Release Log

Repository: hello-lucia/lucia-guest-agent
Branch: main
Source commit: 826a6a14e2fa95bfd60c8008fb0cdc9d846b4231
Production surface: https://guest.hellolucia.ai
Guest Agent default model: gpt-5.6-sol (GPT-5.6 Sol)
Production override: VV_AI_MODEL=gpt-5.6-sol
Source fallback: gpt-5.6-sol
Model gateway: OpenAI Responses API
Embeddings model: text-embedding-3-small
Provider-returned model live-verified: gpt-5.6-sol

Prompts unchanged
Verification flow unchanged
Routing unchanged
Schemas unchanged
Core SSE event contract unchanged: start, token, cta, meta, done
No regressions found

Lucia Engine Development default model: gpt-5.6-sol (GPT-5.6 Sol)
Model gateway: OpenAI Responses API
Canonical Eval Labs target: https://api-dev.hellolucia.ai/admin/operator-focus
Stable top-level response contract preserved: ok / data / meta
Engine runtime identity exposed in meta.runtime
Model execution provenance exposed in meta.model_runtime
Provider-returned response.model captured as resolved_model evidence
Model invocation versus no-attempt deterministic execution distinguished; fallback recorded independently

Owner-only Lucia Runtime Verification panel shows resolved endpoint/environment, Engine commit SHA, configured model, provider-resolved model, model-invoked state, deterministic-path state, fallback state, and verification timestamp
New runs persist runtimeProvenance on run cases and mirror the latest evidence in session metadata
Historical runs without provenance say: Runtime provenance was not captured for this run.
No historical endpoint or model provenance is invented or backfilled

Date: 2026-07-10
Configured model: gpt-5.6-sol
Provider-resolved model: gpt-5.6-sol
Model invoked: true
Deterministic path: false
Fallback used: false
Status: Verified

Uninterrupted Staging-target configuration began: 2026-05-04T16:21:35Z
Development routing correction live-verified: 2026-07-10

Environment: Development/live-dev
Eval Labs production target: Development
Staging promotion: still held until the Development baseline is captured and reviewed
Production readiness: not claimed

Payment truth foundation completed in Development/live-dev and recorded in Canon
Engine branch: dev
Admin branch: dev
Admin dev surface: https://dev.hellolucia.ai
Engine dev API: https://api-dev.hellolucia.ai
Visible Admin live-dev commit tag: 7c9683a
Visible Engine live-dev commit tag: 88a09a1
Production readiness: not claimed
Staging promotion: not claimed

e8427ec39b9e2132ec423a58545af4d3d3a4fd1c - feat: add stripe sandbox payment foundation
eea713127cb47db0ea99294f52ffd9378d01fc25 - feat: wire stripe financial truth into attention
35cee2415bb020a59c52a5700041ce6a509f8c22 - fix: harden financial truth wording
162f7d9a6844d8f60e9744b5a7eb7795bc2ed799 - feat: add stripe payment records index
88a09a1cfe37bdfcaf44723821a86155a849c63c - feat: add durable stripe financial ledger

a7367ace42860c620e260fd20d18713545447f57 - feat: add read-only payments page
c32a97056b74b8aaf82a4c8d31959e60a02d2351 - feat: add booking payment truth card
7c9683a37c89dc95a2c673a7603825d3c82fb77b - feat: add property payment policy baseline

Stripe sandbox checkout foundation
Durable Lucia Core Supabase Stripe ledger
Stripe financial record/event storage
Engine payment status routes preserved
Financial truth wired into attention suppression
Admin /payments read-only durable ledger page
Booking Payment Truth card
Admin /property Payment Policy Baseline v0
DAW payment reconciliation context without payment mutation

Lucia Core Supabase development project: lucia-core-dev / jgnxomyzqotnqsmlxlsz
Durable tables: stripe_financial_records and stripe_financial_events
RLS enabled on both durable ledger tables
No anon/auth read policies on durable ledger tables
Engine service-role-only access
Render Engine dev env includes SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY
Render Engine dev LUCIA_STRIPE_FINANCIAL_LEDGER_STORE=dual
Render Engine dev LUCIA_STRIPE_LEDGER_DURABLE_REQUIRED=true
Eval Labs Supabase remains separate and untouched

Harper Quinn booking #29110012 completed a $500.00 Stripe sandbox checkout
Durable Supabase record/event written
Engine restarted via Render
GET /admin/stripe/payment-status/29110012 still returned known=true and financialTruthState=confirmed_paid
GET /admin/stripe/payment-status still included Harper Quinn
/admin/operational-attention suppressed Harper Quinn as a payment blocker
Arrival readiness remained as the non-payment issue
Admin /payments rendered one confirmed-paid Harper Quinn durable ledger record
Booking detail /bookings/29110012 rendered Engine-backed Payment Truth
DAW payment action opened Harper Quinn reconciliation context without payment mutation controls
Admin /property rendered Payment Policy Baseline labeled POLICY DRAFT / NO PERSISTENCE

