Contract
What Chest is being built to do
Every clause of the product Chest is building toward, and how much of it the code does today. Judged from the code and tests, not from plans.
43 of 96 clauses done
45% (43)32% (31)23% (22)
- 43 done
- 31 partial
- 22 missing
Judged at commit 27ee65a ·
Published clauses
23 done · 1 partial · 0 missing
of 24
Target and push further
20 done · 30 partial · 22 missing
of 72
Product target
- Category
- Business cloud file storage, sync and sharing
- Replaces
- Google Drive (Google Workspace), Dropbox Business, Box, Microsoft OneDrive / SharePoint
- Must also beat
- Egnyte, LucidLink, Nextcloud
- First buyer
- A US operations lead at a 10–100 person business replacing its everyday file store, sync and sharing; costs in USD
Progress by area
8 areasPublished · 2 areas
- Identity, original custody and governed records13 done0 partial0 missing
- Everyday files, sharing and hosted operation (0.2.0)10 done1 partial0 missing
Target and push further · 6 areas
- The everyday business file system1 done9 partial4 missing
- External exchange, previews and collaboration3 done8 partial3 missing
- Recovery, administration and operational trust9 done6 partial3 missing
- Move-in from incumbents and challenger filespaces0 done4 partial3 missing
- Integrations, rules and follow-up2 done2 partial8 missing
- Push further: agents that maintain the file system5 done1 partial1 missing
All clauses
Showing 96 of 96 clauses
| Clause | Title | Status | Evidence or gap |
|---|---|---|---|
| Identity, original custody and governed records 13 done · 0 partial · 0 missing | |||
| CHEST-01published | Owner and ordinary staff identity | Done | src/src/src/tests/tests/ |
| CHEST-02published | Typed filing without lost values | Done | src/src/tests/ |
| CHEST-03published | Validate before publishing originals | Done | src/src/tests/ |
| CHEST-04published | Accountable filing and safe moves | Done | src/tests/ |
| CHEST-05published | Safe basic previews | Done | src/tests/tests/ |
| CHEST-06published | Current access governs every private door | Done | src/src/src/tests/tests/ |
| CHEST-07published | Immutable versions and precise approved pointers | Done | src/src/tests/tests/ |
| CHEST-08published | Exact-version human decisions | Done | src/tests/tests/ |
| CHEST-09published | Review and expiry work retain evidence | Done | src/src/tests/tests/ |
| CHEST-10published | People and group grants | Done | src/src/tests/tests/ |
| CHEST-11published | Reviewed reversible archive admission | Done | src/src/tests/tests/ |
| CHEST-12published | Complete independent local recovery | Done | scripts/scripts/tests/tests/ |
| CHEST-13published | Self-service reversible trash and mutation audit | Done | src/src/tests/tests/ |
| Everyday files, sharing and hosted operation (0.2.0) 10 done · 1 partial · 0 missing | |||
| CHEST-14published | Team spaces, nested folders and phone uploads | Done | src/src/src/public/tests/tests/ |
| CHEST-15published | Large uploads resume where they stopped | Done | src/src/public/tests/ |
| CHEST-16published | Restore a file to an earlier version | Done | src/src/tests/tests/ |
| CHEST-17published | Restore a folder to a date, and undo it | Done | src/src/tests/tests/ |
| CHEST-18published | Links for anyone with a password, expiry and download limit, and revoke | Done | src/src/src/src/tests/ |
| CHEST-19published | Shared too widely, and Make private | Done | src/src/tests/ |
| CHEST-20published | File requests from anyone | Done | src/src/src/tests/ |
| CHEST-21published | Search finds words inside PDFs, only where you have access | Done | src/src/src/tests/tests/ |
| CHEST-22published | Space viewers read and download only | Done | src/src/tests/tests/ |
| CHEST-23published | Hosted Chest on your own Cloudflare account, with email sign-in, backup, restore and removal | Partial | deploy.jsonscripts/scripts/scripts/scripts/docs/tests/tests/Gap: Email sign-in and invitations are tested against the built Worker; no repository test deploys to Cloudflare or runs a hosted backup, restore or removal. The 0.2.0 release gate ran them by hand. |
| CHEST-24published | Upgrading from 0.1.0 keeps every record and original | Done | migrations/migrations/migrations/migrations/migrations/tests/tests/tests/.github/ |
| The everyday business file system 1 done · 9 partial · 4 missing | |||
