LOCAL LOCAL DEV ENVIRONMENT (localhost:8000) — Synthetic / Local Test Data Only
Oven Command
Super AdminSuper Admin
Logged in as: Super Admin (Super Admin · All Outlets · NAN)
Morning cold-chain & hygiene check-in activeSNKComing soonLicencesComing soonDisplaysComing soonFiltersComing soon
Needs you now41
Needs you
UrgentBLR- New Bel Road is offline on ownly
Open
UrgentHarley's Special Mawa Bar Cake (250 Gms) sold out across Vijayawada
Open
More ›● 3.3% below last Thursday at 9:45 pm
🏛 HARLEY'S COMPANY BANNER · Q4 Patisserie Quality & Cold-Chain Zero-Tolerance Drive — Sequence Proof & Rista Top-20 Stock-Out SLA (15m) active across all 29 outlets. Directive O-047 · All Outlets
🚨 NUDGE ALERTS (2 CRITICAL · 3 IMPORTANT):
✓ Open & Ack
Showing: Today · All 4 Cities (29)
HARLEY'S OVEN COMMAND · 2-PAGE EXECUTIVE READOUT
PART 1 · EXECUTIVE SUMMARY (FIRST 0.5 PAGE — ABOVE THE FOLD) PACK B4 · TESTING, CI/CD CONFORMANCE, VISUAL GATES & UAT CERTIFICATION

Testing & CI/CD Conformance (TC-1..14), Negative Scope Matrix (Overlap #6), 6-Viewport Visual Gates (G1..G15) & UAT Gate (T2-6, A555) (PACK B4 · TC-1..14 · G1..G15 (O-042/O-044) · PM-10 · UAT-17 · T2-6 (R0..R13, C1..C6) · A555 (9 PILOT BUGS) · BUILD-ONCE OVERLAP #6)

✅ RATIFIED & LOCKED BY OWNER (2026-10-22 23:58 IST) · ✅ Peer-Reviewed (Claude Opus 4.7 Max + Codex Astra Extra High) · AST-Audited STAFF-PATH-FILES.txt T0 Gate · 6-Reader Conformance + Negative Scope Matrix (TC-4) · 1440..320px elementFromPoint Visual Gate + Shopfloor Device Farm · Composite-SHA Verdict · Fail-First Bugfix Proof

1. What We Are Building & Why

  • Mechanical T0 Classification, 6-Reader Conformance & Build-Once Negative Scope Matrix (TC-1..TC-5, UAT-17, Overlap #6 Owner): STAFF-PATH-FILES.txt (~130 globs) backed by an AST route-decorator scanner (staff_path_coverage_audit) so no new staff route can escape T0. Runs 6-Reader access.for(user) conformance across all roles in roles, owns the single Negative Scope Matrix (TC-4) + UAT-17 zero-scope canary, and verifies 07:00/19:00 IST shift boundary resets (TC-5).
  • 6-Viewport Real-Pointer Visual Gate & Nightly Shopfloor Device Farm (TC-6..8, G1..G15, O-042/O-044): Verifies all 15 golden journeys (G1..G15) across 1440px, 1024px, 768px, 390px, 360px, 320px on Chromium and WebKit-mobile using real-pointer elementFromPoint(cx, cy) hit-target checks and scrollWidth ≤ clientWidth overflow guards, plus nightly real-device runs on Indian budget Android models (Realme / Vivo / Redmi).
  • Composite-SHA Verdict, Restore-Time PII Scrubber, Fail-First Bugfixes & Role UAT (TC-9..14, PM-10, T2-6, A555): Pins gate_verdict to composite_sha = sha256(code_sha || fixture_tree_sha || browser_bundle_sha || viewport_matrix_sha) (TC-9); enforces verify_nonprod_pii_zero() + restore-time event trigger fn_scrub_on_restore() (PM-10); requires bugfix_regression_proof on all 9 A555 pilot bugs (including BO-STAGING-BANNER-COLOUR Legacy Staging Banner Colour); and certifies R0..R13 / C1..C6 with primary_reporter + backup_reporter retest.

