Skip to main content

BFG Control command center

Reviewer Export

Final acceptance pack

Reviewer export pack

One Control route packages live demo links, artifact freshness, DB/auth readiness and production cutover risks for reviewer handoff.

Routes

127/127

Localized route matrix included in smoke coverage.

Package

29 + PDF

Screenshot frames and PDF deck are refreshed locally.

Adapter contract

ScenarioStore.v1

Current API/state contract for DB/auth migration.

Cutover rehearsal

0/6

Accepted DB/auth rehearsal steps stored in Scenario Store.

Assignment proof

0

Stored vehicle and driver assignment evidence included in the final pack.

Driver proof

0

Driver reviewer launchpad evidence is included in the final pack.

Scenario snapshot

0

Portable BFGScenarioSnapshot.v1 is included in the final pack.

Migration preflight

1/5

ProductionAdapterMigrationPreflight.v1 is ready for reviewer handoff.

Migration runbook

1/6

ProductionAdapterMigrationRunbook.v1 is included for DB/auth cutover rehearsal.

Data cutover

0/5

ProductionDataCutoverPlan.v1 is included for batch migration review.

Adapter decision

1/7

Selected adapter proof included in the reviewer brief.

Connection

0/4

Redacted endpoint proof included for reviewer handoff.

Sign-off

0/5

Accepted reviewer checks stored in Scenario Store.

BFG Brain

Reviewer Export Pack Copilot

2/6 package gates are ready; 4 blockers remain before freezing the reviewer export.

Package 33%
Ready

Route Matrix

127/127

127/127 localized routes anchor the acceptance package.

Ready

Package Freshness

29 + PDF

29 screenshots plus PDF prove the offline handoff is current.

Review

Scenario Snapshot

0

0 ScenarioStore rows are portable in BFGScenarioSnapshot.v1.

Review

Adapter Evidence

0/4 · 0/5 · 0/7

Connection 0/4 and dry-run 0/5 drive DB/auth readiness.

Review

Release Handoff

3/5

3/5 release gates decide the local GO / production NO-GO state.

Review

Rollback Drill

0/4

0/4 rollback checks keep the demo recoverable.

Recommended next action

Finish adapter evidence first

4 blockers remain. Record connection and dry-run proof before calling the 29 + PDF package final.

Export blocker checklist

Route smoke stays green for the localized Control, Driver and Client surfaces.

Screenshot manifest, print deck and PDF match the latest demo story.

Scenario snapshot checksum, row count and adapter contract are visible.

Connection packet, migration runbook and dry-run transcript are present.

Release env manifest and owner handoff are copyable for reviewers.

Rollback packet, owner and decision are included before final export.

Grant handoff

Grant Handoff Index

This export gives reviewers one index for proof coverage, artifacts and the remaining local-demo-vs-real-DB/auth risk before db-auth-session-adapter is wired.

2/6 ready
Ready

Route Coverage

127/127

All coded routes remain inside the reviewer evidence map.

Ready

Artifact Package

29 + PDF

Screenshots and PDF point to artifacts/demo-deck/bfg-flowcontrol-demo-deck.pdf for offline grant review.

Watch

Scenario Snapshot

0

ScenarioStore snapshot checksum bfg-501bb997 is available for reproducible review.

Watch

Driver Proof Bundle

0

Driver statuses, uploads and dispatch intervention are packaged in the export.

Watch

Release And Rollback

3/5

Rollback checks 0/4 keep the local demo marked production no-go.

Watch

Local Demo Risk

file-local

file-local remains the demo store; production DB/auth cutover starts only after db-auth-session-adapter infrastructure is chosen.

Artifact manifest

Reviewer artifact manifest

29 screenshots, deck links and PDF path were refreshed at Jun 21, 01:24 AM. Copy or download this manifest before handing the package to reviewers.

Local artifact

Screenshot Manifest refreshed

Jun 21, 01:24 AM

Captured package timestamp from artifacts/demo-screenshots/manifest.json.

Local artifact

PDF Manifest refreshed

Jun 21, 01:25 AM

PDF export timestamp from artifacts/demo-deck/manifest.json.

Local artifact

Screenshot Package Checksum

29 files / 21.3 MB

SHA-256 add4d8e645ad; source artifacts/demo-screenshots.

