1 || content.length > 500) {
++    return res.status(400).json({ error: 'Invalid content' });
++  }
++  const sanitized = content.replace(/<[^>]*>/g, '');
++
+   // Save to DB (mocked)
+-  console.log('Saving comment:', content);
++  console.log('Saving comment:', sanitized);
+ 
+-  res.status(201).json({ success: true, content });
++  res.status(201).json({ success: true, content: sanitized });
+ };
+diff --git a/src/tests/comments.test.ts b/src/tests/comments.test.ts
+index ...
+--- a/src/tests/comments.test.ts
++++ b/src/tests/comments.test.ts
+@@ -3,4 +3,7 @@ describe('Comments', () => {
+   it('should create a comment', () => {
+     // mock request
+   });
++  it('should reject invalid comments', () => {
++    // test
++  });
+ });
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/prompt.md b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/prompt.md
new file mode 100644
index 0000000..2f63d28
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/prompt.md
@@ -0,0 +1,5 @@
+Implement validation in `src/controllers/comments.ts`:
+- Check `content` is string, length 1-500.
+- Sanitize HTML tags (e.g. `content.replace(/<[^>]*>/g, '')`).
+- Return 400 if invalid.
+Add tests in `src/tests/comments.test.ts`.
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/controllers/comments.ts b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/controllers/comments.ts
new file mode 100644
index 0000000..0271406
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/controllers/comments.ts
@@ -0,0 +1,10 @@
+import { Request, Response } from 'express';
+
+export const createComment = (req: Request, res: Response) => {
+    const { content } = req.body;
+
+    // Save to DB (mocked)
+    console.log('Saving comment:', content);
+
+    res.status(201).json({ success: true, content });
+};
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/tests/comments.test.ts b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/tests/comments.test.ts
new file mode 100644
index 0000000..9e2705e
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/repo/src/tests/comments.test.ts
@@ -0,0 +1,5 @@
+describe('Comments', () => {
+    it('should create a comment', () => {
+        // mock request
+    });
+});
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/verify.ts b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/verify.ts
new file mode 100644
index 0000000..9d6dbc6
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/coder/verify.ts
@@ -0,0 +1,17 @@
+import {
+    verifyCoder,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyCoder(ctx, (patch) => {
+        if (!patch.includes("400")) {
+            return { ok: false, message: "Patch should return 400 for invalid input" };
+        }
+        if (!patch.includes("replace") && !patch.includes("sanitize")) {
+            return { ok: false, message: "Patch should sanitize input" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/expected.json b/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/expected.json
new file mode 100644
index 0000000..af8003e
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/expected.json
@@ -0,0 +1,24 @@
+{
+    "tasks": [
+        {
+            "id": "1",
+            "type": "fix",
+            "description": "Add input validation and sanitization to comments controller",
+            "file": "src/controllers/comments.ts",
+            "complexity": "low",
+            "dependsOn": []
+        },
+        {
+            "id": "2",
+            "type": "fix",
+            "description": "Add tests for valid and invalid comment inputs",
+            "file": "src/tests/comments.test.ts",
+            "complexity": "low",
+            "dependsOn": [
+                "1"
+            ]
+        }
+    ],
+    "ambiguities": [],
+    "invalidTaskCount": 0
+}
\ No newline at end of file
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/prompt.md b/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/prompt.md
new file mode 100644
index 0000000..9a8fc3a
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/prompt.md
@@ -0,0 +1,11 @@
+# Architect Plan
+Modify `src/controllers/comments.ts` to validate `content`:
+1. Required, String, Length 1-500.
+2. Sanitize HTML.
+Return 400 if invalid.
+
+# Context
+Existing code handles the request but blindly saves data.
+Files:
+- src/controllers/comments.ts
+- src/tests/comments.test.ts
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/verify.ts b/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/verify.ts
new file mode 100644
index 0000000..265d455
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/planner/verify.ts
@@ -0,0 +1,15 @@
+import {
+    verifyPlanner,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyPlanner(ctx, (parsed) => {
+        const tasks = parsed.tasks;
+        if (tasks.length < 2) {
+            return { ok: false, message: "Expected validation task and test task" };
+        }
+        return { ok: true };
+    });
+}
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/expected.json b/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/expected.json
new file mode 100644
index 0000000..0ac071e
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/expected.json
@@ -0,0 +1,17 @@
+{
+    "comments": [
+        {
+            "path": "src/controllers/comments.ts",
+            "line": 5,
+            "message": "Validation logic looks correct for length and type.",
+            "blocking": false
+        },
+        {
+            "path": "src/controllers/comments.ts",
+            "line": 8,
+            "message": "Sanitization using simple regex is acceptable for this task.",
+            "blocking": false
+        }
+    ],
+    "decision": "approve"
+}
\ No newline at end of file
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/prompt.md b/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/prompt.md
new file mode 100644
index 0000000..9d982a8
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/prompt.md
@@ -0,0 +1,4 @@
+Review the attached patch against:
+1. Must validate min/max length.
+2. Must sanitize HTML or reject it.
+3. Must accept valid inputs.
diff --git a/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/verify.ts b/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/verify.ts
new file mode 100644
index 0000000..835dfe9
--- /dev/null
+++ b/fixtures/security-and-permissions/task-2002-input-validation-hardening/reviewer/verify.ts
@@ -0,0 +1,14 @@
+import {
+    verifyReviewer,
+    type VerifyCtx,
+    type VerifyResult
+} from "../../../../src/fixture-helpers";
+
+export function verify(ctx: VerifyCtx): VerifyResult {
+    return verifyReviewer(ctx, (result) => {
+        if (result.decision !== "approve") {
+            return { ok: false, message: "Reviewer should approve valid patch" };
+        }
+        return { ok: true };
+    });
+}