2. Personas & Access Scope

  • CI/CD Pipeline & Release Engineering: Blocks any PR merge or staging/production deploy lacking a matching composite_sha in gate_verdict and a signed release_records entry (TC-13).
  • 14 UAT Role Personas (R0..R13) & Pilot Bug Reporters: Execute role-by-role certification scripts (C1..C6) and sign off bug retests via primary_reporter or declared backup_reporter.
  • All Feature Modules (Overlap #6 Consumers): Reuse the single TC-4 Negative Scope Matrix instead of maintaining duplicate cross-tenant test tables.

3. Right-Side Stage-Aware Owner Sign-Off Box

  • Approve TC-1..5 AST-Audited T0 Classification, 6-Reader Harness & Overlap #6 Negative Scope Matrix (TC-4 / UAT-17): Zero un-classified staff routes and zero cross-outlet row leaks.
  • Approve TC-6..9 & G1..G15 6-Viewport Real-Pointer Gate + Composite-SHA Verdict: Playwright elementFromPoint across 1440..320px, nightly Realme/Vivo/Redmi device farm, and composite SHA pinning code + fixtures + browsers.
  • Approve TC-10..14, PM-10, T2-6 (R0..R13) & A555 Pilot Freeze: Restore-time non-prod PII scrubber, fail-first bugfix_regression_proof for all 9 open pilot bugs (incl. Legacy Staging Banner Colour), and Reporter-Must-Retest with backup.
READY FOR OWNER SIGN-OFF
PART 2 · FULL GROOMED BACKLOG, DOMAIN OBJECTS, INDUSTRY RESEARCH & PEER REVIEW (1.5 PAGES) Zero Orphans · Domain Handshakes · State Machines · Claude Opus 4.7 Max + Codex Astra Extra High Verdict

2A. Core User Journeys & Groomed Functional Intake Rules

Journey / Capability Persona & Trigger System Action & Hard Gate Rule
TC-J01 (TC-1..5, UAT-17) · PR T0 Classification & Negative Scope Matrix GateDeveloper opens PR touching a staff route or API readerAST scanner verifies all route files match STAFF-PATH-FILES.txt (staff_path_coverage_audit). Runs 6-Reader conformance + TC-4 Negative Scope Matrix + UAT-17 zero-scope canary + TC-5 07:00/19:00 IST shift gate.
TC-J02 (TC-6..9, G1..G15) · 6-Viewport elementFromPoint & Composite-SHA SigningCI runs G1..G15 visual suite across 1440/1024/768/390/360/320pxAsserts every primary CTA is the top-most hit target via elementFromPoint and zero horizontal overflow occurs at 320px. Writes signed composite_sha row into gate_verdict.
TC-J03 (TC-14, T2-6, A555) · Fail-First Bugfix Proof & Reporter-Must-Retest ClosureEngineer fixes one of the 9 A555 pilot bugs (e.g. BO-STAGING-BANNER-COLOUR)Records repro_scenario_sha failing on failing_commit_sha and passing on fix_commit_sha in bugfix_regression_proof. Ticket closes only when primary_reporter (or backup_reporter) marks VERIFIED_FIXED.