Local artifact

PDF Artifact Checksum

11.8 MB

SHA-256 68ebceee9626; source artifacts/demo-deck/bfg-flowcontrol-demo-deck.pdf.

Local artifact

Integrity Manifest

/assets/demo-package-integrity/manifest.json

Open/copy artifacts/demo-package-integrity/manifest.json; generated Jun 15, 09:30 PM.

Open manifest
Full SHA

Screenshot package full SHA-256

29 files / 21.3 MB; copy the complete screenshot package hash from artifacts/demo-screenshots without opening JSON.

add4d8e645ad81e650a592aea00130c4832fda180b48cc162979c1669d96582b
Full SHA

PDF artifact full SHA-256

11.8 MB; copy the complete PDF artifact hash from artifacts/demo-deck/bfg-flowcontrol-demo-deck.pdf without opening JSON.

68ebceee9626f1868ea3d44f63ee14e17ce14dd37fb14d9071b13956f63221a2

Proof entry coverage

Dashboard and Website loop anchors are frozen here

The entry loops with PDF prefix 68ebceee9626 and screenshot prefix add4d8e645ad now land in this reviewer manifest before final handoff.

Local artifact

Production readiness decision

Infrastructure decision prompt

db-auth-session-adapter is selected for rehearsal, but BLOCKED_PENDING_DRY_RUN keeps real DB/auth cutover blocked until infrastructure owners choose the live provider.

Production blocked
Rehearsal

Selected adapter target

db-auth-session-adapter

The target is ready for local replay, not live production traffic.

Needed

Auth/RBAC owner

OIDC/RBAC

OIDC, roles and secret handling need owner confirmation before code wiring.

Guarded

Go/no-go decision

BLOCKED_PENDING_DRY_RUN

Local demo can proceed while production remains blocked.

Decision needed

Choose the real DB/auth provider before wiring production

Release gates show 3/5; data cutover remains 0/5. Keep demo evidence open, but do not claim production readiness.

Production NO-GOIntegration Settings

Owner evidence packet

ProductionDecision.v1 owner confirmation packet

Anna Kowalska owns the db-auth-session-adapter production decision trail; BLOCKED_PENDING_DRY_RUN remains blocked until real DB/auth infrastructure is selected.

Production NO-GO

Alerts owner action

ProductionDecision.v1

Alerts & Approvals carries the owner confirmation action for db-auth-session-adapter.

Open Alerts
Production NO-GO

Blocked owner task

Anna Kowalska

Tasks keeps Anna Kowalska accountable before live DB/auth wiring can start.

Open Tasks
Production NO-GO

Audit event recorded

BLOCKED_PENDING_DRY_RUN

History records BLOCKED_PENDING_DRY_RUN as the production DB/auth decision trail.

Open History

Copyable handoff

Owner packet for reviewer export

Copies the Alerts, Tasks and History evidence for Anna Kowalska before db-auth-session-adapter production wiring.

Production NO-GOManaging Director

Provider selection acceptance

Provider selection acceptance stub

Anna Kowalska must accept db-auth-session-adapter before live DB/auth wiring starts; BLOCKED_PENDING_DRY_RUN remains the only allowed production decision.

Production NO-GO

Live DB/auth provider

db-auth-session-adapter

Anna Kowalska must select the real provider contract for db-auth-session-adapter.

Production NO-GO

Auth/RBAC owner

OIDC/RBAC

Anna Kowalska must confirm roles, claims and secret handling before live users are connected.

Production NO-GO

Tenant and secrets boundary

single-tenant-local

db-auth-session-adapter remains blocked until tenant isolation and managed secrets are accepted.

Production NO-GO

Live wiring go/no-go

BLOCKED_PENDING_DRY_RUN

BLOCKED_PENDING_DRY_RUN stays locked until provider, auth and rollback owners sign off.

Infrastructure selection decision

ProductionInfrastructureDecision.v1 blocker

Anna Kowalska must choose hosting, region, runtime ownership and secrets/backup boundaries for db-auth-session-adapter; BLOCKED_PENDING_DRY_RUN stays locked until this decision exists.

0/4 accepted
Production NO-GO

Hosting provider and account

db-auth-session-adapter

Anna Kowalska must select the live hosting account/provider before db-auth-session-adapter receives production traffic.

