fix(campaign): align adaptive handbook with shipped UI

docs/CAMPAIGN_HANDBOOK.md

@@ -144,6 +144,11 @@ paths, storage keys, worker claim tokens, and raw provider diagnostics require
 the dedicated diagnostic permission and must not leak through ordinary campaign,
 version, job, or report responses.
 
+The current Campaign Report Web UI additionally requires recipient-read access
+and does not yet hide every action control that the actor lacks. The server
+still authorizes each action, but an aggregate-only reader UI remains open
+work; do not promise that experience from `campaigns:report:read` alone.
+
 ### Deliver and resolve outcomes
 
 Use the [delivery runbook](CAMPAIGN_DELIVERY_RUNBOOK.md) for the detailed
@@ -151,9 +156,11 @@ operator sequence.
 
 At a minimum:
 
-1. Queue only a validated, locked, built version.
+1. Queue only a validated, locked, built version. The current Web UI does not
-2. Use worker delivery for ordinary batches; synchronous send is intentionally
+   expose Queue; use an authorized supporting client or API.
-   limited to small controlled runs.
+2. Use worker delivery for ordinary batches. Synchronous Send now has no
+   server-enforced job-count bound and must be used only after an operator has
+   deliberately confirmed a small controlled run.
 3. Treat `smtp_accepted` as protected from ordinary retry.
 4. Retry `failed_temporary` explicitly after inspecting the cause.
 5. Include `failed_permanent` only after correcting the cause and making a
@@ -174,7 +181,7 @@ it cannot recall accepted mail.
 
 ### Test and one-message actions
 
-The current baseline includes mock send, queue dry-run, synchronous small-run
+The current baseline includes mock send, queue dry-run, synchronous immediate
 delivery, sending one selected job, retry selection, and unattempted-job
 selection. Their audit and state behavior is not yet the final vocabulary
 accepted for issue `govoplan-campaign#69`.

src/govoplan_campaign/backend/documentation.py

@@ -26,6 +26,7 @@ _CAMPAIGN_USER_SCOPES = (
     "campaigns:recipient:export",
     "campaigns:report:read",
     "campaigns:report:export",
+    "campaigns:report:send",
 )
 