Durable Engine-owned property payment policy contract
Admin policy editing and persistence
Payment creation UI
Charge/refund/mark-paid UI
Signal Stream -> LIEA wiring
Full policy-aware due/overdue/partial/pending judgment
Eval coverage for policy-driven financial attention
Full billing system

10 System Architecture/Lucia Payment Truth Foundation

Company-level Product Architecture Map v0 is live at https://architecture.hellolucia.ai
Artifact title: HelloLucia, LLC Product Architecture Map v0
Purpose: planning/status artifact for HelloLucia, LLC, not a public marketing page
Source repo: hello-lucia/helloluciallc-system-architecture
Hosting: GitHub-backed Cloudflare Pages
Deployment: auto-deploys from main; Direct Upload was not used
Protection: Cloudflare Access protects the artifact
Access boundary: the visual HTML access gate is branded entry UI, not the real security layer
Coverage: Lucia Product Suite and Eval Labs Platform
Architecture relationship documented: Lucia Product Suite, Eval Labs Platform, Engine-owned truth, Canon, and live behavior
Surface boundary: Operator OS and Guest Dashboard remain separate surfaces
Eval Labs boundary: Eval Labs is a first-class sister platform
Self-modification boundary: Lucia does not self-modify; refinements ship through human review and versioned releases
Production readiness: not claimed; this is an architecture source artifact and planning/status map

Guest-facing reservations + magic-link verification loop recorded as completed live-development proof
Guest Agent build observed: 51a47fb
Engine build includes seed booking endpoint, branded verification result page, and availability endpoint
Admin build observed: 2cb83f0
Eval Labs observed: 413489f

Guest Agent commits recorded:
a7a63ae8afcb3c7a483fa73e334cdd8eef939121 - add guest reservations seed UI
cc0922b71779ec4caca9c1c2df4251ca76995013 - show build tag on guest reservations page
ab00fc138145559f0af413f5ed119d33f97ff92a - add guest reservations availability calendar
f90fb327e856518bfb50af6262ba681699f34d3d - fix guest reservations availability window
f6c52d959482a5f19233da6a5773416f3b9e1986 - harden guest verification arrival-date claims
51a47fbc94acf74517e149936df7e960733d301f - polish guest reservations calendar interactions

Engine commits recorded:
e8c9adbec19b130dbd904baf2932e05cdf278f24 - add guest seed booking endpoint
6c8c56c50b7547559a030de4a89e875b4c13adee - brand guest verification result page
73fed6d4ed2e40d6987343bf336501d0fda49957 - add guest seed booking availability

Environment: guest-agent main / Engine live-dev support / Admin observed calendar visibility
Completed loop: /reservations seed/test booking -> Engine booking truth -> Admin calendar -> booked guest claim -> booking-email-only magic link -> branded result page -> verified session -> booking-specific planning
Reservation endpoints: POST /v1/guest/seed-bookings and POST /v1/guest/seed-bookings/availability
Security boundary: browser does not call Engine directly; Guest Agent signs server-to-server requests with LUCIA_SEED_BOOKING_SECRET; no Engine URL, HMAC, signature, or secret exposed to browser
Villa Valentin v0 rules: 3-night minimum, same-day checkout/check-in allowed, nights represented as [check_in, check_out), unavailable/held/booked nights represented in calendar
Bug fixed: multi-turn weak claim with yearless arrival date stays in verification flow and asks for full date including year when inference is unsafe
Production readiness: not claimed; this is controlled seed/test reservation architecture proof, not a public booking engine, payment system, Lodgify replacement, auth system, or production OTA integration
Guest Agent validations: npm run smoke:guest-seed-booking-proxy, npm run smoke:guest-verified-session, npm run check, git diff --check
Engine validations: npm run guest-seed-booking:smoke, npm run guest-verification:smoke, npm run guest-verification-routes:smoke, npm run guest-booking-candidate:smoke, git diff --check
Future architecture: reservation constraints should become owner/operator-configured property settings

Guest Agent live verification hardening shipped on lucia-guest-agent main
59c2687ac34430252ce1d00841175543f40725df - harden guest verification retry flow
36b64c11019bf1f5160e57ac8029645a4806e628 - track guest verification link expiry
Changed files: netlify/functions/ask.mjs, public/lucia-lab/lucia-lab-agent.js, scripts/guest-verified-session-smoke.mjs
Live smoke passed on https://guest.hellolucia.ai/
Already-booked verification, safe resend, status check, post-click verified-session recognition, and no unnecessary resend for already verified sessions recorded
Engine token facts recorded: 30-minute hardcoded TTL, 32 random crypto bytes, 43-character base64url token, HMAC-SHA256 hash storage, expires_at returned by verification request
Guest Agent safe pending metadata recorded: verification_expires_at

