system-prompts-and-models-o.../salesflow-saas/docs/baselines/README.md
Claude 3ef62652aa
Phase 2 Execution Waves: 90-day plan + Verification Protocol scaffolding
Saves the DEALIX_PHASE2_EXECUTION_WAVES.md 90-day plan and scaffolds every
artifact the coding agent can produce. Wave A-E execution is explicitly
blocked until the Week-12 Phase Gate (§3) returns Green.

Added:
  §1 Verification Protocol (V001-V007)
    - scripts/v001_secret_scan.sh — trufflehog + gitleaks full-history scan
    - backend/tests/security/test_rls_fuzz.py — 10K cross-tenant fuzz
    - docs/verification/V003_pentest_engagement.md — vendor RFP + scope
    - docs/verification/V004_no_founder_demo_test.md — 3-tester protocol
    - scripts/v005_truth_registry_audit.py — independent audit tool
    - infra/load-tests/baseline.js — k6 perf baseline
    - frontend/tests/a11y/baseline.spec.ts — Playwright+axe baseline
    - docs/baselines/README.md + docs/verification/README.md

  §2 Founder Decision Sprint (FD001-FD005)
    - docs/internal/legal_entity_decision.md — MISA/DIFC/Delaware brief
    - docs/internal/trademark_status.md — SAIP filing kit tracker
    - docs/hiring/{design_engineer, backend_engineer, head_of_cs}.md

  §3 Customer Validation (CV001-CV004)
    - docs/customer_learnings/pilot_agreement_template.md
    - docs/customer_learnings/pilot_template/success_criteria.md
    - docs/customer_learnings/pilot_template/kickoff_checklist.md
    - docs/customer_learnings/friction_log.md + feature_requests.yaml
    - docs/customer_learnings/weekly_review_template.md

  Truth registry updates
    - docs/registry/TRUTH.yaml — new verification_protocol,
      founder_decision_sprint, customer_validation sections

Gates (post-change):
  architecture_brief.py     40/40
  release_readiness_matrix  94/94 (added 30 new scaffold checks)
  v005_truth_registry_audit 19/19 SUPPORTED
2026-04-17 11:13:27 +00:00

33 lines
1.2 KiB
Markdown

# Performance & Accessibility Baselines
> Every future "faster than X" or "WCAG compliant" claim must reference a file in this directory.
## Contents
| File pattern | Produced by | Update frequency |
|--------------|-------------|------------------|
| `perf_YYYYMMDD.json` | `k6 run infra/load-tests/baseline.js` | Monthly + before each release |
| `a11y_YYYYMMDD.json` | `pnpm run test:a11y` (Playwright + axe) | Monthly + before each release |
## Interpretation
### Performance (V006)
- Source: k6 stages → 10 → 50 → 200 VUs over 5 minutes
- Target: p95 golden_path <2s, weekly_pack <1.5s, approval_center <800ms
- Error budget: <1%
### Accessibility (V007)
- Source: axe-core via @axe-core/playwright
- Target: 0 violations on routes: `/`, `/login`, `/deals`, `/approvals`, `/executive-room`
- Checks both LTR (en) and RTL (ar) layouts
## Rule
- **Never** cite performance or a11y numbers from memory, screenshots, or CI badges.
- Reference the JSON file in commit messages, marketing claims, security questionnaires, customer demos.
- If claiming an improvement, include the baseline JSON **and** the new JSON in the PR.
## Current baselines
*(Empty until V006 + V007 first runs. Do not claim perf/a11y numbers until populated.)*