 _CAMPAIGN_HELP_CONTEXTS = (
@@ -108,10 +109,10 @@ CAMPAIGN_USER_DOCUMENTATION = (
         body="A new campaign starts with one editable working version. Creating it does not grant access to Mail profiles, managed files, address sources, or delivery actions; those remain separately authorized.",
         order=30,
         audience=("campaign_manager", "campaign_author"),
-        required_scopes=("campaigns:campaign:create",),
+        required_scopes=("campaigns:campaign:read", "campaigns:campaign:create"),
         route="/campaigns",
         screen="Campaigns",
-        help_contexts=("campaigns.list", "campaign.overview"),
+        help_contexts=("campaigns.list",),
         prerequisites=("You may create campaigns in the active tenant.",),
         steps=(
             "Open Campaigns and select New campaign.",
@@ -244,7 +245,7 @@ CAMPAIGN_USER_DOCUMENTATION = (
             "Save, validate, and build, then inspect the resolved attachment evidence in Review and send.",
         ),
         outcome="Governed file versions linked to the campaign and frozen into the exact build evidence.",
-        verification="Attachment preview and the built-message evidence show the expected file versions, matches, checksums, and archive behavior.",
+        verification="Confirm the expected filenames, paths, matches, and link state in the Campaign UI. Exact managed versions and checksums remain retained in build evidence for authorized supporting tools.",
         related_topic_ids=("campaigns.workflow.prepare-validate-and-build",),
         links=(
             DocumentationLink(label="Campaigns", href="/campaigns", kind="runtime"),
@@ -269,7 +270,7 @@ CAMPAIGN_USER_DOCUMENTATION = (
         ),
         route="/campaigns/{campaign_id}/review",
         screen="Review and send",
-        help_contexts=("campaign.review-send",),
+        help_contexts=(),
         prerequisites=(
             "The selected version is validated, locked, built, and reviewed.",
             "Its Mail profile remains available and authorized for the current campaign context.",
@@ -277,20 +278,21 @@ CAMPAIGN_USER_DOCUMENTATION = (
         ),
         steps=(
             "Open Review and send and confirm the selected version, build, recipients, warnings, and review completion.",
-            "Run the queue estimate or dry run when offered and resolve every blocker.",
+            "Use an authorized supporting client to run the queue dry run and resolve every blocker.",
-            "Queue the build for background delivery; use the synchronous path only for an intentionally small controlled run.",
+            "Invoke the Queue action through that client so background workers can process the build.",
             "Open the campaign Report and monitor queue, SMTP, IMAP, failure, and uncertain-outcome counts.",
         ),
         outcome="Eligible jobs queued with an auditable execution snapshot and protected delivery state.",
         verification="The Report shows the selected version's jobs as queued or progressing, without changing any accepted job back to retryable.",
         related_topic_ids=("campaigns.workflow.complete-review", "campaigns.workflow.retry-and-reconcile"),
         related_modules=("mail", "notifications"),
+        limitations=("The current Campaign Web UI does not expose the Queue action; use an authorized supporting client or API.",),
     ),
     _workflow_topic(
         topic_id="campaigns.workflow.send-small-controlled-run",
-        title="Send a small controlled campaign run",
+        title="Send a campaign immediately",
-        summary="Use the synchronous delivery action only for a deliberately small, fully reviewed campaign build.",
+        summary="Run the eligible jobs synchronously only after deliberately confirming that the reviewed campaign is small enough for an interactive request.",
-        body="The synchronous action is intentionally bounded and does not replace the worker queue for ordinary batches. It preserves the same protected SMTP, IMAP, retry, and uncertain-outcome rules.",
+        body="The current synchronous action does not enforce a server-side job-count limit. It must not replace the worker queue for ordinary batches, but it does preserve the same protected SMTP, IMAP, retry, and uncertain-outcome rules.",
         order=36,
         audience=("campaign_sender", "campaign_operator"),
         required_modules=("campaigns", "mail"),
@@ -306,7 +308,7 @@ CAMPAIGN_USER_DOCUMENTATION = (
         help_contexts=("campaign.review-send",),
         prerequisites=(
             "The selected version is validated, locked, built, and reviewed.",
-            "The run is small enough for the configured synchronous limit.",
+            "An operator has deliberately confirmed that this is a small controlled run; the server does not currently enforce that bound.",
             "Its Mail profile remains available and authorized for the current campaign context.",
         ),
         steps=(
@@ -315,19 +317,20 @@ CAMPAIGN_USER_DOCUMENTATION = (
             "Select Send now and confirm the protected delivery action.",
             "Open Report and inspect each resulting delivery state before attempting any recovery action.",
         ),
-        outcome="A bounded real delivery run with recipient-level attempt and outcome evidence.",
+        outcome="A synchronous real delivery run with recipient-level attempt and outcome evidence.",
         verification="The Report distinguishes accepted, failed, unattempted, cancelled, and outcome-unknown jobs and retains their attempt history.",
         related_topic_ids=("campaigns.workflow.queue-delivery", "campaigns.workflow.retry-and-reconcile"),