Environment: guest-agent main / live guest-facing route
Production readiness: not claimed
Guest Agent validations: node --check, smoke:guest-verified-session, npm run check, git diff --check passed
Engine inspection: expiry and consume coverage present in guest verification smoke scripts
Follow-up note: the early controlled seed/test reservation layer was later recorded as completed live-development proof on 2026-06-11

Guest-Facing Lucia Canon knowledge center added
HelloLucia, LLC three-product-line framing recorded: Operator / Owner-Facing OS, Public / Guest-Facing Concierge, Eval Labs
Guest Agent v0.1.0 - Guest Identity + Magic-Link Lab product milestone recorded
Guest Agent versioning boundary recorded: commit tag is engineering truth; product version is milestone/product truth
Future UI version display target recorded: Guest v0.1.0 · <commit>
Guest Agent repo recorded: hello-lucia/lucia-guest-agent
Guest Agent live lab recorded: https://lucia-guest-agent.netlify.app/lucia-lab/
Guest Agent visible build tag recorded
Guest Agent VV_AI_MODEL / GPT-5.5 model doctrine recorded
Guest-facing lab UI recorded: Canela, nucleus divider, black top bar, refined chat card
Identity orientation before chat recorded
Orientation options recorded: already booked, joining someone's stay, planning a trip, just exploring
Guest identity/linkage contract recorded
Guest operational_signal v0 bridge recorded
Signed guest-agent POST to Engine /v1/guest/signals recorded
Engine guest signal normalization and safe persistence recorded
Admin sections.guest_signals and Signal Stream rendering recorded
Candidate/unlinked guest signal no-fake-DAW boundary recorded
Magic Link Booking Verification v0 recorded
Candidate Booking Lookup Helper v0 conservative matching recorded
Opaque one-time token hash storage and verified session state recorded
Resend-backed verification email delivery recorded
Verification email privacy boundary recorded
Guest-to-Operator Bridge doctrine recorded
Focus Ops no Luca/Nora drift boundary recorded
Guest-facing hospitality tone doctrine recorded
First-class Guest-Facing Lucia Eval Track recorded as separate from operator-facing Lucia evals
Guest-Facing Lucia Eval Track purpose recorded: stress-test guest identity, verification, privacy, tone, and guest-to-operator routing at scale
Guest-facing Eval Labs battery requirements recorded
Guest-facing roadmap and production-hardening gates recorded

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: not claimed
Commit status: not committed; awaiting review
Hardening still required: automated verification tests, Eval Labs guest battery, Admin review/link surface, durable persistence, rate limiting/replay/spam protection, production privacy copy, Villa Valentin launch proof

Workspace OS / context-aware operator companion milestone recorded
Lucia Workspace Sidebar Mode recorded as implemented in Development
Top shell Workspace entry, full-width topbar, below-topbar workspace body, and old sidebar-nav bypass recorded
Side-by-side Workspace layout at 1000px+ recorded
Resizable Lucia sidebar recorded at 260px to 460px
Sidebar width preference and Workspace open/closed state persistence recorded
Workspace remaining open across route changes recorded
Shared Focus Ops conversation across Dashboard embedded mode and Workspace Sidebar mode recorded
Signal Stream Chat seeding shared Lucia conversation recorded
Reset clearing shared conversation and context recorded
active_context.workspace recorded as current workspace context path
Workspace sidebar visual polish recorded for 260/320/380/460px widths
Dashboard Focus Ops composer breakpoint fix around 1280px recorded
Engine workspace-context awareness recorded for Dashboard, Calendar, DAW, Full Booking, Bookings, Maintenance, Concierge, Tasks, and Reconciliation
Workspace-orientation prompts recorded: What am I looking at, What should I do here, What matters for this booking, What should I pay attention to here, Now what
Explicit prompt subject over page context recorded
Raw metadata language avoidance recorded
DAW action/save surface doctrine recorded
DAW persistence targets recorded: task-backed save, concierge request save, booking-note-backed save, insufficient-context bridge/fallback
DAW copy recorded: Save this step / Saved
Saved DAW workflow truth-state recorded: saved workflow does not equal resolved issue
Payment DAW known guest identity hydration recorded
Prior offer context, filler normalization, next-step sequencing, and saved DAW workflow awareness recorded
Payment priority hardening recorded
Strict brain quality eval recorded as 178/178 after workspace-context awareness
Cockpit distinction recorded: Lucia Workspace + DAW is the cockpit; Full Booking Page is record/review
Future roadmap separated from current implementation