Anna Kowalska owns this infrastructure decision before real DB/auth wiring.

Production NO-GO

Region and data residency

EU region pending

EU region, data residency and backup locality must be confirmed before live DB/auth wiring.

Anna Kowalska owns this infrastructure decision before real DB/auth wiring.

Production NO-GO

Runtime operations owner

Managed runtime pending

On-call, deploy, monitoring and incident owner must be named for db-auth-session-adapter.

Anna Kowalska owns this infrastructure decision before real DB/auth wiring.

Production NO-GO

Secrets and backup boundary

Secrets/backup pending

Managed secrets, backup/RPO and restore owner must be accepted before BLOCKED_PENDING_DRY_RUN can change.

Anna Kowalska owns this infrastructure decision before real DB/auth wiring.

Guarded DB/auth wiring

ProductionDbAuthAdapterWiring.v1 preflight

Local contract wiring for db-auth-session-adapter can start after infrastructure acceptance (0/4); production traffic remains disabled until live credentials are supplied.

0/7 local checks
Blocked

Infrastructure acceptance

Requires accepted hosting, EU region, runtime owner and secrets/backup ownership for db-auth-session-adapter.

db-auth-session-adapter.infrastructureAcceptance

Blocked

Endpoint contract

Uses the redacted adapter endpoint contract without opening a live external connection.

db-auth-session-adapter.endpointContract

Blocked

Tenant context

Maps organization and tenant claims before any live database write is allowed.

db-auth-session-adapter.tenantContext

Blocked

OIDC/RBAC claims

Prepares role claims for MD, dispatcher, accountant, driver and client scopes.

db-auth-session-adapter.oidcRbacClaims

Blocked

RLS policy draft

Confirms the tenant-scoped RLS policy plan is ready for migration review.

db-auth-session-adapter.rlsPolicyDraft

Blocked

Secrets and backup boundary

Keeps secrets, backup/RPO and restore ownership tied to the accepted infrastructure decision.

db-auth-session-adapter.secretsBackupBoundary

Blocked

Live credentials

Blocked until a human supplies reviewed provider credentials outside the local demo workspace.

db-auth-session-adapter.liveCredentials

Production NO-GO

Production traffic stays disabled

Decision=BLOCKED_PENDING_INFRASTRUCTURE_OR_CREDENTIALS; traffic=production_traffic_disabled. Live credentials and secrets are not present in the MVP workspace.

Preflight not run; infrastructure status: blocked.

Reviewer export

Final Demo Checklist

1/6 checklist items are ready for a reviewer-safe final demo handoff.

Watch

Presenter story seeded

0/8

Demo Presenter can seed the end-to-end story before the reviewer opens live routes.

Ready

Offline deck package

26 slides / 29 screenshots

The generated screenshots and PDF stay aligned with the reviewer export.

Watch

Driver proof packaged

0 status / 0 uploads / 0 dispatch

DriverReviewerLaunch.v1 covers status, upload and dispatch proof for field execution.

Watch

Reviewer export evidence

0/4 connection / 0/5 dry-run / 0/7 DB/auth

Adapter connection, dry-run and migration evidence stay visible before copy/export.

Watch

Readiness and rollback

3/5 release / 0/4 rollback

Release and rollback evidence stay reviewer-visible for production questions.

Watch

Local demo risk acknowledged

file-local -> db-auth-session-adapter

file-local is local demo proof; real DB/auth wiring waits for db-auth-session-adapter infrastructure.

Package freshness

Artifact package is ready for review

The final pack ties screenshots, print/PDF output, route coverage and scenario writes into one reviewer view.

0%
Ready

Screenshots

29

Generated PNG frames synced to public demo assets.

Ready

PDF deck

artifacts/demo-deck/bfg-flowcontrol-demo-deck.pdf

Offline deck artifact for grant or stakeholder review.

Ready

Route matrix

127/127

Every localized product route is part of the route smoke.

Ready

Captured at

Jun 21, 01:24 AM

Timestamp from the latest screenshot manifest.

Ready

Last scenario write

Not written yet

Latest API-backed demo state write seen by Control.

Ready

Proof points

27

Printable deck checks tied to live product evidence.

Review links

Open proof surfaces

Driver proof

Driver PWA reviewer evidence

DriverReviewerLaunch.v1 combines 0 status update(s), 0 upload event(s) and 0 dispatch ETA proof(s) before reviewer export.