| SPACE-001target | Team spaces and ordinary files | Partial | src/src/src/src/src/src/src/tests/tests/tests/tests/src/src/src/src/src/src/tests/tests/tests/src/src/tests/Gap: Team spaces, personal areas, nested folders with inherited grants and a breadcrumb, create/rename/move/copy/trash, untyped upload by drop, picker or phone camera, stable IDs, restricted subfolders, star, recent, shortcuts and offboarding to a successor exist; Personal-file and folder ownership offers now require recipient acceptance, preserve IDs, original versions, links and grants, support decline/cancel and optional sender editor access, and notify both parties by email and in-app. Acceptance hands existing public links and upload requests to the recipient without changing their tokens or original authorship, even if the sender relinquishes direct access; arrivals notify the new custodian. Changed content, identities or destination collisions cannot silently complete an old offer. The file page explains current inherited, direct, group and organization-link access. The browser New menu creates valid blank Office/OpenDocument files and independent copies from built-in or audience-scoped published templates, with caller-key idempotency, quota admission, creator attribution, search and recent visibility. Selected folders require exact-version review of new originals, inherited through subfolders and retained on moved files; approved A stays current while B/C await review, and restore, editor saves, sync and file-request arrivals enter as new submissions. Reviewer assignment grants no access. Governed folders now select a managed type inherited by subfolders: uploads and creation require valid typed values and an accountable person; schema edits preserve stored values, diagnose only accessible items, and refuse stale replacements/restores. Resumable uploads retain filing values; corrections are audited. Moves retain governance and typed values. Missing: the full EDIT-004 Collabora/provider/native experience and a SCALE-001 reference-size run. |
| SPACE-002target | Space creation control and new-space defaults | Done | src/src/src/src/src/src/src/src/src/src/tests/tests/ |
| ROLE-001target | Five-level roles and delegated sharing | Partial | src/tests/Gap: Viewer, commenter, contributor, content manager and manager on spaces, file-level viewer/commenter/editor, restricted inheritance, per-space and per-item no-download and the editor sharing switch exist; EDIT-001 comment-and-suggest sessions, a per-role browser matrix and the BULK-001 archive door do not. |
| VERSION-001target | File version history and restore by editors | Partial | src/src/src/tests/tests/Gap: Staff version history, download, naming, replacement and attributed restore with retained later bytes, stable links and governed approval pointers are implemented and exercised through HTTP and browser journeys. Missing: restores delivered to open EDIT-001 sessions as a remote change (public/chest-office.js refreshes comments and presence only), and migration/signature arrival provenance in version history; those arrival workflows are not implemented. |
| TRANSFER-001target | Resumable files and whole-folder uploads | Partial | src/src/public/tests/tests/Gap: Resumable multipart upload (browser and API) of several files at once, up to 4 GB per file, exists: per-file percentage, pause, cancel, automatic retry after a lost connection, resume after a reload or restart from the parts already received (choosing the same file in the same place), every byte SHA-256 verified (and checked against a stated checksum) before the file appears, with the check's elapsed time and an estimate shown, a resumed upload showing only its live progress, completion that never makes a second file, and actionable per-file refusals (name taken, too large, no access). QUOTA-001 refusals are enforced on direct and resumable uploads with an actionable per-file message. Whole-folder uploads, the 5 TB limit, 100,000-item per-item results and desktop/mobile clients remain. |