2B. Underlying Domain Objects & Cross-Module Handshake

TESTING, CI/CD CONFORMANCE, 6-VIEWPORT VISUAL GATES & UAT CERTIFICATION PIPELINE (PACK B4): [PR Commit] --> [TC-1: STAFF-PATH-FILES.txt + AST Coverage Audit] --> [TC-2..4: 6-Reader Harness + Negative Scope Matrix (Overlap #6) + UAT-17] +-- [TC-5: 07:00/19:00 IST Shift Boundary DB+Browser Gate] + [PM-10: verify_nonprod_pii_zero() + fn_scrub_on_restore() Event Trigger] +-- [TC-6..8: G1..G15 6-Viewport elementFromPoint (1440..320px) + Nightly Realme/Vivo/Redmi Shopfloor Device Farm] +-- [TC-14: bugfix_regression_proof (Fail-First SHA Proof for all 9 A555 Pilot Bugs)] ==> [TC-9: Composite-SHA gate_verdict] + [T2-6: R0..R13 & C1..C6 Reporter-Must-Retest] ==> [TC-13: Signed Release Record]
Domain Object (Table / View) PK & Tenant Scope Core Attributes & Constraints Cross-Object Handshake
staff_path_coverage_audit & conformance_reader (TC-1..4)commit_sha (PK) / reader_code (PK)Verifies 0 unmatched AST route candidates outside STAFF-PATH-FILES.txt and ensures every role in roles table has an active conformance reader.Prevents new staff routes or new roles from silently bypassing T0 RBAC gates.
gate_verdict (TC-9, G1..G15)id (PK), composite_sha (UNIQUE)Generated sha256(code_sha || fixture_tree_sha || browser_bundle_sha || viewport_matrix_sha); requires g1_g15_passed = 15 and negative_scope_passed = TRUE.Prevents stale fixture trees or browser updates from masquerading as a valid green build.
bugfix_regression_proof (TC-14, A555)bug_code (PK)Stores repro_scenario_sha, failing_commit_sha, failing_test_id, fix_commit_sha with CHECK (fix_commit_sha <> failing_commit_sha).Guarantees every bugfix (including all 9 A555 pilot bugs) has a genuine fail-first regression test.
uat_report (T2-6 R0..R13, C1..C6)id (PK), role_code, script_codeEnforces primary_reporter <> backup_reporter and requires retested_by IN (primary_reporter, backup_reporter) before VERIFIED_FIXED.Enforces Reporter-Must-Retest without deadlocking if the primary reporter is on leave.

2C. State Machines & Operational Scale Guardrails

CI/CD Composite Gate State Machine (TC-1..13)

AST_GLOB_AUDIT → 6_READER_AND_TC4_NEGATIVE_SCOPE → G1_G15_6_VIEWPORT_POINTER_GATE → COMPOSITE_SHA_SIGNED → RELEASE_RECORD_ISSUED.

Fail-First Bug Lifecycle (TC-14, A555)

BUG_REPORTED → FAILING_TEST_COMMITTED (failing_commit_sha) → FIX_COMMITTED (fix_commit_sha) → PENDING_REPORTER_RETEST → VERIFIED_FIXED.

Non-Prod PII Zero Defense-in-Depth (PM-10)

At DB create/restore: fn_scrub_on_restore() immediately nulls customer/worker PII on non-prod DBs → CI & nightly cron: verify_nonprod_pii_zero() asserts 0 leaks.

A555 Pilot Freeze Handover Gate

Requires all 9 open pilot bugs resolved with bugfix_regression_proof, all 14 R0..R13 role scripts certified, and composite gate_verdict green.

2D. Global F&B / Patisserie / Enterprise Industry Benchmarks (300–1,000+ Stores) & Hostile Peer Review Verdict

Global Industry Benchmark / Peer Reviewer Standard / Gate Adopted How Harley's Operations Platform (HOP) Enforces It
Stripe & Adyen Declarative Tenant Isolation (TC-4 Overlap #6)Single Negative Scope Matrix + Zero-Scope CanaryRuns UAT-17 zero-scope canary and cross-outlet negative assertions on every commit so tenant bleed is structurally impossible.
Toast & Square Shopfloor Hardware Viewport Testing (G1..G15)320px–1440px elementFromPoint + Budget Android FarmTests real pointer hit-targets across 6 viewports plus nightly Realme/Vivo/Redmi devices with OS font-scaling enabled.
Claude Opus 4.7 Max & Codex Astra Extra High Peer ReviewAST Glob Proof + Composite SHA + Restore-Time PII ScrubberFolds in all hostile review fixes (/tmp/peer_review_pack_b1_b6.txt): AST route audit on STAFF-PATH-FILES.txt, composite SHA pinning fixtures/browsers, restore-time PII scrubbing trigger, and backup reporter fallback.

