← Back to the case study

For Technical & AI

Engineering constraints

Security, dates, quotas, and the documented development process.

Public reading guide · Source: docs/07-Engineering-Constraints.md
A reviewed summary of the repository documentation and current implementation. Private operational details and phase-test records are omitted.

Trust boundaries

Uploaded content is untrusted evidence. Server-side authorization scopes every object and retrieval. Private storage and short-lived access capabilities keep privileged keys out of the browser. Model prompts do not grant access or override application policy.

Predictable work

Native PDF chunks preserve full page coverage. Calendar arithmetic handles month ends and leap years deterministically. All-day ICS has an exclusive next-day end and a requested 14-day alarm. Provider failures have bounded retries; quota exhaustion preserves work.

Development discipline

The repository records requirements, an implementation plan, runtime role instructions, database migrations, strict TypeScript, tests, and phase reports. Codex-assisted implementation follows these constraints. LangGraph is the installed orchestration library; a general LangChain agent framework is not required for RAG.

Explore the interactive architecture →