Trust Enforcement:
approval_bridge.py: Class B actions now FAIL if missing _correlation_id.
This is the first real trust enforcement beyond policy classification —
external/sensitive actions cannot proceed without traceability.
Executive Room Contract:
GET /api/v1/executive-room/weekly-pack — returns ExecWeeklyPack
(structured output schema) as the CANONICAL executive data source.
Includes RAG status (red/amber/green), blockers, risk summary,
actual vs target, all with Provenance.
Auto Evidence Pack on Deal Close:
deals.py update_deal_stage() now auto-calls on_deal_closed() when
stage transitions to closed_won. Assembles evidence pack from deal
data + lead data + approval records with SHA256 hash.
deal_lifecycle_hooks.py: new service for deal lifecycle automation.
Sales Pack:
revenue-activation/sales-pack/ONE_PAGER.md — Arabic one-pager
revenue-activation/sales-pack/MARKETER_HUB.md — Internal marketer
reference with approved claims, forbidden claims, ICP, objection
handling, demo scripts, proof points, and asset library.
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
- Move heavy service/model imports inside methods to avoid module-level
import chains that could fail during pytest collection
(saudi_compliance_matrix, contradiction_engine, StrategicDeal, EvidencePack)
- Remove unused import (list_integration_connectors) from connector_governance API
- Fix StrategicDeal.status query: use notin_(closed_won/closed_lost) instead
of == "active" which is not a valid DealStatus enum value
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
Sprint A — Executive Room real data:
Rewrote executive_roi_service.py (20→158 lines) to aggregate from 7 live
services: deals (revenue/pipeline/win_rate), approval SLA (pending/warning/
breach from _dealix_sla), connector health (IntegrationSyncState), compliance
posture (saudi_compliance_matrix), contradictions (contradiction_engine),
strategic deals, evidence packs.
Sprint B — Approval Center live:
Wired approval_center.py to query real ApprovalRequest table with SLA data
from payload["_dealix_sla"]. Approve/reject endpoints update real DB records
with reviewed_at timestamp.
Sprint C — Saudi Compliance live:
Wired saudi_compliance.py to call saudi_compliance_matrix service methods
(get_matrix, get_posture, get_risk_heatmap) with real AsyncSession + tenant_id.
Sprint D — Contradiction + Evidence Pack DB:
Wired contradiction.py and evidence_packs.py to real database via
contradiction_engine and evidence_pack_service. All CRUD operations
now persist to PostgreSQL with proper tenant isolation.
Sprint F — Operating Plane:
Created CODEOWNERS file mapping sensitive paths to @VoXc2.
Added architecture_brief.py step to CI pipeline (runs before pytest).
Sprint G — OWASP LLM:
Added OWASP LLM Top 10 review + architecture brief validation to
release-prep.md (steps 10-11).
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
