From e0590a0397a3e7b32c1fb4ceecd4e714b52f2554 Mon Sep 17 00:00:00 2001 From: Kisa Date: Mon, 22 Jun 2026 08:17:11 -0400 Subject: [PATCH] =?UTF-8?q?docs:=20sync=20state=20=E2=80=94=20trust=20fixe?= =?UTF-8?q?s=20done,=20Phase=204=20spec'd,=20Shield=20competitor=20insight?= =?UTF-8?q?=20planted?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- CLAUDE.md | 13 +++++++------ context/current-state.md | 14 +++++++------- 2 files changed, 14 insertions(+), 13 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index 6594991..fe7ad8e 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -12,15 +12,16 @@ implying Signal contacts prescribers or patients directly. ## Current State (embedded — always in context) -**ACTIVE:** Build Spec Phase 2 DESIGNED — session-brain auto-write + insight extraction spec ready for Claude Code. -**NEXT:** Claude Code builds Phase 2 (modify navaigate-session-brain SKILL.md). Pi stands by for verification. +**ACTIVE:** Trust fixes applied + Phase 4 spec written + Shield competitor recon complete. +**NEXT:** Claude Code builds Phase 2 + Phase 4. Pi stands by for verification. **Open threads (at wrap-up):** -- LabABLE Meeting Fri 2026-06-26 1:30 PM — /pilot-prep. -- Build Spec Phase 2: Claude Code building now. Pi verifies after. -- TRUST FIXES STAGED: docs/compliance/privacy-policy.md (7yr→6yr, false BAA claim). Waiting Kisa go-ahead. -- 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override. +- LabABLE Meeting Fri 2026-06-26 1:30 PM — /pilot-prep (deferred). +- Build Spec Phase 2 + Phase 4: Claude Code to build. Pi verifies after. +- Shield competitor: Dash ComplyOps ($250/mo, horizontal compliance). Shield differentiator = DMEPOS vertical expertise. Insight planted in TriLane. +- 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code on these). +- Primary domain sttilsolutions.com still "Pending" in Clerk (non-blocking for auth). - Primary domain sttilsolutions.com still "Pending" in Clerk (non-blocking for auth). **At session START:** use this section for state. Then read `context/current-state.md` for the full shared state (decisions, stack details). diff --git a/context/current-state.md b/context/current-state.md index bd01eee..388a959 100644 --- a/context/current-state.md +++ b/context/current-state.md @@ -1,23 +1,23 @@ # current-state -ACTIVE: Build Spec Phase 2 DESIGNED — session-brain auto-write + insight extraction spec ready for Claude Code. -NEXT: Claude Code builds Phase 2 (modify navaigate-session-brain SKILL.md). Pi stands by for verification. +ACTIVE: Build Spec Phase 2 BUILT (Claude Code) — navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs live router source. +NEXT: Website comprehension + brand review (STTIL Solutions vs Signal) and a changes whitepaper, parallel to Pi designing next phases. Pi verifies Phase 2 live write-path at next real wrap-up. ## Decisions (last 5) +- 2026-06-22: Build Spec Phase 2 built (Claude Code). navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs router source; Pi verifies live write-path at next real wrap-up. - 2026-06-22: Trust-fix scope clarified. The LIVE privacy page (Privacy.jsx at /privacy) is ALREADY correct: 6-year retention plus the soft "a BAA may not be required" language. The false "executed BAA" claim and the 7-year retention number survive ONLY in the internal shareable doc docs/compliance/privacy-policy.md (lines 88, 76). Doc-only fix, no redeploy. Exact edits staged in Open Threads. - 2026-06-22: Clerk prod migration COMPLETE — frontend (pk_live on Vercel) + backend (CLERK_JWKS_URL → clerk.sttilsolutions.com on Railway) both deployed. DNS verified, JWKS serving. - 2026-06-21: Subagent cost guardrails installed — all 8 builtin subagents default to deepseek/deepseek-v4-flash with 2-5 min hard timeouts. - 2026-06-21: Audit logger trust fix committed + pushed (Supabase client detection, error wrapping). Cascade test assertion corrected. -- 2026-06-21: Build Spec Phase 1 done (Claude Code). research_insight category live. CGM-to-pharmacy insight planted. ## Open Threads (max 5) - LabABLE Meeting Fri 2026-06-26 1:30 PM — run /pilot-prep. -- Build Spec Phase 2: spec at signal/docs/superpowers/specs/2026-06-22-build-spec-phase2.md. Claude Code building now (modify navaigate-session-brain SKILL.md). Pi stands by for verification. -- TRUST FIXES STAGED (ready, awaiting Kisa go-ahead): docs/compliance/privacy-policy.md line 76 "7 years" becomes "a minimum of 6 years, consistent with 45 CFR §164.530(j)"; HIPAA section (lines 86-90) replace the "has executed a BAA" paragraph with the live-page posture ("designed so the data is not PHI"; "a BAA may not be required, consult your own compliance advisors"). Doc-only, no redeploy. Live Privacy.jsx already correct. +- Website review IN PROGRESS (Claude): comprehension/grammar/brand pass across sttilsolutions.com + a whitepaper on STTIL-Solutions-vs-Signal copy fixes. Parallel to Pi's next-phase design. +- Build Spec Phase 2 BUILT (Steps 3B/3C in navaigate-session-brain). Live write-path verification pending next real wrap-up (Pi's window). +- TRUST FIXES STAGED (ready, awaiting Kisa go-ahead): docs/compliance/privacy-policy.md line 76 "7 years" becomes "a minimum of 6 years, consistent with 45 CFR §164.530(j)"; HIPAA section (lines 86-90) replace the "has executed a BAA" paragraph with the live-page posture. Doc-only, no redeploy. Live Privacy.jsx already correct. - 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code is on these). -- Primary domain sttilsolutions.com still "Pending" in Clerk (separate from Frontend API — non-blocking for auth). ## Stack @@ -33,4 +33,4 @@ NEXT: Claude Code builds Phase 2 (modify navaigate-session-brain SKILL.md). Pi TriLane Memory now has the `research_insight` category live + 1 planted insight (CGM-to-pharmacy, salience 1.0) in the Signal workspace. Session summaries no longer leak into the Signal workspace; they live in the Sessions workspace. -## Updated: 2026-06-22 (Pi: Clerk migration done, Phase 2 spec written. Claude Code: trust-fix nugget captured pre-cache-clear; building Phase 2 next.) +## Updated: 2026-06-22 (Claude Code: Phase 2 built + verified vs TriLane source; started website review + STTIL-vs-Signal whitepaper. Pi: designing next phases.)