BigSimmo · BigSimmo · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026
@@ -45,7 +45,7 @@ src/components/*mockups.tsx
 src/components/clinical-dashboard/global-mockup-search-shell.tsx
 
 # One-off Codex review prompt dumps (not product code)
-codex-cloud-review/
+docs/prompts/codex-cloud-review/
 
 # Generated schema-drift inventory (large JSON)
 supabase/drift-manifest.json

@@ -22,4 +22,4 @@ supabase/drift-manifest.json
 public/therapy-compass-data/
 docs/branch-review-ledger.md
 # Verbatim user-provided prompt inputs retained for cloud review.
-codex-cloud-review/
+docs/prompts/codex-cloud-review/
@@ -87,14 +87,18 @@ src/components/   UI; clinical-dashboard/ is the shell, *-mockups.tsx are design
 src/lib/          ~200 modules — rag/, supabase/, validation/, observability/,
                   extractors/, webhooks/ are the extracted subdirectories
 src/data/         Static clinical content (DSM, formulation, therapies indexes)
+data/             Generated clinical snapshot exports loaded at runtime — regenerate, never hand-edit
 supabase/         migrations/ (source of truth), schema.sql (mirror), functions/
 worker/           Ingestion worker; worker/python/ is the OCR stack
 scripts/          ~160 files backing 194 npm scripts: gates, eval, reindex, governance, dev
 tests/            Vitest unit + Playwright E2E, side by side
 docs/             Runbooks, governance, plans; docs/README.md categorises them
 eslint-rules/     Repo-specific lint rules (see Conventions below)
+mockups/          Notes for the design-scratch routes under src/app/mockups/
+plugins/          plugins/clinical-kb/ Codex plugin manifest and workflow skill
 .claude/          Claude Code agents, skills, hooks, settings
 .agents/          Single-word skill catalogue (`npm run skills`)
+.githooks/        Installed by `npm install`; pre-push runs scripts/guard-push.mjs
 ```
 
 Never commit: `.next/`, `node_modules/`, `coverage/`, `.env*`, `sample-documents/`, logs.

@@ -24,13 +24,16 @@ npm run docs:check-links
 
 - [frontend-architecture.md](frontend-architecture.md) — shell, routing, dashboard module structure
 - [wiring-conventions.md](wiring-conventions.md) — page/button wiring conventions and the dead-button / orphan-route gates
+- [search-chrome-behaviour.md](search-chrome-behaviour.md) — shared search-chrome contract: composer ownership, phone edge-to-edge dock, hide/reveal reserves
 - [deployment-architecture.md](deployment-architecture.md) — app/worker/Supabase deployment topology
 - [ingestion-state-machine.md](ingestion-state-machine.md) — ingestion job lifecycle and states
 - [design-system.md](design-system.md) — tokens, primitives, styling conventions
 - [clinical-chat-ui-component-map.md](clinical-chat-ui-component-map.md) — chat UI component inventory
 - [clinical-badge-system-guide.md](clinical-badge-system-guide.md) — clinical badge semantics
 - [multi-user-auth-setup.md](multi-user-auth-setup.md) — auth, sessions, owner scoping
 - [pwa.md](pwa.md) — PWA install assets, privacy-first service worker, offline shell
+- [webhooks.md](webhooks.md) — the two inbound webhook receivers and the outbound Actions notifier
+- [api-jobs-ops-surface.md](api-jobs-ops-surface.md) — standing decision to keep `GET /api/jobs` as an ops/admin surface
 
 ## Operations runbooks
 
@@ -43,11 +46,15 @@ npm run docs:check-links
 - [staging-setup.md](staging-setup.md) — staging environment bootstrap
 - [database-drift-detection.md](database-drift-detection.md) — schema drift detection (`npm run check:drift`)
 - [supabase-migration-reconciliation.md](supabase-migration-reconciliation.md) — migration drift and repair policy
+- [db-maintenance.md](db-maintenance.md) — Supabase advisor snapshots and the standing disposition per finding class
 - [observability-slos.md](observability-slos.md) — health probes, SLO counters, degraded modes
 - [openai-rag-operations.md](openai-rag-operations.md) — OpenAI/RAG provider operations and modes
 - [outstanding-issues.md](outstanding-issues.md) — single universal task ledger and repository memory
 - [operator-backlog.md](operator-backlog.md) — provider/operator runbook detail (status is canonical in the universal ledger)
 - [deploy-corrector-public-titles.md](deploy-corrector-public-titles.md) — public-title corrector deploy notes
+- [operator-apply-performance-latency-remediation.md](operator-apply-performance-latency-remediation.md) — operator apply steps for the performance/latency migration batch
+- [reconciliation-playbook.md](reconciliation-playbook.md) — broad chat/worktree reconciliation and archive-safe cleanup (not for ordinary feature work)
