Workflow Authority
All lifecycle mutation will route through one server-only transition service. Pages, jobs, and webhooks can submit commands, but they cannot mutate canonical state directly.
Knox Signature Ops
This repo is the source-of-truth implementation for Knox operations. Supabase is canonical, workflow authority owns lifecycle mutation, and every public surface is scoped through revocable tokens.
Workflow Authority
All lifecycle mutation will route through one server-only transition service. Pages, jobs, and webhooks can submit commands, but they cannot mutate canonical state directly.
Versioned Commerce
Deal Builder versions and proposal versions are immutable so every contract, payment request, and public link can pin to a stable commercial snapshot.
Fail-Closed Public Access
Proposal, questionnaire, and payment pages will use separate hashed single-purpose tokens with revocation, expiry, and supersession rules.
Delivery Sequence
The repo starts with the docs, env contract, and workflow foundation so every later surface has a stable authority layer beneath it.
Phase 1
Schema + workflow authority
Phase 2
Inquiry intake + Deal Builder
Phase 3
Proposal engine + public proposal access
Phase 4
Contract + deposit booking trigger
Phase 5
Questionnaire + final payment + readiness
Phase 6
Notifications + mirrors + post-event flow