FForge Outcome Delivery
Safeguard Work-Order Agent Ecosystem

Release Notes

← Back to outcome

Release Notes

v1.2.0 — External live services

Moved from in-process infrastructure to external live services.

Added

  • dispatch-service/ — a real Go gRPC dispatch service built from

proto/dispatch.proto, backed by external Postgres, enforcing the same contract (idempotency, malformed rejection) as the Node reference. Produces byte-identical dispatch refs.

  • docker-compose.yml — a separate PostgreSQL 16 server (durable volume) +

the Go service.

  • src/config.mjs — environment-based configuration (DATABASE_URL,

DISPATCH_GRPC_URL, confidence floors, cost caps, SLA policy) threaded through router/validator/orchestrator. See .env.example.

  • src/http-app.mjs — HTTP handler factored out so verification exercises the

live API.

  • Verification expanded to 23 checks in external mode, adding: live HTTP API,

external-Postgres persistence, external Go-gRPC idempotency/malformed handling, and resilience (client reconnect after the Go service restarts; data durable across an external Postgres server restart).

Changed

  • bootstrap/server/run/verify select external vs. in-process by config.
  • The pg pool now tolerates an external Postgres restart (no unhandled error).

Verified (external live, synthetic corpus, seed 42)

  • 23 / 23 checks pass against a separate PostgreSQL server + Go gRPC service.
  • Classification 98.87%, exception recall 1.0, false-auto-action 0.0%,

automatic-action 62.17%; 600 orders persisted, durable across a DB restart.

Still not PRODUCTION_VALIDATED

Inbound data is synthetic (no official benchmark / independent reproduction / external validation); Oracle, LLM classifier, security, and HA remain seams. See proof/LIMITATIONS.md.

v1.1.0 — Live infrastructure

Replaced the simulated integration seams with real, running infrastructure.

Changed

  • Persistence is now a real PostgreSQL engine (PGlite, on-disk durable) via

src/db/database.mjs — real tables, real SQL, verified durability across a database close + reopen. External Postgres/Oracle supported via DATABASE_URL.

  • Dispatch now crosses a real gRPC/HTTP2 wire (proto/dispatch.proto,

grpc-js) to a running DispatchService — verified reachability, idempotency across the wire, and server-side rejection of malformed requests.

  • Orchestrator and actioner are now async end-to-end.
  • Duplicate detection is now a durable repository query (survives restarts).

Added

  • server.mjs — live HTTP ingest API (POST /work-orders, GET /work-orders/:id,

/healthz, /stats).

  • src/bootstrap.mjs, src/db/, src/integrations/grpc-server.mjs.
  • Verification suite expanded to 21 checks including live persistence,

durability, and gRPC behaviour.

Verified (live, synthetic corpus, seed 42)

  • 21 / 21 checks pass on a real Postgres + real gRPC stack.
  • Classification 98.87%, exception recall 1.0, false-auto-action 0.0%,

automatic-action 62.17%; 600 orders persisted + durable.

Dependencies

  • Adds @electric-sql/pglite, @grpc/grpc-js, @grpc/proto-loader

(pg optional, for external Postgres).

v1.0.0 — Work-Order Agent Ecosystem (MVP)

First delivery of the four-agent work-order automation pipeline.

Added

  • Classifier agent — deterministic lexicon model with calibrated confidence,

trade + priority classification, and structured field extraction.

  • Router agent — table-driven routing (queue, crew, vendor tier, region, SLA).
  • Validator agent — conservative safety boundary with seven business rules

(required fields, confidence floors, cost cap, duplicate detection).

  • Actioner agent — auto-dispatch vs. human-exception decision, idempotent

dispatch, append-only audit, no silent drops.

  • Orchestrator — end-to-end batch processing + human-in-the-loop metric.
  • Integration seams — Go/gRPC dispatch gateway and Oracle/Postgres

repository, contract-first and simulated (disclosed).

  • Governing specs — one markdown spec per agent + routing policy.
  • React console — public/console.html live demo.
  • Verification suite — 17 MUST_PASS checks; deterministic synthetic corpus.
  • Full IRS_AUDITOR proof package.

Verified (synthetic, seed 42)

  • 17 / 17 checks pass.
  • Classification 98.98%, exception recall 1.0, false-auto-action 0.0%,

automatic-action 62.6%.

Disclosed seams

Go/gRPC transport, Oracle/Postgres engine, LLM classifier engine, and real Safeguard data are seams — see proof/LIMITATIONS.md.

Known limitations

No auth/RBAC/tenant isolation, no production concurrency test, in-memory duplicate window. Tracked for the next iteration.