Publish consolidated BackIntel demo proof of concept

.dockerignore

@@ -1,6 +1,8 @@
 *
 !Dockerfile.runtime
+!requirements.models.txt
 !aegra.json
+!aegra.capabilities.json
 !runtime/
 !runtime/**
 !migrations/
@@ -11,8 +13,24 @@
 !tests/**
 !config/
 !config/**
+!docs/
+!docs/demo/
+!docs/demo/SupportScenario.json
 !data/
 !data/profiles/
 !data/profiles/**
 **/__pycache__/
 **/*.pyc
+
+!aegra.analysis.json
+!apps/
+!apps/web/
+!apps/web/dist/
+!apps/web/dist/**
+/apps/web/node_modules/
+!reflex_demo/
+!reflex_demo/reflex_demo/
+!reflex_demo/reflex_demo/**
+!frontend/
+!frontend/src/
+!frontend/src/styles.css

.env.analysis.example

@@ -0,0 +1,9 @@
+# Copy only nonsecret runtime settings. Inject OPENROUTER_API_KEY through Secrets.
+BACKINTEL_DATASET_DIR=/workspace/backintel-cloud/live-campaign/Datasets
+BACKINTEL_MODEL_DIR=/workspace/backintel-cloud/live-campaign/Models
+BACKINTEL_ACCESS_CREDENTIAL_FILE=/workspace/backintel-cloud/live-campaign/credentials/access.json
+BACKINTEL_AEGRA_URL=http://127.0.0.1:2028
+OMP_NUM_THREADS=2
+MKL_NUM_THREADS=2
+OPENBLAS_NUM_THREADS=2
+HF_HUB_OFFLINE=1

.github/workflows/analysis-quality.yml

@@ -0,0 +1,93 @@
+name: Analysis code checks
+on:
+  pull_request:
+  push:
+    branches: [main]
+jobs:
+  static:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - uses: actions/setup-node@v4
+        with: {node-version: '22'}
+      - uses: actions/setup-python@v5
+        with: {python-version: '3.12'}
+      - name: Install frontend dependencies
+        run: npm ci --prefix apps/web
+      - name: Build frontend
+        run: npm run build --prefix apps/web
+      - name: Frontend component checks and coverage
+        run: npm run test:receipt --prefix apps/web
+      - name: Pinned frontend dead code check
+        run: npm run deadcode --prefix apps/web
+      - name: Pinned Python dead code check
+        run: |
+          python -m pip install vulture==2.14
+          python -m vulture runtime/analysis_*.py scripts/analysis_*.py --min-confidence 100
+      - name: Compile backend
+        run: python -m compileall -q runtime scripts tests
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: analysis-component-evidence
+          path: apps/web/coverage/
+  offline:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: pgvector/pgvector:pg18
+        env:
+          POSTGRES_USER: validation
+          POSTGRES_PASSWORD: local-validation-only
+          POSTGRES_DB: postgres
+        ports: ['5432:5432']
+        options: >-
+          --health-cmd "pg_isready -U validation -d postgres"
+          --health-interval 2s --health-retries 20
+      redis:
+        image: redis:7.2.5-alpine
+        ports: ['6379:6379']
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 2s --health-retries 20
+    env:
+      BACKINTEL_VALIDATION_ADMIN_URL: postgresql://validation:local-validation-only@127.0.0.1:5432/postgres
+      BACKINTEL_VALIDATION_REDIS_URL: redis://127.0.0.1:6379/15
+      NODE_PATH: ${{ github.workspace }}/apps/web/node_modules
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - uses: actions/setup-node@v4
+        with: {node-version: '22'}
+      - uses: actions/setup-python@v5
+        with: {python-version: '3.12'}
+      - run: python -m pip install -r requirements.testing.txt
+      - run: npm ci --prefix apps/web
+      - run: npm run build --prefix apps/web
+      - name: Install pinned browser
+        run: |
+          cd apps/web
+          npx playwright install --with-deps chromium
+      - name: Unit, database, budget, and recovery checks
+        run: python scripts/validation/run_analysis_offline.py --mode unit --output artifacts/AnalysisValidation/ci-unit
+      - name: Existing runtime and all Python unit regressions
+        env:
+          BACKINTEL_UNIT_OUTPUT: artifacts/AnalysisValidation/ci-regression
+        run: python scripts/validation/check_units.py
+      - name: Five-domain simulated browser and native-clock checks
+        env:
+          BACKINTEL_VALIDATION_POSTGRES_CONTAINER: ${{ job.services.postgres.id }}
+        run: python scripts/validation/run_analysis_offline.py --mode e2e --broker-recovery --output artifacts/AnalysisValidation/ci-e2e
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: analysis-offline-evidence
+          path: artifacts/AnalysisValidation/
+  validate:
+    needs: offline
+    permissions:
+      contents: read
+    uses: ./.github/workflows/product-validation.yml