Watch
Watch

Status updates

0

Persisted Driver PWA lifecycle events from the scenario store.

Watch

Uploads

0

CMR, POD and photo flags tied to Documents and finance close-out.

Watch

Dispatch proof

0

ControlTowerDispatchIntervention.v1 remains visible in the Driver PWA.

Watch

Audit source

DriverReviewerLaunch.v1

Reviewer-safe source marker for deck, export and readiness evidence.

Scenario snapshot

Scenario snapshot handoff

Portable JSON payload for replaying the local Scenario Store/API state during review or DB/auth migration rehearsal.

Ready

Schema

BFGScenarioSnapshot.v1

Versioned JSON envelope for the scenario payload.

Ready

Checksum

bfg-501bb997

Stable reviewer fingerprint for the exported payload.

Ready

Rows

0

Scenario records included in the portable package.

Ready

Adapter contract

ScenarioStore.v1

Current local API contract used for the replay.

BFGScenarioSnapshot.v1

BFGScenarioSnapshot.v1 packet

Session grant-demo-local packages 0 scenario rows with checksum bfg-501bb997 for replay or adapter dry-run review.

Open Dashboard snapshot

Migration preflight

Production adapter migration preflight

Reviewer-safe migration rehearsal built from the current BFGScenarioSnapshot.v1 payload, selected adapter, RBAC actors and rollback evidence.

Next

Snapshot payload

0 rows

BFGScenarioSnapshot.v1 is frozen with row count and checksum.

Next

Schema map

1/7

Adapter decision and cutover evidence identify tenant/user/order/document/audit tables.

Ready

RBAC claims

5 actors

Demo actor ids and permissions are ready to become auth claims.

Next

Adapter replay

0/5

ProductionAdapterDryRun.v1 proves write/read compatibility for the selected adapter.

Next

Rollback evidence

Blocked

Release and rollback packets keep the file-local fallback explicit.

1/5 ready

ProductionAdapterMigrationPreflight.v1 report

BFGScenarioSnapshot.v1 has 0 rows and checksum bfg-be66a44a; use this report to rehearse DB/auth migration before live infrastructure.

ProductionAdapterMigrationPreflight.v1
schema=BFGScenarioSnapshot.v1
target=db-auth-session-adapter
session=grant-demo-local
checksum=bfg-be66a44a
rows=0
adapter_contract=ScenarioStore.v1
dry_run=0/5
connection=0/4
rollback_decision=BLOCKED_PENDING_DRY_RUN
Open Settings preflight

Migration runbook

Production adapter migration runbook

Reviewer-safe migration runbook that turns the preflight snapshot, RBAC map, replay evidence and rollback seal into one DB/auth cutover packet.

Next

Freeze snapshot

0 / bfg-90572071

Snapshot rows and checksum are stable for cutover review.

Next

Schema and RLS

0/6

Tenant-scoped tables and RLS policies are mapped before live DB wiring.

Ready

Actor claims

5

Role-scoped actors map to future auth claims.

Next

Adapter replay

0/4 + 0/5

Connection and dry-run checks prove replay compatibility.

Next

Verification

1/5

Preflight readiness closes the checksum/evidence loop.

Next

Rollback seal

BLOCKED_PENDING_DRY_RUN

Rollback owner and file-local fallback remain explicit.

1/6 ready

ProductionAdapterMigrationRunbook.v1 Handoff

ProductionAdapterMigrationRunbook.v1 packages db-auth-session-adapter migration evidence with checksum bfg-90572071; copy it into the production adapter rehearsal notes.

ProductionAdapterMigrationRunbook.v1
target=db-auth-session-adapter
source=BFGScenarioSnapshot.v1
session=grant-demo-local
checksum=bfg-90572071
rows=0
preflight=1/5
cutover=0/6
connection=0/4
dry_run=0/5
release_decision=BLOCKED_PENDING_DRY_RUN
rollback_decision=BLOCKED_PENDING_DRY_RUN
runbook_decision=BLOCKED_PENDING_PREFLIGHT
Open settings runbook

Data cutover

Production data cutover plan

Reviewer-visible batch cutover plan for tenant/RBAC seed, operations replay, finance ledger and audit trail before real infrastructure is connected.

