Phase 7 — Evals, Rollout and Operations
Goal
Prove the complete vertical slice is useful, bounded, private, recoverable and affordable before it becomes generally available.Test matrix
Hermetic
- plan parsing and state transitions;
- candidate id/dedupe/ranking;
- idempotent step replay;
- event sequence/replay;
- cursor pagination;
- artifact spec validation;
- chart aggregation correctness;
- export escaping/encoding;
- Collection promotion preview/idempotency;
- provider contract/error normalization;
- architecture boundaries;
- tenant isolation and auth.
Failure injection
- process killed during every step;
- provider timeout/rate limit/malformed payload;
- model produces invalid structured output;
- database reconnect;
- duplicate event notification;
- stale browser reconnect;
- stop during provider call;
- partial source coverage;
- artifact renderer unavailable;
- promotion response lost after commit.
Live staging
Run the frozen objectives from Phase 1 against the configured DeepSeek/provider stack. Capture:- time to plan and first candidate;
- time to terminal state;
- candidates before/after dedupe;
- verified/uncertain/contradicted;
- independent sources per verified candidate;
- cost by model and provider capability;
- resume count;
- user stop/abandonment;
- exports and promotions;
- rendered artifact type and fallback rate.
Product acceptance scenarios
- Start with defaults, watch rows arrive, refresh, inspect evidence, export.
- Answer all clarifications and observe the plan reflect them.
- Stop midway and use the partial dataset.
- Kill/redeploy midway and observe automatic resume with no duplicates.
- Open table, metrics and chart views over the same dataset.
- Select verified rows and promote them to a Collection; retry safely.
- Provider unavailable: prior/warehouse data remains and terminal state is honest.
- Zero candidates: describe coverage and offer bounded scope changes, never market absence.
- Spanish and English UI contain no tool/provider/internal-budget vocabulary.
- Ordinary Chat regression suite and visual baselines remain green.
Rollout
- Feature off by default.
- Internal Golden workspace only.
- Dogfood with hard concurrency and spend ceilings.
- Expand to selected workspaces after live quality gate.
- General availability only after retention, support and pricing decisions are explicit.
Operational dashboards
Use the existing Latitude/PostHog/database ledgers. Required views:- starts, completions, partials, failures, cancellations;
- p50/p95 time to first candidate and completion;
- stale/recovered jobs;
- cost per useful/verified candidate;
- evidence coverage and artifact fallback rate;
- export and Collection-promotion conversion;
- provider error/latency by internal adapter.
Final delivery report
Include:- base and final SHAs;
- commits by phase;
- migrations and rollback commands;
- exact test totals and skipped checks;
- live staging report;
- known limitations;
- security/privacy review;
- bundle and database-connection impact;
- evidence that Chat remained independent.
Rollback rehearsal
Prove before launch:- navigation/feature can be disabled;
- queue can stop claiming new work;
- running jobs settle as partial/cancelled without data loss;
- API remains read-only for existing investigations;
- artifact rendering falls back to canonical table;
- provider adapter can be disabled independently;
- Collection promotion can be disabled without breaking existing records.
