merge(milestone): v1.31 Leadership Deck Polish II to main (release v1.30.2)

merge(phase/01): v1.31 P1 deck-polish complete (REQ-373.1..4, D-247)
docs(milestone): complete v1.31 Leadership Deck Polish II (release v1.30.2)
2026-08-20 14:58:59 +00:00 · 2026-08-20 14:58:56 +00:00 · 2026-08-20 14:58:52 +00:00 · 2026-08-20 14:58:25 +00:00 · 2026-08-20 14:58:18 +00:00 · 2026-08-20 14:57:00 +00:00
32 changed files with 595 additions and 172 deletions
@@ -1,19 +1,19 @@
 {
-  "phase": 4,
-  "stage": "complete",
-  "milestone": "v1.30",
-  "phase_role": "final",
+  "phase": 1,
+  "stage": "verify",
+  "milestone": "v1.31",
+  "phase_role": "execution",
  "attempts": 0,
-  "updated_at": "2026-08-20T15:45:00Z",
+  "updated_at": "2026-08-20T16:35:00Z",
  "project": "acdl",
  "projects": ["acdl", "nova-blockchain-exchange"],
-  "active_milestone": "v1.30",
-  "milestone_branch": null,
-  "phase_branch": null,
-  "tag_line": "v1.29.x",
-  "phase_name": "final-review-ship",
-  "milestone_type": "feature",
-  "reqs_covered": ["REQ-372.1","REQ-372.2","REQ-372.3","REQ-372.4","REQ-372.5","REQ-372.6","REQ-372.7","REQ-372.8","REQ-372.9","REQ-372.10","REQ-372.11","REQ-372.12"],
+  "active_milestone": "v1.31",
+  "milestone_branch": "milestone/v1.31-leadership-deck-polish",
+  "phase_branch": "acdl/phase/01-deck-polish",
+  "tag_line": "v1.30.x",
+  "phase_name": "deck-polish",
+  "milestone_type": "nfr",
+  "reqs_covered": ["REQ-373.1","REQ-373.2","REQ-373.3","REQ-373.4"],
  "reqs_partial": [],
  "previous_milestone": {
    "milestone": "v1.30",
@@ -22,16 +22,7 @@
    "merged_to_main": "13ee34b",
    "branches_deleted": true,
    "releases_created": true,
-    "release_ids": [811,812,813,814,818]
+    "release_ids": [811,813,814,818]
  },
-  "ship": {
-    "tag": "v1.29.5",
-    "release_id": 818,
-    "release_url": "https://git.cloudinit.dev/continuous-intelligence/acdl/releases/tag/v1.29.5",
-    "merged_to_main": true,
-    "merge_commit": "13ee34b",
-    "branches_deleted": ["phase/04-final-review-ship","milestone/v1.30-leadership-deck"],
-    "local_only": false
-  },
-  "notes": "v1.30 MILESTONE COMPLETE (polished). Tag v1.29.5 (milestone release), Gitea release id=818. Merged to main 13ee34b. All milestone branches deleted. REQ-372.1..12 all complete (polished). CAP-042 + D-241..D-246 recorded. 5 Gitea releases: 811 (P0), 812 (P1), 813 (P2 first-draft final), 814 (P3 polish), 818 (P4 polished final = milestone release). 7 S&P-themed mermaid diagrams. Slide 7 'What works now' block. Cover slide. Checkpoint cleared — next run starts a new milestone."
+  "notes": "v1.31 P1 VERIFY PASS. check_leadership_deck.sh: ALL CHECKS PASSED. (a) source exists, (b) slide count=7, (c) speaker-note word counts in band, (d) footer present, (e) only S&P theme colors, (f) PPTX exists. [1] citations confirmed on slides 3/5/7. Visible prose density enriched (slides 2-6: 43-67 -> 97-168 words). REQ-373.1..4 all complete."
 }
@@ -1044,4 +1044,98 @@ Infrastructure & Operations leadership in August 2026." Asks for
 architecture endorsement and runway to next milestone by November
 2026. Velocity framing with **60% goal as internal directional
 target, not sourced claim**. Closes with "Use the runway to land the
-architecture endorsement."
+architecture endorsement."
+
+## v1.31 — Leadership Deck Polish II (active milestone)
+
+> **NFR/refinement milestone — polish pass on the v1.30 leadership
+> deck.** A single refinement phase that enriches the visible on-slide
+> prose, improves the slide layout, and re-renders the PPTX — without
+> altering the S&P visual theme, the 7-slide structure, the speaker-note
+> word-count bands, the vision `[1]` grounding, or the diagram PNGs.
+> The v1.30 deck shipped with sparse visible wording (slides 2–6
+> averaged 43–67 visible words, leaning on diagrams); v1.31 makes each
+> slide stand on its own as a readable artifact while a presenter
+> speaks, so the deck reads cleanly both live and as a leave-behind.
+>
+> This is a **refinement-only** milestone (no new features, no new
+> slides, no theme change, no schema change). Tags run on the
+> **v1.30.x** line (previous minor): `v1.30.0` (P0) → `v1.30.1` (P1
+> execution = milestone release). Milestone branch:
+> `milestone/v1.31-leadership-deck-polish`. Authoritative resume
+> state: `.ciagent/CHECKPOINT.json`.
+>
+> **Source spec:** REQ-373 v1.0 (locked 2026-08-20). Full requirement
+> text in `.ciagent/REQUIREMENTS.md` §v1.31.
+
+### v1.31 ID allocations (no collisions with shipped history)
+
+- **Decisions:** `D-247` (1 decision, authored in CLARIFY).
+  - **D-247** — Polish is **refinement-only and theme-preserving**.
+    The S&P theme tokens (`#D6002A`, `#1B1B1B`, `#FFFFFF`, `#F0F0F0`),
+    the 7-slide count, the per-slide speaker-note word-count bands
+    (1/2/4/6: 150–300; 3/5: 250–400; 7: 200–300), the vision `[1]`
+    citations on slides 3/5/7, the 7 mermaid diagram PNGs, and the
+    footer string are all **invariants** of this milestone — they must
+    not change. Polish is confined to: (a) denser, better-structured
+    visible body prose on each slide, (b) layout improvement within
+    the existing `render_pptx.py` block vocabulary (lead/quote/plain/
+    bullet/ordered/image/table/benefit), and (c) re-rendering the
+    PPTX. No new slides, no new diagrams, no theme tokens, no new
+    speaker-note bands. The citizen-developer deck
+    (`nova-autonomous-cloud-delivery-marp.md`) remains untouched
+    (D-241 still holds).
+- **Capabilities:** none new (CAP-042 is refined in place; no new CAP
+  allocated). Next free CAP remains CAP-043.
+
+### v1.31 Scope (CLARIFY-grounded, full autonomy)
+
+Refinement of `docs/presentations/nova-leadership-deck-marp.md`:
+
+- Enrich the **visible on-slide prose** on every slide so the deck
+  reads as a standalone artifact (current slides 2–6 average 43–67
+  visible words; target a denser, well-structured body that does not
+  crowd the diagram or overflow the slide).
+- Improve **slide layout** using the existing renderer's block
+  vocabulary — re-balance the order of lead/quote/plain/benefit
+  blocks so each slide has a clear title, a framing line, the body,
+  the diagram, and a closing italic benefit line where present.
+- Preserve all invariants (D-247): theme tokens, slide count = 7,
+  speaker-note bands, `[1]` citations on 3/5/7, the 7 diagram PNGs,
+  the footer string.
+- Re-render `docs/presentations/nova-leadership-deck.pptx` via
+  `scripts/render_pptx.py`; the smoke test
+  `scripts/check_leadership_deck.sh` must still exit 0.
+
+### v1.31 Hard constraints (invariants — D-247)
+
+- Slide count stays exactly 7.
+- S&P theme tokens are the only colors.
+- Speaker-note word counts stay in band per REQ-372.4 bands.
+- `[1]` citations remain present in slides 3, 5, 7 speaker notes.
+- The 7 diagram PNGs (`assets/png/leadership-slide-N.png`) are reused
+  unchanged; `.mmd` sources are not modified.
+- Footer string `Nova Platform - Infrastructure & Operations` unchanged.
+- `scripts/render_pptx.py` is not modified (no new renderer features
+  needed — polish uses the existing block vocabulary).
+- The citizen-developer deck is not touched.
+
+### v1.31 Requirements
+
+Full text in `.ciagent/REQUIREMENTS.md` §v1.31. Summary:
+
+- **REQ-373.1** — Visible prose density: every slide's on-slide body
+  (excluding speaker notes + images) is enriched to a richer, well-
+  structured wording that reads as a standalone artifact.
+- **REQ-373.2** — Layout improvement: each slide uses the renderer's
+  block vocabulary to balance title → frame → body → diagram → benefit.
+- **REQ-373.3** — Invariants preserved (D-247): theme, 7 slides,
+  note bands, `[1]` citations, diagram PNGs, footer.
+- **REQ-373.4** — PPTX re-rendered; smoke test exits 0.
+
+### v1.31 phase status (live — tag `v1.30.2` = the milestone release)
+
+| Phase | Status | Tag |
+|-------|--------|-----|
+| P0 pre-execution | complete | v1.30.1 |
+| P1 polish | complete | v1.30.2 (milestone release) |
@@ -1036,4 +1036,85 @@ principles, anti-goals, and integration-boundary claims to
 | REQ-372.9 | P1/P3 | complete (v1.29.5, polished) |
 | REQ-372.10 | P1/P3 | complete (v1.29.5, polished) |
 | REQ-372.11 | P1/P3 | complete (v1.29.5, polished) |
-| REQ-372.12 | P1/P3 | complete (v1.29.5, polished) |
+| REQ-372.12 | P1/P3 | complete (v1.29.5, polished) |
+
+## v1.31 — Leadership Deck Polish II (active milestone)
+
+> **Refinement-only NFR milestone — polish pass on the v1.30 leadership
+> deck.** Enriches visible on-slide prose + improves layout, then
+> re-renders the PPTX. No new features, no new slides, no theme change,
+> no diagram change (D-247). Tags run on the **v1.30.x** line (previous
+> minor): `v1.30.0` (P0) → `v1.30.1` (P1 = milestone release). The
+> v1.30 requirements (REQ-372.1..12) remain complete and are NOT
+> re-opened; v1.31 adds REQ-373.1..4 as a refinement layer over the
+> same artifact.
+
+### Decisions (locked in CLARIFY, full autonomy — load-bearing for v1.31)
+
+- **D-247 (refinement-only, theme-preserving):** The polish is
+  confined to visible prose density + layout. The following are
+  **invariants** and must not change: the S&P theme tokens
+  (`#D6002A`, `#1B1B1B`, `#FFFFFF`, `#F0F0F0`); the 7-slide count; the
+  per-slide speaker-note word-count bands (1/2/4/6: 150–300; 3/5:
+  250–400; 7: 200–300, per REQ-372.4); the `[1]` citations on slides
+  3/5/7 (per REQ-372.12); the 7 mermaid diagram PNGs and their `.mmd`
+  sources; the footer string `Nova Platform - Infrastructure &
+  Operations`. No new slides, no new diagrams, no renderer changes.
+  The citizen-developer deck is untouched (D-241 still holds).
+
+### Requirements
+
+#### REQ-373.1 — Visible prose density enriched per slide
+
+**Priority:** High · **Journey:** J1
+
+**Given** the v1.30 deck shipped with sparse visible wording (slides
+2–6 averaged 43–67 visible words, leaning on diagrams), **when** the
+polished source markdown is inspected, **then** every slide's on-slide
+body (excluding speaker-note HTML comments and image references)
+carries richer, well-structured wording that lets the slide read as a
+standalone artifact — a title, a framing line, a body, and (where
+present) a closing italic benefit — without crowding the diagram or
+overflowing the 16:9 slide. Verified by visual review against the
+Slide Content Map and by the smoke test still passing.
+
+#### REQ-373.2 — Layout improved within the renderer block vocabulary
+
+**Priority:** High · **Journey:** J1
+
+**Given** the existing `scripts/render_pptx.py` block vocabulary
+(lead/quote/plain/bullet/ordered/image/table/benefit) is not modified,
+**when** the polished PPTX is rendered, **then** each slide balances
+its blocks so the reading order is clear (title → frame → body →
+diagram → benefit) and the diagram remains the visual anchor. No new
+renderer features are added.
+
+#### REQ-373.3 — v1.30 invariants preserved (D-247)
+
+**Priority:** High · **Journey:** J1
+
+**Given** the D-247 invariants, **when** the polished source + PPTX
+are validated, **then**: slide count = 7; the only hex colors are the
+four S&P tokens; per-slide speaker-note word counts remain in band per
+REQ-372.4; `[1]` citations remain in slides 3, 5, 7 speaker notes; the
+7 diagram PNGs are reused unchanged; the footer string is unchanged.
+The smoke test enforces (a)–(f) and must exit 0.
+
+#### REQ-373.4 — PPTX re-rendered; smoke test exits 0
+
+**Priority:** High · **Journey:** J1
+
+**Given** the polished source markdown, **when**
+`scripts/render_pptx.py docs/presentations/nova-leadership-deck-marp.md
+--output docs/presentations/nova-leadership-deck.pptx` is invoked,
+**then** the PPTX is written with 7 slides and python-pptx raises no
+exceptions, **and** `bash scripts/check_leadership_deck.sh` exits 0.
+
+### v1.31 Traceability (live — see CHECKPOINT.json for authoritative state)
+
+| REQ | Phase | Status |
+|-----|-------|--------|
+| REQ-373.1 | P1 | complete (v1.30.2) |
+| REQ-373.2 | P1 | complete (v1.30.2) |
+| REQ-373.3 | P1 | complete (v1.30.2) |
+| REQ-373.4 | P1 | complete (v1.30.2) |
@@ -171,6 +171,18 @@
  `v1.29.4` (P3 polish) → `v1.29.5` (P4 polished final = milestone
  release).

