Validate generic Content Explorer against real OnCo topology and UX using a small pinned, authorized cancer-data slice, without copying the broader corpus. No real data import until authorization exists. See `tests/onco-reference/README.md`.
## Work packages
### Determine the test operator and use, acquire the permission or license required by OnCo LICENSE-DATA, and document redistribution restrictions.
```task
id: CONTENT-WP-0007-T01
status: wait
needs_human: true
blocking_reason: "OnCo LICENSE-DATA authorization is required before any real reference-slice import."
### Build an allowlist-only onco-reference adapter from explicitly authorized local inputs to a canonical snapshot, retaining provenance, dates, rights, and record links.
### Run clean-room public CI with synthetic domains and no OnCo dataset, and audit that no OnCo corpus entered distributable packages or build artifacts.
Data-use authorization is the blocker. Do not guess rights. Public fixtures remain independently authored.
## Evidence
Pull requests, test logs, pinned artifacts, screenshots, or a comparison report where applicable. Add `ImplementationNotes.md` and `Review.md` on completion. Do not mark a gate passed without a verifiable link.