---
id: CONTENT-WP-0007
type: workplan
title: "OnCo licensed reference-slice conformance"
domain: infotech
repo: content-explorer
status: blocked
flavor: implementation
depends_on:
  - CONTENT-WP-0000
  - CONTENT-WP-0001
  - CONTENT-WP-0002
  - CONTENT-WP-0003
  - CONTENT-WP-0005
created: "2026-10-12"
updated: "2026-10-12"
state_hub_workstream_id: "ba3fad1f-0af7-5851-b1c5-df401e0f0184"
---

# OnCo licensed reference-slice conformance

Validate generic Content Explorer against real OnCo topology and UX using a small pinned, authorized cancer-data slice, without copying the broader corpus. No real data import until authorization exists. See `tests/onco-reference/README.md`.

## Work packages

### Determine the test operator and use, acquire the permission or license required by OnCo LICENSE-DATA, and document redistribution restrictions.

```task
id: CONTENT-WP-0007-T01
status: wait
needs_human: true
blocking_reason: "OnCo LICENSE-DATA authorization is required before any real reference-slice import."
priority: high
state_hub_task_id: "04edc274-3eb1-5796-9a37-37380c1d6c92"
```

### Pin the upstream SHA and capture behavior for about 12 to 25 representative entities, 8 or more user journeys, and several viewport sizes.

```task
id: CONTENT-WP-0007-T02
status: todo
priority: high
state_hub_task_id: "8e39d927-55f5-5bae-b8f1-05a532dffd56"
```

### Build an allowlist-only onco-reference adapter from explicitly authorized local inputs to a canonical snapshot, retaining provenance, dates, rights, and record links.

```task
id: CONTENT-WP-0007-T03
status: todo
priority: high
state_hub_task_id: "c08c515b-90ef-5e70-a355-da9273f54d06"
```

### Implement graph topology, inverse links, search and facet, detail, source display, stable deep-link, and negative mutation tests.

```task
id: CONTENT-WP-0007-T04
status: todo
priority: high
state_hub_task_id: "a216484a-a919-543f-9c33-d74c86c6d65e"
```

### Run paired OnCo and Content Explorer browser tests against the pinned source baseline, and report semantic and visual divergences separately.

```task
id: CONTENT-WP-0007-T05
status: todo
priority: high
state_hub_task_id: "4f33ae6e-da25-5223-a887-e5157b5e82a5"
```

### Run clean-room public CI with synthetic domains and no OnCo dataset, and audit that no OnCo corpus entered distributable packages or build artifacts.

```task
id: CONTENT-WP-0007-T06
status: todo
priority: high
state_hub_task_id: "23768695-13eb-5a92-8658-c3441e15bec6"
```

## Acceptance gates

### No real data import until authorization, and no missing attribution or silent relation loss.

```task
id: CONTENT-WP-0007-T07
status: todo
priority: high
state_hub_task_id: "85a14b74-38dd-594c-8394-e253f05b8223"
```

### Version-pinned reproducibility, a comparative conformance report, and documented exceptions.

```task
id: CONTENT-WP-0007-T08
status: todo
priority: high
state_hub_task_id: "33c75c3d-743f-533c-af86-fc7d77ec75f0"
```

## Key risk

Data-use authorization is the blocker. Do not guess rights. Public fixtures remain independently authored.

## Evidence

Pull requests, test logs, pinned artifacts, screenshots, or a comparison report where applicable. Add `ImplementationNotes.md` and `Review.md` on completion. Do not mark a gate passed without a verifiable link.