TheFlow
43fa6cca61
SECURITY: Remove all internal/confidential files from public repository
...
CRITICAL SECURITY FIX:
Removed 226 internal and sensitive files from git tracking to protect
the public tractatus-framework repository from exposing confidential
development information, server details, and internal strategies.
SCOPE:
This cleanup separates the INTERNAL repository (tractatus) from the
PUBLIC repository (tractatus-framework on GitHub).
REMOVED DIRECTORIES (entire):
- .claude/ (framework session state, metrics, archives)
- governance/ (internal operational governance)
- For Claude Web/ (internal development specs)
- scripts/hook-validators/ (internal enforcement)
- scripts/framework-components/ (internal components)
- docs/planning/, docs/testing/, docs/outreach/
- docs/stripe-analysis/, docs/economist-analysis/
- docs/framework-incidents/, docs/deployment-logs/
- docs/analysis-archive-2025-10/
REMOVED ROOT FILES:
- CLAUDE_*.md, ClaudeWeb*.md (internal development)
- PITCH-*.md (internal pitch documents)
- PHASE-*.md, MEETING_NOTES*.md (internal planning)
- SESSION*.md, OPTIMAL_NEXT_SESSION*.md (session handoffs)
- ARCHIVE_SUMMARY*.md, CLOSEDOWN*.* (session archives)
- EXECUTIVE_BRIEF*.md (internal briefs)
- Tractatus-Website-Complete-Specification*.md (internal specs)
- UI_TRANSFORMATION_PROJECT_PLAN.md, SITE_IMPROVEMENT_PRIORITIES.md
- SCHEDULED_TASKS.md, TRACTATUS_BRAND_SYSTEM.md
- .stripe-ids.json, .rsyncignore (sensitive/deployment)
- deployment-output.txt, migration-output.txt (logs)
- ECONOMIST_LETTER*.docx, PERPLEXITY_USER_PROMPT.txt (correspondence)
REMOVED SCRIPTS:
- scripts/deploy-*.sh (contain server IPs)
- scripts/session-init.js, scripts/check-session-pressure.js
- scripts/analyze-violations.js
- scripts/hook-validators/*.js (5 files)
- scripts/framework-components/*.js
REMOVED DOCS (96 files):
- docs/SESSION*.md, docs/session-handoff-*.md
- docs/DEPLOYMENT*.md, docs/MULTI_PROJECT*.md
- docs/DOCUMENT_AUDIT*.md, docs/DOCUMENT_*.md
- docs/BLOG-POST-OUTLINES.md
- docs/PHASE-*.md, docs/STRIPE_*.md, docs/KOHA*.md
- docs/SECURITY_AUDIT*.md, docs/FRAMEWORK_FAILURE*.md
- docs/BENCHMARK*.md, docs/IMPLEMENTATION_PROGRESS*.md
- docs/BOOTSTRAPPING*.md, docs/GOVERNANCE-RULE-LIBRARY.md
- docs/SIMULATION*.md, docs/API_MEMORY*.md
ADDED PROTECTIONS:
1. Comprehensive .gitignore (172 lines)
- Blocks all internal directories
- Blocks all internal file patterns
- Prevents accidental commits
2. PUBLIC_REPO_CHECKLIST.md
- Security verification checklist
- Weekly maintenance procedures
- Clear guidelines for public vs internal
REMAINING PUBLIC FILES: 6,435
- src/: 85 (open source services)
- tests/: 35 (unit/integration tests)
- public/: 178 (website frontend)
- scripts/: 111 (public utilities)
- docs/: 107 (public documentation)
- root: 13 (README, LICENSE, package.json, configs)
VERIFICATION:
✓ No server IPs
✓ No SSH keys or credentials
✓ No payment system secrets
✓ No internal planning documents
✓ No session handoffs or development logs
✓ No deployment scripts with production details
RESULT:
Public tractatus-framework repository now contains ONLY:
- Open source code
- Public documentation
- Implementation guides
- Apache 2.0 licensed content
Internal tractatus repository (local) retains ALL files for development.
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 18:50:16 +13:00
TheFlow
41526f5afd
docs: comprehensive Phase 2 planning - roadmap, costs, governance, infrastructure
...
