Phase 1 → Phase 4 build plan

Data spine (Supabase + Drizzle + RLS)

cro.* schema in Supabase with RLS deny-by-default, pgvector enabled, append-only provenance_event, staging_record, and signature tables. Drizzle migrations applied to project clkifpedvomnpgajdsid.

2026-02-12

Orchestrator kernel

services/orchestrator with the governor policy enforcement, staging-write contract, and provenance emitter. Every regulated action flows through governor.ts.

2026-02-20

E-signature service (21 CFR Part 11)

services/esign with re-authentication, stated intent, immutable signature row, and the staging→live promotion gate.

2026-03-04

Audit-trail agent (27)

agents/27-audit-trail surfaces ALCOA+ gaps from the provenance log and proposes remediations into staging.

Agents: 27-audit-trail

2026-03-18

Knowledge / RAG agent (30)

agents/30-knowledge-rag with pgvector-backed citation-grounded retrieval. Rejects any non-cited claim via packages/citations.

Agents: 30-knowledge-rag

2026-03-26

Evaluation agent (31)

agents/31-evaluation runs the promptfoo golden suite, gates prompt changes on model-registry version bumps, and ships eval dashboards.

Agents: 31-evaluation

2026-04-02

Essential Documents agent (04)

agents/04-essential-documents authors and tracks ICF, protocol, IB, and other TMF essentials. A2 supervised — drafts to staging, human signs.

Agents: 04-essential-documents

2026-04-15

Web inspection view

apps/web /inspection page surfaces the full evidence binder — signed records, provenance events, agent decisions, linked SOPs — in a single navigable view.

2026-04-22

L5 web consoles (recent features)

The web app at apps/web has shipped a full suite of consoles: staging, studies, agents, costs, risks, timeline, compliance, sitemap, digest, glossary, models, tour, /me, search, and validation registry.

2026-06-04