{"slug":"business/22-source-traceability-appendix","title":"22 — Source Traceability Appendix","section":"business","sectionLabel":"Business","status":"unclassified","type":"document","path":"business/22-source-traceability-appendix.mdx","bytes":6661,"description":null,"updated":null,"source":"integratewise/Integratewise-docs-wiki","content":"\n**Status:** Maintained registry seed\n\n## Frozen architecture\n\n| Source                                                                      | State                        | Governs                                                                                                                     |\n| --------------------------------------------------------------------------- | ---------------------------- | --------------------------------------------------------------------------------------------------------------------------- |\n| `docs/architecture/ARCHITECTURE_LOCK.md`                                    | Canonical                    | Kernel, laws, planes, runtime, Workbench, Twin, capabilities, Spine                                                         |\n| `docs/architecture/IMPLEMENTATION_CONTRACT_v1.1.md`                         | Canonical                    | Clerk, Neon, D1/KV bounds, Projection Engine, public MCP, execution                                                         |\n| `docs/architecture/PLATFORM_LOCK_v1.0.md`                                   | Canonical                    | Freeze declaration and implementation order                                                                                 |\n| `docs/architecture/FOUR_BUTTONS.md`                                         | Canonical                    | OODA interaction grammar                                                                                                    |\n| `docs/architecture/TWIN_BEHAVIOR.md`                                        | Canonical                    | Silence, surfacing, authority                                                                                               |\n| `docs/architecture/WORKBENCH_MATRIX.md`                                     | Canonical                    | Role and department view matrix                                                                                             |\n| `docs/architecture/WORKBENCH_ROLE_CAPABILITY_MAP.md`                        | Canonical                    | Role-to-capability mapping                                                                                                  |\n| `docs/architecture/MASTER_EXECUTION_PLAN.md`                                | Canonical                    | Execution phases and definition of done                                                                                     |\n| `docs/architecture/CONSOLIDATED_PRODUCT_PLATFORM_CONTRACT_v1.2.md`          | Derived governing standard   | Environment, repository, marketplace, frontend and release contract                                                         |\n| `docs/architecture/IW_SPINE_NETWORK_PLUGIN_AND_MCP_MARKETPLACE_CONTRACT.md` | Derived publication contract | Plugin Directory package, embedded host UI, MCP Marketplace package, browser Workbench, discovery and connection boundaries |\n| `docs/architecture/TENANT_SPINE_FORTRESS_OPERATIONAL_FLOW_MODEL.md`         | Derived governing standard   | Tenant entity schema, four flows, Operational/Fortress split, search, promotion, retention and environment lifecycle        |\n| `docs/architecture/SOURCE_PACK_RECONCILIATION_2026-07-28.md`                | Controlled reconciliation    | Adopted, corrected and rejected source claims                                                                               |\n\n## Approved July 27 decisions\n\n| Source                                                                     | State            | Governs                                                       |\n| -------------------------------------------------------------------------- | ---------------- | ------------------------------------------------------------- |\n| `docs/superpowers/specs/2026-07-27-auth-connector-spine-binding-design.md` | Approved         | Connector identity, Spine and schema binding, fail-closed     |\n| `docs/superpowers/plans/2026-07-27-auth-connector-spine-binding.md`        | Approved plan    | Binding implementation sequence                               |\n| `docs/superpowers/specs/2026-07-27-launch-infrastructure-freeze-design.md` | Approved         | July 30 identity, hosting, credential, binding, release lanes |\n| `docs/superpowers/specs/2026-07-27-customer-zero-publication-gates.md`     | Approved         | Customer Zero evidence and publication gates                  |\n| `docs/superpowers/plans/2026-07-27-to-30-go-live-runbook.md`               | Approved runbook | Freeze and cutover work                                       |\n\n## Code evidence\n\n| Area                         | Evidence                                |\n| ---------------------------- | --------------------------------------- |\n| Gateway identity and runtime | `services/gateway/src/`                 |\n| Clerk integration            | `services/gateway/src/clerk-auth.ts`    |\n| Connector control            | `services/gateway/src/integrations.ts`  |\n| Public MCP                   | `services/mcp-connector/`               |\n| Internal MCP Pool            | `services/mcp-pool/`                    |\n| Integration MCP              | `services/integration-management-mcp/`  |\n| Provider MCP                 | `services/provider-management-mcp/`     |\n| Pipeline                     | `services/pipeline/`                    |\n| Projection Engine            | `packages/projection-engine/`           |\n| Spine entities               | `packages/spine-entities/`              |\n| Workbench roles              | `packages/workbench-config/`            |\n| Governance and Hermes        | `services/govern/`, `services/hermes/`  |\n| Customer Zero                | `services/gateway/src/customer-zero.ts` |\n\n## Evidence gaps\n\n- strict binding tables are approved but not present in runtime migrations;\n- legacy Supabase and Descope code remains in parts of the repository;\n- host-to-host connected-tool inheritance is not proven;\n- code-backed catalog entries do not prove OAuth, read, write, sync, or live state;\n- marketplace publication and third-party review are not guaranteed by July 30;\n- deployed model and agent claims require environment-specific evidence;\n- Customer Zero journeys require recorded production proof, not local tests alone.\n\n## Source ingestion procedure\n\nFor every additional ZIP, PDF, PPTX, HTML, JSON, Markdown, text export, Coda page,\nor chat transcript:\n\n```text\nInventory → extract → classify → reconcile → create page\n→ link evidence → record version → review → verify\n```\n\nHistorical sources remain available for traceability but cannot override frozen\ncanon without an approved decision.\n"}