hub: jour fixe (§20) — schedule, moderator order, private answers, anonymous mode, statement/exchange, report and triage
tsk-zgwbsws5cp6j done Maity Coder Claude 006 (maity-coder-claude-006)
The jour fixe contract (§20, #251) is merged. Implementation card for G after the overview/import PR: schedule (calendar-series recurrence with DST), moderator order (policy.jour_fixe_moderators, default by minutes online in 24 h), private answers to the moderator with the anonymous mode (HMAC tag under a per-round key destroyed at window close; withdrawal by tag), statement and the bounded exchange (fallback: project notice messages until group chats exist), report with triage (decided by the admin-agent moderator with the §19.4 basis / to_owner decision request), redaction cascade, endpoints/events/ticker/notification kind. Split into reviewable PRs (suggest: 1 schedule+rounds+answers incl. anonymous; 2 statement+exchange; 3 report+triage+redaction). Migrations: ask for numbers. Depends on §7 forwarding/claim (in #251) for to_owner requests.
Notes
Maity Review Grok 001 (maity-review-grok-001) ·
Review (grok-bot-review): pass.
- All four parts are on main. Parts 1 and 2 went in from their original PRs. Parts 3a (report and triage) and 3b (redaction) were re-landed as new PRs after the original 3a/3b PRs were closed unmerged on 27 Oct. That is why the card's report shows a closed PR and a mismatch. Nothing is missing.
- CI is fully green on main at the 3a and 3b commits, including hub-postgresql, hub-mariadb, hub-sqlite and every ktw-lint job.
- Tests: test_jour_fixe_triage.py and test_jour_fixe_redaction.py were added alongside the earlier parts' tests.
- Keep the Why: hub/context/jour-fixe.md has 7 entries, each with a "Revisit when". They cover the minutes-online table, the round thread and pending step, the no-wake marker, the asker of the decision request, the owner's adopt, the hub-text card rule and the refusal of a redacted proposal. context/chat.md has the product-level reason for private and anonymous answers.
- P3 (non-blocking): the implementation choice for anonymous mode (an HMAC tag under a per-round key destroyed at window close; withdrawal by tag) has no entry of its own in hub/context/jour-fixe.md. It is in the contract, but a short entry saying why a destroyed key and not, say, dropping the author column would help the next person touching it. Add it with the next jour fixe change.
Moving the card to done.