First slice: relationship-activation queue home

.coderabbit.yaml

@@ -0,0 +1,7 @@
+reviews:
+  auto_review:
+    enabled: true
+    base_branches:
+      - main
+      - develop
+  review_status: true

.cwl/data-management.yaml

@@ -0,0 +1,48 @@
+schema_version: '1.0'
+repository: ContextualWisdomLab/ELUNVERA
+product_name: ELUNVERA
+authoritative_data_assets:
+  - asset_code: customer_relationship_record
+    description: Tenant-scoped parties, accounts, roles, relationships, evidence, and history.
+    data_classification: restricted_personal_and_commercial
+    system_of_record: true
+  - asset_code: commercial_opportunity_record
+    description: Opportunity process, stage, value, forecast, stakeholder, and outcome history.
+    data_classification: confidential_commercial
+    system_of_record: true
+  - asset_code: complaint_outcome_record
+    description: Complaint, remedy, customer response, satisfaction observation, and outcome history.
+    data_classification: restricted_customer_case
+    system_of_record: true
+data_owner_role: elunvera_product_owner
+data_steward_role: tenant_data_steward
+critical_data_elements:
+  - party_identity_reference
+  - relationship_truth_status
+  - relationship_valid_time
+  - account_owner_assignment
+  - opportunity_stage_history
+  - monetary_amount_and_currency
+  - communication_preference
+  - complaint_status
+quality_rule_references:
+  - docs/DATA_MODEL.md#18-data-quality-invariants
+  - docs/TEST_STRATEGY.md
+retention_policy_references:
+  - docs/PRIVACY.md#8-retention-and-disposition
+  - docs/adr/0015-retention-disposition.md
+lineage_producers:
+  - elunvera_api
+  - elunvera_worker
+lineage_consumers:
+  - semantic_data_portal
+  - lineageweave
+applicable_knowledge_areas:
+  - data_governance
+  - data_quality
+  - metadata_management
+  - data_security
+  - data_integration_and_interoperability
+assessment_exclusions:
+  - code: production_runtime_evidence
+    reason: The repository baseline contains no implemented runtime.

.github/pull_request_template.md

@@ -0,0 +1,38 @@
+## Product outcome
+
+Describe the buyer- or operator-visible problem closed by this PR.
+
+## Scope and boundaries
+
+- Owning ELUNVERA responsibility:
+- CWL dependencies consumed by contract:
+- Explicitly excluded work:
+
+## Evidence
+
+- Exact head:
+- Tests and commands actually run:
+- Coverage and documentation denominators:
+- Migration/restore/security/accessibility/model evidence, where applicable:
+
+## Data and privacy
+
+- Data assets and classifications changed:
+- Tenant, purpose, retention, legal-hold, and export impacts:
+- New event fields reviewed for PII/secrets:
+
+## Contracts and docs
+
+- [ ] OpenAPI/AsyncAPI/JSON Schema updated
+- [ ] ADR updated or decision remains conformant
+- [ ] `docs/product-technical-gap-baseline.md` updated
+- [ ] `CHANGELOG.md` updated
+- [ ] Doctoring and references updated
+
+## Review gate
+
+- [ ] Current-head checks complete
+- [ ] Independent approval received
+- [ ] Unresolved threads are zero
+- [ ] No queued/pending/skipped check is represented as successful
+- [ ] One-shot/self-modifying workflow removed after its purpose

.github/workflows/ci.yml

@@ -0,0 +1,66 @@
+name: product-ci
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: product-ci-${{ github.repository }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  activation-queue:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Check out exact revision
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # actions/checkout@v7
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          persist-credentials: false
+
+      - name: Verify exact checkout
+        env:
+          EXPECTED_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+        run: test "$(git rev-parse HEAD)" = "$EXPECTED_SHA"
+
+      - name: Set up Python
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Install hash-locked Python test dependencies
+        env:
+          PIP_DISABLE_PIP_VERSION_CHECK: "1"
+        run: >-
+          python -m pip install --no-input --only-binary=:all:
+          --require-hashes -r requirements-ci.txt
+
+      - name: Run Python tests with complete production coverage
+        run: |
+          python -m coverage run --branch -m pytest -q
+          python -m coverage report \
+            --include='src/elunvera/*,scripts/serve.py' \
+            --fail-under=100
+
+      - name: Compile Python entry points
+        run: python -m py_compile scripts/serve.py src/elunvera/queue.py
+
+      - name: Set up Node
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # actions/setup-node@v5
+        with:
+          node-version: "24"
+
+      - name: Run browser tests with complete production coverage
+        run: >-
+          node --test --experimental-test-coverage
+          --test-coverage-include='web/*.js'
+          --test-coverage-lines=100
+          --test-coverage-branches=100
+          --test-coverage-functions=100
+          tests/test_app.mjs