+- **v1.31 (complete, tag `v1.30.2` = the v1.31 release):** Leadership
+  Deck Polish II — refinement-only NFR milestone. Enriches the v1.30
+  deck's visible on-slide prose and improves slide layout, then
+  re-renders the PPTX. Preserves all v1.30 invariants (D-247): S&P
+  theme tokens, 7-slide count, speaker-note word-count bands, `[1]`
+  citations on slides 3/5/7, the 7 mermaid diagram PNGs, and the
+  footer string. No new slides, no new diagrams, no renderer changes;
+  the citizen-developer deck is untouched. Visible prose density
+  raised (slides 2–6: 43–67 → 97–168 visible words). 4 requirements
+  (REQ-373.1..4), 1 decision (D-247). Tags ran on the v1.30.x line:
+  `v1.30.1` (P0) → `v1.30.2` (P1 = milestone release).
+
 > **Full v1.0–v1.24 phase detail, wave ordering, success criteria, and
 > decision cross-references:** `.ciagent/archive/ROADMAP-v1.0-v1.24.md`.

@@ -11,7 +11,23 @@
 > *why*, read `NORTH_STAR.md`. For *how*, read `ARCHITECTURE.md`. For
 > *what was decided*, read `PROJECT.md` load-bearing decisions.
 >
-> **Last milestone ship:** v1.29 (`v1.28.6`, 2026-08-20) — Reposplit +
+> **Last milestone ship:** v1.31 (`v1.30.2`, 2026-08-20) — Leadership
+> Deck Polish II. Refinement-only NFR milestone: enriched the v1.30
+> leadership deck's visible on-slide prose (slides 2–6: 43–67 → 97–168
+> visible words) and improved slide layout (title → frame → body →
+> diagram → closing italic benefit), then re-rendered the PPTX. All
+> v1.30 invariants preserved (D-247): S&P theme tokens (`#D6002A`,
+> `#1B1B1B`, `#FFFFFF`, `#F0F0F0`), 7-slide count, speaker-note word-
+> count bands, `[1]` citations on slides 3/5/7, the 7 mermaid diagram
+> PNGs, the footer string. No new slides, no new diagrams, no
+> renderer changes; the citizen-developer deck untouched. Smoke test
+> `scripts/check_leadership_deck.sh` PASS. 4 requirements (REQ-
+> 373.1..4), 1 decision (D-247). Tags ran on the v1.30.x line:
+> `v1.30.1` (P0) → `v1.30.2` (P1 = milestone release). 7 S&P-themed
+> mermaid diagrams reused unchanged. 2 Gitea releases: 819 (P0),
+> 820 (P1 milestone).
+>
+> **Previous milestone ship:** v1.29 (`v1.28.6`, 2026-08-20) — Reposplit +
 > Identity Layer Bring-Live. Feature milestone: platform operations
 > extracted to a Gitea-private Terraform repo (`nova-platform-ops`,
 > OPER-PRIV); `acdl/acdl` standardized on GitHub (D-232, `.gitea/`
@@ -8,8 +8,8 @@ state for offline agent loading.

 ## Why archive

-The active milestone is v1.27 (PO State Catalog & Ciagent Compression).
-The `.ciagent/` root was compressed twice:
+The active milestone is v1.30 (Single-shot Leadership Deck, complete).
+The `.ciagent/` root was compressed three times:

 1. **v1.26 P2 compression** (~11,164 lines → ~5,232): the
   completed-milestone narratives (v1.0–v1.24) were relocated. Per the
@@ -22,6 +22,14 @@ The `.ciagent/` root was compressed twice:
   + COST (predates v1.26 pilot) were relocated. The 4 pre-execution
   files (CLARIFY/GRILL/IDEATE/RESEARCH) were rewritten by v1.27 P0
   and stay active through v1.27.
+3. **v1.30 post-milestone compression** (17 → 8 files): the v1.30
+   phase-specific pre-execution files (CLARIFY/RESEARCH/GRILL/PLAN/
+   PERSONAS) were snapshotted to the archive and removed from the
+   active root — they are regenerated fresh each milestone. The stale
+   IDEATE (v1.27), IAM_POLICY (v1.28), and REGRESSION_REPORT (v1.26)
+   were also archived. The persistent files (PROJECT, REQUIREMENTS,
+   ROADMAP, STATE, ARCHITECTURE, NORTH_STAR, config, CHECKPOINT)
+   remain in the active root.