         related_modules=("mail",),
+        limitations=("No server-side synchronous job-count limit is currently enforced; use Queue and workers for ordinary batches.",),
     ),
     _workflow_topic(
         topic_id="campaigns.workflow.view-delivery-report",
-        title="Review a campaign delivery report",
+        title="Review campaign delivery details",
-        summary="Inspect aggregate delivery outcomes and, when separately authorized, recipient-level job evidence.",
+        summary="Inspect delivery totals and recipient-level job evidence in the current Campaign Report UI.",
-        body="Report access does not imply access to recipient details or diagnostics. Aggregate business state remains useful for readers, while recipient rows and infrastructure diagnostics require separate authority.",
+        body="The current Report UI requires recipient-read authority in addition to report access. Infrastructure diagnostics remain separately authorized, and every report action is still checked by the server even where the current UI has not yet hidden an unavailable control.",
         order=37,
         audience=("campaign_reader", "campaign_manager", "campaign_reviewer", "campaign_sender"),
-        required_scopes=("campaigns:campaign:read", "campaigns:report:read"),
+        required_scopes=("campaigns:campaign:read", "campaigns:report:read", "campaigns:recipient:read"),
         route="/campaigns/{campaign_id}/report",
         screen="Campaign Report",
         help_contexts=("campaign.report",),
@@ -335,12 +338,13 @@ CAMPAIGN_USER_DOCUMENTATION = (
         steps=(
             "Open the campaign and select Report.",
             "Review totals for queued, accepted, failed, cancelled, unattempted, and outcome-unknown jobs.",
-            "Inspect recipient-level rows and attempt history only when those details are available to your role.",
+            "Inspect the authorized recipient-level rows and attempt history.",
             "Treat outcome-unknown jobs as unresolved and hand them to an authorized operator for evidence-backed reconciliation.",
         ),
-        outcome="A role-appropriate view of delivery progress and outcomes without exposing system internals.",
+        outcome="A recipient-aware view of delivery progress and outcomes with diagnostics still separately protected.",
-        verification="The report totals match the selected campaign version, and recipient or diagnostic details are absent unless separately authorized.",
+        verification="The report totals and job rows match the selected campaign version, and infrastructure diagnostics are absent unless separately authorized.",
         related_topic_ids=("campaigns.workflow.retry-and-reconcile", "campaigns.workflow.export-delivery-report"),
+        limitations=("An aggregate-only Report Web UI for readers without recipient-read authority is not implemented yet.",),
     ),
     _workflow_topic(
         topic_id="campaigns.workflow.export-delivery-report",
@@ -351,7 +355,9 @@ CAMPAIGN_USER_DOCUMENTATION = (
         audience=("campaign_report_exporter", "campaign_auditor"),
         required_scopes=(
             "campaigns:campaign:read",
+            "campaigns:report:read",
             "campaigns:report:export",
+            "campaigns:recipient:read",
             "campaigns:recipient:export",
         ),
         route="/campaigns/{campaign_id}/report",
@@ -418,9 +424,12 @@ CAMPAIGN_USER_DOCUMENTATION = (
             "Reopen or query the campaign and confirm its state is Archived.",
         ),
         outcome="An archived campaign whose versions, reports, and audit evidence remain preserved.",
-        verification="The campaign state is Archived and its report and audit evidence remain available to authorized readers.",
+        verification="The campaign state is Archived and its report remains available. Ask an authorized audit reader to verify the platform audit event.",
         related_topic_ids=("campaigns.workflow.view-delivery-report", "campaigns.workflow.delete-untouched-draft"),
-        limitations=("The current Campaign Web UI does not yet expose the archive action; use an authorized supporting client or API.",),
+        limitations=(
+            "The current Campaign Web UI does not yet expose the archive action; use an authorized supporting client or API.",
+            "The Campaign-local Audit page is not integrated yet; audit verification uses the platform audit surface or API.",
+        ),
     ),
     _workflow_topic(
         topic_id="campaigns.workflow.delete-untouched-draft",
@@ -444,9 +453,12 @@ CAMPAIGN_USER_DOCUMENTATION = (
             "Verify that the deleted draft no longer appears in active Campaigns and that the audit event exists.",
         ),
         outcome="An eligible untouched draft removed from active Campaigns with attributable deletion evidence.",
-        verification="The draft is no longer returned as an active campaign, while an authorized audit reader can verify who deleted it and when.",
+        verification="The draft is no longer returned as an active campaign. Ask an authorized audit reader to verify who deleted it and when through the platform audit surface.",
         related_topic_ids=("campaigns.workflow.archive-campaign",),
-        limitations=("The current Campaign Web UI does not yet expose the delete action; use an authorized supporting client or API.",),
+        limitations=(
+            "The current Campaign Web UI does not yet expose the delete action; use an authorized supporting client or API.",
+            "The Campaign-local Audit page is not integrated yet; audit verification uses the platform audit surface or API.",
+        ),
     ),
 )
 
