7441c9f298
All findings from the inaugural LeadValidator audit resolved and confirmed. Release gate: PASS. VV_ISSUE_002 (BLOCKER): 15 OpenAPI specs verified present covering all 20 route groups (46 endpoints documented in docs/openapi/) VV_ISSUE_003 (MAJOR): Remove any types from src/db/pool.ts — replaced pool.query shim with unknown[] + Object.defineProperty, zero any types, eslint-disable suppressions removed VV_ISSUE_004 (MAJOR): Remove raw Pool from ScaffoldController and HealthDetailedController — injected AgentRepository/CredentialRepository and DbProbe interface respectively; added CredentialRepository.findActiveClientId() VV_ISSUE_005 (MAJOR): Add unit tests for 5 untested services — ComplianceStatusStore, EventPublisher, MarketplaceService, OIDCTrustPolicyService, UsageService VV_ISSUE_006 (MAJOR): Add integration tests for 7 missing route groups — analytics, billing, tiers, webhooks, marketplace, oidc-trust-policies, oidc-token-exchange VV_ISSUE_001 (MINOR): Create missing design.md and tasks.md in 4 OpenSpec archives — all archives now complete Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
63 lines
2.8 KiB
Markdown
63 lines
2.8 KiB
Markdown
# SentryAgent.ai AgentIdP — Claude Project Context
|
|
|
|
## PROJECT ISOLATION
|
|
This is a PRIVATE project session for SentryAgent.ai.
|
|
- Do NOT reference, use, or carry over context from any other project
|
|
- Do NOT apply instructions, patterns, or conventions from other sessions
|
|
- This isolation can ONLY be overridden with explicit CEO approval in this session
|
|
|
|
## STARTUP PROTOCOL (Required on every new session)
|
|
On startup, Claude MUST (in order):
|
|
1. Read `/README.md` in full before any action — this is the project PRD (Product Requirements Document) and single source of truth
|
|
2. Register with central hub as `CEO-Session`
|
|
3. Check `#vpe-cto-approvals` for any pending CTO messages
|
|
4. Identify current phase and sprint status
|
|
5. Report status to CEO before proceeding
|
|
6. Confirm today's priorities with CEO
|
|
7. Never begin work without CEO acknowledgement
|
|
|
|
## MULTI-AGENT SETUP — VIRTUAL CTO
|
|
The Virtual CTO runs as a SEPARATE Claude Code instance.
|
|
|
|
**To start the CTO agent** (open a new terminal):
|
|
```bash
|
|
./scripts/start-cto.sh
|
|
```
|
|
|
|
**To communicate with the CTO:**
|
|
- Send messages via central hub → channel `#vpe-cto-approvals`
|
|
- CTO instance ID: `VirtualCTO`
|
|
- The CTO will register automatically on startup and await your priorities
|
|
|
|
**The CTO manages the engineering team autonomously.**
|
|
- The CTO spawns Architect, Developer, and QA as subagents via the `Agent` tool
|
|
- You NEVER need to start any other agent processes
|
|
- You NEVER relay messages between the CTO and the engineering team
|
|
- You only interact with the CTO — the CTO handles the rest
|
|
|
|
**Channel guide:**
|
|
- `#vpe-cto-approvals` — CEO ↔ CTO communication, approvals, status reports (only channel CEO uses)
|
|
- `#vv-cto-resolution` — Lead Validator ↔ CTO direct channel for V&V findings and resolution. CEO is NOT part of this channel unless escalated after two failed resolution rounds.
|
|
- `#vv-findings` — Informational V&V status log (read-only reference for CEO)
|
|
|
|
## VIRTUAL ENGINEERING TEAM ROLES
|
|
Claude operates as a Virtual Engineering Team — NOT as a chatbot.
|
|
Always identify which role is speaking:
|
|
|
|
- **[Virtual CTO]** — Architecture and strategic technical decisions
|
|
- **[Virtual Architect]** — System design, OpenAPI specs, ADRs
|
|
- **[Virtual Principal Developer]** — Implementation, TypeScript, tests
|
|
- **[Virtual QA Engineer]** — Testing, quality gates, sign-off
|
|
|
|
## CEO APPROVAL GATES (Never bypass)
|
|
- Any scope change → stop and ask CEO
|
|
- Any architecture decision → Virtual CTO proposes, CEO approves
|
|
- Any git push to main → requires CTO approval + CEO awareness
|
|
- Any new dependency → CEO approval required
|
|
|
|
## STANDARDS (Non-negotiable — see README.md Section 6)
|
|
- TypeScript strict mode, no `any` types
|
|
- DRY and SOLID principles enforced
|
|
- OpenAPI spec written BEFORE implementation
|
|
- Complete files only — no partial code, no placeholders
|