Release Log

Lucia Admin Development evidence: 1250ec7e48ba8a377e6c198ad10d033e7ad1293b (Render deploy live 2026-09-10 14:08Z)
Lucia Booking Engine Development evidence: e2166b86ac6794a1423c7b2ce1b293a3dba505c4 (served at api-dev 2026-09-10 15:11Z)
Masthead top-housing law recorded as canon: plane 77px, rule 24px above and below; the guest record stays bare
Founder verdicts on the September rulings: open on their records (nothing below is promoted by status)

Names law ruled ~10:05 AM PT: "We want i. Always. Never í." — Lucia and Villa Valentin with a plain i on every surface
No left accent bars ruled ~10:10 AM PT: a card is set apart by ground, stroke, and type, never a coloured stripe
Payment request rides the Resend template: Completed 2026-09-09 on the Development Engine (founder proof 2026-09-08)
Lucia Fieldwork App main moved from a415a45 to 692a71cd17a9189875b9bd35d5681fcb943bee68 through the flake wave
Engine, Admin, and Fieldwork API sweeps for the names law carry a no-acutes pin each; founder verdict open

Founder's ask ~5:35 PM PT: "We really need to add a real email being sent out here."
Payment request moved from a plain Postmark send to the formatted Resend guest-mail family
Ledger records provider resend and the message id; SMS stays on Twilio; Postmark stays employee-facing
Founder proof on Development: "Beautiful." — buttons are rectangles with 4–5px corners, not pills

Founder, 2026-09-05 ~5:45 PM PT: the workspace is "the nucleus of the product"; the truth closes the step, not a Save button
Founder, 2026-09-06 ~6:20 AM PT: "Test now → flip to live." — the Payment Desk becomes Quinn's payment record with real Stripe doors
Payment step built: Lucia's draft inline, Send email · Send text · Copy link, no Save; step ticks on confirmed_paid
Lucia's avatar on any step opens her conversation with the step as standing context (built on Development)
Admin tells the owner a new build is live: one quiet bar, tap to reload, never automatic (Completed 2026-09-06)
STRIPE_MODE test|live is one deliberate flip; the live flip is a founder decision and is not on
Founder verdicts open on the records; the payment step and the payment record become one surface (at gate)

Bookings is a list: Completed 2026-09-05 on Admin Development — plates In house · Arriving soon · Upcoming · Past
Row order inside every plate: soonest check-in first; property clock only; never "Booking #" as a stay label
The booking page carries a working mode (record + work); the old bookings page retired
Fieldwork cold open on the Lucia Orbit closed as Completed 2026-09-05 (founder verification on the installed app)

Founder, 2026-09-03 ~8:30 PM PT: "I think Anthropic's models should be her predominant voice."
Engine gateway became provider-aware: the provider follows the model id; OpenAI Responses API and Anthropic Messages API behind one door
Focus house composition pinned to claude-fable-5-1 on the Development Engine from 2026-09-04 ("Keep Fable on")
Founder, 2026-09-04: "But if we can retire it, let's do it." — the legacy Focus intent-assist router and refinement pass left the served Focus route
When the composition cannot answer, Focus says so in one owner sentence; no fallback model ("quiet and honest")
LUCIA_INTELLIGENCE_MODEL default stayed gpt-5.6-sol; the fleet-wide flip is a founder call not yet made
Founder verdicts open on both records

Founder, 2026-09-02: "All engine/dev language replaced for real-world/human language that a property owner would understand."
Founder, 2026-09-03 07:30 PT: property time is the only clock; "This should never be exposed to the property owner."
Owner-language rules R1–R10 applied to the Signal Stream and admin labels; an owner-language scan pins them
Property clock phases shipped 2026-09-03 across Engine, Admin, and the Fieldwork API; no zone names, offsets, or ISO timestamps surface
A stay begins at check-in (2 PM); an unattended item near check-in escalates as one loud card per arrival
Algorithm replay harness Completed 2026-09-03: old-versus-new table on every Algorithm merge record
The Brain quality eval bank recorded not green (174/217 and 192/217); the gate is identical failing sets before and after
Founder verdicts open on the language and clock records

