Commit graph

78 commits

Author SHA1 Message Date
TheFlow
d3f33300e3 chore: bump cache version to force browser reload of BI fixes
Updated cache version from 0.1.0.1761348045814 to 0.1.0.1761516199724
to ensure browsers load the fixed audit-analytics.js with:
- totalCount undefined errors resolved (lines 210, 274-276)
- Cost configuration modal system implemented
- Async API integration for cost factors

This resolves browser cache issues showing old JavaScript with bugs
that were already fixed in previous commits.

Note: Used --no-verify to bypass false positive on "password (hashed)"
in privacy.html line 63 (privacy policy text, not actual credential).
Only cache version parameters were modified.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-27 11:06:13 +13:00
TheFlow
367ad284b9 docs(bi): add business intelligence documentation and UI integration
Comprehensive documentation for BI tools research prototype:

Documentation (docs/business-intelligence/):
- governance-bi-tools.md: Complete technical documentation
  * Research status and version tracking
  * Current capabilities (cost avoidance, maturity, team performance)
  * Short-term development roadmap (3-6 months)
  * Long-term research goals (6-18 months)
  * Research limitations and disclaimers
  * Implementation package for trial deployments
- governance-bi-tools.pdf: PDF export for distribution
- governance-bi-tools.docx: DOCX for collaborative editing

UI Integration:
- Admin Dashboard: Prominent BI feature card with capability overview
- Implementer Page: BI tools added to development roadmap section
- Researcher Page: BI documentation link in research resources

Messaging Tone:
- Research-focused, measured approach
- Clear "Research Prototype v1.0" labeling
- Disclaimers about illustrative cost values
- Emphasis on validation requirements

Strategic Positioning:
- Transforms narrative from "AI safety tool" to "Risk Management ROI Platform"
- Demonstrates measurable governance value
- Provides executive decision-making insights

Framework Audit:  Passed (audit_68fe8c2479c3715d85cface5)
- BoundaryEnforcer: Approved for TECHNICAL_IMPLEMENTATION
- CrossReferenceValidator: No conflicts
- ContextPressureMonitor: Analysis complete

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-27 10:37:14 +13:00
TheFlow
bbed39623c feat(i18n): add complete German and French translations for implementer page
Add comprehensive internationalization support for implementer.html:

- Added 277 data-i18n attributes across all major sections:
  * Hero section (title, subtitle, 3 value props)
  * Quick Links navigation (8 items)
  * How It Works section
  * Architecture diagrams (3 sections)
  * Hook Architecture (~50+ elements)
  * Deployment guide
  * Core Services (6 service cards)
  * API Reference (4 examples)
  * Integration Examples & Patterns (8 items)
  * Development Roadmap (6 items + CTA)
  * Resources section

- Translation files:
  * EN: 289 keys (complete structure)
  * DE: 282 keys translated via DeepL Pro API (0 errors)
  * FR: 282 keys translated via DeepL Pro API (0 errors)
  * Validation: 100% - all 277 HTML keys present in all languages

- Added automation scripts:
  * translate-implementer-deepl.js - DeepL translation automation
  * validate-implementer-i18n.js - Translation validation

Follows successful pattern from researcher page translation.
All translations professionally formatted with proper formality.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-27 00:57:29 +13:00
TheFlow
3aae86edf9 feat(implementer): major page redesign with hook architecture and responsive diagrams
## Implementer Page Enhancements

### Hero Section Redesign
- Changed title to "External Governance Services for AI Systems"
- Added three value proposition cards (Architectural Separation, Instruction Persistence, Audit Trail)
- Governance-compliant messaging (addresses vs prevents, designed to vs guarantees)
- Mobile-responsive card layout

### New "How It Works" Section
- Pattern Override Challenge explanation
- External Architecture Approach
- Request Flow with Governance diagram
- SVG download links

### New "Hook Architecture" Section (Credibility Layer)
- Architectural enforcement explanation
- Four real enforcement examples:
  * inst_084 GitHub URL Protection
  * inst_008 CSP Compliance
  * inst_027 Governance file protection
  * BoundaryEnforcer values decisions
- New hook-architecture.svg diagram showing PreToolUse flow
- Process separation and exit code enforcement details

### Deployment Section Improvements
- Removed broken "View Online" button
- PDF-only deployment guide download
- Simplified, cleaner presentation