+- [staging-tenancy-release-evidence.md](staging-tenancy-release-evidence.md) — cross-tenant staging harness as executable owner-boundary proof
 
 ## Governance, safety, privacy
 
@@ -83,6 +90,19 @@ npm run docs:check-links
 - [redesign/](redesign/) — premium redesign plans, decision log, token adoption
 - [superpowers/](superpowers/) — agent-authored plans and specs
 
+## Subdirectory map
+
+| Directory                        | What lives there                                                                                                      |
+| -------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| [rag-behaviour/](rag-behaviour/) | Protected retrieval/ranking surface: behaviour map, refuted approaches, safeguards. **Read before touching ranking.** |
+| [prompts/](prompts/)             | Copy/paste review prompts, including the verbatim `codex-cloud-review/` inputs                                        |
+| [codex/](codex/)                 | Per-lens Codex ultra-review output folders, one per review dimension                                                  |
+| [evidence/](evidence/)           | Captured evidence artifacts backing ledger items (reliability reports, review manifests)                              |
+| [audit/](audit/)                 | Dated repo, design, accessibility, and latency audits (point-in-time)                                                 |
+| [redesign/](redesign/)           | Premium redesign plans, decision log, token adoption                                                                  |
+| [superpowers/](superpowers/)     | Agent-authored plans and specs                                                                                        |
+| [archive/](archive/)             | Completed phase plans, superseded designs, old progress logs — never current guidance                                 |
+
 ## Point-in-time records (historical — do not update)
 
 Dated status reports, reviews, and operator decisions. They describe the repo
@@ -91,6 +111,13 @@ as it was on that date; supersede with a new dated document rather than editing.
 - [audit/](audit/) — repo and UX/accessibility audits
 - [audit/2026-07-20-repository-maturity.md](audit/2026-07-20-repository-maturity.md) — full repository maturity, mapping, and organisation audit
 - [audit/latency-audit-2026-07-28.md](audit/latency-audit-2026-07-28.md) — latency audit: server, client, and database findings by tier, with the already-cleared list
+- [audit/audit-handover-2026-07-14.md](audit/audit-handover-2026-07-14.md) — multi-skill repository audit findings inventory
+- [audit/audit-remediation-plan-2026-07-14.md](audit/audit-remediation-plan-2026-07-14.md) — sequenced remediation plan for the 2026-07-14 audit, with the 2026-07-17 reconciliation
+- [audit/design-audit-2026-07-17.md](audit/design-audit-2026-07-17.md) — repository-wide design, accessibility, and interaction audit
+- [current-clinical-work-brief.md](current-clinical-work-brief.md) — ledger #063 product/privacy/persistence brief (decision only, no implementation)
+- [factsheets-reading-model-brief.md](factsheets-reading-model-brief.md) — ledger #041 reading-model decision (no second Factsheets mode)
+- [source-governance-refresh-worklist-2026-07-22.md](source-governance-refresh-worklist-2026-07-22.md) — ledger #022 worklist and BMJ attestation policy status
+- `release-source-metadata-debt-2026-06-30.json` — captured source-metadata debt policy, consumed by `npm run audit:source-governance:release` and `npm run eval:quality:release`
 - [forward-codify-retrieval-rpcs-workorder.md](forward-codify-retrieval-rpcs-workorder.md) — completed retrieval RPC codification workorder
 - [project-alignment-cleanup.md](archive/project-alignment-cleanup.md) — completed June 2026 repo-alignment record
 - [capacity-review.md](capacity-review.md), [scale-readiness-review.md](scale-readiness-review.md), [tenancy-defense-in-depth-review.md](tenancy-defense-in-depth-review.md)

@@ -64,4 +64,4 @@ Blocker: an independent source visual target is required to certify concept fide
 
 ## Follow-up audit — 2026-07-17
 
-The exhaustive line-level design, accessibility, UX, interaction, and route-coverage follow-up is documented in [`docs/design-audit-2026-07-17.md`](../design-audit-2026-07-17.md). It preserves the fixes above, avoids duplicating this pass, and records the new P1/P2/P3 fixes plus the exact local verification limitations.
+The exhaustive line-level design, accessibility, UX, interaction, and route-coverage follow-up is documented in [`docs/audit/design-audit-2026-07-17.md`](../audit/design-audit-2026-07-17.md). It preserves the fixes above, avoids duplicating this pass, and records the new P1/P2/P3 fixes plus the exact local verification limitations.