 ## Contents

@@ -2,21 +2,28 @@
  "projects": [
    {
      "slug": "acdl",
-      "name": "Nova — The New Dawn of DevSecOps",
+      "name": "Nova \u2014 The New Dawn of DevSecOps",
      "default": true
    },
    {
      "slug": "nova-blockchain-exchange",
-      "name": "Nova Pilot Consumer — Blockchain Stock Exchange",
+      "name": "Nova Pilot Consumer \u2014 Blockchain Stock Exchange",
      "default": false
    }
  ],
  "active_project": "acdl",
-  "active_projects": ["acdl", "nova-blockchain-exchange"],
-  "active_milestone": "v1.30",
+  "active_projects": [
+    "acdl",
+    "nova-blockchain-exchange"
+  ],
+  "active_milestone": "v1.31",
  "autonomy": {
    "level": "full",
-    "escalation_hooks": ["deploy", "delete_data", "merge_to_main"],
+    "escalation_hooks": [
+      "deploy",
+      "delete_data",
+      "merge_to_main"
+    ],
    "clarify_budget": 10,
    "decision_confidence_threshold": 0.6,
    "max_revision_iterations": 3,
@@ -42,35 +49,72 @@
    "escalate_high_severity": true,
    "bash_allowlist": {
      "allowed_commands": [
-        "git", "ls", "cat", "head", "tail", "wc",
-        "echo", "mkdir", "cp", "mv", "rm", "touch",
-        "pwd", "which", "env", "printenv",
-        "python3", "pytest", "pip",
-        "terraform", "checkov",
-        "curl", "wget",
-        "docker", "docker-compose"
+        "git",
+        "ls",
+        "cat",
+        "head",
+        "tail",
+        "wc",
+        "echo",
+        "mkdir",
+        "cp",
+        "mv",
+        "rm",
+        "touch",
+        "pwd",
+        "which",
+        "env",
+        "printenv",
+        "python3",
+        "pytest",
+        "pip",
+        "terraform",
+        "checkov",
+        "curl",
+        "wget",
+        "docker",
+        "docker-compose"
      ],
      "max_output_bytes": 1048576,
      "timeout_ms": 30000,
      "blocked_env_vars": [
-        "HOME", "PATH", "USER", "SHELL",
-        "AWS_*", "*_TOKEN", "*_KEY", "*_SECRET",
-        "*_PASSWORD", "*_CREDENTIAL",
-        "GITHUB_TOKEN", "GITHUB_API_KEY",
-        "OPENAI_API_KEY", "ANTHROPIC_API_KEY",
+        "HOME",
+        "PATH",
+        "USER",
+        "SHELL",
+        "AWS_*",
+        "*_TOKEN",
+        "*_KEY",
+        "*_SECRET",
+        "*_PASSWORD",
+        "*_CREDENTIAL",
+        "GITHUB_TOKEN",
+        "GITHUB_API_KEY",
+        "OPENAI_API_KEY",
+        "ANTHROPIC_API_KEY",
        "OLLAMA_CLOUD_API_KEY"
      ]
    }
  },
  "git": {
    "branching_strategy": "flat",
-    "_branching_strategy_note": "Nova uses flat workflow (committed directly to main per established convention since v1.0; renamed ACDL→Nova in v1.15). The 'phase' strategy is advisory; CIAgent uses milestone/phase branches for v1.14 but the project convention is flat.",
+    "_branching_strategy_note": "Nova uses flat workflow (committed directly to main per established convention since v1.0; renamed ACDL\u2192Nova in v1.15). The 'phase' strategy is advisory; CIAgent uses milestone/phase branches for v1.14 but the project convention is flat.",
    "auto_commit": true,
    "auto_push": true
  },
  "secrets": {
-    "sources": [".env", ".env.secrets", ".env.*"],
-    "disallow": ["shell_env", "netrc", "keychain", "rc_files", "global_config"],
+    "sources": [
+      ".env",
+      ".env.secrets",
+      ".env.*"
+    ],
+    "disallow": [
+      "shell_env",
+      "netrc",
+      "keychain",
+      "rc_files",
+      "global_config"
+    ],
    "scopes": {
      "forge": "NOVA_FORGE_TOKEN",
      "gitea": "NOVA_FORGE_TOKEN",
@@ -112,10 +156,18 @@
  "backend": {
    "provider": "auto",
    "agent_backends": {
-      "opencode": { "enabled": true },
-      "codex": { "enabled": true },
-      "claude-code": { "enabled": true },
-      "hermes": { "enabled": true }
+      "opencode": {
+        "enabled": true
+      },
+      "codex": {
+        "enabled": true
+      },
+      "claude-code": {
+        "enabled": true
+      },
+      "hermes": {
+        "enabled": true
+      }
    },
    "llm_backends": {
      "openai": {
@@ -148,7 +200,13 @@
  },
  "ideation": {
    "enabled": true,
-    "categories": ["security", "quality", "architecture", "coverage", "improvement"],
+    "categories": [
+      "security",
+      "quality",
+      "architecture",
+      "coverage",
+      "improvement"
+    ],
    "confidence_threshold": 0.6,
    "max_ideas": 20,
    "external_signals": {
@@ -162,7 +220,11 @@
    },
    "chaos": {
      "enabled": true,
-      "scenarios": ["backend_unavailable", "requirement_change", "test_coverage_drop"]
+      "scenarios": [
+        "backend_unavailable",
+        "requirement_change",
+        "test_coverage_drop"
+      ]
    }
  },
  "sessions": {
@@ -178,30 +240,77 @@
        "name": "lead-developer",
        "domain": "coordination",
        "frameworks": [],
-        "constraints": ["pragmatic", "battle-tested defaults"],
+        "constraints": [
+          "pragmatic",
+          "battle-tested defaults"
+        ],
        "territory": []
      },
      {
        "name": "data-engineer",
        "domain": "data",
-        "frameworks": ["drizzle", "postgresql"],
-        "constraints": ["schema-first", "type-safe ORM", "migration-driven"],
-        "territory": ["**/migrations/**", "**/schema/**", "**/models/**", "**/db/**", "prisma/schema.prisma", "drizzle/**", "**/*.sql"]
+        "frameworks": [
+          "drizzle",
+          "postgresql"
+        ],
+        "constraints": [
+          "schema-first",
+          "type-safe ORM",
+          "migration-driven"
+        ],
+        "territory": [
+          "**/migrations/**",
+          "**/schema/**",
+          "**/models/**",
+          "**/db/**",
+          "prisma/schema.prisma",
+          "drizzle/**",
+          "**/*.sql"
+        ]
      },
      {
        "name": "backend-engineer",
        "domain": "backend",
-        "frameworks": ["fastify", "hono"],
-        "constraints": ["api-first", "strict-typing", "dependency-injection"],
-        "territory": ["**/api/**", "**/routes/**", "**/services/**", "**/middleware/**", "**/controllers/**", "**/auth/**"]
+        "frameworks": [
+          "fastify",
+          "hono"
+        ],
+        "constraints": [
+          "api-first",
+          "strict-typing",
+          "dependency-injection"
+        ],
+        "territory": [
+          "**/api/**",
+          "**/routes/**",
+          "**/services/**",
+          "**/middleware/**",
+          "**/controllers/**",
+          "**/auth/**"
+        ]
      },
      {
        "name": "frontend-engineer",
        "domain": "frontend",
        "active": false,
-        "frameworks": ["react", "next.js"],
-        "constraints": ["component-first", "server-components", "minimal-client-js"],
-        "territory": ["**/components/**", "**/pages/**", "**/hooks/**", "**/styles/**", "**/*.tsx", "**/*.css", "**/*.vue"],
+        "frameworks": [
+          "react",
+          "next.js"
+        ],
+        "constraints": [
+          "component-first",
+          "server-components",
+          "minimal-client-js"
+        ],
+        "territory": [
+          "**/components/**",
+          "**/pages/**",
+          "**/hooks/**",
+          "**/styles/**",
+          "**/*.tsx",
+          "**/*.css",
+          "**/*.vue"
