MedinaCHF — Intent to Software: Wiring Helm's Abandoned Research Probe Into Real Production

Timeline

1. 1

   Start

   Formal Charge received: find the smallest real slice of coordinator intent ForgeKit can responsibly act on

   Explicit instruction: determine what mechanisms already exist before proposing new ones

2. 2

   Orient

   Found Helm — a complete, tested, entirely abandoned research track

   8 sessions, all dated 2026-08-14: a classifier (CONTENT/SCHEMA/FEATURE/BUG/ESCALATE, 21+ held-out cases passing) and 2 real operation contracts (Archive/UpdateAnnouncement.v1, 15/15 tests each) — zero real DB/UI integration in the 13 days since

3. 3

   Orient

   Surveyed the real MedinaCHF coordinator app

   14+ real routes, no feedback/request surface anywhere, but one proven precedent shape (emailChangeRequests: capture -> status -> resolve) to model against

4. 4

   Design

   First-Draft Commitment Checkpoint fired — asked Zeb before building

   New data model + new execution-authority boundary (Helm going from research-only to live-connected); Zeb said yes, run Council first

5. 5

   Council

   crucible:council (architect + steward, full depth) pressure-tested the shape

   Both personas converged: ship a narrow capture+preview-gated slice, but separate classifier proposal from contract authorization, revalidate at apply time, use honest bounded copy, give every needs_review item a closure path, defer Option B explicitly

6. 6

   Build

   Ported Helm's proven probe logic into real production code

   New adminIntents table (modeled on emailChangeRequests), lib/helm/classifier.ts + contracts.ts (real DB-backed, not the probe's fake in-memory DB), server actions, Settings-page UI

7. 7

   Verify

   Real dev-DB push, independently confirmed via information_schema; real tsc + production next build; live classifier run against the real Anthropic API

   Full Clerk-authenticated UI click-through was NOT possible — no live coordinator credentials available in this environment; disclosed as a real limit, not hidden

8. 8

   Audit

   Independent adversarial agent found 5 real issues before this was called done

   Dead edit-preview code path, 2 UI truth gaps (client guessed status instead of using the server's real answer), a real title-matching safety hole, and a deferred rate-limiting concern

9. 9

   Fix

   All 4 substantive findings fixed and re-verified (tsc + production build both re-run clean)

   Also fixed a related gap the audit didn't explicitly name: the approval preview showed only an abstract field diff with no announcement title, undermining the coordinator's ability to catch a wrong match

What shipped

• products/medinaCHF/lib/db/schema.ts — new adminIntents table

• products/medinaCHF/lib/helm/classifier.ts — real production port of the Helm research probe's 3-stage classifier (naive -> grounded -> adversarial rebuttal), reusing lib/ai.ts's existing draftWithClaude wrapper

• products/medinaCHF/lib/helm/contracts.ts — real DB-backed port of ArchiveAnnouncement.v1 and UpdateAnnouncement.v1, with Council-required classifier/execution separation and apply-time staleness revalidation

• products/medinaCHF/lib/actions/admin-intents.ts — submitAdminIntent, classifyExistingAdminIntent, approveAdminIntent, rejectAdminIntent, resolveAdminIntent

• products/medinaCHF/lib/queries/admin-intents.ts — getActiveAdminIntents

• products/medinaCHF/components/coordinator/AdminIntentPanel.tsx — the 'Request a change or report a problem' UI on Settings

• products/medinaCHF/app/coordinator/settings/page.tsx — wired the new panel in