@@ -6,9 +6,9 @@
 > `20260717170000_registry_projection_cleanup.sql` and
 > `20260717171000_public_title_corrector.sql`. Do not use this report's status or next
 > steps as current operator guidance. Use
-> [operator-apply-performance-latency-remediation.md](operator-apply-performance-latency-remediation.md),
-> [deploy-corrector-public-titles.md](deploy-corrector-public-titles.md), and
-> [operator-backlog.md](operator-backlog.md) instead.
+> [operator-apply-performance-latency-remediation.md](../operator-apply-performance-latency-remediation.md),
+> [deploy-corrector-public-titles.md](../deploy-corrector-public-titles.md), and
+> [operator-backlog.md](../operator-backlog.md) instead.
 
 **Status:** F11 shipped and merged; all correctness findings verified moot on this
 branch; scalability build recorded and deferred pending go-ahead.

@@ -9,7 +9,7 @@ remediation without re-running discovery.
 | Audit date       | 2026-07-14                                                                                   |
 | Mode             | Pure review (no app-code fixes applied as part of the audit)                                 |
 | Remediation plan | [`audit-remediation-plan-2026-07-14.md`](audit-remediation-plan-2026-07-14.md)               |
-| Ledger rows      | [`branch-review-ledger.md`](branch-review-ledger.md) (multi-skill + consolidated rows)       |
+| Ledger rows      | [`branch-review-ledger.md`](../branch-review-ledger.md) (multi-skill + consolidated rows)    |
 | Plan PR          | [#673](https://github.com/BigSimmo/Database/pull/673) (`cursor/audit-remediation-plan-0411`) |
 | Ledger-only PR   | [#652](https://github.com/BigSimmo/Database/pull/652) (`cursor/repo-wide-audit-ledger-0411`) |
 
@@ -238,14 +238,14 @@ Full address sketches: Remediation Wave I in the remediation plan.
 | Doc                                                                            | Role                             |
 | ------------------------------------------------------------------------------ | -------------------------------- |
 | [`audit-remediation-plan-2026-07-14.md`](audit-remediation-plan-2026-07-14.md) | How to fix, sequenced            |
-| [`operator-backlog.md`](operator-backlog.md)                                   | Human/provider actions index     |
-| [`launch-operator-runbook.md`](launch-operator-runbook.md)                     | Sequenced launch commands        |
-| [`privacy-impact-assessment.md`](privacy-impact-assessment.md)                 | PIA register                     |
-| [`openai-cross-border-basis.md`](openai-cross-border-basis.md)                 | APP 8 checklist                  |
-| [`tenancy-defense-in-depth-review.md`](tenancy-defense-in-depth-review.md)     | Tenancy defense notes            |
-| [`process-hardening.md`](process-hardening.md)                                 | Process & known debts            |
-| [`codex-review-protocol.md`](codex-review-protocol.md)                         | Review severity / mutation rules |
-| [`branch-review-ledger.md`](branch-review-ledger.md)                           | Prevent repeat audits            |
+| [`operator-backlog.md`](../operator-backlog.md)                                | Human/provider actions index     |
+| [`launch-operator-runbook.md`](../launch-operator-runbook.md)                  | Sequenced launch commands        |
+| [`privacy-impact-assessment.md`](../privacy-impact-assessment.md)              | PIA register                     |
+| [`openai-cross-border-basis.md`](../openai-cross-border-basis.md)              | APP 8 checklist                  |
+| [`tenancy-defense-in-depth-review.md`](../tenancy-defense-in-depth-review.md)  | Tenancy defense notes            |
+| [`process-hardening.md`](../process-hardening.md)                              | Process & known debts            |
+| [`codex-review-protocol.md`](../codex-review-protocol.md)                      | Review severity / mutation rules |
+| [`branch-review-ledger.md`](../branch-review-ledger.md)                        | Prevent repeat audits            |
 
 ---
Original file line number	Diff line number	Diff line change
Expand Up		@@ -64,4 +64,4 @@ Blocker: an independent source visual target is required to certify concept fide

		## Follow-up audit — 2026-07-17

		The exhaustive line-level design, accessibility, UX, interaction, and route-coverage follow-up is documented in [`docs/design-audit-2026-07-17.md`](../design-audit-2026-07-17.md). It preserves the fixes above, avoids duplicating this pass, and records the new P1/P2/P3 fixes plus the exact local verification limitations.
		The exhaustive line-level design, accessibility, UX, interaction, and route-coverage follow-up is documented in [`docs/audit/design-audit-2026-07-17.md`](../audit/design-audit-2026-07-17.md). It preserves the fixes above, avoids duplicating this pass, and records the new P1/P2/P3 fixes plus the exact local verification limitations.