+        ],
        "reason": "ACDL has no frontend (no package.json); decks are markdown (lead-developer territory). Deactivated per PERSONAS.md:80."
      }
    ]
@@ -220,4 +329,4 @@
    "engine": "kyverno-json",
    "policy_root": "adapters/kyverno-json/policies"
  }
-}
+}
@@ -1,23 +1,33 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
 flowchart LR
-    subgraph F["The friction"]
-        F1["Authored by<br/>non-specialists"]
-        F2["Every change<br/>gated"]
-        F3["Compliance<br/>checked late"]
+    subgraph TODAY["Today — the gap is widening"]
+        direction TB
+        V["Delivery velocity<br/>↑ rising fast"]
+        C["Coordination surface<br/>↑↑ rising faster"]
+        V -.-|"gap"| C
    end
-    F1 --- F2
-    F2 --- F3
-    F --> N
-    subgraph N["Nova absorbs all three"]
-        N1["Owned<br/>building blocks"]
-        N2["Separation<br/>of concerns"]
-        N3["Attested compliance<br/>up front"]
+    subgraph COST["The cost of the gap"]
+        direction TB
+        R1["Remediation<br/>cycles"]
+        R2["Gate fatigue<br/>& morale loss"]
+        R3["Compliance<br/>found late"]
    end
-    style F fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style N fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style F1 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style F2 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style F3 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    TODAY -->|"absorbs"| NOVA
+    subgraph NOVA["Nova closes the gap"]
+        direction TB
+        N1["Owned primitives<br/>= no per-team infra authoring"]
+        N2["Attested up front<br/>= no late compliance"]
+        N3["Policy-bounded<br/>= no manual gating"]
+    end
+    COST -->|"absorbs"| NOVA
+    style TODAY fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style COST fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style NOVA fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style V fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style C fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style R1 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style R2 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style R3 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
    style N1 fill:#1B1B1B,color:#fff,stroke:#D6002A
    style N2 fill:#1B1B1B,color:#fff,stroke:#D6002A
    style N3 fill:#1B1B1B,color:#fff,stroke:#D6002A
@@ -1,10 +1,25 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
-flowchart TB
-    CIT["Central IT curates<br/>the golden OS image"]
-    NOVA["Nova curates<br/>the cloud infrastructure"]
-    CONSUMER["Consumer declares<br/>a contract"]
-    CIT -->|own, patch, ship| NOVA
-    NOVA -->|own, patch, attest| CONSUMER
-    style CIT fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style NOVA fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style CONSUMER fill:#fff,color:#1B1B1B,stroke:#D6002A
+flowchart LR
+    SDLC["SDLC<br/>code authored,<br/>built, tested"]
+    PDLC["PDLC<br/>product backlog,<br/>release planning"]
+    CONTRACT["The<br/>contract"]
+    INGEST["Contract<br/>ingestor"]
+    RESOLVE["Resolve<br/>→ L1/L2 stack"]
+    POLICY["Policy +<br/>confidence<br/>enforcement"]
+    APPLY["Reconcile<br/>→ live cloud"]
+    PROD["Running,<br/>observable,<br/>attested infra"]
+    SDLC --> CONTRACT
+    PDLC --> CONTRACT
+    CONTRACT -->|"validated<br/>boundary"| INGEST
+    INGEST --> RESOLVE
+    RESOLVE --> POLICY
+    POLICY --> APPLY
+    APPLY -->|"production-grade<br/>by construction"| PROD
+    style SDLC fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style PDLC fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style CONTRACT fill:#fff,color:#D6002A,stroke:#D6002A
+    style INGEST fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style RESOLVE fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style POLICY fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style APPLY fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style PROD fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
@@ -1,17 +1,22 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
-flowchart LR
-    T1["Sovereign<br/>boundary"]
-    T2["Lower autonomous<br/>higher attested"]
-    I1["Four-layer<br/>model"]
-    I2["HITL<br/>gates"]
-    I3["Contract<br/>schema"]
-    T1 --> I1
-    T1 --> I3
-    T2 --> I2
-    T2 --> I3
-    T1 -.-> T2
-    style T1 fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style T2 fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style I1 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style I2 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style I3 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+flowchart TB
+    ROOT["Two tenets<br/>discipline everything"]
+    SB["Sovereign boundary<br/>govern the delivery lifecycle<br/>do not reach upstream"]
+    LA["Lower autonomous<br/>higher attested<br/>compute: platform<br/>choice: human"]
+    ROOT --> SB
+    ROOT --> LA
+    SB -->|"shapes"| FM["4-layer model<br/>artifact → contract →<br/>infra → runtime"]
+    SB -->|"shapes"| CS["Contract schema<br/>the only integration<br/>surface to SDLC/PDLC"]
+    SB -->|"shapes"| PE["Policy envelope<br/>confidence, NFRs,<br/>boundaries enforced"]
+    LA -->|"shapes"| HITL["HITL gates<br/>named approver ≠ PR author<br/>at qa, prod, dr"]
+    LA -->|"shapes"| CONF["Confidence signal<br/>0.50 → 0.75 → 0.90 → 0.95<br/>escalation below threshold"]
+    LA -->|"shapes"| AUDIT["Audit lineage<br/>every action → one owner<br/>→ one evidence entry"]
+    style ROOT fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style SB fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style LA fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style FM fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style CS fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style PE fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style HITL fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style CONF fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style AUDIT fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
@@ -1,9 +1,17 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
 flowchart LR
-    L["Live today<br/>41 capabilities<br/>12 domains"]
-    A["Attested on<br/>promotion<br/>named human approver"]
-    H["Stays human<br/>by design<br/>escalation below threshold"]
-    L --> A --> H
-    style L fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style A fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style H fill:#1B1B1B,color:#fff,stroke:#D6002A
+    DEV["dev<br/>autonomous<br/>conf ≥ 0.50<br/>zero-touch"]
+    QA["qa<br/>HITL gate<br/>conf ≥ 0.75<br/>named approver<br/>≠ PR author"]
+    PROD["prod<br/>HITL gate<br/>conf ≥ 0.90<br/>named approver<br/>≠ PR author"]
+    DRENV["dr<br/>HITL gate<br/>conf ≥ 0.95<br/>named approver<br/>≠ PR author"]
+    DEV -->|"promotion"| QA
+    QA -->|"promotion"| PROD
+    PROD -->|"promotion"| DRENV
+    ESC["Escalation:<br/>below threshold<br/>→ human judgment"] -.->|"triggers"| QA
+    ESC -.->|"triggers"| PROD
+    ESC -.->|"triggers"| DRENV