| BULK-001target | Multi-select actions and archive download | Partial | src/src/public/tests/tests/docs/Gap: Browser selections persist across folders and search. Private durable jobs move, copy, share, trash and restore with atomic per-item receipts, live source/destination ACL and policy checks, partial results, cancellation and restart-safe explicit continuation. Streaming ZIP64 captures exact selected versions, retains names/tree and includes a manifest with hashes and exclusions; each original chunk rechecks live access and affected-source upload-protection pauses. The public-door flow exercises 200-file archives with five exclusions, 197/3 move/share results, restart and concurrent copying. Browser selection, ZIP, trash/restore and stored outcomes are exercised at 1440 and 390. Missing: signed desktop/mobile selection, guest and request-recipient archive grants, the 6 GB guest exercise, unbounded trees and autonomous server-side execution. |
| SYNC-001target | Windows and macOS filesystem clients | Partial | src/src/tests/Gap: The server protocol a client needs exists (device keys, tree, change journal with cursors, ranged hydration, create/upload with base version, rename/move/delete); the signed macOS File Provider and Windows Cloud Files clients do not. A restore is present in the tested server change feed, but receipt of restored bytes/version IDs in the native clients remains unimplemented and untested. |
| SYNC-002target | Offline edits and lossless conflict reconciliation | Partial | src/tests/Gap: A save from an outdated base keeps the remote version current and files the client bytes as a named conflict copy, and revoked access refuses the upload; the client side (offline queue, cutover, private recovery copy) does not exist. |
| SYNC-003target | Visible sync operations and device control | Partial | src/tests/Gap: Device list with last contact, revoke and deactivation-stops-devices exist; client states, proxy and bandwidth settings and wipe do not. |
| SYNC-004target | Creative assets stream and lock safely | Missing | Gap: No delivered product workflow. |
| SYNC-005target | Hybrid local cache and storage | Missing | Gap: No delivered product workflow. |
| SYNC-006target | Computer folder backup | Missing | Gap: No delivered product workflow. |
| SYNC-007target | Office desktop presence, newer-version alerts and locks | Missing | Gap: No delivered product workflow. |
| MOBILE-001target | Native iOS and Android file access | Partial | src/src/public/tests/tests/Gap: Responsive browser browse and resumable upload with the phone's camera or file picker exist; native apps, background/offline sync and mobile sharing do not. |
| External exchange, previews and collaboration 3 done · 8 partial · 3 missing | |||
| SHARE-001target | Policy-controlled external links | Partial | src/src/src/src/src/src/src/tests/tests/tests/tests/src/tests/src/tests/tests/src/src/tests/tests/Gap: Organization links (viewer/commenter/editor, discoverable or not), restricted links that grant no new access, and public file/folder links exist. Public links support salted password hashes with throttling, expiry, atomic download limits, current, a retained pinned version or the authoritative approved version of a reviewed file, rendered previews of readable Office/plain-text files with original downloads refused, and one-click revocation. Folder links exclude restricted descendants. The item and Links pages show expiry, used downloads, version mode and policy suspension. Organization/space/creator-group link switches are enforced live; new-link audience defaults and organization-link role defaults do not change old links. Browser journeys at 1440 and 390 cover creation, password refusal, exact original bytes, preview, usage, revoke and policy suspension. Approved-only links follow exact decisions: approving B never selects pending C; pending originals stay hidden from landing, preview, download and query overrides, and revocation ends old URLs. Named-guest and exact-domain links now require a one-use email confirmation, issue a link-scoped 12-hour cookie, and recheck audience, custodian, expiry, policy, password and download limits for every page, preview and original. No staff account or library access is created; restricted descendants remain excluded. Verified recipients are attributed in audit, with visitor identities hidden from non-manager file activity. External commenter links now add version-bound discussions with provider mail/in-app notices, isolated from internal comments and other links. Pinned folder links retain the original membership, paths, names and exact versions; newly arrived files are excluded, while current restrictions, moves, trash and revocation still win. Snapshot creation currently admits at most 500 descendants and 100 folder levels with explicit refusal above either. Guest editor/contributor roles, larger folder snapshots, organization-link password/download-limit/version controls and the full POLICY-001 sharing policy remain. |