.github/workflows/dead-code.yml

@@ -0,0 +1,17 @@
+name: Dead code
+# Managed by CodexSkills bootstrap-code-quality.py
+on:
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  dead-code:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v7
+      - run: bash scripts/check-dead-code.sh
+        env:
+          QUALITY_BASE_REF: origin/${{ github.base_ref }}

.github/workflows/decision-workspace.yml

@@ -0,0 +1,68 @@
+name: Decision workspace checks
+
+on:
+  pull_request:
+    paths:
+      - 'frontend/**'
+      - 'reflex_demo/**'
+      - 'runtime/decision_workspace.py'
+      - 'tests/**'
+      - 'scripts/validation/check_units.py'
+      - 'scripts/sync_workspace_styles.py'
+      - '.github/workflows/decision-workspace.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    services:
+      postgres:
+        image: postgres:18
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: test_backintel_workspace
+        ports: ['5432:5432']
+        options: >-
+          --health-cmd "pg_isready -U postgres -d test_backintel_workspace"
+          --health-interval 5s --health-timeout 5s --health-retries 10
+    env:
+      PYTHONDONTWRITEBYTECODE: '1'
+      BACKINTEL_TEST_DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test_backintel_workspace
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - run: python -m pip install -r requirements.testing.txt -r reflex_demo/requirements.txt
+      - run: npm ci
+        working-directory: frontend
+      - run: mkdir -p artifacts/validation/DecisionWorkspace
+      - run: npm run build
+        working-directory: frontend
+      - run: npm test -- --reporter=json --outputFile=../artifacts/validation/DecisionWorkspace/frontend-unit.json
+        working-directory: frontend
+      - run: npm run code:quality > ../artifacts/validation/DecisionWorkspace/fallow.log
+        working-directory: frontend
+      - run: python scripts/validation/check_units.py
+      - run: python scripts/sync_workspace_styles.py
+      - run: reflex export --no-zip
+        working-directory: reflex_demo
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: decision-workspace-${{ github.event.pull_request.head.sha || github.sha }}
+          path: artifacts/validation/DecisionWorkspace/
+          if-no-files-found: error

.github/workflows/product-validation.yml

@@ -1,19 +1,15 @@
-name: Product validation
+name: Demo PoC validation
 
 on:
-  pull_request:
-    types: [opened, synchronize, reopened, ready_for_review]
-  push:
-    branches: [main]
-  workflow_dispatch:
+  workflow_call:
 
 permissions:
   contents: read
 
 jobs:
   validate:
     runs-on: ubuntu-latest
-    timeout-minutes: 10
+    timeout-minutes: 20
     services:
       postgres:
         image: postgres:16
@@ -32,6 +28,8 @@ jobs:
       CANDIDATE_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
       VALIDATION_OUTPUT: artifacts/validation/${{ github.run_id }}-${{ github.run_attempt }}
       BACKINTEL_TEST_DATABASE_URL: postgresql://postgres:postgres@localhost:5432/backintel_test
+      BACKINTEL_POC_EVIDENCE: artifacts/AnalysisValidation/ci-e2e
+      BACKINTEL_SANDBOX_IMAGE: backintel-demo-validation:latest
     steps:
       - name: Check out exact candidate
         uses: actions/checkout@v4
@@ -52,12 +50,21 @@ jobs:
       - name: Install project validation dependency
         run: python -m pip install --disable-pip-version-check -r requirements.txt
 
+      - name: Download this candidate's offline evidence
+        uses: actions/download-artifact@v4
+        with:
+          name: analysis-offline-evidence
+          path: artifacts/AnalysisValidation/
+
+      - name: Build actual sandbox from this candidate
+        run: docker build -f Dockerfile.runtime --build-arg BACKINTEL_CANDIDATE_SHA="$CANDIDATE_SHA" -t "$BACKINTEL_SANDBOX_IMAGE" .
+
       - name: Run exact-candidate validation
         id: validation
         continue-on-error: true
         run: |
           node scripts/validation/run.mjs \
-            --manifest tabellio.validation.json \
+            --manifest tabellio.demo.validation.json \
             --expected-commit "$CANDIDATE_SHA" \
             --output "$VALIDATION_OUTPUT"
 
