36 lines
3.1 KiB
Markdown
36 lines
3.1 KiB
Markdown
# current-state
|
|
|
|
ACTIVE: Build Spec Phase 2 DESIGNED — session-brain auto-write + insight extraction spec ready for Claude Code.
|
|
NEXT: Claude Code builds Phase 2 (modify navaigate-session-brain SKILL.md). Pi stands by for verification.
|
|
|
|
## Decisions (last 5)
|
|
|
|
- 2026-06-22: Trust-fix scope clarified. The LIVE privacy page (Privacy.jsx at /privacy) is ALREADY correct: 6-year retention plus the soft "a BAA may not be required" language. The false "executed BAA" claim and the 7-year retention number survive ONLY in the internal shareable doc docs/compliance/privacy-policy.md (lines 88, 76). Doc-only fix, no redeploy. Exact edits staged in Open Threads.
|
|
- 2026-06-22: Clerk prod migration COMPLETE — frontend (pk_live on Vercel) + backend (CLERK_JWKS_URL → clerk.sttilsolutions.com on Railway) both deployed. DNS verified, JWKS serving.
|
|
- 2026-06-21: Subagent cost guardrails installed — all 8 builtin subagents default to deepseek/deepseek-v4-flash with 2-5 min hard timeouts.
|
|
- 2026-06-21: Audit logger trust fix committed + pushed (Supabase client detection, error wrapping). Cascade test assertion corrected.
|
|
- 2026-06-21: Build Spec Phase 1 done (Claude Code). research_insight category live. CGM-to-pharmacy insight planted.
|
|
|
|
## Open Threads (max 5)
|
|
|
|
- LabABLE Meeting Fri 2026-06-26 1:30 PM — run /pilot-prep.
|
|
- Build Spec Phase 2: spec at signal/docs/superpowers/specs/2026-06-22-build-spec-phase2.md. Claude Code building now (modify navaigate-session-brain SKILL.md). Pi stands by for verification.
|
|
- TRUST FIXES STAGED (ready, awaiting Kisa go-ahead): docs/compliance/privacy-policy.md line 76 "7 years" becomes "a minimum of 6 years, consistent with 45 CFR §164.530(j)"; HIPAA section (lines 86-90) replace the "has executed a BAA" paragraph with the live-page posture ("designed so the data is not PHI"; "a BAA may not be required, consult your own compliance advisors"). Doc-only, no redeploy. Live Privacy.jsx already correct.
|
|
- 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code is on these).
|
|
- Primary domain sttilsolutions.com still "Pending" in Clerk (separate from Frontend API — non-blocking for auth).
|
|
|
|
## Stack
|
|
|
|
- Signal: PHI contained in `patient_id` field (name, MRN, account #s) — requires tokenization.
|
|
- Model for Pi: `deepseek/deepseek-v4-flash` (cheap, high-thinking). Subagents also default to this model.
|
|
- Signal-api: Railway (signal-api-production-91c2)
|
|
- Signal-ui: Vercel (signal-ui-xi.vercel.app)
|
|
- Supabase: itmospnregdyiatbbdwl (JWT key)
|
|
- TriLane: localhost:8000 (signal/sessions/scale-software workspaces)
|
|
- Clerk: production key deployed to Vercel + Railway. Frontend auth via `clerk.sttilsolutions.com` (verified). Google OAuth configured.
|
|
|
|
## Tip
|
|
|
|
TriLane Memory now has the `research_insight` category live + 1 planted insight (CGM-to-pharmacy, salience 1.0) in the Signal workspace. Session summaries no longer leak into the Signal workspace; they live in the Sessions workspace.
|
|
|
|
## Updated: 2026-06-22 (Pi: Clerk migration done, Phase 2 spec written. Claude Code: trust-fix nugget captured pre-cache-clear; building Phase 2 next.)
|