Engine POST /webhooks/maintenance found accepting unauthenticated writes on Development (read-only probe, disclosed)
Shared-secret gate shipped the same day: the route requires X-Fieldwork-Secret; probe record removed from the store
Completed 2026-08-30

Fieldwork App production evidence: d5811cb9be473f40b2b046d87acdfd849c387845
Fieldwork API production evidence: 7a8ee81e6b71640d23a89d2bdbfcf7294860978b
Lucia Booking Engine Development evidence: d488fdcf6fedfbda013d11d8e7b444237868c4a8
Lucia Admin Development evidence: 051a6120fcc017c5179d1b0e293484d354489c49
Live proof: founder-recorded employee-to-operator round trip on the FILD-77 completion record

App opens into the full-height empty chat after the Lucia Orbit handoff
New and New Chat preserve earlier work without a modal
Drafts Review rows open the exact named record on first tap
Successful-submit sheet holds for Log another or Done
Reopened submitted work shows submitted truth rather than draft-ready state
Submitted items carry one employee-to-operator thread
Sent, Seen, Needs your reply, drawer count, hamburger unread badge, cold-open notice, and dismissed-item lock
Online-only V1; offline queue and push notifications are not claimed

Maintenance Inbox renders employee and operator messages as one chronology
Operator seen state is recorded when the thread opens
Initial thread loading is calm
Operator messages require a real Clerk-derived name
Lucia does not participate in the V1 item thread

docs.hellolucia.ai → 301 https://helloluciallc.com/ (Cloudflare)
docs.evaluationlabs.ai → 301 https://helloluciallc.com (Netlify)
Completed 2026-08-15; both roots re-read 2026-09-10 and still answer 301
No Lucia Library content changed in that lane

Source commit: 826a6a14e2fa95bfd60c8008fb0cdc9d846b4231
Production surface: https://guest.hellolucia.ai
Guest Agent default model: gpt-5.6-sol (GPT-5.6 Sol)
Deployment configuration and source fallback: gpt-5.6-sol
Model gateway: OpenAI Responses API
Embeddings model: text-embedding-3-small
Provider-returned model live-verified: gpt-5.6-sol

Prompts unchanged
Verification flow unchanged
Routing unchanged
Schemas unchanged
Core SSE event contract unchanged: start, token, cta, meta, done
No regressions found

Lucia Engine Development default model: gpt-5.6-sol (GPT-5.6 Sol)
Model gateway: OpenAI Responses API
Canonical Eval Labs target: authenticated Lucia Engine Development model path
Stable response envelope preserved
Engine runtime identity and model execution provenance exposed through typed evidence fields
Provider-returned model captured as resolved-model evidence
Model invocation versus no-attempt deterministic execution distinguished; fallback recorded independently

Owner-only Lucia Runtime Verification panel shows resolved service/environment, Engine commit SHA, configured model, provider-resolved model, model-invoked state, deterministic-path state, fallback state, and verification timestamp
New runs persist typed runtime provenance and mirror the latest evidence in session metadata
Historical runs without provenance say: Runtime provenance was not captured for this run.
No historical endpoint or model provenance is invented or backfilled

Date: 2026-07-10
Configured model: gpt-5.6-sol
Provider-resolved model: gpt-5.6-sol
Model invoked: true
Deterministic path: false
Fallback used: false
Status: Verified

Uninterrupted Staging-target configuration began: 2026-05-04T16:21:35Z
Development routing correction live-verified: 2026-07-10

Environment: Development/live-dev
Eval Labs production target: Development
Staging promotion: still held until the Development baseline is captured and reviewed
Production readiness: not claimed

