curo1305
c11984c66c
docs(phase-06): update tracking after wave 0 — 06-01 complete
2026-06-03 18:41:46 +02:00
curo1305
3e3f980466
docs(06-01): complete Wave 0 Nyquist scaffold plan summary
...
- 13 xfail stubs: 5 for D-01/D-02 (logging), 8 for D-11/D-12+A1 (rate limiting)
- load_tests package skeleton (D-04/D-05/D-06) excluded from pytest
- Package legitimacy decisions recorded (structlog + locust both approved)
- Full suite: 344 passed, 20 xfailed, 1 pre-existing failure, 0 regressions
2026-06-03 18:39:21 +02:00
curo1305 and Claude Sonnet 4.6
bdd784341f
wip: phase 7 planning paused — ready to execute
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-03 18:34:49 +02:00
curo1305 and Claude Sonnet 4.6
3df62506c9
docs(07): create phase plan — 5 plans, verification passed
...
5 waves: system_settings DB + HKDF encryption (01), ProviderConfig +
GenericOpenAIProvider + singleton client fix (02), Anthropic output_config +
classifier wiring (03), Celery retry 30/90/270s + re-queue endpoint (04),
admin AI panel + DocumentCard badge + human checkpoint (05).
All 18 decisions D-01..D-18 covered. Plan checker passed after 1 revision
round (4 blockers fixed: D-02/D-14 coverage, D-11 Vitest tests, Plan 05
files_modified).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-03 18:25:00 +02:00
curo1305 and Claude Sonnet 4.6
6c8e0d8bde
docs(07): research phase — Anthropic output_config, client singleton pattern, Celery retry, system_settings design
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-02 20:41:03 +02:00
curo1305 and Claude Sonnet 4.6
70c09f6cd4
docs(06): create phase 6 plan — performance & production hardening
...
6 plans across 4 waves covering structlog/Loki observability, Locust
load testing, multi-stage Dockerfile hardening, trusted-proxy rate
limiting, and RUNBOOK.md. Verification passed (0 blockers).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-02 20:35:03 +02:00
curo1305
b7503cdff4
docs(state): record phase 7 context session
2026-06-02 20:24:12 +02:00
curo1305
b8d128ee5e
docs(07): capture phase context
2026-06-02 20:24:08 +02:00
curo1305
ad237dbaf1
docs(06): research phase — structlog, Locust, container hardening, per-account rate limiting
2026-06-02 16:34:02 +02:00
curo1305 and Claude Sonnet 4.6
eaa3399ec0
docs: add shared module map to CLAUDE.md, SECURITY.md, planning artifacts
...
- CLAUDE.md: add Code Standards section with backend and frontend shared
module maps, component architecture rules, duplication checklist, and
no-dead-code enforcement rule
- SECURITY.md: Phase 02 + 03 security audit results (all threats CLOSED)
- .planning: update milestone audit, config, and add plan/UAT files for
phases 01, 02-06, and 06.2-05
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-02 16:10:59 +02:00
curo1305 and Claude Sonnet 4.6
89f8d5a654
docs(codebase): refresh codebase map after Phase 06.2 completion
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-02 15:32:06 +02:00
curo1305 and Claude Sonnet 4.6
bd17b4b22f
docs(06.2): mark phase 6.2 complete — all gates passed
...
UAT complete (7/7 re-tests passed or skipped with reason), security gate
passed (threats_open: 0), 344 backend tests passing.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 21:09:04 +02:00
curo1305 and Claude Sonnet 4.6
52e54b859a
docs(phase-04): update validation strategy — 1 gap resolved, suite green
...
Audit 2026-06-01: test_daily_export_download was returning 404 because
the mock_backend failed the isinstance(backend, MinIOBackend) check.
Fixed. 87 passed, 4 xfailed, 0 failed.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 18:14:59 +02:00
curo1305
bfcc09958c
docs(phase-04): add security threat verification — 41/41 threats closed
2026-06-01 18:05:49 +02:00
curo1305 and Claude Sonnet 4.6
a3f9e701d8
docs(phase-03): update validation strategy — 4 gaps resolved, STORE-06 promoted from manual-only
...
