Every issue in the project, as it stood when the work closed. The live board is at uplifttech.atlassian.net, which needs an Atlassian account; this page needs nothing. Each key links through to the real issue, where the comments record who did the work, which pull request carried it, and who reviewed it live before it closed.
| Key | Summary | Type | Status | Closed |
|---|---|---|---|---|
| LT-6 | Audit every claim in the framing/rationale docs for evidence | Task | Done | Sat 12 Sep, 14:55 |
| LT-7 | Resolve whether the password baseline is a deliberate framing choice or an over-read | Story | Done | Sat 12 Sep, 14:55 |
| LT-8 | Harden the connector/API rationale as the single source of truth for 03 | Story | Done | Sat 12 Sep, 14:55 |
| LT-9 | State product requirements for search authorization | Story | Done | Sat 12 Sep, 14:55 |
| LT-10 | Write UX notes for the two surfaces on top of this backend | Task | Done | Sat 12 Sep, 14:55 |
| LT-11 | Evaluator-legibility cold read of the industry framing thesis | Task | Done | Sat 12 Sep, 14:55 |
| LT-12 | Track 01 housekeeping: hiring, registry, status | Task | Done | Sat 12 Sep, 14:55 |
| LT-13 | Address cross-track consistency pass findings assigned to 01 | Story | Done | Sat 12 Sep, 15:23 |
| Key | Summary | Type | Status | Closed |
|---|---|---|---|---|
| LT-21 | Ratify the orchestration-pattern catalog and add the attack-tree template | Story | Done | Sat 12 Sep, 15:11 |
| LT-22 | Harness-constraints addendum to planning-approach.md | Story | Done | Sat 12 Sep, 15:11 |
| LT-23 | Red/blue: connector token lifecycle | Story | Done | Sat 12 Sep, 15:11 |
| LT-24 | Adversarial pair: search-API authorization scoping | Story | Done | Sat 12 Sep, 15:11 |
| LT-25 | Structured written debate: ai-workflow-narrative.md's core claim | Story | Done | Sat 12 Sep, 15:11 |
| LT-26 | Hand-off 02→03: auth scheme, validation point, authz requirements | Story | Done | Sat 12 Sep, 15:11 |
| LT-27 | Hand-off 02→04: secrets inventory and never-log list | Story | Done | Sat 12 Sep, 15:11 |
| LT-28 | Independent second review of the security-graded documents | Story | Done | Sat 12 Sep, 15:11 |
| LT-29 | Revise ai-workflow-narrative.md for the org layer | Story | Done | Sat 12 Sep, 15:11 |
| LT-30 | threat-model.md maintenance | Task | Done | Sat 12 Sep, 15:11 |
| LT-31 | Independent review of 03's auth middleware and connector token code | Story | Done | Sun 13 Sep, 09:42 |
| LT-32 | Split the token issuer into an isolated Deployment | Story | Done | Sat 12 Sep, 21:30 |
| LT-33 | Wire api-service's client credential for the connector call | Story | Done | Sun 13 Sep, 10:18 |
| Key | Summary | Type | Status | Closed |
|---|---|---|---|---|
| LT-34 | Scaffolding: Go module, entrypoints, bootstrap, config loading | Story | Done | Sat 12 Sep, 20:55 |
| LT-35 | DAO interface, domain types, sentinels, factory | Story | Done | Sun 13 Sep, 09:33 |
| LT-36 | Postgres/CockroachDB DAO implementation | Story | Done | Sun 13 Sep, 09:33 |
| LT-37 | SQLite DAO implementation | Story | Done | Sun 13 Sep, 09:33 |
| LT-38 | Conformance suite (05's requirement, cross-backend) | Story | Done | Sun 13 Sep, 09:33 |
| LT-39 | REST handlers: search/retrieve user_profile (Q2) | Story | Done | Sun 13 Sep, 07:25 |
| LT-40 | Auth middleware (JWT validation) | Story | Done | Sun 13 Sep, 07:06 |
| LT-41 | Connector: /auth + /identity (Q3) | Story | Done | Sun 13 Sep, 09:25 |
| LT-42 | Handler and connector unit tests | Story | Done | Sun 13 Sep, 09:38 |
| LT-43 | README: implemented vs. stubbed, AI workflow, test strategy | Story | Done | Sun 13 Sep, 10:24 |
| LT-44 | Retention sweep: DeleteExpired / DeleteProfile wiring | Story | Done | Sun 13 Sep, 11:43 |
| LT-51 | Token issuance: OAuth2 client-credentials grant at /auth/token on the issuer Deployment | Story | Done | Sun 13 Sep, 07:06 |
| LT-53 | Demo console: a static page served by api-service at /demo that drives the live API | Story | Done | Sun 13 Sep, 19:18 |
| Key | Summary | Type | Status | Closed |
|---|---|---|---|---|
| LT-20 | Configure log-sink retention for the audit trail | Story | Done | Sun 13 Sep, 14:28 |
| LT-45 | Containerize api-service and idp-connector | Story | Done | Sun 13 Sep, 09:33 |
| LT-46 | Deliver secrets to both services per 02's inventory | Story | Done | Sun 13 Sep, 11:44 |
| LT-47 | CI/CD pipeline: build, lint, test, scan, migrate, deploy | Story | Done | Sun 13 Sep, 09:33 |
| LT-48 | Local dev-loop: compose profiles for SQLite and Postgres | Story | Done | Sun 13 Sep, 12:40 |
| LT-49 | Observability: logging, metrics, never-log, sweep alerting | Story | Done | Sun 13 Sep, 15:00 |
| LT-52 | Database provisioning in-namespace: Postgres, DB credentials Secret, migration Job, DB_DSN_FILE wiring | Story | Done | Sun 13 Sep, 05:23 |
| Key | Summary | Type | Status | Closed |
|---|---|---|---|---|
| LT-14 | Rule the multi-database abstraction shape | Story | Done | Sat 12 Sep, 14:57 |
| LT-15 | Settle the Search() query shape | Story | Done | Sat 12 Sep, 14:57 |
| LT-16 | Deliver the Go-shaped DAO contract to track 03 | Story | Done | Sat 12 Sep, 14:58 |
| LT-17 | Cold-read the 05→03 hand-off and fix what fails | Story | Done | Sat 12 Sep, 14:58 |
| LT-18 | Set PII retention windows and the deletion mechanism | Story | Done | Sat 12 Sep, 14:58 |
| LT-19 | Deliver the migration approach to track 04 | Story | Done | Sat 12 Sep, 14:58 |
| LT-50 | Add the retention/deletion methods to the DAO contract | Story | Done | Sat 12 Sep, 15:17 |