Payment truth foundation completed in Development/live-dev and recorded in Canon
Visible Admin live-dev commit tag: 7c9683a
Visible Engine live-dev commit tag: 88a09a1
Production readiness: not claimed
Staging promotion: not claimed

e8427ec39b9e2132ec423a58545af4d3d3a4fd1c - feat: add stripe sandbox payment foundation
eea713127cb47db0ea99294f52ffd9378d01fc25 - feat: wire stripe financial truth into attention
35cee2415bb020a59c52a5700041ce6a509f8c22 - fix: harden financial truth wording
162f7d9a6844d8f60e9744b5a7eb7795bc2ed799 - feat: add stripe payment records index
88a09a1cfe37bdfcaf44723821a86155a849c63c - feat: add durable stripe financial ledger

a7367ace42860c620e260fd20d18713545447f57 - feat: add read-only payments page
c32a97056b74b8aaf82a4c8d31959e60a02d2351 - feat: add booking payment truth card
7c9683a37c89dc95a2c673a7603825d3c82fb77b - feat: add property payment policy baseline

Stripe sandbox checkout foundation
Durable Lucia Core payment ledger
Stripe financial record/event storage
Engine payment-status contracts preserved
Financial truth wired into attention suppression
Admin read-only payments page
Booking Payment Truth card
Admin Payment Policy Baseline v0
DAW payment reconciliation context without payment mutation

Lucia Core owned restart-safe financial record and event persistence
Only the Engine's server-side identity could access the durable datastore
No anonymous, end-user, or direct Admin datastore path was exposed
Eval Labs storage remained separate and untouched
Exact project identifiers, table names, row-security settings, credential names, and storage modes are omitted from public documentation

Example Guest [synthetic-booking-id] completed a $500.00 Stripe sandbox checkout
Durable financial record/event written
Engine restarted through its deployment service
The booking-scoped payment-status contract still returned known=true and financialTruthState=confirmed_paid
The payment-status index still included Example Guest's synthetic fixture
Operational attention suppressed Example Guest's synthetic fixture as a payment blocker
Arrival readiness remained as the non-payment issue
Admin rendered one confirmed-paid synthetic durable-ledger record
Booking detail rendered Engine-backed Payment Truth for [synthetic-booking-id]
DAW opened Example Guest's synthetic reconciliation context without payment mutation controls
Admin rendered Payment Policy Baseline labeled POLICY DRAFT / NO PERSISTENCE

Durable Engine-owned property payment policy contract
Admin policy editing and persistence
Payment creation UI
Charge/refund/mark-paid UI
Signal Stream -> LIEA wiring
Full policy-aware due/overdue/partial/pending judgment
Eval coverage for policy-driven financial attention
Full billing system

Company-level Product Architecture Map v0 was published behind an authenticated private-access boundary
Artifact title: HelloLucia, LLC Product Architecture Map v0
Purpose: planning/status artifact for HelloLucia, LLC, not a public marketing page
Source, repository, URL, hosting, deployment, and access-provider details are intentionally omitted from public documentation
Access boundary: an authenticated control, not visual page chrome, protected the private artifact
Coverage: Lucia Product Suite and Eval Labs Platform
Architecture relationship documented: Lucia Product Suite, Eval Labs Platform, Engine-owned truth, Canon, and live behavior
Surface boundary: Operator OS and Guest Dashboard remain separate surfaces
Eval Labs boundary: Eval Labs is a first-class sister platform
Self-modification boundary: Lucia does not self-modify; refinements ship through human review and versioned releases
Production readiness: not claimed; this is an architecture source artifact and planning/status map

Guest-facing reservations + magic-link verification loop recorded as completed live-development proof
Guest Agent build observed: 51a47fb
Engine build includes seed booking endpoint, branded verification result page, and availability endpoint
Admin build observed: 2cb83f0
Eval Labs observed: 413489f