Ready

Tenant/RBAC

5 actors

Actors and permissions are ready for the tenant seed.

Next

Operations

0 rows

Orders, dispatch, driver and client rows are replayable.

Next

Finance

0 rows

KSeF and payment rows are isolated for migration.

Next

Audit

0 rows

Risk, adapter and sign-off evidence remain attached.

Next

Snapshot

0 rows

Rows and checksum are frozen.

Next

Tenant/RLS

1/6

Runbook and RLS seed are ready.

Next

Replay

0/4 + 0/5

Connection plus dry-run are complete.

Next

Parity

1/4

Batch data and preflight evidence align.

Next

Rollback

BLOCKED_PENDING_DRY_RUN

Rollback packet remains explicit.

0/5 ready

ProductionDataCutoverPlan.v1 packet

db-auth-session-adapter packages 5 batch rows with checksum bfg-e6968b02; copy it into the production adapter rehearsal notes.

ProductionDataCutoverPlan.v1
target=db-auth-session-adapter
session=grant-demo-local
snapshot_schema=BFGScenarioSnapshot.v1
snapshot_checksum=bfg-e6968b02
snapshot_rows=0
batch_rows=5
batches=1/4
steps=0/5
connection=0/4
dry_run=0/5
runbook_decision=BLOCKED_PENDING_PREFLIGHT
release_decision=BLOCKED_PENDING_DRY_RUN
rollback_decision=BLOCKED_PENDING_DRY_RUN
cutover_decision=BLOCKED_PENDING_DATA_CUTOVER
Open settings cutover plan

Assignment decision

Assignment decision evidence

Reviewer-visible dispatch assignment proof with the selected order, vehicle, driver, readiness score and audit source.

0 proof stored
Next

Order

Pending

Shipment tied to the stored assignment decision.

Next

Vehicle

Pending

Truck selected by the AI/staged assignment review.

Next

Driver

Pending

Driver stored in the dispatch assignment handoff.

Next

Readiness

0/1

Vehicle, driver, trailer and carrier checks accepted.

Next

AssignmentDecision.v1 packet

Pending

No assignment decision proof has been stored yet.

Adapter readiness

DB/auth cutover readiness

The local MVP remains file-backed, but the visible contracts identify what is ready and what must move to production infrastructure.

0/6 rehearsed

Storage adapter

file-local

Local state currently writes through the file adapter.

Auth mode

mock-auth-header

Role headers emulate the future RBAC boundary.

Tenant mode

single-tenant-local

Local single-tenant scope is explicit before production split.

Review actors

5

Persona roles are mapped to permissions and routes.

API contracts

Scenario state and metadata envelopes are stable.

Owner: Anna Kowalska · Managing Director

Next

Role headers

Actor id, role and permissions travel through the API.

Owner: Marek Zielinski · Dispatcher

Next

Scenario store

Demo writes are normalized and replayable.

Owner: Marek Zielinski · Dispatcher

Next

DB schema

Create tenant, user, permission and scenario-state tables.

Owner: Olena Shevchenko · Accountant

Next

Secrets

Move provider credentials into managed production storage.

Owner: Olena Shevchenko · Accountant

Next

Migration runbook

Backfill demo state and keep rollback for live demos.

Owner: Anna Kowalska · Managing Director

Next

Production risks

Production cutover risks

File-local adapter

Replace local disk storage with a tenant-scoped DB adapter.

Watch

Mock auth headers

Wire OIDC/RBAC before production users touch the system.

Watch

Mock providers

Swap KSeF, OCR, ETA and messaging providers behind existing interfaces.

Next

Data migration

Plan seed backfill, audit retention and rollback before cutover.

Next

Adapter decision board

Production adapter decision board

Reviewer-facing summary of the selected adapter target and the remaining production cutover decisions.

1/7 decisions ready

Adapter selected

db-auth-session-adapter

Selected

Production path is named; implementation waits on infrastructure choice.

Anna KowalskaTarget locked

Environment readiness

Staging to production

Next

Contracts plus replayable Scenario Store evidence gate environment opening.

Marek Zielinski0/2 checks

Secrets and RBAC

OIDC/RBAC handoff

Next

Auth ownership stays explicit before production users enter.

Olena Shevchenko0/2 checks

Schema/RLS

Postgres/RLS

Next

Database schema acceptance is tracked as cutover evidence.

