sttil/Signal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: sync current-state — trust fixes done, Phase 4 spec'd, Shield recon done, Phase 2 built (Claude)

Browse source
This commit is contained in:
Kisa 2026-06-22 09:01:34 -04:00
parent 96cbedbf77
commit e2a59ae7a0
2 changed files with 18 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
CLAUDE.md
View file

@ -12,17 +12,16 @@ implying Signal contacts prescribers or patients directly.
## Current State (embedded — always in context) ## Current State (embedded — always in context)
**ACTIVE:** Trust fixes applied + Phase 4 spec written + Shield competitor recon complete. **ACTIVE:** Claude Code built Phase 2 (verified). Pi applied trust fixes, wrote Phase 4 spec, completed Shield competitor recon.
**NEXT:** Claude Code builds Phase 2 + Phase 4. Pi stands by for verification. **NEXT:** Pi designs Shield architecture (standalone compliance product). Claude Code on website review + whitepaper + Phase 2 verification.
**Open threads (at wrap-up):** **Open threads (at wrap-up):**
- LabABLE Meeting Fri 2026-06-26 1:30 PM — /pilot-prep (deferred). - LabABLE Meeting Fri 2026-06-26 1:30 PM — /pilot-prep (deferred).
- Build Spec Phase 2 + Phase 4: Claude Code to build. Pi verifies after. - Build Spec Phase 2 BUILT — auto-write + insight extraction in session brain. Pi verifies live write-path at next wrap-up.
- Shield competitor: Dash ComplyOps ($250/mo, horizontal compliance). Shield is standalone compliance product (not DMEPOS-specific). Differentiator: simplicity + optional Signal bundling for DMEPOS suppliers. Insight corrected in TriLane. - Build Spec Phase 4 spec written by Pi (gen-api-ref.py + manual cross-ref). Ready for Claude Code build.
- Shield architecture: Pi designing now. Competitor recon done (Dash ComplyOps, Vanta/Drata/Secureframe tiers).
- 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code on these). - 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code on these).
- Primary domain sttilsolutions.com still "Pending" in Clerk (non-blocking for auth).
- Primary domain sttilsolutions.com still "Pending" in Clerk (non-blocking for auth).
**At session START:** use this section for state. Then read `context/current-state.md` for the full shared state (decisions, stack details). **At session START:** use this section for state. Then read `context/current-state.md` for the full shared state (decisions, stack details).
**At WRAP-UP:** update this section AND `context/current-state.md` (keep both in sync). **At WRAP-UP:** update this section AND `context/current-state.md` (keep both in sync).

