docs: add document intake and ADR-015
Describe the upload link, Defender malware scan, scan cap and rollout. Update the Defender state of the storage accounts.
docs: add edge ban detector page
docs: add ADR-014 and ENGAGE sync-out
ENGAGE flows to DEMI, then to Eagle through eagle-api's HTTP API.
Add ADR-014, the ENGAGE rows reference, the sync-out section, the
ingest contract and the demi-sync-out client. Drop the statements
that nothing writes to Eagle.
docs: split Sync-Architecture, add mirror reference
Sync-Architecture.md was over the 15 KB page cap. It keeps the
explanation. Eagle-Mirror-Reference.md holds the mirrored kinds, the
refusal reasons and codes, the eagle-api parked retry, the drift
classes, the stored reconcile report and the migration re-push rule.
Anchor links on four pages repointed to the moved sections.
docs: split CI and Operating pages under 15 KB
docs: wire Eagle new-kind routes and search
docs: add Eagle new-kind mirrors and CSV reports
docs: add PDF-Titles operator page
Covers what the title job writes, what it skips, the lease and backup flow, the archive backup gate, running the worker on test, restoring one document and the pass-rate check.
docs: split backup revert into its own page
docs: add Document-Backup page
docs: describe React frontend in place of Angular
Add a build and test section to Frontend.
docs: add recent-uploads route
docs: add Secret-Sync page, point Azure-Environments at it
docs: ADR-013 stored project summaries, demo page
docs: add public config surface ADR and seeding
docs: add public-read backfill and repair page
Covers db:seed-public-reads stages and resumption, reconcile-eagle.js
misfiledParent vs unresolvedParent, the 429 backoff order, and the
eagle-api demi-repush.js script including the concurrency-4 APIM
throttle measured on test. Links it in from Sync-Architecture, ADR-011
and Connecting-an-Application-to-DEMI in place of the repo-doc pointer.
docs: add ADR-011 and the public read surface
Sync-Architecture gains the four mirrored kinds and the ACL cascade.
Search-Index-Reference lists the Cosmos-served datasets and proponentId.
docs: add CI-Workflows and Release-Process pages
docs: fix wiki for Flex-only API, no legacy app
docs: document per-user data feature
docs: add Frontend page
Claude-Session: https://claude.ai/code/session_01VxGVRZzUmnSnHmcSBVhLzL
docs: fix prod-search route and cost-ceiling facts
Prod search flipped to /demi-search when eagle-search retired; Home,
Sources-and-Status, and Environment-Reality-and-Operational-Gotchas
still pointed at the old /eagle-search route.
Azure-Environments: RG-scoped demi-ceiling-prod was deleted, replaced
by management-group-scoped epic-ceiling; added the prod reconcile
timer, its alert, and the search availability webtest to the
resource table.
Connecting-an-Application-to-DEMI: added the demi-service-write role
and named the credential eagle-api's mirror push actually uses.
docs: verify every page, split those over 15 KB
Every page checked against src/, azure/ and live Azure. History,
future state and duplicated facts removed. Search, Architecture,
Extraction and Azure ops pages split by topic. Track feed ask is
ADR-009 Proposed. EPIC.search worksheet reduced to the divergence
table.
Claude-Session: https://claude.ai/code/session_01Lv5nbmWMatCc8PzYmpupNb
docs: correct the record after the 2026-08-23 audit
Two new authority pages, because the direction changed and nothing described it:
Identity-Model (Track project ids are the master id; Eagle _id becomes an
attribute; an Eagle project with no Track counterpart is retained and flagged)
and Sync-Architecture (eagle-api pushes to DEMI on write, authenticated — not a
change-stream worker, not a poller — and why DEMI needs far less cascade than
eagle-search).
Dangerous corrections, called out rather than silently swapped:
- The backup window was overstated everywhere. demi-cosmos-test is Periodic,
240-minute interval, 8-hour retention — two restore points, not Continuous7Days.
Every 7-day claim came from demi-cosmos-dev, torn down 2026-08-11. chunks is
the only extracted copy and its restore path has never been tested.
- The project-unpublish cascade fires only on unpublish and overwrites read[]
rather than intersecting it, so an overwrite can widen a document's ACL. Both
recorded as open defects.
- ADR-004 listed three privileged roles; SECURE_ROLES has four since ADR-007
added demi-service-read.
Cost reconciled against Cost Management ActualCost: ~451 CAD/month on
c4b0a8-test-rg (Aug 16-22, 7 full days), not the ~47 ADR-008 carried, which
averaged two days of billing across twelve. budgetAmount is now below the run
rate.
Business-Rules and ADR-003 labelled aspirational — no classifier exists, no
configs/ directory, and orcsClassification is a passthrough of Eagle's field.
BR-04 is the exception: it ships as the read[] ACL.
Dev was torn down 2026-08-11, NRPTI was removed entirely, and the live index
names are projects/documents/chunks. Six pages still said otherwise.
.github/antigravity.md deleted — a stale duplicate of a dead agent's rules.
docs: rewrite wiki for the system that exists
Every page described an OpenShift + Typesense + MongoDB stack that was
deleted in July. Nothing mentioned Azure AI Search, Cosmos NoSQL, App
Service or BM25.
Deleted the five pitch-era pages plus Technical-Decisions and
Architecture-Overview: written to win funding, costed against a
$500-2000/mo strawman, and describing a plan rather than a build.
Salvaged the business framing into Home and the GIS decision into
Architecture.
Added Architecture, Search-and-Retrieval, Extraction-Pipeline, ADR-005
and Cosmos-Migration-Record, sourced from the repo's MIGRATION.md so the
facts have a home before that file goes. Moved the landing-zone notes in
from docs/.
Superseded ADR-001 and ADR-002 in place. ADR-002's premise never held
here at all: Cosmos Mongo API has no change streams.
Every environment claim re-checked against live Azure first. Three
corrections that came out of that: demi-api-dev is a Function App kind on
a B1 Basic plan, not Y1 Consumption; WEBSITE_RUN_FROM_PACKAGE is 0, not
1; and MinIO is real and current, not Typesense-era residue.
docs: add azure deployment guide and local zip workflow
docs: update architecture overview and home page for standalone master registry
docs: update related repositories roles for eagle-demi and eagle-admin
docs(wiki): add DFL Phase 1 Business Case, developer briefs, and policy guidelines
docs: convert [[wiki|links]] to standard markdown
All [[display|slug]] links replaced with [display](slug).
Renders correctly in VS Code preview, GitHub wiki, and regular repo view.