Olena Shevchenko0/1 checks

Migration dry-run

Seed backfill

Next

Backfill rehearsal is separated from final release.

Anna Kowalska0/1 checks

Rollback window

File-local fallback

Next

Reviewer can see the fallback remains available.

Anna Kowalska0/2 checks

Owner approvals

6 checks

Next

Final release is blocked until all owner rehearsals are accepted.

Anna Kowalska0/6 checks

Adapter connection

Production adapter connection evidence

Reviewer-visible endpoint readiness packet. It proves the adapter path without exposing DSNs, tokens or passwords.

0/4 connection checks
Next

Endpoint

Reachability path recorded.

Next

TLS

Fingerprint captured.

Next

RBAC

Role claims mapped.

Next

Write probe

Replay probe accepted.

Next

Connection packet

db-auth-session-adapter

No connection packet has been recorded yet.

Fingerprint not recorded

Adapter dry-run

Production adapter dry-run checkpoint

Reviewer-visible transcript that proves the selected DB/auth adapter path can receive the local scenario payload before real infrastructure is connected.

0/5 dry-run checks
Next

Snapshot

Scenario payload exported.

Next

Schema map

Database fields mapped.

Next

RBAC claims

Actor claims replayed.

Next

Adapter replay

Write/read transcript recorded.

Next

Rollback

File-local fallback retained.

Dry-run checkpoint

db-auth-session-adapter

No dry-run transcript has been recorded yet.

Release handoff

Production release handoff manifest

Exact local-demo env values, rollback owner and go/no-go decision are visible before any real infrastructure cutover.

Ready

Env vars

9

Release values are explicit and copyable.

Ready

Adapter target

1/7

Selected DB/auth adapter evidence is visible.

Next

Dry-run transcript

0/5

Dry-run transcript must be complete.

Ready

Rollback owner

file-local

File-local fallback remains named for demo safety.

Next

Owner checks

0/6

Cutover rehearsal owners remain visible.

Blocked

Copyable env block

BFG_RELEASE_ENVIRONMENT=local-demo
BFG_RELEASE_TARGET=db-auth-session-adapter
BFG_SCENARIO_ADAPTER=ScenarioStore.v1
BFG_STORAGE_ADAPTER=file-local
BFG_AUTH_MODE=mock-auth-header
BFG_TENANT_MODE=single-tenant-local
BFG_ROLLBACK_OWNER=user_md_anna
BFG_RELEASE_EVIDENCE=ProductionAdapterDryRun.v1
BFG_RELEASE_DECISION=BLOCKED_PENDING_DRY_RUN

Decision BLOCKED_PENDING_DRY_RUN; 3/5 release handoff gates are ready.

Rollback drill

Production rollback drill packet

The same reviewer pack now carries rollback ownership, file-local fallback and audit packet proof before real DB/auth cutover.

Next

Freeze window

BLOCKED_PENDING_DRY_RUN

Release decision is frozen before production movement.

Next

Owner acknowledgement

Anna Kowalska

Rollback owner is explicit for the review packet.

Next

Storage fallback

file-local

File-local adapter remains the named fallback path.

Next

Audit packet

ProductionRollbackDrill.v1

ProductionRollbackDrill.v1 is packaged for offline review.

Blocked

Copyable rollback packet

BFG_ROLLBACK_DECISION=BLOCKED_PENDING_DRY_RUN
BFG_ROLLBACK_OWNER=user_md_anna
BFG_ROLLBACK_STORAGE=file-local
BFG_ROLLBACK_AUTH=mock-auth-header
BFG_ROLLBACK_EVIDENCE=ProductionReleaseHandoff.v1
BFG_ROLLBACK_PACKET=ProductionRollbackDrill.v1

Decision BLOCKED_PENDING_DRY_RUN; 0/4 rollback checks are ready for Anna Kowalska.

Final checklist

Reviewer checklist

Passed

Route smoke

127/127 localized routes return 200.

Passed

i18n audit

Six locale files share the same semantic key shape.

Passed

Demo package

Screenshots and PDF export are ready for offline review.

Watch

Pilot sign-off

Reviewer acceptance is stored as audit evidence.

Next

DB/auth cutover

Cutover rehearsal is 0/6; infrastructure choice remains the next production step.