M0 · Decide
Account scope, browser runtime, checkout boundary, retention, and model policy.
The implementation sequence proves domain behavior with fake adapters, then introduces live browser and retailer complexity behind contracts that already have acceptance tests.
Account scope, browser runtime, checkout boundary, retention, and model policy.
Nuxt, API, worker, Postgres, jobs, contracts, migrations, and telemetry.
Preferences, rules, products, schedules, and fake retailer produce a reviewable cycle.
OpenAI and Anthropic adapters pass the same structured-output evaluation set.
Authorized session, browser contracts, retailer observations, fixtures, and capability map.
Live cart, slot, review, takeover, notifications, hardening, and pilot evidence.
Confirm the account, browser, model, data, notification, and manual checkout assumptions.
Create the monorepo, Postgres, jobs, contracts, observability, and fake ports.
Add household ownership, consent, vault references, connect, reconnect, and disconnect.
Implement the versioned household operating policy and settings UI.
Implement the deterministic DSL, evaluator, simulation, and reason codes.
Build manual, history, list, cadence, alternative, and resolution flows.
Create timezone-aware, deduplicated occurrences and resumable tasks.
Complete the entire scheduled-to-review experience before live automation.
Add provider-neutral models, prompts, schemas, and evaluation gates.
Add isolated Playwright providers, evidence, storage state, and takeover.
Observe one action at a time, sanitize evidence, and build the capability registry.
Resolve products, reconcile cart, select slot, verify summary, and freeze review.
Add user alerts, audit timeline, monitoring, diagnostics, and recovery runbooks.
Threat model, chaos tests, accessibility, retention, repeatability, and acceptance evidence.
| Module | Depends on | Prototype proof |
|---|---|---|
| User Preferences | Identity, database | Versioned delivery, basket, automation, and notification policy |
| Rules | Shared contracts | Repeatable allow, review, or deny with stable reasons |
| Preferred Products | Preferences, rule contracts | Exact and alternative catalog from multiple sources |
| Scheduling | Database, worker | Deduplicated weekly and twice-weekly order cycles |
| Order Orchestration | Preferences, rules, products, schedule | Complete fake scheduled-to-review workflow |
| Intelligence | Contracts, evaluation fixtures | Both providers pass schema and safety gates |
| Browser Control | Vault, worker, telemetry | Isolated session with evidence and takeover |
| Retailer Integration | Browser, discovery authorization | Versioned capabilities and assisted live cart operations |
Run now → fake cart prepares → review snapshot appears → request a change → a new snapshot appears → simulated manual checkout handoff.
The sprint is successful when the architecture is observable and resumable, not when it has a retailer selector.
Read the full Markdown planEvery module exists behind interfaces; fake success, review, failure, and retry paths pass.
Required capabilities are observed, documented, sanitized, and possible without bypassing controls.
Live cart and slot repeatedly match the review snapshot; takeover and manual checkout work.
Retailer authorization, legal/security approval, approval hash, idempotency, and unknown handling pass.