system-prompts-and-models-o.../salesflow-saas/docs/registry/TRUTH.yaml
Claude 40ab7b86c2
feat(dealix): Phase 1 completion + Phase 2 foundation scaffolded
PHASE 1 COMPLETION:

TASK-005 — Live gitleaks scan:
  Scanned 146 commits with gitleaks v8.20.1
  Result: 1 finding — FALSE POSITIVE (model name llama-3.1-70b-versatile
    in test fixture, not an API key)
  Added to .gitleaksignore
  rotation_log.md updated with scan results
  VERDICT: No real secrets in git history — repo clean for extraction

TASK-006 — Legal templates (bilingual):
  docs/legal/templates/IP_ASSIGNMENT_AGREEMENT.md — bilingual IP assignment
  docs/legal/templates/PRIVACY_POLICY_EN.md — PDPL/GDPR-aware template
  docs/legal/templates/PRIVACY_POLICY_AR.md — Arabic privacy policy
  docs/legal/templates/TERMS_OF_SERVICE_EN.md — SaaS ToS with MENA pricing
  docs/legal/templates/DPA_EN.md — Data Processing Agreement with annexes
  All marked as "DRAFT — must be reviewed by Saudi counsel before use"

TASK-006 — Trademark Filing Kit:
  docs/legal/templates/TRADEMARK_FILING_KIT.md
  Covers: DEALIX (Latin) + ديلكس (Arabic) + logo
  Classes 9, 42, 35 across KSA, UAE, Egypt, Jordan, Kuwait
  Application text ready to paste into SAIP + equivalents
  Agent recommendations (AGIP, Saba, Bird & Bird, Al Tamimi)
  Budget: ~90-120K SAR for full MENA coverage

Founder Decision Package:
  FOUNDER_DECISION_PACKAGE.md — single file with 4 decisions:
    1. GitHub org name (recommend: dealix-io)
    2. Entity structure (MISA vs DIFC vs ADGM)
    3. Saudi counsel engagement (15-30K SAR)
    4. Trademark filing (30-50K SAR initial)
  Total founder time to unblock: ~1 week + ~50K SAR

PHASE 2 FOUNDATION:

DEALIX_PHASE2_BLUEPRINT.md — 18-month category leadership plan:
  10 parallel streams (Frontend, Product, AI, Enterprise, Integrations,
    Scale, Commercial, Customer Platform, Trust, Category POV)
  Executable NOW vs Requires External Services vs Wait-for-PMF
  Phase 2 completion criteria (NPS >=50, NRR >=120%, etc.)

TASK-F201 — Design System foundation (scaffolded):
  packages/design-system/tokens/primitive.json — W3C Design Tokens format:
    Brand palette (50-900), neutral (50-950), critical/warning/success/info
    Space, radius, motion (duration + easing) tokens
    Typography with Arabic fontFamily + arabic-adjustment (1.15) for size
    Arabic line-height (1.8) for diacritics
  packages/design-system/tokens/semantic.json — light + dark themes:
    surface, fg, border, interactive, status semantic layers
  packages/design-system/README.md — principles + integration guide

TASK-CAT1340 (prep) — @dealix/arabic-ui package (scaffolded):
  packages/arabic-ui/src/normalize.ts:
    Diacritic-insensitive search (fatha/kasra/damma stripped)
    Hamza variants normalized (أ/إ/آ → ا)
    Waw-hamza, ya-hamza, taa-marbuta, alef-maksura handled
    arabicMatch() + arabicCompare() helpers
  packages/arabic-ui/src/numerals.ts:
    Western/Arabic-Indic/Eastern Arabic-Indic conversion
    formatCurrency() for SAR/AED/EGP/USD/JOD/KWD
    formatNumber() with locale awareness
  packages/arabic-ui/src/direction.ts:
    detectDirection() via Unicode bidi algorithm
    isolate() using U+2068/U+2069 for mixed-direction content
    isRTL() locale check
    hasArabic() presence check
  Future: release as OSS after 12 months of internal use

TASK-CAT1310 — Manifesto (bilingual draft):
  marketing/manifesto.md — 4 principles in Arabic + English:
    1. Arabic first, not Arabic translated
    2. Decisions backed by evidence, not opinion
    3. AI recommends, systems commit, humans approve
    4. Saudi compliance built-in, not bolted on
  Publication target: dealix.io/manifesto + dealix.io/بيان

TASK-CAT1320 — Dealix Labs (scaffolded):
  docs/labs/README.md — research program structure:
    Annual State of Arabic Enterprise AI report
    Quarterly Arabic LLM Benchmarks
    OTel semantic conventions proposal
    Open source: @dealix/arabic-ui + @dealix/design-system

TRUTH.yaml updated:
  Added Phase 2 capabilities section (all as 'partial' or 'roadmap')
  Added ISO 27001/17/18 and bug bounty to security_claims (all false)

