2 Commits

Author	SHA1	Message	Date
Claude	38e9d02075	feat(dealix): close ALL 4 Tier-1 runtime gaps (Programs E, F, G, K, J) ... Program F — Multi-Tenancy RLS (Row-Level Security): alembic 20260417_0002_add_rls.py: Enables RLS on 23 tenant-scoped tables. database_rls.py: set_tenant_context() helpers for SET LOCAL app.tenant_id. middleware/tenant_rls.py: Extracts tenant_id from JWT on every request. Default-deny when no context. PostgreSQL only (CI safe on SQLite). Result: OWASP A01:2025 — access control enforced at DB layer. Program G — Idempotency Standard: models/idempotency_key.py: IdempotencyKey table with TTL + SHA256 hash. services/idempotency_service.py: get_existing/store with request fingerprint. middleware/idempotency.py: HTTP middleware on POST/PUT/PATCH. Result: Duplicate side effects prevented on retry. Program E — Persistent Durable Execution: models/durable_checkpoint.py: DurableCheckpoint with sequence_num + status. services/durable_runtime.py: start_run/checkpoint/complete/resume/list_incomplete. Result: Workflows survive crashes — resume from last persisted checkpoint. Program K — OpenTelemetry: observability/otel.py: init/span/inject_correlation_id with graceful degradation when OTel packages absent. openclaw/gateway.py: Wraps execute() in span, binds correlation_id to trace_id. Bridge between business correlation and production observability. Program J — Release Gate Hardening: docs/governance/release-gates.md: Documents 3 mandatory gates. .github/workflows/dealix-ci.yml: Adds release_readiness_matrix as CI step. release_readiness_matrix.py: Updated to check 41/41 components. Verification: architecture_brief.py: 40/40 PASS release_readiness_matrix.py: 41/41 PASS https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs	2026-04-17 10:12:04 +00:00
Claude	11e0beb294	feat(dealix): wire ALL 17 schemas + Saudi workflow + release gate ... Structured Output Producers (structured_output_producers.py): Wire ALL 17 Pydantic schemas to live code: - LeadScoreCard: from real Lead model (score, tier, signals) - QualificationMemo: from lead score + deal data - ProposalPack: from real Deal model (value, terms) - PricingDecisionRecord: with discount approval logic - HandoffChecklist: sales-to-onboarding transition - PartnerDossier, EconomicsModel, ApprovalPacket: (golden path) - TargetProfile, ValuationMemo, SynergyModel: M&A track - ExpansionPlan, StopLossPolicy: expansion track - ExecWeeklyPack, BoardPackDraft, ICMemo, PMIProgramPlan: (executive) All with Provenance (trace_id, confidence, freshness). Structured Outputs API (POST /api/v1/structured-outputs/...): 11 endpoints exposing schema-bound producers. Saudi Sensitive Workflow (POST /api/v1/saudi-workflow/share-partner-data): Live PDPL-controlled partner data sharing workflow: 1. Data classification (internal/confidential/restricted) 2. PDPL consent verification 3. Cross-border export rules check (GCC allowed) 4. Class B+ approval with 12h SLA 5. Audit trail via domain events 6. Evidence pack auto-assembly Blocks if no consent or export restricted. Release Readiness Matrix (scripts/release_readiness_matrix.py): 26 checks covering governance + services + APIs + trust + sales. SCORE: 100.0% (26/26) = RELEASE READY: YES https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs	2026-04-17 06:27:15 +00:00