Guest Agent commits recorded:
a7a63ae8afcb3c7a483fa73e334cdd8eef939121 - add guest reservations seed UI
cc0922b71779ec4caca9c1c2df4251ca76995013 - show build tag on guest reservations page
ab00fc138145559f0af413f5ed119d33f97ff92a - add guest reservations availability calendar
f90fb327e856518bfb50af6262ba681699f34d3d - fix guest reservations availability window
f6c52d959482a5f19233da6a5773416f3b9e1986 - harden guest verification arrival-date claims
51a47fbc94acf74517e149936df7e960733d301f - polish guest reservations calendar interactions

Engine commits recorded:
e8c9adbec19b130dbd904baf2932e05cdf278f24 - add guest seed booking endpoint
6c8c56c50b7547559a030de4a89e875b4c13adee - brand guest verification result page
73fed6d4ed2e40d6987343bf336501d0fda49957 - add guest seed booking availability

Environment: guest-agent main / Engine live-dev support / Admin observed calendar visibility
Completed loop: controlled reservation -> Engine booking truth -> Admin calendar -> booked-guest claim -> booking-email-only magic link -> branded result page -> verified session -> booking-specific planning
Reservation services: protected server-side booking creation and availability contracts; exact routes are omitted from public documentation
Security boundary: the browser did not call Engine directly; the Guest Agent used an authenticated server-to-server channel, and no internal Engine location, signing material, or credential was exposed to the browser
Villa Valentin v0 rules: 3-night minimum, same-day checkout/check-in allowed, nights represented as [check_in, check_out), unavailable/held/booked nights represented in calendar
Bug fixed: multi-turn weak claim with yearless arrival date stays in verification flow and asks for full date including year when inference is unsafe
Production readiness: not claimed; this is controlled seed/test reservation architecture proof, not a public booking engine, payment system, Lodgify replacement, auth system, or production OTA integration
Guest Agent validations: controlled reservation and verified-session checks passed
Engine validations: reservation, verification, protected-contract, and candidate-matching checks passed
Future architecture: reservation constraints should become owner/operator-configured property settings

Guest Agent live verification hardening shipped on lucia-guest-agent main
59c2687ac34430252ce1d00841175543f40725df - harden guest verification retry flow
36b64c11019bf1f5160e57ac8029645a4806e628 - track guest verification link expiry
Changed surface: Guest Agent verification runtime, interface, and validation coverage
Live smoke passed on https://guest.hellolucia.ai/
Already-booked verification, safe resend, status check, post-click verified-session recognition, and no unnecessary resend for already verified sessions recorded
Verification security facts recorded: opaque, bounded-lifetime, one-time verification material; a non-reversible verifier was stored server-side; replay and expiry states were covered
Guest Agent safe pending state recorded only bounded expiry metadata, never the verification material or booking-private data

Environment: guest-agent main / live guest-facing route
Production readiness: not claimed
Guest Agent validations: source, verified-session, and repository checks passed
Engine inspection: expiry and consume coverage was recorded in the owning validation suite
Follow-up note: the early controlled seed/test reservation layer was later recorded as completed live-development proof on 2026-06-11

