Signal/context/current-state.md

3.3 KiB

current-state

ACTIVE: Build Spec Phase 2 BUILT (Claude Code) — navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs live router source. NEXT: Website comprehension + brand review (STTIL Solutions vs Signal) and a changes whitepaper, parallel to Pi designing next phases. Pi verifies Phase 2 live write-path at next real wrap-up.

Decisions (last 5)

  • 2026-06-22: Build Spec Phase 2 built (Claude Code). navaigate-session-brain now auto-writes current-state.md (Step 3B) + extracts research insights to TriLane (Step 3C). POST contract verified vs router source; Pi verifies live write-path at next real wrap-up.
  • 2026-06-22: Trust-fix scope clarified. The LIVE privacy page (Privacy.jsx at /privacy) is ALREADY correct: 6-year retention plus the soft "a BAA may not be required" language. The false "executed BAA" claim and the 7-year retention number survive ONLY in the internal shareable doc docs/compliance/privacy-policy.md (lines 88, 76). Doc-only fix, no redeploy. Exact edits staged in Open Threads.
  • 2026-06-22: Clerk prod migration COMPLETE — frontend (pk_live on Vercel) + backend (CLERK_JWKS_URL → clerk.sttilsolutions.com on Railway) both deployed. DNS verified, JWKS serving.
  • 2026-06-21: Subagent cost guardrails installed — all 8 builtin subagents default to deepseek/deepseek-v4-flash with 2-5 min hard timeouts.
  • 2026-06-21: Audit logger trust fix committed + pushed (Supabase client detection, error wrapping). Cascade test assertion corrected.

Open Threads (max 5)

  • LabABLE Meeting Fri 2026-06-26 1:30 PM — run /pilot-prep.
  • Website review IN PROGRESS (Claude): comprehension/grammar/brand pass across sttilsolutions.com + a whitepaper on STTIL-Solutions-vs-Signal copy fixes. Parallel to Pi's next-phase design.
  • Build Spec Phase 2 BUILT (Steps 3B/3C in navaigate-session-brain). Live write-path verification pending next real wrap-up (Pi's window).
  • TRUST FIXES STAGED (ready, awaiting Kisa go-ahead): docs/compliance/privacy-policy.md line 76 "7 years" becomes "a minimum of 6 years, consistent with 45 CFR §164.530(j)"; HIPAA section (lines 86-90) replace the "has executed a BAA" paragraph with the live-page posture. Doc-only, no redeploy. Live Privacy.jsx already correct.
  • 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override (Claude Code is on these).

Stack

  • Signal: PHI contained in patient_id field (name, MRN, account #s) — requires tokenization.
  • Model for Pi: deepseek/deepseek-v4-flash (cheap, high-thinking). Subagents also default to this model.
  • Signal-api: Railway (signal-api-production-91c2)
  • Signal-ui: Vercel (signal-ui-xi.vercel.app)
  • Supabase: itmospnregdyiatbbdwl (JWT key)
  • TriLane: localhost:8000 (signal/sessions/scale-software workspaces)
  • Clerk: production key deployed to Vercel + Railway. Frontend auth via clerk.sttilsolutions.com (verified). Google OAuth configured.

Tip

TriLane Memory now has the research_insight category live + 1 planted insight (CGM-to-pharmacy, salience 1.0) in the Signal workspace. Session summaries no longer leak into the Signal workspace; they live in the Sessions workspace.

Updated: 2026-06-22 (Claude Code: Phase 2 built + verified vs TriLane source; started website review + STTIL-vs-Signal whitepaper. Pi: designing next phases.)