@@ -465,19 +477,21 @@ def documentation_topics(context: DocumentationContext) -> tuple[DocumentationTo
     if principal is None or not _has_any_scope(principal, _CAMPAIGN_USER_SCOPES):
         return ()
 
-    current_configuration = list(_actor_capabilities(principal))
+    mail_available = _integration_available(context.registry, _MAIL_INTEGRATION)
+    current_configuration = list(_actor_capabilities(principal, mail_available=mail_available))
     integration_configuration, integration_limitations = _integration_summary(context.registry, principal)
     current_configuration.extend(integration_configuration)
     limitations = [
         "Access to a particular campaign still depends on its owner or sharing rules and on the campaign's current state.",
+        "Profile, file, and address pickers re-evaluate the actual resources visible in the selected campaign; this overview does not claim that an eligible item currently exists.",
         *integration_limitations,
     ]
 
     return (
         DocumentationTopic(
             id="campaigns.current-composition",
-            title="Campaign capabilities available to you",
+            title="Your Campaign role and installed composition",
-            summary="This guide reflects your current Campaign actions and the connected services available in this installation.",
+            summary="This guide separates actions authorized by your role from optional services connected to Campaign in this installation.",
             body=_composition_body(current_configuration, limitations),
             layer="configured",
             documentation_types=("user",),
@@ -504,7 +518,7 @@ def documentation_topics(context: DocumentationContext) -> tuple[DocumentationTo
     )
 
 
-def _actor_capabilities(principal: object) -> tuple[str, ...]:
+def _actor_capabilities(principal: object, *, mail_available: bool) -> tuple[str, ...]:
     capabilities: list[str] = []
     _append_if(capabilities, principal, ("campaigns:campaign:read",), "Open campaigns shared with you and inspect their business state.")
     _append_if(capabilities, principal, ("campaigns:campaign:create",), "Create new campaigns.")
@@ -516,12 +530,14 @@ def _actor_capabilities(principal: object) -> tuple[str, ...]:
     _append_if(capabilities, principal, ("campaigns:campaign:validate",), "Validate campaign inputs and resolve blocking issues.")
     _append_if(capabilities, principal, ("campaigns:campaign:build",), "Build exact recipient messages for review.")
     _append_if(capabilities, principal, ("campaigns:campaign:review",), "Record review completion for an exact build.")
-    _append_if(capabilities, principal, ("campaigns:campaign:send_test",), "Run authorized delivery verification tools.")
+    if mail_available:
-    _append_if(capabilities, principal, ("campaigns:campaign:queue",), "Queue an eligible reviewed campaign for controlled delivery.")
+        _append_if(capabilities, principal, ("campaigns:campaign:send_test",), "Run authorized delivery verification tools.")
+        _append_if(capabilities, principal, ("campaigns:campaign:queue",), "Queue an eligible reviewed campaign for controlled delivery.")
     _append_if(capabilities, principal, ("campaigns:campaign:control",), "Pause, resume, or cancel eligible delivery jobs.")
-    _append_if(capabilities, principal, ("campaigns:campaign:send",), "Start an eligible real delivery run.")
+    if mail_available:
-    _append_if(capabilities, principal, ("campaigns:campaign:retry",), "Retry delivery jobs whose recorded state permits a retry.")
+        _append_if(capabilities, principal, ("campaigns:campaign:send",), "Start an eligible real delivery run.")
-    _append_if(capabilities, principal, ("campaigns:campaign:reconcile",), "Reconcile delivery effects whose outcome is uncertain.")
+        _append_if(capabilities, principal, ("campaigns:campaign:retry",), "Retry delivery jobs whose recorded state permits a retry.")
+        _append_if(capabilities, principal, ("campaigns:campaign:reconcile",), "Reconcile delivery effects whose outcome is uncertain.")
     _append_if(capabilities, principal, ("campaigns:report:read",), "View authorized campaign delivery reports.")
     _append_if(
         capabilities,
@@ -533,6 +549,14 @@ def _actor_capabilities(principal: object) -> tuple[str, ...]:
     _append_if(capabilities, principal, ("campaigns:campaign:share",), "Manage explicit access to eligible campaigns.")
     _append_if(capabilities, principal, ("campaigns:campaign:archive",), "Archive eligible campaigns while retaining their evidence.")
     _append_if(capabilities, principal, ("campaigns:campaign:delete",), "Delete eligible untouched drafts.")
+    if mail_available:
+        _append_if(
+            capabilities,
+            principal,
+            ("campaigns:report:send", "campaigns:report:read", "mail:profile:use"),
+            "Send an authorized campaign report through a Mail profile.",
+            require_all=True,
+        )
     return tuple(capabilities)
 
