Walking skeleton tests

Black-box semantic acceptance tests go here. They must test properties rather than implementation call sequences.

Initial scenario IDs are defined in architecture/WALKING_SKELETON_SPEC.md.