| SHARE-002target | Upload-only file requests | Done | src/src/src/src/src/src/src/src/public/src/tests/tests/tests/ |
| SHARE-003target | Delivery receipts and large-file transfers | Done | src/src/src/src/src/tests/tests/docs/ |
| SHARE-004target | Item sharing, Shared with me and access requests | Done | src/src/src/tests/tests/ |
| SHARE-005target | External collaborators who edit, comment and upload | Missing | Gap: No delivered product workflow. Guest editors and contributors cannot restore, replace or name versions with verified-email attribution. |
| POLICY-001target | Organization sharing policy | Partial | src/src/src/src/src/tests/tests/src/src/tests/Gap: Organization, space and creator-group rules now control external sharing, exact trusted domains, anonymous links, non-member access, editor sharing, recipient confirmation, new-link defaults and discovery. Browser confirmation names recipients before any grant or mail is created. Tightening filters existing named grants and guest/public/organization links at the next access request; definitions survive for reallowing, and scoped sharing-policy admins see and remove suspended grants without file-content access. Every save audits before/after values. HTTP and browser flows at 1440/390 exercise refusal, trusted guests, confirmation, live suspension, reallow/removal and member/editor restrictions. Missing: acceptance through the unimplemented Slack/Teams, mail add-in, automation and Google companion connectors (CONNECT-001/002/008/009/010), which need their provider applications. |
| PREVIEW-001target | Office, Google, video and design previews | Partial | src/src/src/src/src/tests/docs/src/tests/Gap: In-install DOCX text/tables/basic formatting/raster images, XLSX sheets and saved values, and PPTX slides in relationship order now preview at phone and desktop widths; current access and public-link restrictions gate previews. Advanced Office layouts/themes/charts, Google formats, video and design rendering remain incomplete. |
| SEARCH-001target | Full-text and scanned-content search | Partial | src/src/src/src/src/src/src/tests/tests/src/src/src/tests/tests/Gap: Names, typed fields and the text of every current version are searched with snippets under current access: UTF-8 text, PDF text layers, DOCX/XLSX/PPTX/ODT/ODS/ODP text, and OCR of image-only PDF pages and JPEG, PNG, WebP, GIF and HEIC images with the installation's own AI model key (language and confidence recorded per page, truncation shown with its offset, encrypted PDFs shown as unread). Browser and named API filters combine type, owner, creator, sharer, timezone-aware modification dates, recursive space/folder location, personal/shared/starred/trash and retained versions. Search ranks names and current content ahead of earlier-version hits; earlier matches show their exact version and snippet. Counts and people/folder choices follow current access. PDF signatures override misleading extensions; Office categories use the extracted package format and text tables are detected from their contents. HTTP and browser journeys at 1440 and 390 exercise combined filters, earlier versions and revocation. Missing: TIFF OCR, legacy Office, RTF, Apple iWork, Google export, EML/MSG, audio/video transcripts, native iOS/Android search and the SCALE-001 search target; OCR is unavailable on RER Managed until an egress relay exists. |
| SEARCH-002target | Typed fields read from scans and shown where they were found | Partial | src/src/src/src/src/tests/src/src/src/src/src/tests/tests/src/src/src/tests/src/tests/Gap: On a scanned Library record or everyday file in a typed folder, typed fields are proposed with page, source box and confidence. Contributors/editors confirm, correct or reject each proposal; viewers are refused. Saved values are never overwritten; confirmations become searchable typed metadata and audit provenance names the exact version, page, box and model. W-9 TIN proposals and corrected decisions retain only a masked last four digits, with sensitive model notes discarded. New versions propose changed or still-undecided fields while prior decisions remain on their versions. Decisions fence current access, file version and type revision; a changed type cannot accept a stale reading. HTTP and browser journeys exercise typed-folder reading, corrections, saved-value preservation and read-only viewers at 1440 and 390. An explicit folder scan-intake setting admits PDF/photo arrivals with required values empty; approval refuses them until a person confirms or enters every required field. Ordinary uploads retain required-value admission. Missing: TIFF OCR, native iOS/Android apps, owner-selected spend and retention under AGENT-007,. |