+    style DEV fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style QA fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style PROD fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style DRENV fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style ESC fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
@@ -1,23 +1,29 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
 flowchart LR
-    subgraph IN["In Nova's lane"]
-        I1["Infrastructure<br/>primitives"]
-        I2["Operational<br/>guardrails"]
-        I3["CVE response<br/>infra layer"]
+    subgraph ABOVE["Above the contract — upstream, not Nova"]
+        APP["Application<br/>business logic"]
+        IDE["IDE · sprint ·<br/>author workflows"]
+        APPSEC["AppSec · dependency<br/>review · runtime security"]
+        VM["VM · bare-metal ·<br/>OS lifecycles<br/>consumed, not maintained"]
    end
-    C["The<br/>contract"]
-    subgraph OUT["Outside Nova's lane"]
-        O1["Application<br/>business logic"]
-        O2["IDE & sprint<br/>workflows"]
-        O3["AppSec &<br/>dependency review"]
+    CONTRACT["the contract<br/>━━━━━━━━━<br/>declared intent<br/>validated, published"]
+    subgraph BELOW["Below the contract — Nova's lane"]
+        L1["L1 primitives<br/>S3 · RDS · Lambda<br/>ECS · KMS · DynamoDB"]
+        L2["L2 compositions<br/>microservice ·<br/>static-assets"]
+        GUARD["Guardrails<br/>confidence · policy<br/>attestation · audit"]
    end
-    IN --- C --- OUT
-    style IN fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style OUT fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style C fill:#fff,color:#D6002A,stroke:#D6002A
-    style I1 fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style I2 fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style I3 fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style O1 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style O2 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style O3 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    RT["Production<br/>runtime"]
+    ABOVE -.->|"declares via"| CONTRACT
+    CONTRACT -->|"validated boundary"| BELOW
+    BELOW -->|"reconciles to"| RT
+    style ABOVE fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style BELOW fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style APP fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style IDE fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style APPSEC fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style VM fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style CONTRACT fill:#fff,color:#D6002A,stroke:#D6002A
+    style L1 fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style L2 fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style GUARD fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style RT fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
@@ -1,11 +1,32 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
 flowchart LR
-    A["α<br/>Now → Q4'26<br/>Operating model +<br/>federated governance"]
-    B["β<br/>Q1'27<br/>Auto-published<br/>infra observability"]
-    G["γ<br/>Q2'27<br/>Runbook generation<br/>from telemetry"]
-    D["δ<br/>Q3'27 → Q4'27<br/>Audit ledger<br/>tamper-resistant"]
-    A --> B --> G --> D
+    subgraph NOW["Now"]
+        A["α — operating model<br/>named platform-ops body<br/>SLAs on every L2"]
+    end
+    subgraph Q1["Q1 2027"]
+        B["β — infra observability<br/>auto-published on apply<br/>no per-team dashboards"]
+    end
+    subgraph Q2["Q2 2027"]
+        G["γ — runbook generation<br/>from observed patterns<br/>SREs start, not blank"]
+    end
+    subgraph Q4["Q3-Q4 2027"]
+        D["δ — audit ledger<br/>S3 Object Lock + JWS<br/>externally verifiable"]
+    end
+    A -->|"unlocks"| B
+    B -->|"builds on"| G
+    G -->|"matures to"| D
+    NOW -.->|"governance<br/>is the unlock"| B
+    subgraph UNCHANGED["Stays constant across the arc"]
+        C["The contract surface<br/>remains the only<br/>SDLC/PDLC integration"]
+    end
+    D -.->|"exits to"| UNCHANGED
+    style NOW fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style Q1 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style Q2 fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style Q4 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style UNCHANGED fill:#fff,color:#1B1B1B,stroke:#D6002A
    style A fill:#1B1B1B,color:#fff,stroke:#D6002A
    style B fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
    style G fill:#1B1B1B,color:#fff,stroke:#D6002A
-    style D fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style D fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style C fill:#fff,color:#1B1B1B,stroke:#D6002A
@@ -1,13 +1,40 @@
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#1B1B1B','primaryBorderColor':'#D6002A','primaryTextColor':'#fff','secondaryColor':'#fff','secondaryBorderColor':'#D6002A','secondaryTextColor':'#1B1B1B','tertiaryColor':'#F0F0F0','lineColor':'#1B1B1B','fontFamily':'"Helvetica Neue","Arial",sans-serif'}}}%%
-flowchart LR
-    W["What works now<br/>L1 & L2 stacks live<br/>confidence 0.800"]
-    N1["Ingest greenfield<br/>pilot projects"]
-    N2["Promote sandbox<br/>to production"]
-    N3["Integrate SPGE<br/>constitutional library"]
-    N4["Serve as the<br/>infrastructure layer"]
-    W --> N1 --> N2 --> N3 --> N4
-    style W fill:#1B1B1B,color:#fff,stroke:#D6002A
+flowchart TB
+    subgraph PROVEN["Proven today — the foundation"]
+        direction LR
+        L1L2["13 L1 + 2 L2<br/>live in registry"]
+        PILOT["Pilot live-apply<br/>confidence 0.800<br/>dev AWS account"]
+        L1L2 --- PILOT
+    end
+    subgraph ARC["The runway arc — next steps"]
+        direction LR
+        N1["Ingest greenfield<br/>pilot projects"]
+        N2["Promote<br/>dev → prod<br/>activate qa, prod, dr"]
+        N3["Integrate SPGE<br/>constitutional library<br/>at the contract surface"]
+        N4["Serve as the<br/>infrastructure layer<br/>beneath every app"]
+        N1 --> N2 --> N3 --> N4
+    end
+    subgraph ASK["The ask"]
+        ENDORSE["Architecture<br/>endorsement"]
+        RUNWAY["Runway to next<br/>milestone by Nov 2026"]
+        ENDORSE --- RUNWAY
+    end
+    subgraph RISK["If we don't — the structural risk"]
+        GAP["Delivery acceleration<br/>vs operational absorption<br/>gap widens through 2027"]
+    end
+    PROVEN -->|"foundation enables"| ARC
+    ARC -->|"lands at"| ASK
+    ASK -.->|"without it"| RISK
+    style PROVEN fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style ARC fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style ASK fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style RISK fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style L1L2 fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style PILOT fill:#1B1B1B,color:#fff,stroke:#D6002A
    style N1 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
    style N2 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
    style N3 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
-    style N4 fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style N4 fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
+    style ENDORSE fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style RUNWAY fill:#1B1B1B,color:#fff,stroke:#D6002A
+    style GAP fill:#F0F0F0,color:#1B1B1B,stroke:#D6002A
@@ -54,9 +54,9 @@ style: |

