Skip to content

fix(www): tighten CPD demo copy for Cuban share - #1451

Merged
cursor[bot] merged 12 commits into
mainfrom
cursor/cpd-demo-page-copy-fixes-c6b0
Oct 30, 2026
Merged

cursor[bot] merged 12 commits into
mainfrom
cursor/cpd-demo-page-copy-fixes-c6b0

Conversation

@danielsmithdevelopment

@danielsmithdevelopment danielsmithdevelopment commented Oct 30, 2026 •

Copy link
Copy Markdown
Owner

Summary

Cuban-share copy fixes on /demo/cost-plus-drugs, plus a real S3 Object Lock storage-WORM path in clawql-audit (with the tamper-evident vs WORM distinction spelled correctly).

Demo page copy

  1. Non-affiliation disclaimer
  2. non-BAA vs BAA-covered (no Grok/Claude contrast)
  3. Compaction ~950× with MCP vs raw-HTTP labels
  4. $5.41 as of Oct 30, 2026
  5. Audit claim: tamper-evident dual-write by default; WORM retention via S3 Object Lock (compliance) when configured — verified by tests that refuse deletion of locked versions. PHI → hashes/refs in the trail.

clawql-audit Object Lock

  • PutObject: Content-MD5 + IfNoneMatch: * + optional ObjectLockMode / ObjectLockRetainUntilDate
  • Probe asserts: original version body unchanged after overwrite-style PUT; plain delete → delete marker; DeleteObject(VersionId) refused
  • Env: CLAWQL_WORM_S3_OBJECT_LOCK=compliance|governance|0, _DAYS, _VERIFY_OBJECT_LOCK
  • Providers: S3 + MinIO supported; R2 does not implement S3 Object Lock API (documented)
  • CI starts MinIO and runs governance + 1-day compliance integration tests
  • Simulator unit tests cover the same semantics without Docker

Test plan

  • vitest clawql-audit: 37 passed, MinIO IT skipped locally (no Docker), runs in CI
  • Object Lock simulator: version intact + version-delete refused
  • CI green (includes MinIO Object Lock job)
  • Live page after merge
Open in Web Open in Cursor 

cursoragent and others added 12 commits October 30, 2026 18:44
Add independent/non-affiliation disclaimer, replace named-provider BAA
example with non-BAA vs BAA-covered wording, align compaction to ~950×
with labeled MCP vs raw HTTP sizes, date the $5.41 cash price, and
soften WORM dual-write to planned.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
WORM dual-write is already production-ready behind CLAWQL_WORM_ENABLED=1;
the prior "planned" soften was incorrect. Restore an accurate step-7 claim
and enable sqlite clawql-audit dual-write in the CPD gateway smoke with an
/entries assertion so the live path proves it.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
…ests

Distinguish tamper-evident dual-write (sqlite/postgres + hash chain) from
storage WORM. PutObject now sends Content-MD5, IfNoneMatch, and optional
Object Lock COMPLIANCE/GOVERNANCE retention. Probes assert the original
version body is unchanged after overwrite, plain delete only adds a delete
marker, and DeleteObject(VersionId) of a locked version is refused.

MinIO integration tests (governance + 1-day compliance) run in CI; R2 is
documented as not supporting the S3 Object Lock API. CPD demo copy matches.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
actionlint/shellcheck SC2034 on the clawql-audit MinIO readiness loop.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
Satisfy @typescript-eslint/no-this-alias by destructuring instance
fields instead of const self = this.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
Docker Hub denies minio/minio pulls; use the published quay.io tag so the
clawql-audit Object Lock integration job can start.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
Docker Hub no longer serves minio/minio and quay.io/minio pulls are
unauthorized on this runner. Gate unit/simulator tests first, then use
localstack/localstack:4.3.0 for live S3 Object Lock integration.

Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
Co-authored-by: Daniel Smith <danielsmithdevelopment@gmail.com>
@cursor
cursor Bot merged commit 3261bb0 into main Oct 30, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants