Phase 3 Steam discovery evidence

Date: 2026-07-18
Requirement IDs: R-005, R-009, R-012, R-016, R-024, R-027
Phase/gate: phase 3 / read-only Steam discovery
Scope: native Steam-root selection, bounded libraryfolders.vdf and appmanifest_*.acf parsing, installed-title normalization, stable App ID and installation identity, provider-scoped CLI discovery, and hostile fixtures
Exclusions: Steam process startup, launch plans, game execution, Proton selection, lifecycle tracking, account data, artwork, and Steam configuration mutation
Commands: cargo test --workspace --all-targets --locked; kiln scan --provider steam --json; make check
Expected result: missing/unmounted libraries are skipped; partial installs and known Steam runtime packages are excluded; malformed, duplicate, oversized, invalid-UTF-8, traversal, and symlinked metadata fail closed; installed games normalize without starting Steam
Observed result: 61 automated tests passed; the production CLI parsed the current local Steam metadata and reported 227 installed titles without starting Steam or a game; a real trailing-space display-name case was normalized and retained as a fixture
Result: pass