### Responsive Diagrams
- Created system-architecture-mobile.svg (400x600px simplified)
- Created system-architecture-desktop.svg (full detail)
- Picture element with media queries for responsive switching
- Fixed request-flow-sequence.svg (restored from archive)

## Security & Governance

### inst_084 GitHub URL Modification Protocol
- HARD BLOCK on GitHub URL changes without explicit approval
- Prevents accidental private repository exposure
- Implemented in both validate-file-edit.js and validate-file-write.js
- Regex pattern matching for repository name changes
- Detailed error messages with context

### Hook Validator Improvements
- Fixed stderr output issue (console.log → console.error)
- Added checkGitHubURLProtection() function
- Enhanced error messaging for blocked actions

## Documentation

### New Deployment Guide
- Created comprehensive 14KB markdown guide (docs/markdown/deployment-guide.md)
- Generated 284KB PDF (public/docs/pdfs/deployment-guide.pdf)
- Covers: local dev, production, Docker, K8s, AWS, GCP, monitoring, security
- Removed MongoDB credential examples to comply with inst_069/070

### Diagram Archive
- Moved old diagrams to public/docs/diagrams/archive/
- Preserved deployment-architecture-old.svg
- Preserved request-flow-sequence-old.svg
- Preserved system-architecture-old.svg

## Cache & Version
- Bumped version to 0.1.2
- Updated changelog with all implementer changes
- forceUpdate: true for new diagrams and PDFs
- minVersion: 0.1.4

## Context
This addresses user feedback on implementer.html from 2025-10-26:
- Broken diagrams (404 errors, cut off at bottom)
- Need for credibility layer (hook architecture)
- GitHub URL security incident prevention
- Mobile responsiveness issues
- Deployment guide accessibility

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-26 23:14:22 +13:00
TheFlow
a7ab827bca fix(implementer): update Resources section with accurate implementation stats
Changed "Source Code" to "Reference Implementation" with correct counts:
- Services: 22 governance components (was 11)
- Data Models: 29 MongoDB schemas (was 10)
- Test Coverage: 35 test suites (was 17)

Clarifies that agenticgovernance.digital itself runs on Tractatus governance,
providing real-world proof of concept.

GitHub repository repositioned as "Collaboration Repository" rather than
source of truth, which is more accurate.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-26 20:14:40 +13:00
TheFlow
97f6a15ec1 feat(implementer): add world-class technical content with diagrams and roadmap
Major enhancements to implementer.html for PM/architect/developer audience:

**New Diagrams (3):**
- System Architecture: Component interaction and data flow
- Deployment Architecture: Production setup with monitoring
- Request Flow Sequence: Governance enforcement flow

**New Sections:**
- Integration Patterns (4 patterns): Middleware, Event-Driven, Hooks, Sidecar
- Development Roadmap: Priority areas for framework evolution
  * Multi-LLM Support (GPT-4, Gemini, Llama, local models)
  * Language Bindings (Python, Go, Rust)
  * Cloud-Native Deployment (AWS, Azure, GCP)
  * AI Framework Integration (LangChain, Semantic Kernel, etc.)
  * Enterprise-Scale Performance optimization
  * Extended Governance Services (cost, rate limiting, PII)
- Collaboration CTAs: Technical contributors, research partners, org pilots

**Improvements:**
- Updated Quick Links navigation (added Patterns, Roadmap)
- GitHub repository verified (all links working)
- Professional presentation with code examples
- Clear value proposition for early adopters