 
@@ -541,8 +565,18 @@ def _integration_summary(registry: object, principal: object) -> tuple[tuple[str
     limitations: list[str] = []
 
     mail_available = _integration_available(registry, _MAIL_INTEGRATION)
-    if mail_available and _has_scope(principal, "mail:profile:use"):
+    can_select_mail_profile = _has_all_scopes(
-        configured.append("Mail profile selection is available for Campaign delivery steps you are authorized to perform.")
+        principal,
+        ("campaigns:campaign:read", "campaigns:campaign:update", "mail:profile:use"),
+    )
+    can_deliver_with_mail = _has_scope(principal, "mail:profile:use") and _has_any_scope(
+        principal,
+        ("campaigns:campaign:queue", "campaigns:campaign:send", "campaigns:campaign:retry"),
+    )
+    if mail_available and can_select_mail_profile:
+        configured.append("Installed composition: Campaign can open Mail's actor-filtered profile picker while you edit; eligible profiles are resolved in the selected campaign context.")
+    elif mail_available and can_deliver_with_mail:
+        configured.append("Installed composition: Mail-backed Campaign delivery is connected, and the selected profile is re-authorized for each delivery action.")
     elif mail_available:
         limitations.append("Mail delivery is configured, but selecting a Mail profile is not included in your current tasks.")
     else:
@@ -555,12 +589,19 @@ def _integration_summary(registry: object, principal: object) -> tuple[tuple[str
     )
     can_link_files = _has_all_scopes(
         principal,
-        ("campaigns:campaign:validate", "campaigns:recipient:read", "files:file:read", "files:file:share"),
+        (
+            "campaigns:campaign:read",
+            "campaigns:campaign:update",
+            "campaigns:campaign:validate",
+            "campaigns:recipient:read",
+            "files:file:read",
+            "files:file:share",
+        ),
     )
     if files_available and can_link_files:
-        configured.append("Managed file versions can be selected, previewed, and linked as governed campaign attachments.")
+        configured.append("Installed composition: Managed file versions can be selected, previewed, and linked as governed campaign attachments when the selected campaign and files pass their resource checks.")
     elif files_available and can_preview_files:
-        configured.append("Managed campaign attachments can be previewed; linking a version requires separate attachment-sharing authority.")
+        configured.append("Installed composition: Managed campaign attachments can be previewed; linking a version requires campaign-update, validation, and attachment-sharing authority.")
     elif files_available:
         limitations.append("Managed attachments are configured, but they are not included in your current Campaign tasks.")
     else:
@@ -569,20 +610,30 @@ def _integration_summary(registry: object, principal: object) -> tuple[tuple[str
     lookup_available = _integration_available(registry, _ADDRESSES_LOOKUP_INTEGRATION)
     source_available = _integration_available(registry, _ADDRESSES_SOURCE_INTEGRATION)
     if lookup_available and _has_scope(principal, "campaigns:recipient:read"):
-        configured.append("Address records can be looked up while preparing recipients.")
+        configured.append("Installed composition: Address records can be looked up while preparing recipients.")
     elif lookup_available:
         limitations.append("Address lookup is configured, but recipient inspection is not included in your current Campaign tasks.")
     else:
         limitations.append("Connected address lookup is not available in the current composition.")
-    if source_available and _has_scope(principal, "campaigns:recipient:import"):
+    can_import_source = _has_all_scopes(
-        configured.append("An authorized address source can be copied into a campaign as a traceable recipient snapshot.")
+        principal,
+        (
+            "campaigns:campaign:read",
+            "campaigns:campaign:update",
+            "campaigns:recipient:read",
+            "campaigns:recipient:write",
+            "campaigns:recipient:import",
+        ),
+    )
+    if source_available and can_import_source:
+        configured.append("Installed composition: The actor-filtered Addresses source picker can copy a selected source into a campaign as a traceable recipient snapshot.")
     elif source_available:
         limitations.append("Connected recipient sources are configured, but source import is not included in your current Campaign tasks.")
     else:
         limitations.append("Connected recipient-source snapshots are not available; direct campaign imports remain available when authorized.")
 