 > *Velocity is up; the coordination surface around each change is up faster.*

- → Infrastructure is authored by people who don't specialize in infrastructure.
- → Every change is gated because one misconfiguration can expose the entire estate.
- → Compliance, security, and NFRs are checked late — fueling remediation cycles that erode delivery cadence and team morale.
+- → Infrastructure is authored by people who don't specialize in infrastructure — the platform team is not standing behind every bucket, every instance, every key.
+- → Every change is gated because one misconfiguration can expose the entire estate — so every change is reviewed, every change is manual, and the cost of getting it wrong is account-wide.
+- → Compliance, security, and NFRs are checked late — after the PR, after the merge, sometimes after the deploy — fueling remediation cycles that erode delivery cadence and team morale.

 > *Nova absorbs all three — owned building blocks, separation of concerns, attested compliance up front.*

@@ -80,12 +80,16 @@ Nova absorbs all three. Owned building blocks, separation of concerns, attested

 > *You already recognize this pattern.*

-![diagram](assets/png/leadership-slide-2.png)
+Every Central IT team curates a golden image for Windows, for Linux, for macOS. They own it, they patch it, they ship it — and consumers consume it without thinking about what is inside. That trade — per-application control for uniform operability — is one every enterprise has already made at the OS layer.

-Central IT curates the golden image; Nova curates the cloud infrastructure. Owned, patched, attested, consumed by contract.
+Nova plays the same role one layer up: for everything that runs your cloud. S3 buckets with SSE-KMS posture. RDS instances with deletion protection and PITR. Lambda containers with static ABAC binaries. ALBs, ECS services, KMS keys, DynamoDB tables. Each primitive is owned by the platform team, patched by the platform team, attested by the platform team, and consumed by anyone who declares a contract.
+
+The difference is rigor: every primitive is versioned, tested across its entire lifecycle, and bounded by policy before any consumer ever touches it.