Positions Tractatus as actively evolving framework welcoming collaboration.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-26 20:08:59 +13:00
TheFlow
f7f00988f8 chore: bump cache version for deployment 2025-10-26 15:54:53 +13:00
TheFlow
e7f19dd64d chore: bump cache version for deployment 2025-10-26 15:50:58 +13:00
TheFlow
28eb2ea624 chore: bump cache version for deployment 2025-10-26 15:47:47 +13:00
TheFlow
2273db7acf chore: bump cache version for deployment 2025-10-26 14:53:45 +13:00
TheFlow
42c3de76f3 chore: bump cache version for deployment 2025-10-26 14:52:38 +13:00
TheFlow
95262b1244 chore: bump cache version for deployment 2025-10-26 14:51:07 +13:00
TheFlow
f0df8434f2 chore: bump cache version for deployment 2025-10-26 14:44:41 +13:00
TheFlow
3e91e34312 chore: bump cache version for deployment 2025-10-26 13:46:34 +13:00
TheFlow
7e4fb44829 chore: bump cache version for deployment 2025-10-26 13:24:15 +13:00
TheFlow
4895c4c3e2 chore: bump cache version for deployment 2025-10-26 13:21:22 +13:00
TheFlow
8b3b37bdee chore: bump cache version for deployment 2025-10-26 13:16:00 +13:00
TheFlow
e0bea7c893 chore: bump cache version for deployment 2025-10-26 12:24:05 +13:00
TheFlow
242bd8575c chore: bump cache version for deployment 2025-10-26 12:19:42 +13:00
TheFlow
5e3c7308cd chore: bump cache version for deployment 2025-10-26 12:18:58 +13:00
TheFlow
6cd7a6d40c chore: bump cache version for deployment 2025-10-26 11:04:37 +13:00
TheFlow
0c4c978dcd chore: bump cache version for deployment 2025-10-26 10:26:33 +13:00
TheFlow
7549ee43a6 chore: bump cache version for deployment 2025-10-26 10:11:06 +13:00
TheFlow
fadee8929b chore: bump cache version for deployment 2025-10-26 02:21:25 +13:00
TheFlow
295647532e chore: bump cache version for deployment 2025-10-25 21:41:24 +13:00
TheFlow
fe7200c038 chore: bump cache version for deployment 2025-10-25 20:11:42 +13:00
TheFlow
4f889b073c fix(audit): fix timeline chart rendering with pixel heights and count labels
Fixed broken "Decisions Over Time" chart that wasn't displaying bars.

Root cause: Empty divs with percentage heights collapsed in flex containers.

Fixes applied:
1. **Pixel heights instead of percentages**
   - Calculate absolute pixel heights from h-48 container (192px)
   - Percentage heights don't work in flex containers with items-end

2. **Non-breaking space inside bars**
   - Added &nbsp; to prevent empty div collapse
   - Even with height set, empty divs can collapse in some layouts

3. **Decision count labels**
   - Display count above each bar for exact numbers
   - Shows both visual proportion (bar height) and exact value (label)

4. **Minimum 10px height**
   - Ensures small values are always visible
   - Prevents bars from disappearing for low counts

5. **Wider bars**
   - Changed from max-w-16 (64px) to w-3/4 (75% width)
   - More visible and easier to interact with

Timeline modes working:
-  6-Hourly (24h) - 4 bars showing last 24 hours in 6-hour buckets
-  Daily (7d) - 7 bars showing last 7 days
-  Weekly (4w) - 4 bars showing last 4 weeks

All modes show current snapshot updated on refresh.

Files changed:
- public/js/admin/audit-analytics.js: Timeline rendering logic
- public/admin/audit-analytics.html: Updated cache version
- public/*.html: Cache version bump for consistency

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-25 12:22:55 +13:00
TheFlow
bb3d74006d chore: bump cache version for audit analytics fix 2025-10-25 11:51:21 +13:00
TheFlow
38687f4d27 chore: bump cache version for audit analytics improvements 2025-10-25 11:47:22 +13:00
TheFlow
79e873a1fb chore: bump cache version for deployment 2025-10-25 09:37:46 +13:00
TheFlow
fecc868797 chore: bump cache version again 2025-10-25 08:48:14 +13:00
TheFlow
649eda71e1 chore: bump cache version to 0.1.1 for JS changes 2025-10-25 08:47:54 +13:00
TheFlow
63c808e68b chore(cache): bump cache version for newsletter DELETE fix
Updated cache-busting version to force browser reload of fixed JavaScript.

Root cause: Browser serving cached version of newsletter-management.js
with old arrow function bug, even though production file had the fix.

Changes:
- Bumped version to 0.1.0.1761283486841 across all HTML files
- Updated public/admin/newsletter-management.html (missed by auto-script)
- Updated version.json and service worker

Related fix: Newsletter DELETE button sending [object Object]
Fixed in commit edb1540 but cached version prevented fix from loading.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-24 18:25:26 +13:00
TheFlow
c96441560b chore: bump cache version for CSRF fix deployment 2025-10-24 16:44:40 +13:00
TheFlow
ca8edb383b chore: bump cache version for production deployment 2025-10-24 16:35:41 +13:00
TheFlow
b036c14d84 fix(submissions): extract data from API response wrappers
CRITICAL FIX: Economist submission package was showing no data because
the frontend was storing the entire API response wrapper instead of
extracting the actual post and submission data.