     if _integration_available(registry, _NOTIFICATIONS_INTEGRATION):
-        configured.append("In-app notifications can report important Campaign delivery status changes.")
+        configured.append("Installed composition: In-app notifications can report important Campaign delivery status changes.")
     else:
         limitations.append("Automatic in-app Campaign status notifications are not configured.")
 
@@ -599,7 +650,7 @@ def _append_if(
 ) -> None:
     allowed = _has_all_scopes(principal, scopes) if require_all else _has_any_scope(principal, scopes)
     if allowed:
-        target.append(text)
+        target.append(f"Role authorization: {text}")
 
 
 def _has_scope(principal: object, scope: str) -> bool:
@@ -650,6 +701,5 @@ def _registry_has_capability(registry: object, capability_name: str) -> bool:
 
 
 def _composition_body(current_configuration: list[str], limitations: list[str]) -> str:
-    configured_lines = "\n".join(f"- {item}" for item in current_configuration)
+    del current_configuration, limitations
-    limitation_lines = "\n".join(f"- {item}" for item in limitations)
+    return "The facts below are calculated for the current actor and installed module contracts. They do not bypass campaign ownership, sharing, state, or operation-time resource and policy checks."
-    return f"Available in your current Campaign workspace:\n{configured_lines}\n\nLimits that still apply:\n{limitation_lines}"

src/govoplan_campaign/backend/router.py

@@ -3264,10 +3264,11 @@ def send_campaign_now_endpoint(
 ):
     _get_campaign_for_principal(session, campaign_id, principal, write=True)
     _require_permission(principal, "campaigns:recipient:read")
-    """Validate/build/queue and synchronously send a small campaign version.
+    """Validate/build/queue and synchronously send every eligible job.
 
-    This endpoint is intentionally conservative and suitable for a first small
+    No server-side job-count bound is currently enforced. Ordinary batches
-    test campaign. Larger campaigns should use the queue/Celery flow.
+    must use the queue/Celery flow; this endpoint is for deliberately small
+    interactive runs.
     """
 
     payload = payload or SendCampaignNowRequest()

src/govoplan_campaign/backend/sending/jobs.py

@@ -544,10 +544,11 @@ def send_campaign_now(
     use_rate_limit: bool = True,
     enqueue_imap_task: bool = False,
 ) -> SendCampaignNowResult:
-    """Queue and send a small campaign synchronously.
+    """Queue and send all eligible jobs for one campaign synchronously.
 
-    This is intended for WebUI test/small-campaign flows. Large campaigns can
+    The service currently has no server-side job-count bound. Callers must use
-    still use queue_campaign_jobs with Celery workers.
+    the worker queue for ordinary batches and reserve this path for deliberately
+    small interactive runs.
     """
 
     campaign = _get_campaign_for_tenant(session, campaign_id=campaign_id, tenant_id=tenant_id)

tests/test_documentation.py

@@ -71,15 +71,15 @@ def test_runtime_documentation_reflects_actor_authority_without_exposing_scopes(
     )[0]
 
     configuration = topic.metadata["current_configuration"]
-    assert "Create new campaigns." in configuration
+    assert "Role authorization: Create new campaigns." in configuration
-    assert "Build exact recipient messages for review." in configuration
+    assert "Role authorization: Build exact recipient messages for review." in configuration
     assert not any("queue" in item.lower() for item in configuration)
     assert not any("campaigns:" in item or "files:" in item or "mail:" in item for item in configuration)
 