All gates GREEN:
  Architecture Brief: 40/40
  Release Readiness Matrix: 71/71 (up from 53/53)
  Release Readiness Gate (blueprint): PASS
  Truth Registry Validator: VALID

https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
2026-04-17 10:52:28 +00:00

164 lines
4.6 KiB
YAML

# TRUTH.yaml — Dealix Canonical Truth Registry
# Last updated: 2026-04-17
# Owner: Founder + CTO
# Rule: Edited only via PR with review. No file outside this registry may create a new claim.
version: "1.0.0"
orchestrator:
canonical: "dealix-core-orchestrator"
engine: "openclaw-2026.4.x"
deprecated: []
llm_policy:
primary: "groq/llama-3.3-70b-versatile"
fallback: "openai/gpt-4o"
arabic_specialist: "groq/llama-3.3-70b-versatile"
embedding: "openai/text-embedding-3-large"
budget_per_tenant_monthly_usd: 50
cost_alert_threshold: 0.7
cost_throttle_threshold: 0.9
capabilities:
- id: golden_path_partner
name: "Partner Golden Path"
status: live
evidence_path: "backend/app/services/golden_path.py"
runtime_flag: null
public_claim_allowed: true
- id: saudi_sensitive_workflow
name: "Saudi PDPL Data Sharing Workflow"
status: live
evidence_path: "backend/app/services/saudi_sensitive_workflow.py"
runtime_flag: null
public_claim_allowed: true
- id: structured_outputs
name: "17 Schema-Bound Decision Outputs"
status: live
evidence_path: "backend/app/schemas/structured_outputs.py"
runtime_flag: null
public_claim_allowed: true
- id: executive_room
name: "Executive Room + Weekly Pack"
status: live
evidence_path: "backend/app/api/v1/executive_room.py"
runtime_flag: null
public_claim_allowed: true
- id: approval_center
name: "Approval Center with SLA"
status: live
evidence_path: "backend/app/api/v1/approval_center.py"
runtime_flag: null
public_claim_allowed: true
- id: evidence_packs
name: "Evidence Packs with SHA256"
status: live
evidence_path: "backend/app/services/evidence_pack_service.py"
runtime_flag: null
public_claim_allowed: true
- id: contradiction_engine
name: "Contradiction Detection & Tracking"
status: live
evidence_path: "backend/app/services/contradiction_engine.py"
runtime_flag: null
public_claim_allowed: true
- id: rls_multi_tenancy
name: "PostgreSQL Row-Level Security"
status: partial # migration exists, not applied to production
evidence_path: "backend/alembic/versions/20260417_0002_add_rls.py"
runtime_flag: null
public_claim_allowed: false
- id: durable_execution
name: "Persistent Durable Checkpoints"
status: partial # model + service exist, not integrated into golden path
evidence_path: "backend/app/services/durable_runtime.py"
runtime_flag: null
public_claim_allowed: false
- id: idempotency
name: "Idempotency Keys for Side Effects"
status: partial # middleware + model exist, not in app middleware stack
evidence_path: "backend/app/middleware/idempotency.py"
runtime_flag: null
public_claim_allowed: false
- id: opentelemetry
name: "OpenTelemetry Observability"
status: partial # gateway spans + otel.py, packages not in requirements
evidence_path: "backend/app/observability/otel.py"
runtime_flag: null
public_claim_allowed: false
- id: ma_os
name: "M&A / Corporate Development"
status: roadmap
evidence_path: "docs/governance/ma-os.md"
runtime_flag: null
public_claim_allowed: false
- id: pmi_os
name: "PMI / Strategic PMO"
status: roadmap
evidence_path: "docs/governance/pmi-os.md"
runtime_flag: null
public_claim_allowed: false
- id: temporal_integration
name: "Temporal Durable Workflows"
status: roadmap
evidence_path: null
runtime_flag: null
public_claim_allowed: false
- id: soc2_type_ii
name: "SOC 2 Type II Certification"
status: roadmap
evidence_path: null
runtime_flag: null
public_claim_allowed: false
data_residency:
regions_supported: ["me-south-1"] # AWS Bahrain
default_region: "me-south-1"
ksa_option: "planned"
security_claims:
rls_enforced: false # migration exists, production deployment pending
soc2_type_ii: false
pdpl_compliant: "in-progress"
annual_pentest: false
iso_27001: false
iso_27017: false
iso_27018: false
bug_bounty_program: false
phase_2_capabilities:
- id: design_system
name: "Dealix Design System"
status: partial
evidence_path: "packages/design-system/tokens/"
public_claim_allowed: false
- id: arabic_ui_package
name: "@dealix/arabic-ui utilities"
status: partial
evidence_path: "packages/arabic-ui/src/"
public_claim_allowed: false
- id: manifesto
name: "Dealix Manifesto (bilingual)"
status: partial
evidence_path: "marketing/manifesto.md"
public_claim_allowed: false
- id: dealix_labs
name: "Dealix Labs (research program)"
status: roadmap
evidence_path: "docs/labs/README.md"
public_claim_allowed: false