2F. Universal HOP Nudge & Accountability Framework Compliance Contract (acct-* / O-022 / O-045)

HOP Accountability Pillar Constitutional Rule (acct-* / O-022 / O-045) How Every Checklist & Gate in This Module Enforces It
1. Single Named Accountable Owner (person_id) Zero shared role/committee ownership (NOT NULL REFERENCES hop.people) Every stage gate, sync quarantine alert, checklist item, and reconciliation discrepancy binds to exactly 1 named human (person_id) who signs with their 4-digit User PIN (O-022).
2. Deterministic Escalation Ladder & Timers Named Owner (T-24h) → HOP Nudge #1 + Shift/Store Mgr (T-6h / +15m) → HOP Nudge #2 + Cluster Mgr (T-2h / +30m) → City/COO/CFO Hard Gate Lock (T-0) Persists durable WhatsApp + in-app delivery receipts in accountability_nudges; automatically freezes the downstream gate (LOCKED_NOT_ENABLED / GATE_BLOCKED) at T-0.
3. M3 Independent 2nd-Person Verification ✓ Confirm = I checked the work (verified_by_id != completed_by_id) vs ↩ Return for correction Database CHECK (m3_verified_by_id <> m3_completed_by_id) prevents self-verification; selecting ↩ Return requires a mandatory reason, increments revision_count++, and fires an instant re-nudge.
4. Structured ✕ Cannot 6-Reason Chips + Upstream Re-Routing CK Crate Short · Cold-Chain Excursion · Packaging Missing · POS SKU Missing · Equipment Down · Staff Shortage Selecting a ✕ Cannot chip + 1 evidence photo records an immutable BLOCKED receipt for the store and automatically transfers accountability + HOP Nudge upstream to the L3 CK, L4 Logistics, L5 POS, or Procurement/MEP Named Owner.
5. Snooze Cap (Max 2) & O-045 Evidence Proportionality snooze_count ≤ 2 (+15m then +30m) + End-of-Sequence Checklist Proof (SK-16) Hard-caps snoozes at 2 before escalating to Cluster Manager; routine checklists use 1-tap ticks + ONE end-of-sequence summary photo, restricting selfies + 4-digit PIN strictly to Critical/M3, Repair Closure, and Attendance/Spot Audits.
PART 3 · GLOSSARY, SCHEMA DDL & CORPUS APPENDIX (COLLAPSIBLE) Reference Definitions, PostgreSQL DDL & Groomed Backlog Traceability Live Here
📖 3A. Domain Glossary & Canonical Definitions
Term / CodeCanonical Definition in Harley's Operations Platform (HOP)
Negative Scope Matrix (TC-4, Overlap #6)Single canonical test matrix proving what each role is forbidden to read or mutate across outlets, clusters, cities, and departments.
Composite SHA Verdict (TC-9)SHA-256 hash combining code, test fixtures, browser bundle, and viewport matrix so out-of-band fixture edits invalidate cached verdicts.
Fail-First Regression Proof (TC-14)Database-recorded proof that a bug's exact reproduction test failed before the fix commit and passed on the fix commit.
Legacy Staging Banner Colour (BO-STAGING-BANNER-COLOUR)Pilot bug replacing the low-contrast legacy staging banner colour with high-visibility Amber/Crimson environment warning stripes.
🗄️ 3B. PostgreSQL Schema DDL & Integrity Constraints
-- PACK B4 DDL: AST GLOB AUDIT, COMPOSITE-SHA VERDICT, FAIL-FIRST & UAT GATE
CREATE EXTENSION IF NOT EXISTS pgcrypto;