 
 def test_runtime_documentation_requires_both_interface_and_capability() -> None:
     integration = "mail.campaign_delivery"
-    scopes = {"campaigns:campaign:read", "mail:profile:use"}
+    scopes = {"campaigns:campaign:read", "campaigns:campaign:update", "mail:profile:use"}
 
     for registry in (
         _Registry(set(), interface_only={integration}),
@@ -88,10 +88,25 @@ def test_runtime_documentation_requires_both_interface_and_capability() -> None:
         topic = documentation_topics(
             DocumentationContext(registry=registry, principal=_Principal(frozenset(scopes)), documentation_type="user")
         )[0]
-        assert not any("selection is available" in item for item in topic.metadata["current_configuration"])
+        assert not any("profile picker" in item for item in topic.metadata["current_configuration"])
 
     topic = _topics(scopes, {integration})[0]
-    assert any("Mail profile selection is available" in item for item in topic.metadata["current_configuration"])
+    assert any("Mail's actor-filtered profile picker" in item for item in topic.metadata["current_configuration"])
+
+
+def test_mail_delivery_actions_are_not_presented_without_the_mail_contract() -> None:
+    scopes = {
+        "campaigns:campaign:read",
+        "campaigns:campaign:queue",
+        "campaigns:campaign:send",
+        "campaigns:campaign:retry",
+    }
+
+    without_mail = _topics(scopes)[0]
+    with_mail = _topics(scopes, {"mail.campaign_delivery"})[0]
+
+    assert not any("Queue an eligible" in item for item in without_mail.metadata["current_configuration"])
+    assert any("Queue an eligible" in item for item in with_mail.metadata["current_configuration"])
 
 
 @pytest.mark.parametrize(
@@ -109,7 +124,13 @@ def test_runtime_documentation_requires_both_interface_and_capability() -> None:
         ),
         (
             {"addresses.recipient_source"},
-            {"campaigns:campaign:read", "campaigns:recipient:import"},
+            {
+                "campaigns:campaign:read",
+                "campaigns:campaign:update",
+                "campaigns:recipient:read",
+                "campaigns:recipient:write",
+                "campaigns:recipient:import",
+            },
             "traceable recipient snapshot",
         ),
         (
@@ -147,7 +168,7 @@ def test_runtime_documentation_full_composition_uses_only_user_facing_names() ->
         )
     )
 
-    assert "Mail profile selection" in rendered
+    assert "Mail's actor-filtered profile picker" in rendered
     assert "Managed file versions" in rendered
     assert "Address records" in rendered
     assert "In-app notifications" in rendered
@@ -210,6 +231,7 @@ def test_campaign_manager_sees_only_authoring_tasks_from_the_static_handbook() -
     assert "campaigns.workflow.share-campaign" not in visible
     assert "campaigns.workflow.archive-campaign" not in visible
     assert "campaigns.workflow.delete-untouched-draft" not in visible
+    assert "campaigns.workflow.create-campaign" not in _visible_static_topics({"campaigns:campaign:create"})
 
 
 def test_sender_sees_queue_and_send_only_with_the_mail_contract_and_profile_authority() -> None:
@@ -273,7 +295,9 @@ def test_report_export_and_lifecycle_tasks_are_independently_permission_gated()
     exporter = _visible_static_topics(
         {
             "campaigns:campaign:read",
+            "campaigns:report:read",
             "campaigns:report:export",
+            "campaigns:recipient:read",
             "campaigns:recipient:export",
         }
     )
@@ -287,7 +311,7 @@ def test_report_export_and_lifecycle_tasks_are_independently_permission_gated()
     )
 
     assert "campaigns.workflow.export-delivery-report" in exporter
-    assert "campaigns.workflow.view-delivery-report" not in exporter
+    assert "campaigns.workflow.view-delivery-report" in exporter
     assert "campaigns.workflow.share-campaign" in custodian
     assert "campaigns.workflow.archive-campaign" in custodian
     assert "campaigns.workflow.delete-untouched-draft" in custodian