| EDIT-001target | Office and independent browser co-authoring | Partial | src/src/src/src/src/tests/docs/Gap: Built-in DOCX text and XLSX value editing saves attributed immutable versions of the same file, preserves untouched package parts, supports restoration, refuses conflicting saves and merges structurally unchanged independent fields. Current-session presence and viewer/editor gates exist. Live shared typing, full layout/formula editing, PPTX editing, shipped Collabora, tracked suggestions and the full review loop remain unimplemented. |
| EDIT-002target | Google-format collaboration without hidden loss | Missing | Gap: No delivered product workflow. |
| EDIT-003target | Contextual comments and collaborative tasks | Partial | src/src/src/src/tests/tests/docs/Gap: Version-bound file comments notify the file owner by in-app notice and the installation mail provider; presence rechecks live sessions and access. Managed email reports one unavailable line pending outbound support. In-document anchors, mentions, threads, assignments, tasks, tracked suggestions and email replies/resolution remain unimplemented. |
| EDIT-004target | New documents, spreadsheets and presentations from blank or templates | Partial | src/src/src/src/src/src/src/src/tests/tests/docs/Gap: Contributors create blank DOCX/XLSX/PPTX or ODT/ODS/ODP in any writable browser folder, or use ten built-in templates. Organization and group format defaults, organization/group/space template audiences, thumbnails, publish/unpublish, independent bytes, source-version provenance, current ACL, quota, audit, recent/search/sync visibility and atomic caller-key idempotency exist. Office documents and spreadsheets open directly in Chest’s text/cell editor; presentations and ODF are download-to-edit. Missing: shipped Collabora and Microsoft/Google provider creation, native apps and guests, delegated service-settings admin, desktop Office/LibreOffice repair-free proof and templates above the existing 8 MB Office limit. |
| SIGN-001target | Built-in eSignature on PDF and DOCX files | Missing | Gap: No delivered product workflow. |
| Recovery, administration and operational trust 9 done · 6 partial · 3 missing | |||
| RECOVER-001target | Folder and account point-in-time recovery | Done | src/src/tests/tests/ |
| RECOVER-002target | Scheduled independent backups and upgrade recovery | Done | scripts/scripts/scripts/scripts/scripts/src/src/tests/tests/docs/tests/tests/ |
| ADMIN-001target | Federation and lifecycle provisioning | Done | src/src/src/src/src/src/src/src/src/src/src/src/migrations/tests/tests/tests/tests/tests/docs/ |
| ADMIN-002target | Admin reporting and legible USD costs | Partial | src/src/src/src/src/src/tests/tests/src/tests/docs/Gap: Permission-scoped metadata activity filters, cursor pagination and complete CSV exports now include in-scope guest events and honor existing view-hiding policy; retained-original storage reports reconcile live/previous/trash/quarantined bytes across areas with effective limits. Organization service-settings admins explicitly confirm named provider/quote USD rates, and reports label current monthly storage estimates. ADMIN-002 is exercised within the existing administrative HTTP/browser journey at 1440/390, including a 305-download CSV, content refusal and live role revocation. Remaining: complete transfer/egress metering and dated provider/AI cost attribution, external-guest inventory, and real Collabora edition/enablement, capacity and every-refusal reporting. Historical audit events and cumulative reader tokens are not treated as billed egress or AI spend. |
| ADMIN-003target | Several admins, delegated admin roles and owner transfer | Done | src/migrations/src/tests/docs/ |
| ADMIN-004target | Enforced multi-factor sign-in without an identity provider | Done | src/src/src/src/src/src/src/public/migrations/tests/tests/ |