Guest-Facing Lucia Canon knowledge center added
HelloLucia, LLC three-product-line framing recorded: Operator / Owner-Facing OS, Public / Guest-Facing Concierge, Eval Labs
Guest Agent v0.1.0 - Guest Identity + Magic-Link Lab product milestone recorded
Guest Agent versioning boundary recorded: commit tag is engineering truth; product version is milestone/product truth
Future UI version display target recorded: Guest v0.1.0 · <commit>
Dedicated Guest Agent source and deployment boundary recorded
Guest Agent live lab milestone recorded; legacy deployment alias omitted from public documentation
Guest Agent visible build tag recorded
Guest Agent then-current provider-model doctrine recorded
Guest-facing lab UI recorded: Canela, nucleus divider, black top bar, refined chat card
Identity orientation before chat recorded
Orientation options recorded: already booked, joining someone's stay, planning a trip, just exploring
Guest identity/linkage contract recorded
Guest operational_signal v0 bridge recorded
Authenticated server-to-server guest-signal delivery to Engine recorded; exact internal route omitted
Engine guest signal normalization and safe persistence recorded
Admin operator-facing signal presentation recorded
Candidate/unlinked guest signal no-fake-DAW boundary recorded
Magic Link Booking Verification v0 recorded
Candidate Booking Lookup Helper v0 conservative matching recorded
Opaque one-time verification material, non-reversible server-side verification state, and verified session state recorded
Resend-backed verification email delivery recorded
Verification email privacy boundary recorded
Guest-to-Operator Bridge doctrine recorded
Focus Ops no unrelated seeded-guest drift boundary recorded
Guest-facing hospitality tone doctrine recorded
First-class Guest-Facing Lucia Eval Track recorded as separate from operator-facing Lucia evals
Guest-Facing Lucia Eval Track purpose recorded: stress-test guest identity, verification, privacy, tone, and guest-to-operator routing at scale
Guest-facing Eval Labs battery requirements recorded
Guest-facing roadmap and production-hardening gates recorded

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: not claimed
Commit status: not committed; awaiting review
Hardening still required: automated verification tests, Eval Labs guest battery, Admin review/link surface, durable persistence, rate limiting/replay/spam protection, production privacy copy, Villa Valentin launch proof

Workspace OS / context-aware operator companion milestone recorded
Lucia Workspace Sidebar Mode recorded as implemented in Development
Top shell Workspace entry, full-width topbar, below-topbar workspace body, and old sidebar-nav bypass recorded
Side-by-side Workspace layout at 1000px+ recorded
Resizable Lucia sidebar recorded at 260px to 460px
Sidebar width preference and Workspace open/closed state persistence recorded
Workspace remaining open across route changes recorded
Shared Focus Ops conversation across Dashboard embedded mode and Workspace Sidebar mode recorded
Signal Stream Chat seeding shared Lucia conversation recorded
Reset clearing shared conversation and context recorded
active_context.workspace recorded as the workspace context path at this checkpoint
Workspace sidebar visual polish recorded for 260/320/380/460px widths
Dashboard Focus Ops composer breakpoint fix around 1280px recorded
Engine workspace-context awareness recorded for Dashboard, Calendar, DAW, Full Booking, Bookings, Maintenance, Concierge, Tasks, and Reconciliation
Workspace-orientation prompts recorded: What am I looking at, What should I do here, What matters for this booking, What should I pay attention to here, Now what
Explicit prompt subject over page context recorded
Raw metadata language avoidance recorded
DAW action/save surface doctrine recorded
DAW persistence targets recorded: task-backed save, concierge request save, booking-note-backed save, insufficient-context bridge/fallback
DAW copy recorded: Save this step / Saved
Saved DAW workflow truth-state recorded: saved workflow does not equal resolved issue
Payment DAW known guest identity hydration recorded
Prior offer context, filler normalization, next-step sequencing, and saved DAW workflow awareness recorded
Payment priority hardening recorded
2026-05-29 strict brain quality eval checkpoint recorded as 178/178 after workspace-context awareness
Cockpit distinction recorded: Lucia Workspace + DAW is the cockpit; Full Booking Page is record/review
Future roadmap separated from the implementation recorded at this checkpoint

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: not claimed
Villa Valentin launch: still requires product hardening, onboarding, and payment policy work
Desktop-first Workspace target: v1 direction at this checkpoint