24
context/current-state.md
View file

@ -1,23 +1,25 @@
# current-state # current-state
ACTIVE: Build Spec Phase 2 BUILT (Claude Code) — navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs live router source. ACTIVE: Claude Code built Phase 2 (verified). Pi applied trust fixes, wrote Phase 4 spec, completed Shield competitor recon.
NEXT: Website comprehension + brand review (STTIL Solutions vs Signal) and a changes whitepaper, parallel to Pi designing next phases. Pi verifies Phase 2 live write-path at next real wrap-up. NEXT: Pi designs Shield architecture (standalone compliance product). Claude Code on website review + whitepaper (agent-ready scan done: Level 4 / 64; Pi handoff at signal/docs/agent-ready-ecosystem-handoff-2026-06-22.md) + Phase 2 verification.
## Decisions (last 5) ## Decisions (last 5)
- 2026-06-22: Build Spec Phase 2 built (Claude Code). navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs router source; Pi verifies live write-path at next real wrap-up. - 2026-06-22: TRUST FIXES APPLIED by Pi — privacy-policy.md: 7yr→6yr retention (45 CFR §164.530(j)), false BAA claim replaced with live posture. Doc-only, no redeploy.
- 2026-06-22: Trust-fix scope clarified. The LIVE privacy page (Privacy.jsx at /privacy) is ALREADY correct: 6-year retention plus the soft "a BAA may not be required" language. The false "executed BAA" claim and the 7-year retention number survive ONLY in the internal shareable doc docs/compliance/privacy-policy.md (lines 88, 76). Doc-only fix, no redeploy. Exact edits staged in Open Threads. - 2026-06-22: Phase 4 (support bot foundation) spec written by Pi — gen-api-ref.py + manual cross-reference. Ready for Claude Code build.
- 2026-06-22: Clerk prod migration COMPLETE — frontend (pk_live on Vercel) + backend (CLERK_JWKS_URL → clerk.sttilsolutions.com on Railway) both deployed. DNS verified, JWKS serving. - 2026-06-22: Shield competitor recon complete — Dash ComplyOps ($250/mo), Vanta/Drata/Secureframe ($7.5K-$100K+/yr). Shield positioned as standalone compliance (not DMEPOS). TriLane insights planted + corrected.
- 2026-06-22: Build Spec Phase 2 built (Claude Code). navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs router source.
- 2026-06-22: Clerk prod migration COMPLETE — frontend (pk_live on Vercel) + backend (CLERK_JWKS_URL → clerk.sttilsolutions.com on Railway) both deployed.
- 2026-06-21: Subagent cost guardrails installed — all 8 builtin subagents default to deepseek/deepseek-v4-flash with 2-5 min hard timeouts. - 2026-06-21: Subagent cost guardrails installed — all 8 builtin subagents default to deepseek/deepseek-v4-flash with 2-5 min hard timeouts.
- 2026-06-21: Audit logger trust fix committed + pushed (Supabase client detection, error wrapping). Cascade test assertion corrected. - 2026-06-21: Audit logger trust fix committed + pushed (Supabase client detection, error wrapping). Cascade test assertion corrected.
## Open Threads (max 5) ## Open Threads (max 5)
- LabABLE Meeting Fri 2026-06-26 1:30 PM — run /pilot-prep. - LabABLE Meeting Fri 2026-06-26 1:30 PM — /pilot-prep (deferred).
- Website review IN PROGRESS (Claude): comprehension/grammar/brand pass across sttilsolutions.com + a whitepaper on STTIL-Solutions-vs-Signal copy fixes. Parallel to Pi's next-phase design. - Build Spec Phase 2 BUILT — auto-write + insight extraction in session brain. Live write-path pending Pi verification at next wrap-up.
- Build Spec Phase 2 BUILT (Steps 3B/3C in navaigate-session-brain). Live write-path verification pending next real wrap-up (Pi's window). - Build Spec Phase 4 spec written by Pi (gen-api-ref.py + manual cross-ref). Ready for Claude Code build.
- TRUST FIXES STAGED (ready, awaiting Kisa go-ahead): docs/compliance/privacy-policy.md line 76 "7 years" becomes "a minimum of 6 years, consistent with 45 CFR §164.530(j)"; HIPAA section (lines 86-90) replace the "has executed a BAA" paragraph with the live-page posture. Doc-only, no redeploy. Live Privacy.jsx already correct. - Shield architecture: Pi designing now. Competitor recon done (Dash ComplyOps, Vanta/Drata/Secureframe tiers).
- 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code is on these). - 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code on these).
## Stack ## Stack
@ -33,4 +35,4 @@ NEXT: Website comprehension + brand review (STTIL Solutions vs Signal) and a ch
TriLane Memory now has the `research_insight` category live + 1 planted insight (CGM-to-pharmacy, salience 1.0) in the Signal workspace. Session summaries no longer leak into the Signal workspace; they live in the Sessions workspace. TriLane Memory now has the `research_insight` category live + 1 planted insight (CGM-to-pharmacy, salience 1.0) in the Signal workspace. Session summaries no longer leak into the Signal workspace; they live in the Sessions workspace.
## Updated: 2026-06-22 (Claude Code: Phase 2 built + verified vs TriLane source; started website review + STTIL-vs-Signal whitepaper. Pi: designing next phases.) ## Updated: 2026-06-22 (Claude Code: Phase 2 built + verified. Pi: trust fixes applied, Phase 4 spec'd, Shield recon done. Next: Shield architecture design.)