## Purpose

Canonical specification for site-admin-safety-and-ergonomics requirements synced from OpenSpec change deltas.

## Requirements

### Requirement: Confirmation guard for destructive commands
Destructive admin commands SHALL require explicit confirmation before execution.

#### Scenario: Missing confirmation flag
- **WHEN** an operator runs clear-news or clean-archive without required confirmation
- **THEN** the command exits without applying destructive changes
- **AND** prints guidance for explicit confirmation usage

### Requirement: Dry-run support where applicable
Maintenance commands SHALL provide dry-run mode for previewing effects where feasible.

#### Scenario: Dry-run preview
- **WHEN** an operator invokes a command with dry-run mode
- **THEN** the command reports intended actions and affected counts
- **AND** persists no data changes

### Requirement: Actionable failure summaries
Admin commands SHALL output actionable errors and final status summaries.

#### Scenario: Partial failure reporting
- **WHEN** a maintenance command partially fails
- **THEN** output includes succeeded/failed counts
- **AND** includes actionable next-step guidance

### Requirement: Admin workflows have automated verification coverage
Admin safety-critical workflows SHALL be covered by automated tests.

#### Scenario: Safety command regression test
- **WHEN** admin command tests run in CI
- **THEN** confirmation and dry-run behavior are validated by tests
- **AND** regressions in safety guards fail the gate