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: not claimed
Villa Valentin launch: still requires product hardening, onboarding, and payment policy work
Desktop-first Workspace target: current v1 direction

Calendar / booking spine recorded as Lucia's temporal spine and root operational reality
Admin Calendar v1 monthly booking spine recorded: /calendar route, /admin/bookings source, 12 months back, 24 months forward
Calendar placement recorded as second in main nav
Calendar booking click doctrine recorded: /bookings/:bookingId Full Booking Page, not DAW
Booking Pulse recorded as deriving from the same booking source
Development demo fixture recorded: 36 bookings, 18 occupied months, no impossible overlaps, no stale arrival_profile days
Villa Valentin recorded as one rentable inventory unit for the current fixture
Focus Ops active_context from Signal Stream Chat recorded
Focus Ops prior recommendation memory recorded for short follow-ups like Why? and Can this wait?
Newest verified concrete recommendation replacement recorded
GPT-5.5 response refinement over verified context packs recorded with truth/routing guardrails
Brain quality eval recorded as passed 119/119 after prior recommendation memory pass

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: still held until reviewed validation
Roadmap/future work: calendar onboarding/imports, multi-property inventory, and production hardening remain future

Signal Stream + Focus with Lucia + Reminder loop recorded as current live-dev product pillar
Real Engine reminder persistence documented: create, due resurfacing, Open Reminder, Got it acknowledgement, and re-remind path
Signal Stream ordering doctrine recorded: newest meaningful attention event wins unless dismissed
Resolver Matrix recorded as the proof layer for routing messy CTA language into structured workspace destinations
Dynamic Action Workspace recorded as the default universal `/ops/actions` workspace for structured Focus Ops actions
Focus Ops scoped entity routing fix recorded: named guest/service/request overrides generic ranking
Brain quality eval recorded as passed 60/60 after scoped entity routing fix
Admin/Engine build identity tag recorded as runtime proof for the currently deployed live-dev pair
Engine GET / identity recorded as live source for Engine build identity

Environment: Development/live-dev
Production readiness: not claimed
Staging promotion: still held until reviewed validation

Focus Ops CTA destination contract hardened
Engine now resolves workflow-specific recommended_action destinations through a central resolver
Workflow-specific CTAs now emit structured destinations instead of generic booking overview fallback
Live dev validated that a specific private-chef request can resolve to a focused operator action destination
Admin confirmed to route into a focused next-steps UI instead of forcing a generic booking overview hunt
Brain quality eval expanded and passed 56/56
Generic booking overview preserved as fallback only

HelloLucia.ai Newsroom workflow documented in Canon
Newsroom owner recorded as lucia-marketing
Source markdown, generated files, image frontmatter, local validation, and Cloudflare Pages deploy flow recorded

Resend waitlist outbound email implemented in lucia-marketing
Resend sending subdomain verified: send.hellolucia.ai
Cloudflare Pages environment variables configured for Resend
Waitlist endpoint sends welcome email after new Supabase signup insert
Duplicate waitlist signup behavior confirmed: ok:true duplicate:true and no resend
Live new-signup email delivery confirmed
Lucia avatar/header welcome email confirmed in inbox
Known gap recorded: Resend message id/status returned by endpoint but not yet persisted to Supabase

Resend waitlist outbound email = implemented / configured / tested live
Postmark remains inbound operational/system email intake

Lucia Canon v0.1.3.6 Alignment Update - Pass 1
Engine baseline recorded as engine-v0.1.3.6 on dev
Admin baseline recorded as admin-v0.1.3.6 on dev
GPT-5.5 default model recorded
Lucia JSON model gateway migration from Chat Completions to Responses API recorded
Semantic conversational intent assist recorded as live in Focus Ops
Brain quality eval 52/52 pass recorded
Admin visible UI tag v0.1.3.6 recorded
Admin Dev CI gate recorded: npm ci, npm run lint, npm run build
Admin dev deploy-after-checks workflow recorded
Eval Labs dev target recorded: https://api-dev.hellolucia.ai/admin/operator-focus
Staging promotion hold recorded until Eval Labs dev baseline is captured and reviewed
Live internet development loop recorded as current operating doctrine

Added Branding and Identity Canon section
Added Color System page with rendered color swatches
Added color-swatches.css to Obsidian snippets
Mirrored color swatch CSS into publish.css
Updated Canon navigation and snippet guide

Canonical restructure
Twilio + WhatsApp working
Bunny media pipeline working
Postmark inbound body working