# ApiVault v1.3.5 — Interface Clarity Rebuild Phase 4

Phase 4 embeds the remaining runtime and paste-based developer workflows into the AppShell cockpit.

## Added panels

- `UI/Panels/TestLabPanelV2.lua`
  - SafeRunner policy visibility
  - user-driven event payload recording
  - runtime test history review
  - explicit block for `COMBAT_LOG_EVENT_UNFILTERED` from this cockpit workflow

- `UI/Panels/AuditPanelV2.lua`
  - Auto Detect
  - Lua Audit
  - XML Audit
  - TOC Audit
  - Performance
  - SavedVariables
  - Secure/Taint
  - API Matrix

- `UI/Panels/ReportsPanel.lua`
  - Session Export
  - Addon Report
  - Error Report
  - Last Audit
  - API Summary
  - Secure Checklist
  - Package Report
  - Test Checklist

## Commands

- `/av test` opens Test Lab V2 inside AppShell.
- `/av audit` opens Audit V2 inside AppShell.
- `/av reports` opens Reports V2 inside AppShell.

Existing legacy panels remain reachable through explicit legacy buttons or old aliases.

## Security policy

This phase does not change SafeRunner behavior. It does not add protected execution, pasted-code execution, runtime source-file reads, `require`, `dofile`, `loadfile`, `os`, `io` or `debug` usage.

## Validation checklist

1. `/av` opens AppShell.
2. `/av test` opens Test Lab V2 inside AppShell.
3. `/av audit` opens Audit V2 inside AppShell.
4. `/av reports` opens Reports V2 inside AppShell.
5. Start Event refuses `COMBAT_LOG_EVENT_UNFILTERED`.
6. Audit V2 empty input shows an empty state rather than blank output.
7. Reports V2 output is selectable/copyable.
8. Legacy buttons still open the standalone panels.