Validation audit 2026-06-01: fix UUID format mismatch resolved 3 PARTIAL tests
(test_confirm_endpoint, test_quota_increment_atomic, test_quota_exceeded_response)
and promoted test_delete_decrements_quota (STORE-06) from manual-only to green.
Suite now 53 passed, 0 failed. Phase 3 fully Nyquist-compliant.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 15:43:07 +02:00
curo1305
908bd9d4e3
docs(phase-03): add security threat verification — 27/27 threats closed
2026-06-01 15:30:52 +02:00
curo1305 and Claude Sonnet 4.6
a89ed65be9
docs(phase-02): update validation strategy with plan 06 coverage
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 15:17:29 +02:00
curo1305 and Claude Sonnet 4.6
da526cb727
docs(02): add security threat verification — 43/43 threats closed
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 14:55:15 +02:00
curo1305
cd3d1d528c
docs(06.2): add code review fix report
2026-06-01 14:38:59 +02:00
curo1305
8601a02189
docs(02): update verification report after plan 06 gap closure — 2 security blockers flagged
2026-06-01 14:37:23 +02:00
curo1305
a6c227cc7e
merge(06.2): integrate code review fixes from gsd-reviewfix/06.2-2490
2026-06-01 14:37:21 +02:00
curo1305
1433273328
docs(06.2): update review status after fixes — all 15 CR/WR findings resolved
2026-06-01 14:33:41 +02:00
curo1305
fdb18300d9
docs(02): add code review report for plan 06 gap closure
2026-06-01 14:31:21 +02:00
curo1305
5093aa5630
docs(phase-02): update tracking after plan 06 gap closure — 6/6 plans complete
2026-06-01 14:24:46 +02:00
curo1305
7e549b6312
docs(02-06): complete UAT gap closure plan summary
...
- SUMMARY.md for plan 02-06 (5 UAT gaps closed)
- Backend fix verified; frontend auth layout, admin guard, Account tab, QR code implemented
2026-05-31 20:41:36 +02:00
curo1305
97314ce486
docs(06.2): add code review report
2026-05-31 20:38:59 +02:00
curo1305
579c8366e9
docs(06.2): update phase verification report after plan-05 gap closure
2026-05-31 20:30:43 +02:00
curo1305
b2488c91c8
docs(02): add root causes from diagnosis
2026-05-31 20:28:57 +02:00
curo1305
52d6efb8a2
docs(06.2): add code review report
2026-05-31 20:23:32 +02:00
curo1305 and Claude Sonnet 4.6
33697f2713
test(02): complete UAT — 10 passed, 6 issues, 2 blocked
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 20:21:16 +02:00
curo1305
8cc46a8d8d
docs(phase-06.2): resolve UAT gaps after 06.2-05 gap closure
2026-05-31 20:16:43 +02:00
curo1305
c3c7030e91
docs(phase-06.2): update tracking after wave 3 — all 5 plans complete
2026-05-31 20:16:08 +02:00
curo1305
e30401ddff
docs(06.2-05): complete plan summary — 4 UAT gaps closed
...
- Task 1: @handle in AccountView + AdminUsersTab
- Task 2: actionable cloud error (Settings link) + audit log @ prefix
- Task 3: clearFilters() + activeFilterCount + Clear filters button + filter count badge
2026-05-31 20:12:27 +02:00
curo1305
6307d9dd86
test(06.2): update UAT with root cause diagnoses for all 4 gaps
2026-05-31 20:01:56 +02:00
curo1305
1d8c7dba91
test(06.2): complete UAT — 3 passed, 4 issues, 2 skipped, 2 blocked
2026-05-31 16:10:54 +02:00
curo1305 and Claude Sonnet 4.6
77263bd569
docs(phase-06.2): mark validation strategy nyquist-compliant
...
All 11 Wave 0 test stubs verified green (50 passed, 4 xfailed).
Updated per-task map, wave 0 checklist, sign-off, and audit trail.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 15:44:25 +02:00
curo1305 and Claude Sonnet 4.6
73b180ac9d
docs(phase-06.2): add security threat verification report
...