Calendar / booking spine recorded as Lucia's temporal spine and root operational reality
Admin Calendar v1 monthly booking spine recorded: /calendar route, /admin/bookings source, 12 months back, 24 months forward
Calendar placement recorded as second in main nav
Calendar booking click doctrine recorded: /bookings/:bookingId Full Booking Page, not DAW
Booking Pulse recorded as deriving from the same booking source
Development demo fixture recorded: 36 bookings, 18 occupied months, no impossible overlaps, no stale arrival_profile days
Villa Valentin recorded as one rentable inventory unit for the fixture used at this checkpoint
Focus Ops active_context from Signal Stream Chat recorded
Focus Ops prior recommendation memory recorded for short follow-ups like Why? and Can this wait?
Newest verified concrete recommendation replacement recorded
Model-assisted response refinement over verified context packs recorded with truth/routing guardrails
Brain quality eval recorded as passed 119/119 after prior recommendation memory pass

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: still held until reviewed validation
Roadmap/future work: calendar onboarding/imports, multi-property inventory, and production hardening remain future

Signal Stream + Focus with Lucia + Reminder loop recorded as a live-dev product pillar at this checkpoint
Real Engine reminder persistence documented: create, due resurfacing, Open Reminder, Got it acknowledgement, and re-remind path
Signal Stream ordering doctrine recorded: newest meaningful attention event wins unless dismissed
Resolver Matrix recorded as the proof layer for routing messy CTA language into structured workspace destinations
Dynamic Action Workspace recorded as the default universal `/ops/actions` workspace for structured Focus Ops actions
Focus Ops scoped entity routing fix recorded: named guest/service/request overrides generic ranking
Brain quality eval recorded as passed 60/60 after scoped entity routing fix
Admin/Engine build identity tag recorded as runtime proof for the live-dev pair deployed at this checkpoint
Engine GET / identity recorded as live source for Engine build identity

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: still held until reviewed validation

Focus Ops CTA destination contract hardened
Engine now resolves workflow-specific recommended_action destinations through a central resolver
Workflow-specific CTAs now emit structured destinations instead of generic booking overview fallback
Live dev validated that a specific private-chef request can resolve to a focused operator action destination
Admin confirmed to route into a focused next-steps UI instead of forcing a generic booking overview hunt
Brain quality eval expanded and passed 56/56
Generic booking overview preserved as fallback only

HelloLucia.ai Newsroom workflow documented in Canon
Newsroom owner recorded as lucia-marketing
Source markdown, generated files, image frontmatter, local validation, and Cloudflare Pages deploy flow recorded

Resend waitlist outbound email implemented in lucia-marketing
Resend sending subdomain verified: send.hellolucia.ai
Cloudflare Pages environment variables configured for Resend
Waitlist endpoint sends welcome email after new Supabase signup insert
Duplicate waitlist signup behavior confirmed: ok:true duplicate:true and no resend
Live new-signup email delivery confirmed
Lucia avatar/header welcome email confirmed in inbox
Known gap recorded: Resend message id/status returned by endpoint but not yet persisted to Supabase

Resend waitlist outbound email = implemented / configured / tested live
Postmark remains inbound operational/system email intake

2026-05-04 package-label alignment update - Pass 1
2026-05-04 Engine package baseline recorded as engine-v0.1.3.6 on dev
2026-05-04 Admin package baseline recorded as admin-v0.1.3.6 on dev
Then-default provider model recorded
Lucia JSON model gateway migration from Chat Completions to Responses API recorded
Semantic conversational intent assist recorded as live in Focus Ops
2026-05-04 brain quality eval checkpoint recorded as 52/52
2026-05-04 Admin visible package/UI tag v0.1.3.6 recorded
Admin Development CI gate recorded as passing
Admin dev deploy-after-checks workflow recorded
Eval Labs dev target recorded: https://api-dev.hellolucia.ai/admin/operator-focus
Staging promotion hold recorded until Eval Labs dev baseline is captured and reviewed
Live internet development loop recorded as the operating doctrine at this checkpoint

Added Branding and Identity Canon section
Added Color System page with rendered color swatches
Added color-swatches.css to Obsidian snippets
Mirrored color swatch CSS into publish.css
Updated Canon navigation and snippet guide

Canonical restructure
Twilio + WhatsApp working
Bunny media pipeline working
Postmark inbound body working