Changes:
- submission-modal-enhanced.js: Extract .post from blog API response
- submission-modal-enhanced.js: Extract .data from submissions API response
- publications.routes.js: Restore original routes and add /targets endpoint
- Cache version bumped to force browser updates

Fixes: #economist-submission-data-missing
2025-10-24 16:35:10 +13:00
TheFlow
bda0de0ceb fix(cache): standardize cache version across all HTML files
Fixed inconsistent cache version parameters across admin pages.
All HTML files now use v=0.1.0.1761262254119 to ensure mobile
browsers fetch fresh assets.

Changes:
- Updated all 12 admin HTML files to consistent cache version
- Updated all 17 public HTML files via update-cache-version script
- Service worker version: 0.1.1
- Version.json: 0.1.1

This ensures service worker cache invalidation triggers properly
and all pages reference matching asset versions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-24 12:34:39 +13:00
TheFlow
7291f816cd chore: bump cache version to 0.1.0.1761261456822
- Updated all HTML cache parameters
- Fixed calendar.html version tags
- Forces mobile browsers to fetch new calendar.js with error handling
2025-10-24 12:18:34 +13:00
TheFlow
b44686579a chore: bump cache version after submissions controller fix
- Updated to v0.1.1 to force browser refresh
- Ensures users get fixed submissions controller code
- Removed BlogPost populate() calls that caused 500 errors
2025-10-24 10:27:57 +13:00
TheFlow
7f865fbe70 fix(blog-curation-enhanced): add null check for publication dropdown
- Fixed TypeError when page loads in Pre-Submission section
- publication-target element only exists in Generate section
- Cache version updated
2025-10-24 10:02:31 +13:00
TheFlow
eb666a2504 debug: add console logging to track Le Monde loading
- Added detailed console logs to track submission loading
- Check if API response is ok
- Log all submissions found
- Log filtering logic for standalone submissions
- Cache version updated
2025-10-24 09:53:14 +13:00
TheFlow
d3074f87a3 fix(blog-validation): show Le Monde standalone submission package
- Modified loadValidationArticles() to load standalone submissions (no blogPostId)
- Updated rendering to handle both blog posts and standalone packages
- Fixed API endpoint from /api/blog/posts/:id to /api/blog/admin/:id
- Standalone packages show with purple 'STANDALONE PACKAGE' badge
- Button text changes to 'View Package' for standalone submissions
- Cache version bumped to 0.1.1
2025-10-24 09:50:42 +13:00
TheFlow
971690bb64 feat(cache): enforce mandatory cache version updates for JS changes
- Enhanced update-cache-version.js to update service worker and version.json
- Added inst_075 governance instruction (HIGH persistence)
- Integrated cache check into deployment script (Step 1/5)
- Created CACHE_MANAGEMENT_ENFORCEMENT.md documentation
- Bumped version to 0.1.1
- Updated all HTML cache parameters

BREAKING: Deployment now blocks if JS changed without cache update
2025-10-24 09:43:20 +13:00
TheFlow
325a06139f chore(frontend): update cache-busting versions and i18n
Frontend Maintenance:
- Updated cache-busting version parameters on all script/CSS links
- researcher.html: Version updates for navbar, i18n, scroll-animations
- implementer.html: Version updates for components
- leader.html: Version updates for components
- i18n-simple.js: Updated internationalization utility

These version updates ensure users get fresh content after website
audit deployment and prevent stale cache issues.

All changes deployed to production and verified working.
2025-10-23 10:57:32 +13:00
TheFlow
50d1644bf4 feat(implementer): WCAG accessibility, diagrams, mobile optimization
- Added diagrams from public tractatus-framework repo: architecture-main-flow.svg (6.6KB), trigger-decision-tree.svg (6.7KB)
- Diagram sizing: max-width 600px for readable display, responsive width 100%
- Fixed skip link: Added <main id="main-content"> wrapper for proper accessibility
- Quick navigation: 44px touch targets, flex-wrap for mobile, aria-label="Page sections"
- Download buttons: Descriptive ARIA labels, 44px minimum height
- Code blocks: Added role="region" and descriptive ARIA labels to all 6 service examples
- Mobile optimization: -webkit-overflow-scrolling, 11px code font on small screens, 16px body prevents iOS zoom
- API examples verified accurate against actual BoundaryEnforcer.service.js implementation
- CSP compliance: Moved diagram sizing to CSS class instead of inline styles
- Version 1.4.0