| QUOTA-001target | Storage limits for users and spaces | Done | src/src/src/src/src/src/src/src/public/tests/tests/tests/tests/docs/ |
| SECURITY-001target | Scoped encryption and secret custody | Partial | src/src/src/src/scripts/tests/tests/Gap: Private HTTP/ACL, hash-only device keys and link tokens and archive exclusions exist; complete device/provider encryption and key rotation coverage does not. |
| SECURITY-002target | Content threats and classification policy | Missing | Gap: No delivered product workflow. |
| SECURITY-003target | Ransomware and mass-corruption protection | Partial | src/src/src/tests/docs/Gap: Browser/API and device-protocol replacements are sampled before publication for entropy jumps and lost signatures; ransom-note names are held too. Durable session/device pauses retain exact suspect bytes privately, alert the uploader and scoped security admins, and refuse affected-source original downloads. Keep originals, stale-safe replacement release and explicit resume survive restart; other sources and intervening legitimate versions remain independent. Browser journeys exercise these states at 1440 and 390. Missing: signed clients and client-side pre-upload signals/tray, mass rewrite/rename detection, complete ordinary-version quarantine history, large-original release and the 500-file native incident exercise. |
| GOVERN-001target | Retention, legal hold and discovery integrations | Missing | Gap: No delivered product workflow. |
| AUDIT-001target | Durable complete action history | Done | src/src/src/src/src/src/src/src/src/src/src/tests/tests/ |
| ERASE-001target | Deliberate erasure separate from trash | Done | src/src/src/scripts/scripts/scripts/tests/tests/tests/tests/docs/ |
| OPS-001target | Responsive accessible and observable operation | Partial | src/src/tests/tests/Gap: Responsive journeys exist, and a hosted install is documented (docs/hosting.md) with mail chosen by deploy settings (scripts/installer/deploy.mjs) and a real hosted backup and restore (scripts/hosted-backup.mjs, scripts/hosted-restore.mjs); native/admin expansion and accessibility conformance are unproven. |
| SCALE-001target | Stated operating scale and responsiveness | Missing | Gap: No delivered product workflow. |
| OPS-002target | Availability target, durability of originals and incident status | Partial | src/src/tests/tests/Gap: A health endpoint and admission checksums exist; external probes, availability measurement, second copies, scrubs and incident notices do not. |
| OPEN-001target | Free MIT-licensed source with no seat or feature charges | Done | LICENSETHIRD-PARTY-LICENSES.mdscripts/tests/docs/ |
| OWN-001target | Owner-run installation on a computer, a server or the owner's cloud account | Partial | docs/docs/scripts/scripts/scripts/scripts/deploy.jsontests/Gap: A fresh-clone rer dev on the owner's computer is tested, and deployment to the owner's Cloudflare account is documented (docs/hosting.md) with mail chosen by deploy settings (scripts/installer/deploy.mjs) and a hosted backup and restore (rer run hosted-backup / hosted-restore: scripts/hosted-backup.mjs, scripts/hosted-restore.mjs) that run with rer's own Node after the install.sh install; the restore clears company sign-in sealed by the old deployment so everyone signs in by email (scripts/hosted-restore.mjs, tests/chest/organisation.mjs); a documented install on the owner's own server, serving staff over HTTPS with the owner's mail and storage, and a tested move between targets do not exist. |
| Move-in from incumbents and challenger filespaces 0 done · 4 partial · 3 missing | |||
| MIGRATE-001target | Reconciled migration and controlled cutover | Partial | src/src/tests/Gap: Reviewed bounded synthetic archive import exists; vendor discovery, complete histories, migrated open review work and delta/cutover do not. |
| MIGRATE-002target | Google Drive and Shared Drives migration | Partial | src/public/public/tests/Gap: Move in imports Google Takeout Drive zips (several parts, zip64, CRC-checked) into any space or folder with their folder tree through the resumable upload, and a rerun skips what arrived; a direct Drive connection, Shared Drives, permissions, shared links, comments, versions, delta passes and per-file reconciliation do not. |
| MIGRATE-003target | Dropbox Business migration | Partial | src/public/public/tests/Gap: Move in imports Dropbox folder-download zips or a synced Dropbox folder with the folder tree; a direct Dropbox connection, team folders, permissions, shared links, versions and delta passes do not. |