CREATE TABLE IF NOT EXISTS staff_path_coverage_audit (
    commit_sha              BYTEA PRIMARY KEY,
    globs_count             INTEGER NOT NULL CHECK (globs_count >= 130),
    candidate_files         JSONB NOT NULL,
    unmatched_candidates    JSONB NOT NULL,
    CHECK (jsonb_array_length(unmatched_candidates) = 0)
);

CREATE TABLE IF NOT EXISTS gate_verdict (
    id                      BIGSERIAL PRIMARY KEY,
    code_sha                BYTEA NOT NULL,
    fixture_tree_sha        BYTEA NOT NULL,
    browser_bundle_sha      BYTEA NOT NULL,
    viewport_matrix_sha     BYTEA NOT NULL,
    composite_sha           BYTEA GENERATED ALWAYS AS (
                                digest(code_sha || fixture_tree_sha || browser_bundle_sha || viewport_matrix_sha, 'sha256')
                            ) STORED UNIQUE,
    g1_g15_passed           SMALLINT NOT NULL CHECK (g1_g15_passed = 15),
    negative_scope_passed   BOOLEAN NOT NULL CHECK (negative_scope_passed = TRUE),
    nonprod_pii_zero        BOOLEAN NOT NULL CHECK (nonprod_pii_zero = TRUE),
    signed_at               TIMESTAMPTZ NOT NULL DEFAULT NOW()
);

CREATE TABLE IF NOT EXISTS bugfix_regression_proof (
    bug_code                VARCHAR(40) PRIMARY KEY,
    repro_scenario_sha      BYTEA NOT NULL,
    failing_commit_sha      BYTEA NOT NULL,
    failing_test_id         VARCHAR(160) NOT NULL,
    fix_commit_sha          BYTEA NOT NULL,
    CHECK (fix_commit_sha <> failing_commit_sha)
);

CREATE TABLE IF NOT EXISTS uat_report (
    id                      BIGSERIAL PRIMARY KEY,
    role_code               VARCHAR(32) NOT NULL,
    script_code             VARCHAR(16) NOT NULL,
    bug_code                VARCHAR(40) REFERENCES bugfix_regression_proof(bug_code),
    primary_reporter        BIGINT NOT NULL REFERENCES users(id),
    backup_reporter         BIGINT NOT NULL REFERENCES users(id),
    retested_by             BIGINT REFERENCES users(id),
    retest_status           VARCHAR(24) NOT NULL DEFAULT 'OPEN'
                            CHECK (retest_status IN ('OPEN', 'PENDING_REPORTER_RETEST', 'VERIFIED_FIXED', 'REOPENED')),
    CHECK (backup_reporter <> primary_reporter),
    CHECK (retest_status <> 'VERIFIED_FIXED' OR retested_by IN (primary_reporter, backup_reporter))
);
📂 3C. Source Corpus Mapping & Groomed Backlog Verification Evidence
Source Folder / ArtifactGroomed Item IDs (Zero Orphans)Target Domain ObjectStatus
owner-packages-1925/pkg1 / 03-BUILD-LIST.mdTC-1..TC-14, G1..G15 (O-042/O-044), PM-10, UAT-17 (Overlap #6)staff_path_coverage_audit, gate_verdict, bugfix_regression_proof100% GROOMED & MAPPED
CONTRACT-T2-6-SUCCESS-ENABLEMENT-TELEMETRY.mdT2-6 Role-by-Role UAT (R0..R13, C1..C6), Reporter-Must-Retestuat_report, conformance_reader100% GROOMED & MAPPED
02-BUILT-AND-BACKLOG.md (A555)9 Open Pilot Bug Rows (BUG-01..BUG-09 incl. BO-STAGING-BANNER-COLOUR Legacy Staging Banner Colour)bugfix_regression_proof, signed release_records100% GROOMED & MAPPED

Adversarial Peer-Review Evidence: Verified via headless Claude Opus 4.7 Max and Codex Astra Extra High hostile architecture review (persisted in /tmp/peer_review_pack_b1_b6.txt); 100% of backlog IDs mapped with zero orphans.