Queue: API agent A — Lane P (production, high risk), sprint 2 (from 26 Oct)¶
Rule §24 (27 Oct): never ask Atul in chat; raise for-atul files, and write full https links (never "#176" or relative paths). Check open for-atul issues first; comment there if the request already exists.
Rules: MMDEP rules (§18 flows, §19 repo communication, §20 risk, §21 write what you say, §22 decisions register). After each step write runs/P<n>.md in MMDEP relay (docs/relay/api-lane-p/), then continue with the next step without waiting.
| Step | Do | Inputs | Output | Check | Then |
|---|---|---|---|---|---|
| P1 | Write-route security: the LLD is written (MMDEP docs/design/api-mmcron/api/LLD-write-route-security.md, 27 Oct). Do work item 1 first (route inventory; report at once any client-data route that accepts writes without a session check), check the LLD against src/routes.py and open one MMDEP issue labelled agent:claude listing any corrections (Claude updates the LLD), then build items 2, 4, 7, 8 and create harness issues for 3, 5, 6, 9 |
the LLD, relay rows of 19 Oct | inventory doc; MRs; harness issues | guard test green; log mode on staging |
Atul approves log on production with release 2 |
| P2 | NAV integrity: the LLD is written (MMDEP docs/design/api-mmcron/api/LLD-nav-integrity.md). In S2 do stage A: the read-only audit script and runbook (item 1), then the person-run audit (item 2) with outputs in MMDEP relay. Stage B code (items 3–5) follows; production (stage C) only after the rehearsal and Atul's approval |
the LLD; collector checks; Lane S S5 writer inventory | audit outputs in docs/relay/data/nav-audit-<date>/ |
duplicate types counted | Claude reviews the dry-run before stage C |
| P3 | /api/health on production (missing today, 404) and the /category flags fix, ready as a release candidate |
production branch | MR into the production branch, risk high, awaiting Atul | CI green, release note | Atul approves in for-atul |
| P4 | First fund factsheet page needs: confirm production routes and fields MWMC needs; write a contract | MWMC M3 | docs/contracts/fund-factsheet.md |
contract test (Sonnet T3) green | MWMC builds the page |
| P5 | MM-Cron ingest routes: the LLD is written (MMDEP docs/design/api-mmcron/api/LLD-ingest-routes.md). In S2 do items 1–2: the preflight (confirm destination tables and keys; document cliAum.py's product creation) and the OpenAPI entries; build (items 3–8) in S3 |
the LLD, adapter LLD §5 | docs/design/ingest-routes-preflight.md, docs/openapi.yaml entries |
contract lint | build on api-phase1-development in S3 |