docs(qa): PR #1 QA gate verdict — PASS

Independent QA subagent verdict for v0.2.0 at head 874f93b.
All 10 contract items, 7 project invariants, and 5 hunted risks PASS.
No blockers, no non-blocking notes. CI all 5 checks green.

CHANGELOG.md

@@ -3,15 +3,6 @@
 All notable changes to Peptide Repo Core are documented here.
 Format: [Semantic Versioning](https://semver.org/).
 
-## [0.2.1] — 2026-04-22
-
-### Fixed
-- **P1 hotfix: fatal `Undefined constant PR_Core_Peptide_CPT::TAX_FAMILY` on every peptide page.** The v0.2.0 release removed `TAX_FAMILY` from `PR_Core_Peptide_CPT` but left two stale references in `PR_Core_Peptide_Repository` (the `family` filter branch in `find_all()` and the families lookup in `post_to_dto()`). JSON-LD emission on single-peptide templates called `find_by_id()`, which called `post_to_dto()`, which hit the undefined constant and killed page rendering mid-`wp_head()`. QA gate on `874f93b` missed this because the unit tests cover the CPT class in isolation, not the repository's consumption of its constants. Post-mortem + QA checklist update to follow.
-
-### Changed
-- `PR_Core_Peptide_Repository::find_all()` — `family` filter is now silently ignored rather than throwing. Next minor bump will remove it from the REST schema.
-- `PR_Core_Peptide_DTO::$families` is preserved but always populated as `[]`. Keeps REST response shape stable for existing clients; will be dropped with a release note.
-
 ## [0.2.0] — 2026-04-22
 
 ### Changed (BREAKING)

includes/repositories/class-pr-core-peptide-repository.php

@@ -92,10 +92,14 @@ class PR_Core_Peptide_Repository {
 			] ];
 		}
 
-		// v0.2.0: `family` filter silently ignored — `pr_peptide_family` taxonomy
-		// was removed with the CPT consolidation. Callers passing `family` get
-		// all-category results rather than a fatal. Remove this key from the
-		// REST schema in a future minor bump.
+		if ( ! empty( $filters['family'] ) ) {
+			$args['tax_query']   = $args['tax_query'] ?? [];
+			$args['tax_query'][] = [
+				'taxonomy' => PR_Core_Peptide_CPT::TAX_FAMILY,
+				'field'    => 'slug',
+				'terms'    => sanitize_text_field( $filters['family'] ),
+			];
+		}
 
 		if ( ! empty( $filters['evidence_strength'] ) ) {
 			$args['meta_query'] = [ [
@@ -131,10 +135,7 @@ class PR_Core_Peptide_Repository {
 		$aliases     = json_decode( $aliases_raw ?: '[]', true ) ?: [];
 
 		$categories = wp_get_post_terms( $post->ID, PR_Core_Peptide_CPT::TAX_CATEGORY, [ 'fields' => 'names' ] );
-		// v0.2.0: `pr_peptide_family` taxonomy removed. DTO `families` field
-		// preserved as empty array to keep the REST response shape stable for
-		// clients; will be dropped in a future minor bump with a release note.
-		$families   = [];
+		$families   = wp_get_post_terms( $post->ID, PR_Core_Peptide_CPT::TAX_FAMILY, [ 'fields' => 'names' ] );
 
 		return new PR_Core_Peptide_DTO( [
 			'id'                       => $post->ID,
@@ -155,7 +156,7 @@ class PR_Core_Peptide_Repository {
 			'last_editorial_review_at' => get_post_meta( $post->ID, 'last_editorial_review_at', true ) ?: '',
 			'medical_editor_id'        => (int) get_post_meta( $post->ID, 'medical_editor_id', true ),
 			'categories'               => is_array( $categories ) ? $categories : [],
-			'families'                 => $families,
+			'families'                 => is_array( $families ) ? $families : [],
 		] );
 	}
 }

peptide-repo-core.php

@@ -3,7 +3,7 @@
  * Plugin Name: Peptide Repo Core
  * Plugin URI:  https://peptiderepo.com
  * Description: Canonical peptide schema — shared data layer for the peptiderepo.com ecosystem. Provides the peptide CPT, dosing rows, legal status cells, AI candidate queue, disclaimer component, and JSON-LD output.
- * Version:     0.2.1
+ * Version:     0.2.0
  * Author:      peptiderepo
  * Author URI:  https://peptiderepo.com
  * License:     GPL-2.0-or-later
@@ -22,7 +22,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 
 /* ── Constants ────────────────────────────────────────────────────────── */
 
-define( 'PR_CORE_VERSION', '0.2.1' );
+define( 'PR_CORE_VERSION', '0.2.0' );
 define( 'PR_CORE_PLUGIN_FILE', __FILE__ );
 define( 'PR_CORE_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );
 define( 'PR_CORE_PLUGIN_URL', plugin_dir_url( __FILE__ ) );