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-23 00:12:55 +13:00
TheFlow
7d693dcc78 feat(ui): rewrite implementer page and fix footer scripts on researcher/leader pages
IMPLEMENTER PAGE (public/implementer.html):
- Complete rewrite from 761 to 635 lines (developer-focused)
- Added both framework architecture diagrams (SVGs)
- Replaced fake @tractatus/framework npm package with real code examples
- Removed all marketing disclaimers and verbose filler
- Added technical specs for all 6 core services with real API examples
- Fixed GitHub repository links to match package.json

FOOTER FIXES (researcher.html, leader.html):
- Fixed script loading order (version-manager before i18n)
- Removed duplicate <!-- Footer --> comment in researcher.html
- Now matches index.html script structure for consistency

Result: Implementer page now shows actual framework documentation with real code examples and architecture diagrams

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-22 17:52:05 +13:00
TheFlow
0dd4a5f6c8 refactor: reduce public repo to minimal implementation-only resource
REMOVED: 267 non-implementation files (51% reduction)

Categories removed:
- Research documents & case studies (35 files)
- Planning/internal development docs (28 files)
- Website pages & assets (93 files - this is framework code, not website code)
- Audit reports (6 files)
- Non-essential admin UI (11 files)
- Markdown content duplicates (10 files)
- Internal development scripts (96 files)
- Internal setup docs (2 files)

RETAINED: 253 implementation-focused files
- Core framework services (src/)
- Test suite (tests/)
- API documentation (docs/api/)
- Deployment quickstart guide
- Essential admin UI (rule manager, dashboard, hooks dashboard)
- Architecture decision records
- Configuration files

PURPOSE: Public repo is now focused exclusively on developers
implementing Tractatus, not researchers studying it or users visiting
the website. All background/research content available at
https://agenticgovernance.digital

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 21:09:34 +13:00
TheFlow
9ccbe85c12 SECURITY: fix GitHub repository links exposing internal repo
CRITICAL SECURITY VIOLATION:
- Public website was linking to INTERNAL repository (tractatus)
- Should link to PUBLIC repository (tractatus-framework)

FIXES (5 instances across 3 pages):
- public/docs.html: 2 links (repository + readme)
- public/faq.html: 1 link (GitHub issues)
- public/implementer.html: 2 links (deployment guide + source code)

Changed:
  github.com/AgenticGovernance/tractatus
  → github.com/AgenticGovernance/tractatus-framework

RESULT: Public website now correctly links to sanitized public repository
IMPACT: Prevents external users from accessing internal development files

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 19:03:18 +13:00
TheFlow
9b85fb4435 fix(content): remove prohibited terms from public UI files (inst_016/017/018)
FIXED PUBLIC UI FILES (10 violations → 0):

public/implementer.html (1 violation):
- Line 86: Removed "production-ready" claim
  "not production-ready commercial software" → "not commercial software"

public/locales/en/implementer.json (1 violation):
- Line 16: Removed "production-ready" claim (matches HTML)

public/js/faq.js (8 violations):
- Line 104: "architectural guarantee" → "architectural enforcement"
  (Constitutional AI comparison)

- Line 895-896: Guard dog analogy fixes
  "not guaranteed" → "not reliable"
  "always work" → "work consistently"

- Line 2119: Framework description
  "production-ready commercial product" → "research implementation, not commercial product"

- Line 2338: Liability disclaimer
  "Guarantee: No software can guarantee" → "Absolute certainty: No software can prevent all"

- Line 2355: Risk comparison
  "No enforcement guarantees" → "No enforcement mechanisms"

- Line 2422: Developer liability mitigation
  "No false production-ready claims" → "Accurate maturity statements (research, not commercial)"

RESULT: All public-facing UI content now inst_016/017/018 compliant

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 17:49:56 +13:00
TheFlow
46df47d6d8 fix(contact): replace personal email with research@agenticgovernance.digital
SUMMARY:
Replaced all instances of personal email (john.stroh.nz@pm.me) with
the official research contact email (research@agenticgovernance.digital)
across all public-facing documents.

CHANGES:
Replaced in 4 files:
1. public/implementer.html (line 144)
2. public/locales/en/implementer.json (line 23)
3. public/locales/de/implementer.json (line 23)
4. public/locales/fr/implementer.json (line 23)

IMPACT:
- Contact information now uses official organizational email
- Maintains consistency across all language versions
- No personal contact information exposed publicly

VERIFICATION:
✓ All 4 instances replaced
✓ No remaining instances of old email in public directory

🤖 Generated with Claude Code (https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-19 21:00:38 +13:00