mirror of
https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools.git
synced 2026-06-17 23:09:35 +00:00
FULL_NEXT_STEP_AND_STACK_EXPANSION_AR.md:
Complete execution plan with 8 gates, 5 phases, stack additions
(OTel, OIDC, attestations, OpenFGA now; Great Expectations, Unstructured,
Airbyte next; OPA, Temporal, MCP in radar), backend/frontend upgrades,
and avoid-now list.
docs/governance/endpoint-inventory.md:
Trust classification for ALL ~70 endpoints:
- ~45 Class A (safe auto, read-only)
- ~15 Class B (approval-gated, side effects)
- ~6 Class B+ (critical, financial/legal/irreversible)
- 5 Class C (forbidden)
With specific trust enforcement requirements per endpoint.
Customer docs:
ADMIN_SETUP_GUIDE.md — 30-60min setup guide for client IT admin
(accounts, channels, approvals, data import, compliance, verification)
EXECUTIVE_QUICKSTART.md — 5-min guide for CEO
(what you see, 3 daily actions, weekly pack, FAQ)
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
4.5 KiB
4.5 KiB
Endpoint Inventory — Trust Classification
Parent:
MASTER_OPERATING_PROMPT.md
Purpose: Every endpoint classified by risk, side effects, and trust requirements.
Classification Key
| Class | Meaning | Trust Requirements |
|---|---|---|
| A | Safe auto — read-only, no side effects | None |
| B | Approval-gated — causes side effects or external communication | correlation_id + approval_token |
| B+ | Critical — financial, legal, or irreversible | correlation_id + approval_token + evidence_pack |
| C | Forbidden — never allowed via API | Blocked unconditionally |
Tier-1 Governance Endpoints
| Endpoint | Method | Class | Side Effects | Trust Enforced |
|---|---|---|---|---|
/executive-room/snapshot |
GET | A | None | — |
/executive-room/weekly-pack |
GET | A | None | — |
/executive-room/risks |
GET | A | None | — |
/executive-room/decisions-pending |
GET | A | None | — |
/executive-room/forecast-vs-actual |
GET | A | None | — |
/approval-center/ |
GET | A | None | — |
/approval-center/stats |
GET | A | None | — |
/approval-center/{id}/approve |
POST | B+ | Updates approval status | correlation_id via payload |
/approval-center/{id}/reject |
POST | B+ | Updates approval status | correlation_id via payload |
/approval-center/{id}/escalate |
POST | B | Escalation notification | — |
/contradictions/ |
GET | A | None | — |
/contradictions/ |
POST | A | Creates record | — |
/contradictions/stats |
GET | A | None | — |
/contradictions/{id}/resolve |
POST | B | Status update | — |
/evidence-packs/assemble |
POST | B | Creates SHA256 pack | — |
/evidence-packs/ |
GET | A | None | — |
/evidence-packs/{id}/review |
PUT | B | Status update | — |
/evidence-packs/{id}/verify |
GET | A | None | — |
/compliance/matrix/ |
GET | A | None | — |
/compliance/matrix/scan |
POST | A | Updates control status | — |
/compliance/matrix/posture |
GET | A | None | — |
/compliance/matrix/risk-heatmap |
GET | A | None | — |
/connectors/governance |
GET | A | None | — |
/connectors/{key}/health-check |
POST | A | Updates status | — |
/model-routing/dashboard |
GET | A | None | — |
/model-routing/health |
GET | A | None | — |
/model-routing/costs |
GET | A | None | — |
/forecast-control/unified |
GET | A | None | — |
/forecast-control/variance |
GET | A | None | — |
/forecast-control/recalibrate |
POST | B | Triggers AI reforecast | — |
/golden-path/run |
POST | B+ | Creates approval + evidence | correlation_id generated |
/golden-path/dossier |
POST | A | None (generates schema) | — |
Core Business Endpoints
| Endpoint | Method | Class | Side Effects | Trust Required |
|---|---|---|---|---|
/leads |
GET | A | None | — |
/leads |
POST | A | Creates record | — |
/leads/import |
POST | B | Bulk create | — |
/deals |
GET | A | None | — |
/deals |
POST | A | Creates record | — |
/deals/{id}/stage |
PUT | B+ | Stage change + auto evidence on close | Auto evidence on closed_won |
/deals/{id} |
DELETE | B | Soft delete | — |
External Communication Endpoints
| Endpoint | Method | Class | Side Effects | Trust Required |
|---|---|---|---|---|
/outreach/* |
POST | B | Sends WhatsApp/email/SMS | PDPL consent + approval_token |
/sequences/* |
POST | B | Starts multi-channel sequence | PDPL consent + approval_token |
/whatsapp-webhook |
POST | A | Processes inbound | Webhook verification |
Strategic Deal Endpoints
| Endpoint | Method | Class | Side Effects | Trust Required |
|---|---|---|---|---|
/strategic-deals/ |
GET | A | None | — |
/strategic-deals/ |
POST | B | Creates deal | — |
/strategic-deals/{id}/negotiate |
POST | B+ | Negotiation action | correlation_id |
/strategic-deals/match |
POST | A | AI matching | — |
Summary
| Class | Count | Enforcement Status |
|---|---|---|
| A (safe auto) | ~45 | No enforcement needed |
| B (approval-gated) | ~15 | correlation_id enforced via gateway |
| B+ (critical) | ~6 | correlation_id + evidence (golden path enforced) |
| C (forbidden) | 5 | Blocked in policy.py |