docs: AML scope note, human-blocked items, Task #11 pre-flight inventory

- Add AML scope note to Handoff - RN Multichain Probe (sanctions-only vs full KYT)
- Add human-blocked section with 3 precise next steps for owner
- Create Task 11 Pre-flight Inventory: library choice, dev/prod flow, admin UI gaps, backend gaps, risks, acceptance criteria

07 - Development/Testing.md

@@ -47,9 +47,9 @@ Both repos use **Jest** as the unit/integration runner. The frontend additionall
 There are also four large aggregate suites referenced in `package.json` (some may live in branches or be reintroduced as the codebase evolves):
 
 - `models.test.ts` — every Mongoose schema, validation, indexes, relationships
-- `payment-services.test.ts` — DePay, SHKeeper, Web3, admin operations
+- `request-network-adapter.test.ts`, `request-network-webhook.test.ts`, `rn-in-house-checkout.test.ts` — Request Network checkout and webhook behavior
+- `payment-ledger.service.test.ts`, `payment-release-refund-orchestration.test.ts` — ledger and release/refund behavior
 - `complete-backend.test.ts` — Auth, marketplace, chat, notification, address, user, file, email, AI
-- `shkeeper-backend.test.ts` — Service layer + API endpoints for SHKeeper
 
 ### Commands
 
@@ -61,11 +61,11 @@ npm run test:watch        # interactive watch mode
 npm run test:coverage     # also emit coverage report to ./coverage/
 npm run test:all          # explicit __tests__/ folder
 
-# Focused suites (each maps to a single file):
+# Focused suites:
 npm run test:models       # jest __tests__/models.test.ts
-npm run test:payment      # jest __tests__/payment-services.test.ts
 npm run test:complete     # jest __tests__/complete-backend.test.ts
-npm run test:shkeeper     # jest __tests__/shkeeper-backend.test.ts
+npm run test -- --testPathPattern=request-network
+npm run test -- --testPathPattern=payment-ledger
 ```
 
 Pass extra Jest flags after `--`:
@@ -101,7 +101,7 @@ describe('GET /api/health', () => {
 ```
 
 3. Use the in-memory DB — connections are wired in `setup.ts`. Each test starts with a clean collection.
-4. Mock outbound HTTP (SHKeeper, OpenAI) with `jest.spyOn(axios, 'post')`. Never hit a real provider from tests.
+4. Mock outbound HTTP (Request Network, OpenAI, AML providers) with `jest.spyOn(axios, 'post')` or a dedicated adapter mock. Never hit a real provider from tests.
 
 > [!warning] `maxWorkers: 1` makes tests serial. Don't introduce timing-sensitive parallelism — instead, keep individual tests small and deterministic.