docs(transport): manual cluster verification checklist

docs/plans/2026-05-24-transport-manual-verification.md

@@ -0,0 +1,25 @@
+# Transport Manual Verification
+
+This document is a one-time manual verification to be run against the docker cluster after the Transport feature is fully built and `bash docker/deploy.sh` has rebuilt the image. Each step is sequential and assumes the previous step succeeded. The entire flow takes approximately 15 minutes.
+
+## Prerequisites
+
+- `bash docker/deploy.sh` succeeded (image rebuilt with Transport feature).
+- `cd infra && docker compose up -d` (LDAP and MS SQL are ready).
+
+## Steps
+
+1. Log in to http://localhost:9000 as `multi-role` / `password`.
+2. Navigate to Design → Export Bundle.
+3. Select 1 template + 1 shared script. Verify dependency expansion in Step 2.
+4. Set passphrase "test123". Export. Verify a `.scadabundle` file downloads.
+5. Log out, log in as `admin` / `password`.
+6. Navigate to Design → Import Bundle. Upload the bundle from step 4.
+7. Enter passphrase "test123". Verify the diff page shows the artifacts.
+8. Apply with Add for all. Confirm by retyping the source environment name.
+9. Verify Step 5 result page shows counts + links.
+10. Open Audit → Configuration Audit Log → filter by the `BundleImported` row's id.
+    Verify all per-entity rows from the import are listed and carry the same `BundleImportId`.
+11. Open the Deployments page → verify any instance that referenced an overwritten
+    template appears stale (revision-hash mismatch).
+12. Verify wrong passphrase fails cleanly (3 attempts → re-upload required).