Phase 2 Planning Documents Created:
1. PHASE-2-ROADMAP.md (Comprehensive 3-month plan)
- Timeline & milestones (Month 1: Infrastructure, Month 2: AI features, Month 3: Soft launch)
- 5 workstreams: Infrastructure, AI features, Governance, Content, Analytics
- Success criteria (technical, governance, user, business)
- Risk assessment with mitigation strategies
- Decision points requiring approval
2. PHASE-2-COST-ESTIMATES.md (Budget planning)
- Total Phase 2 cost: $550 USD (~$900 NZD) for 3 months
- Recommended: VPS Essential ($30/mo) + Claude API ($50/mo)
- Usage scenarios: Minimal, Standard (recommended), High
- Cost optimization strategies (30-50% savings potential)
- Monthly budget template for post-launch
3. PHASE-2-INFRASTRUCTURE-PLAN.md (Technical specifications)
- Architecture: Cloudflare → Nginx → Node.js → MongoDB
- Server specs: OVHCloud VPS Essential (2 vCore, 4GB RAM, 80GB SSD)
- Deployment procedures (step-by-step server setup)
- Security hardening (UFW, Fail2ban, SSH, MongoDB)
- SSL/TLS with Let's Encrypt
- Monitoring, logging, backup & disaster recovery
- Complete deployment checklist (60+ verification steps)
4. Governance Documents (TRA-OPS-0001 through TRA-OPS-0005)
TRA-OPS-0001: AI Content Generation Policy (Master policy)
- Mandatory human approval for all AI content
- Values boundary enforcement (Tractatus §12.1-12.7)
- Transparency & attribution requirements
- Quality & accuracy standards
- Privacy & data protection (GDPR-lite)
- Cost & resource management ($200/month cap)
TRA-OPS-0002: Blog Editorial Guidelines
- Editorial mission & content principles
- 4 content categories (Framework updates, Case studies, Technical, Commentary)
- AI-assisted workflow (topic → outline → human draft → approval)
- Citation standards (APA-lite, 100% verification)
- Writing standards (tone, voice, format, structure)
- Publishing schedule (2-4 posts/month)
TRA-OPS-0003: Media Inquiry Response Protocol
- Inquiry classification (Press, Academic, Commercial, Community, Spam)
- AI-assisted triage with priority scoring
- Human approval for all responses (no auto-send)
- PII anonymization before AI processing
- Response templates & SLAs (4h for HIGH priority)
- Escalation procedures to John Stroh
TRA-OPS-0004: Case Study Moderation Standards
- Submission requirements (title, summary, source, failure mode)
- AI-assisted relevance assessment & Tractatus mapping
- Quality checklist (completeness, clarity, sources)
- Moderation workflow (approve/edit/request changes/reject)
- Attribution & licensing (CC BY-SA 4.0)
- Seed content: 3-5 curated case studies for launch
TRA-OPS-0005: Human Oversight Requirements
- 3 oversight models: MHA (mandatory approval), HITL (human-in-loop), HOTL (human-on-loop)
- Admin reviewer role & responsibilities
- Service level agreements (4h for media HIGH, 7 days for case studies)
- Approval authority matrix (admin vs. John Stroh)
- Quality assurance checklists
- Incident response (boundary violations, poor quality)
- Training & onboarding procedures
Key Principles Across All Documents:
- Tractatus dogfooding: Framework governs its own AI operations
- "What cannot be systematized must not be automated"
- Zero tolerance for AI values decisions without human approval
- Transparency in all AI assistance (clear attribution)
- Human-in-the-loop for STRATEGIC/OPERATIONAL quadrants
- Audit trail for all AI decisions (2-year retention)
Next Steps (Awaiting Approval):
- [ ] John Stroh reviews all 8 documents
- [ ] Budget approval ($550 for Phase 2, $100-150/month ongoing)
- [ ] Phase 2 start date confirmed
- [ ] OVHCloud VPS provisioned
- [ ] Anthropic Claude API account created
Phase 2 Status: PLANNING COMPLETE → Awaiting approval to begin deployment
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-07 12:52:14 +13:00
TheFlow