| MIGRATE-004target | Box migration | Partial | src/public/public/tests/Gap: Move in imports Box download zips or a Box Drive folder with the folder tree; a direct Box connection, collaborations, shared links, versions, metadata and delta passes do not. |
| MIGRATE-005target | OneDrive and SharePoint migration | Missing | Gap: No delivered product workflow. |
| MIGRATE-006target | Egnyte, LucidLink, Nextcloud and file shares | Missing | Gap: No delivered product workflow. |
| MIGRATE-007target | Embedded link rewriting and old-URL resolution | Missing | Gap: No delivered product workflow. |
| Integrations, rules and follow-up 2 done · 2 partial · 8 missing | |||
| CONNECT-001target | Slack file collaboration | Missing | Gap: No delivered product workflow. |
| CONNECT-002target | Microsoft Teams file collaboration | Missing | Gap: No delivered product workflow. |
| CONNECT-003target | Salesforce and HubSpot record-linked files | Missing | Gap: No delivered product workflow. |
| CONNECT-004target | Docusign execution and return custody | Missing | Gap: No delivered product workflow. |
| CONNECT-005target | Zoom meeting file exchange | Missing | Gap: No delivered product workflow. |
| CONNECT-006target | Email and app intake | Partial | src/src/src/tests/Gap: Cloudflare Email Routing intake addresses per space deliver attachments into a chosen folder with message/sender/date provenance, replay protection and revocation by pausing intake or losing manager access. The setup page says what it needs (Chest on Cloudflare Workers and a domain on Cloudflare with Email Routing, or a subdomain when the domain already gets mail), gives the Cloudflare steps screen by screen, and points people without such a domain to file requests. The built Worker email-event flow is exercised locally. Hosted native delivery through Cloudflare Email Routing and the real-model filing notice were exercised with the installation’s verified SendGrid sender. Missing: Gmail/Outlook and app connectors, source policy scopes and durable queue reconciliation. |
| CONNECT-007target | Public API, webhooks and scoped agents | Done | src/public/migrations/tests/tests/tests/docs/ |
| CONNECT-008target | Gmail and Outlook compose and save add-ins | Missing | Gap: No delivered product workflow. |
| CONNECT-009target | Zapier and Make automation apps | Missing | Gap: No delivered product workflow. |
| CONNECT-010target | Google Meet, Calendar, Chat and Forms file companion | Missing | Gap: No delivered product workflow. |
| RULE-001target | Reversible arrival rules | Done | src/src/src/src/src/src/src/src/tests/tests/tests/ |
| FOLLOW-001target | Persistent collaboration follow-up | Partial | src/src/src/tests/tests/Gap: Due/upcoming work, evidence completion and share, request and expiry notices by in-app notice and email exist; background reminders, mobile push, provider outcomes, replies by email and personal notification settings do not. |
| Push further: agents that maintain the file system 5 done · 1 partial · 1 missing | |||
| AGENT-001push further | File and classify authorized arrivals | Done | src/src/src/src/src/src/src/src/src/src/src/src/tests/tests/tests/ |
| AGENT-002push further | Reconcile duplicates and superseded versions | Done | src/src/src/src/src/src/src/src/tests/tests/tests/ |
| AGENT-003push further | Repair permitted synchronization and verify bytes | Done | src/src/src/src/scripts/scripts/scripts/tests/docs/ |
| AGENT-004push further | Finish collection and prove the right version arrived | Done | src/src/src/src/src/src/tests/tests/docs/ |
| AGENT-005push further | Continuously repair broken and over-shared links | Done | src/src/src/src/src/src/src/src/src/deploy.jsontests/tests/ |
| AGENT-006push further | Build and validate a trustworthy move-in | Partial | src/tests/Gap: Manual hash/gap reconciliation and reversible staging exist; agent/provider mappings and collaborator validation do not. |
| AGENT-007push further | Evidence-grounded questions and custom jobs | Missing | Gap: No delivered product workflow. |
How statuses are judged
- Done
- It ships in the default install, and a cited test or journey exercises it.
- Partial
- Some of it ships, it ships only behind an opt-in, or there is code with no requirement-level test.
- Missing
- There is no implementation.