- Move heavy service/model imports inside methods to avoid module-level
import chains that could fail during pytest collection
(saudi_compliance_matrix, contradiction_engine, StrategicDeal, EvidencePack)
- Remove unused import (list_integration_connectors) from connector_governance API
- Fix StrategicDeal.status query: use notin_(closed_won/closed_lost) instead
of == "active" which is not a valid DealStatus enum value
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
Sprint A — Executive Room real data:
Rewrote executive_roi_service.py (20→158 lines) to aggregate from 7 live
services: deals (revenue/pipeline/win_rate), approval SLA (pending/warning/
breach from _dealix_sla), connector health (IntegrationSyncState), compliance
posture (saudi_compliance_matrix), contradictions (contradiction_engine),
strategic deals, evidence packs.
Sprint B — Approval Center live:
Wired approval_center.py to query real ApprovalRequest table with SLA data
from payload["_dealix_sla"]. Approve/reject endpoints update real DB records
with reviewed_at timestamp.
Sprint C — Saudi Compliance live:
Wired saudi_compliance.py to call saudi_compliance_matrix service methods
(get_matrix, get_posture, get_risk_heatmap) with real AsyncSession + tenant_id.
Sprint D — Contradiction + Evidence Pack DB:
Wired contradiction.py and evidence_packs.py to real database via
contradiction_engine and evidence_pack_service. All CRUD operations
now persist to PostgreSQL with proper tenant isolation.
Sprint F — Operating Plane:
Created CODEOWNERS file mapping sensitive paths to @VoXc2.
Added architecture_brief.py step to CI pipeline (runs before pytest).
Sprint G — OWASP LLM:
Added OWASP LLM Top 10 review + architecture brief validation to
release-prep.md (steps 10-11).
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