@@ -66,7 +73,9 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: product-validation-${{ github.event.pull_request.head.sha || github.sha }}-${{ github.run_id }}-${{ github.run_attempt }}
-          path: artifacts/validation/
+          path: |
+            artifacts/validation/
+            artifacts/AnalysisValidation/Sandbox/
           if-no-files-found: error
           retention-days: 90
 

.gitignore

@@ -1,6 +1,27 @@
 /artifacts/validation/
+/artifacts/AnalysisValidation/
+/artifacts/Models/
+/private/
 __pycache__/
+.venv/
 *.py[cod]
 .env
+/apps/web/node_modules/
+/apps/web/dist/
+/apps/web/coverage/
 # Graphify generates a graph in the working directory and a cache beside scanned files.
 **/graphify-out/
+frontend/node_modules/
+frontend/dist/
+frontend/*.tsbuildinfo
+reflex_demo/.venv/
+reflex_demo/.web/
+reflex_demo/assets/
+reflex_demo/__pycache__/
+
+.env.*
+!.env.example
+!.env.analysis.example
+# Private tracker handoff stays local.
+docs/demo/Packages/AgentShiftReminder.json
+docs/release/AgentShiftReleaseAssessment.txt

AGENTS.md

@@ -0,0 +1,4 @@
+## Code cleanup
+
+- Run `bash scripts/check-dead-code.sh` after removing code and before review.
+- For cross-file changes, run `graphify update .`, inspect callers and dependencies, and verify findings in current source and framework registrations.

Dockerfile.analysis

@@ -0,0 +1,16 @@
+ARG BACKINTEL_BASE_IMAGE=backintel-analysis-base:local
+FROM ${BACKINTEL_BASE_IMAGE}
+ENTRYPOINT []
+WORKDIR /app
+RUN pip install --no-cache-dir 'gliner2[local]==2.0.0'
+COPY runtime ./runtime
+COPY config ./config
+COPY migrations ./migrations
+COPY scripts ./scripts
+COPY tests ./tests
+COPY reflex_demo/reflex_demo ./reflex_demo/reflex_demo
+COPY frontend/src/styles.css ./frontend/src/styles.css
+COPY aegra.analysis.json ./aegra.analysis.json
+COPY apps/web/dist ./apps/web/dist
+ENV AEGRA_CONFIG=/app/aegra.analysis.json BACKINTEL_CANDIDATE_SHA=working-tree
+CMD ["sh","-c","python -m runtime.bootstrap && python -m scripts.analysis_demo seed && exec uvicorn aegra_api.main:app --host 0.0.0.0 --port 2026"]

Dockerfile.runtime

@@ -2,16 +2,23 @@ FROM python:3.12-slim-bookworm
 WORKDIR /app
 ARG BACKINTEL_CANDIDATE_SHA
 ENV BACKINTEL_CANDIDATE_SHA=$BACKINTEL_CANDIDATE_SHA
-RUN pip install --no-cache-dir aegra-api==0.10.5 langchain-typesafe==0.0.1a3
+RUN pip install --no-cache-dir aegra-api==0.10.5 langchain-typesafe==0.0.1a3 cloudpickle==3.1.2
+ARG BACKINTEL_WITH_MODELS=0
+COPY requirements.models.txt ./requirements.models.txt
+RUN if [ "$BACKINTEL_WITH_MODELS" = "1" ]; then \
+      apt-get update && apt-get install -y --no-install-recommends libgomp1 && rm -rf /var/lib/apt/lists/* && \
+      pip install --no-cache-dir torch==2.14.0 --index-url https://download.pytorch.org/whl/cpu && \
+      pip install --no-cache-dir -r requirements.models.txt; \
+    fi
 COPY aegra.json ./aegra.json
+COPY aegra.capabilities.json ./aegra.capabilities.json
 COPY config ./config
 COPY runtime ./runtime
 COPY migrations ./migrations
 COPY scripts ./scripts
 COPY data/profiles ./data/profiles
-COPY tests/test_replay_ledger.py ./tests/test_replay_ledger.py
-COPY tests/test_costs.py ./tests/test_costs.py
-COPY tests/test_jev.py ./tests/test_jev.py
+COPY tests ./tests
+COPY docs/demo/SupportScenario.json ./docs/demo/SupportScenario.json
 ENV AEGRA_CONFIG=/app/aegra.json PYTHONUNBUFFERED=1
 EXPOSE 2026
 CMD ["uvicorn", "aegra_api.main:app", "--host", "0.0.0.0", "--port", "2026"]