16/16 threats CLOSED — mitigate dispositions verified in code with exact file:line citations.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 15:41:33 +02:00
curo1305
f037d2be45
docs(06.2): add phase verification report
2026-05-31 15:36:08 +02:00
curo1305
758d1a687e
docs(06.2): add code review report
2026-05-31 15:29:57 +02:00
curo1305
abb964531f
docs(phase-06.2): update tracking after wave 2 — plan 06.2-04 complete
2026-05-31 15:24:44 +02:00
curo1305
46f7505e36
chore: merge executor worktree (worktree-agent-af66944050628b0e4)
2026-05-31 15:23:36 +02:00
curo1305
893da5b9ba
docs(06.2-04): complete ADMIN-06 audit enrichment + daily exports — 10 tests pass
...
- Handle-enriched audit log (user_handle, actor_handle via aliased double-JOIN)
- user_handle filter with handle-to-UUID resolution, empty result for unknown handles
- fetch+Blob CSV export replacing window.location.href (T-06.2-04-03)
- GET /audit-log/daily-exports and /daily-exports/{date} with date regex validation
- Daily exports section in AuditLogTab with date dropdown + Download button
- Full audit test suite: 10 passed; backend suite: 337 passed, 1 pre-existing failure
2026-05-31 15:22:46 +02:00
curo1305 and Claude Sonnet 4.6
f176235ee8
docs(phase-04): update VALIDATION.md — Nyquist-compliant (all gaps resolved)
...
Mark nyquist_compliant: true. All 22 tasks now have automated coverage.
4 gaps resolved: FOLD-04 sort, FOLD-05 FTS, SEC-08 credentials_enc, SEC-09
MinIO cleanup. 1 impl bug logged and fixed (FTS try/except misplacement).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 15:21:08 +02:00
curo1305 and Claude Sonnet 4.6
eab5f124f6
docs(06.2-03): complete cloud-delete gap closure — 24 tests pass
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 15:11:51 +02:00
curo1305 and Claude Sonnet 4.6
e812922a26
docs(06.2-02): complete SHARE-05 + SHARE-03 gap closure — 12 tests pass
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 15:07:26 +02:00
curo1305 and Claude Sonnet 4.6
3cc4a5335d
docs(phase-03): update VALIDATION.md — Nyquist-compliant (partial)
...
15 automated tests green, 4 manual-only (PostgreSQL/migration infra).
Added 4 previously unlisted passing tests to task map (D-15, D-16, D-09×2).
Audit trail appended. Status: nyquist_compliant: true, status: partial.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 15:07:23 +02:00
curo1305 and Claude Sonnet 4.6
7e62868fea
docs(phase-02): add VALIDATION.md — Nyquist-compliant, all 24 tasks mapped, 4 manual-only
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 12:04:28 +02:00
curo1305
21fde406e7
docs(06.2-01): complete Wave 0 Nyquist scaffold — 11 xfail stubs across 3 test files
...
- 3 stubs in test_shares.py (SHARE-03 permission field, PATCH, IDOR)
- 3 stubs in test_documents.py (cloud delete propagation, failure, remove_only)
- 5 stubs in test_audit.py (handle enrichment, handle filter x2, daily exports x2)
- All 11 reported as XFAIL; full 3-file suite: 35 passed, 15 xfailed, exits 0
2026-05-31 11:58:58 +02:00
curo1305 and Claude Sonnet 4.6
708fd7fad0
docs(phase-6.2): record planning complete — 4 plans verified, state updated
...
- ROADMAP.md: progress table → Planned; wave annotations already added by planner
- STATE.md: phase 6.2 row → Planned (4 plans, 3 waves); session note added
- 06.2-03-PLAN.md: remove incorrect SHARE-03/SHARE-05 from requirements field
- 06.2-RESEARCH.md: mark Open Questions section as RESOLVED
- 06.2-UI-SPEC.md: add to version control (was untracked)
Verification: 0 blockers, 2 cosmetic warnings fixed.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 11:41:32 +02:00
curo1305 and Claude Sonnet 4.6
4adc77d8cc
docs(06.2): create 4-plan phase covering SHARE-03, SHARE-05, cloud-delete, ADMIN-06
...
Wave 0: 11 xfail stubs across test_shares/test_documents/test_audit
Wave 1 (parallel): SHARE-05 badge + SHARE-03 permission control; cloud-delete propagation
Wave 2: audit handle enrichment, user_handle filter, CSV fetch+Blob, daily-export UI
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-31 11:36:33 +02:00