 > *Nova's lane is the infrastructure beneath the application. AppSec stays with the application team.*

+![diagram](assets/png/leadership-slide-2.png)
+
 <!--
 The Central IT golden-image pattern is one every leadership team already recognizes. Central IT curates the Windows image, the Linux image, the macOS image. They own it, they patch it, they ship it, and consumers consume it without thinking about what is inside. That trade — per-application control for uniform operability — is a trade every enterprise has already made at the OS layer.

@@ -102,12 +106,14 @@ And the lane stays narrow. Nova's lane is the infrastructure beneath the applica

 > *Two tenets discipline every other decision.*

+**Sovereign boundary** — Nova governs the delivery lifecycle; it does not reach upstream into product or software development [1]. Integration with SDLC and PDLC partners — the IDE, the sprint tool, the author workflow, the agent harness — happens exclusively through the validated, published contract surface. What lives outside the contract is not Nova's domain.
+
+**Lower autonomous · higher attested** — lower environments proceed through agentic, zero-touch automation; promotion to qa, prod, and dr requires deliberate human attestation [1]. Not a rubber stamp — a policy-mandated act of accountability by a named human distinct from the PR author. The compute the platform makes; the choice the human keeps.
+
+> *Everything else in the architecture inherits from these two.*
+
 ![diagram](assets/png/leadership-slide-3.png)

-**Sovereign boundary** — Nova governs the delivery lifecycle; it does not reach upstream [1]. Integration with SDLC and PDLC happens exclusively through the contract surface.
-
-**Lower autonomous · higher attested** — lower environments proceed through agentic automation; promotion requires deliberate human attestation [1]. The compute the platform makes; the choice the human keeps.
-
 <!--
 The architecture is principled, not improvised. Two tenets discipline every other decision the platform makes, and both come straight from the vision document [1].

@@ -122,14 +128,14 @@ And the point for this room: these two tenets are not aspirational. They are loa

 ## Live · Attested · Stays human

+**Live today** — 41 capabilities across 12 domains; pilot confidence 0.800. The contract ingestor, the audit outbox, the state buckets, and the live pilot run have operated in our AWS estate since v1.7. DORA, adoption, and policy-conformance metrics flow to PowerBI from the same audit stream as the lineage — one pane, no second source of truth. Every finding carries one owner, one patch state, one audit entry.
+
+**Attested on promotion** — qa, prod, and dr require a named human approver distinct from the PR author. Rubber stamps cannot be silently issued; the attestation is a policy-mandated act of accountability.
+
+**Stays human — by design** — confidence below the autonomy threshold at qa, prod, or dr triggers human escalation [1]. Some categories of decision are preserved for human judgment, and the platform says so out loud.
+
 ![diagram](assets/png/leadership-slide-4.png)

-**Live today** — 41 capabilities across 12 domains; pilot confidence 0.800. One pane, no second source of truth.
-
-**Attested on promotion** — qa, prod, dr require a named human approver distinct from the PR author.
-
-**Stays human — by design** — confidence below the autonomy threshold triggers human escalation [1].
-
 <!--
 Three columns, three claims, one disambiguation. The claims are real, observable, and disciplined — and the distinction matters for this room.

@@ -144,14 +150,25 @@ Disciplined: attested on promotion, stays human by design. qa, prod, and dr requ

 ## The boundary keeps us honest

-![diagram](assets/png/leadership-slide-5.png)
+> *Nova stays where it belongs.*

-**In Nova's lane** — infrastructure primitives, operational guardrails, CVE response at the infra layer.
+**In Nova's lane**

-**Outside Nova's lane** — application business logic, IDE & sprint workflows [1], AppSec, VM/bare-metal/OS lifecycles [1].
+- → Infrastructure primitives: S3, RDS, Lambda, ECS, DynamoDB, KMS, CloudFront.
+- → Operational guardrails: confidence, policy, attestation, audit lineage.
+- → CVE response at the infrastructure layer.
+
+**Outside Nova's lane**
+
+- → Application business logic.
+- → IDE, sprint, and author workflows [1].
+- → Application-layer security: AppSec, dependency review, runtime threat modeling.
+- → VM, bare-metal, and OS lifecycles [1].

 > *The line is the contract. Everything below it is Nova. Everything above it stays where it has always been.*

+![diagram](assets/png/leadership-slide-5.png)
+
 <!--
 The boundary is not a defensive posture. It is an operating principle — and it is the principle that keeps the architecture honest [1].

@@ -168,15 +185,18 @@ The line is the contract. Everything below the contract is Nova. Everything abov

 > *Where CDLC meets SDLC + PDLC — through the contract surface, not above it.*

-![diagram](assets/png/leadership-slide-6.png)
+**α (now → Q4'26) — Operating model + federated governance.** A named platform-ops body owns the platform; SLAs on every L2 are ratifiable by platform and consumer. The operating model is published; integration surfaces for SDLC and PDLC harnesses are documented at the contract boundary.

-**α (now → Q4'26)** Operating model + federated governance.
-**β (Q1'27)** Auto-published infra observability.
-**γ (Q2'27)** Runbook generation from telemetry.
-**δ (Q3'27 → Q4'27)** Audit ledger, tamper-resistant.
+**β (Q1'27) — Auto-published infra observability.** Every consumer stack ships with CloudWatch dashboards, uptime-kuma monitors, and alert routing on apply — infrastructure observability as a property, no per-team authoring required.
+
+**γ (Q2'27) — Runbook generation from telemetry.** Every L1 primitive ships with an auto-generated incident runbook derived from observed patterns. SREs get a starting runbook, not a blank page.
+
+**δ (Q3'27 → Q4'27) — Audit ledger, tamper-resistant.** The SQLite hash-evidence stream migrates to S3 Object Lock + JWS signatures. External counsel verifies any production change back to a named human attestation.

 > *Nova absorbs no IDE, no editor, no sprint tool, no agent harness.*

+![diagram](assets/png/leadership-slide-6.png)
+
 <!--
 The 18-month shape is a boundary-respecting integration arc, not an expansion arc. Four milestones, each disciplined by the sovereign-boundary tenet [1]: Nova meets SDLC and PDLC through the contract surface, not above it.

@@ -195,8 +215,6 @@ Nova absorbs no IDE, no editor, no sprint tool, no agent harness. The contract s

 ## What we ask · What comes back

-![diagram](assets/png/leadership-slide-7.png)
-
 **What works now.** Deploying L1 & L2 stacks works today in the sandbox AWS account — 13 L1 primitives and 2 L2 modules, live-applied at confidence 0.800. Next steps: ingest greenfield pilot projects, promote from sandbox to production, integrate with the SPGE constitutional library, and serve as the infrastructure layer.

 **What we ask.** Architecture endorsement. Runway to the next milestone.
@@ -207,6 +225,8 @@ Nova absorbs no IDE, no editor, no sprint tool, no agent harness. The contract s

 > *What we do not ask for: an IDE, a sprint tool, an author workflow, an upstream pipeline. Nova stays in its lane [1].*

+![diagram](assets/png/leadership-slide-7.png)
+
 <!--
 This is presented to Infrastructure and Operations leadership in August 2026. What works now: deploying L1 and L2 stacks works today. 13 L1 primitives and 2 L2 modules are live in the registry; the pilot ran a live terraform apply against the dev AWS account at v1.26 and returned confidence 0.800 — a measured number, not a forecast. We refer to the dev account colloquially as the sandbox. Next steps: ingest greenfield pilot projects (greenfield consumers with no legacy to reconcile), promote from sandbox to production (the promotion path with HITL gates exists; the pilot was dev-only, so activating qa, prod, dr is the next step), integrate with the SPGE constitutional library (an external governance system the audience recognizes; the platform meets it at the contract surface), and serve as the infrastructure layer.
Author	SHA1	Message	Date
CIAgent	5a94c968bd	merge(milestone): v1.31 Leadership Deck Polish II to main (release v1.30.2) acdl-ci / Lint (push) Successful in 13s Details acdl-ci / Test (push) Failing after 24s Details acdl-ci / Platform check-only (offline) (push) Successful in 21s Details nova-release / Compute semver + update tags (push) Successful in 55s Details Nova Slides Render / render (push) Failing after 12m34s Details acdl-ci / forge_parity_disabled (push) Failing after 13m57s Details	2026-08-20 14:58:59 +00:00
CIAgent	20cdec8fab	merge(phase/01): v1.31 P1 deck-polish complete (REQ-373.1..4, D-247) Nova Slides Render / render (push) Failing after 25s Details	2026-08-20 14:58:56 +00:00
CIAgent	c179c3e09a	docs(milestone): complete v1.31 Leadership Deck Polish II (release v1.30.2) ---ci--- project: acdl phase: 1 milestone: v1.31 status: complete requirements: covered: [REQ-373.1, REQ-373.2, REQ-373.3, REQ-373.4] partial: [] ---/ci---	2026-08-20 14:58:52 +00:00
CIAgent	a112d6f143	docs(P01): verify complete — smoke test PASS (REQ-373.1..4) ---ci--- project: acdl phase: 1 milestone: v1.31 status: verify ---/ci---	2026-08-20 14:58:25 +00:00
CIAgent	ad280b181b	feat(P01): polish leadership deck visible prose + layout (v1.31, D-247) Enrich on-slide body wording on all 7 slides (slides 2-6 were sparse, 43-67 visible words; now 97-168). Re-balance layout: title -> frame -> body -> diagram -> closing italic benefit. Invariants preserved: 7 slides, S&P theme tokens, speaker-note bands, [1] citations 3/5/7, diagram PNGs, footer string. PPTX re-rendered. Smoke test PASS. REQ-373.1 visible prose density enriched REQ-373.2 layout improved (renderer block vocabulary unchanged) REQ-373.3 invariants preserved (D-247) REQ-373.4 PPTX re-rendered; check_leadership_deck.sh exits 0 ---ci--- project: acdl phase: 1 milestone: v1.31 status: execute ---/ci---	2026-08-20 14:58:18 +00:00
CIAgent	2ea9fb4e51	merge(phase/00): v1.31 P0 pre-execution complete (specify+clarify+research+plan) Nova Slides Render / render (push) Failing after 28s Details	2026-08-20 14:57:00 +00:00
CIAgent	52b16bbef1	docs(P00): clarify + research + plan — D-247 invariants locked ---ci--- project: acdl phase: 0 milestone: v1.31 status: plan ---/ci---	2026-08-20 14:56:53 +00:00
CIAgent	68908d7f6a	docs(init): validate specification ---ci--- project: acdl phase: 0 milestone: v1.31 status: specify ---/ci---	2026-08-20 14:56:47 +00:00
CIAgent	85cc962fda	merge(phase/05): complementary mermaid diagrams — relationships + stack positioning acdl-ci / Lint (push) Successful in 11s Details acdl-ci / Test (push) Failing after 21s Details acdl-ci / Platform check-only (offline) (push) Successful in 24s Details nova-release / Compute semver + update tags (push) Failing after 24s Details Nova Slides Render / render (push) Failing after 10m11s Details nova-publish / Build + push kj ECR image (KJ-STATIC, D-239) (push) Failing after 10m20s Details acdl-ci / forge_parity_disabled (push) Failing after 11m30s Details nova-publish / Publish wheel + Lambda layer + Lambda zip + Release (push) Has been skipped Details ---ci--- project: acdl phase: 5 milestone: v1.30 status: complete ---/ci---	2026-08-20 14:46:31 +00:00
CIAgent	ba28017f5b	feat(P05): re-author 7 mermaid diagrams as complementary visuals Diagrams now show relationships + stack positioning, not just restating slide text: - slide 1: the widening gap (velocity vs coordination surface) → Nova absorbs - slide 2: Nova's position in the stack (SDLC/PDLC → contract → Nova → prod) - slide 3: inheritance tree (two tenets → 6 architectural elements they shape) - slide 4: confidence-threshold ladder (dev 0.50 → qa 0.75 → prod 0.90 → dr 0.95 + escalation) - slide 5: stack layers with the contract as the dividing line (above/below) - slide 6: the arc with what each milestone unlocks + the constant contract surface - slide 7: proven foundation → runway arc → ask → structural risk if not Fixed: slide 4 node/subgraph naming collision (DR → DRENV); slides 2 + 5 reworked to horizontal layout (were too tall for slides). ---ci--- project: acdl phase: 5 milestone: v1.30 status: execute ---/ci---	2026-08-20 14:46:26 +00:00
CIAgent	17903973aa	chore(compress): archive v1.30 phase files — active root 17 → 8 files acdl-ci / Lint (push) Successful in 9s Details acdl-ci / forge_parity_disabled (push) Successful in 11s Details acdl-ci / Platform check-only (offline) (push) Successful in 19s Details nova-release / Compute semver + update tags (push) Failing after 11m15s Details acdl-ci / Test (push) Failing after 11m26s Details Archived (snapshotted to .ciagent/archive/, removed from active root): - CLARIFY.md → CLARIFY-v1.30.md (D-241..D-246) - RESEARCH.md → RESEARCH-v1.30.md (render pipeline, mermaid, vision) - GRILL.md → GRILL-v1.30.md (PROCEED 0.88, G-1..G-4) - PLAN.md → PLAN-v1.30.md (P1 4 waves + P3 polish) - PERSONAS.md → PERSONAS-v1.30.md (lead+backend+ci-doc+ci-cli) - IDEATE.md → IDEATE-v1.27.md (stale) - IAM_POLICY.md → IAM_POLICY-v1.28.md (stale) - REGRESSION_REPORT.{md,json} → REGRESSION_REPORT-v1.26.{md,json} (stale) Active root (8 persistent files): PROJECT.md, REQUIREMENTS.md, ROADMAP.md, STATE.md, ARCHITECTURE.md, NORTH_STAR.md, config.json, CHECKPOINT.json ---ci--- project: acdl phase: 4 milestone: v1.30 status: complete action: compress ---/ci---	2026-08-20 14:36:15 +00:00