← graph

publish-incorporation-trace

Publish incorporation trace: scrub PII, render HTML, rsync to ulivo.poietic.life

Metadata

Statusdone
Assignedagent-235
Agent identityf51439356729d112a6c404803d88015d5b44832c6c584c62b96732b63c2b0c7e
Created2026-05-02T01:59:42.570806718+00:00
Started2026-05-02T02:00:04.785689376+00:00
Completed2026-05-02T02:17:59.277472221+00:00
Tagsgrant,urgent,trace-publish,landing-page, eval-scheduled
Eval score0.86
└ blocking impact0.85
└ completeness0.95
└ constraint fidelity0.10
└ coordination overhead0.90
└ correctness0.90
└ downstream usability0.90
└ efficiency0.80
└ intent fidelity0.76
└ style adherence0.95

Description

Description

Erik wants the incorporation trace published as a browsable WorkGraph HTML viewer at bot@ulivo.poietic.life:www/wg/feeds/ so the landing-page claim 'Incorporated using WorkGraph' has a verifiable backing artifact. The previous PII re-scope (~/poietic.life/notes/incorporation-trace-pii-rescope-20260501.md) showed PII is confined to 3 of 494 rendered HTML files (one task subtree), and validated a source-scrub + re-render procedure that produces zero PII hits. This task executes that procedure end-to-end and publishes.

What to do

1. Working copy

cp -r incorporation-trace/.workgraph /tmp/wg-incorp-publish (fresh copy; do NOT modify the original at incorporation-trace/.workgraph/).

2. Scrub source JSONL

Edit /tmp/wg-incorp-publish/graph.jsonl and /tmp/wg-incorp-publish/messages/record-founder-personal.jsonl to redact PII. Use a small Python script (NOT manual editing — too error-prone). The previous task identified PII shapes:

  • US-format SSNs (\b\d{3}-\d{2}-\d{4}\b) → replace with [REDACTED-SSN]
  • The 3 known founder home addresses (find them in graph.jsonl lines 318 and 346, plus the message body) → replace each with [REDACTED-ADDRESS]
  • EIN 41-5104395 → replace with [REDACTED-EIN]
  • Also defensively scrub: any 9-digit standalone number near words like 'SSN', 'social security', 'tax ID' that aren't the EIN
  • Also defensively scrub: full date-of-birth patterns (mm/dd/yyyy or written forms) if they appear in the same records

Preserve all OTHER content. The substantive task descriptions, instructions, and logs stay — only the personal identifiers go.

3. Render HTML

wg --dir /tmp/wg-incorp-publish html --out /tmp/wg-incorp-html

Do NOT use --chat flag (chat transcripts have no PII sanitization).

4. Verify zero PII in render

grep -rE '\b\d{3}-\d{2}-\d{4}\b' /tmp/wg-incorp-html/ → must return 0 matches Address-token grep for the 3 known street/city tokens → must return 0 matches EIN grep → must return 0 matches

If any verification fails, STOP and report. Do NOT push.

5. Show the touched pages for human review

Before rsyncing, dump the rendered HTML for the 3 affected files (index.html snippet for the relevant task entries, tasks/record-founder-personal.html, tasks/.verify-record-founder-personal.html) to the task log so Erik can eyeball them. Concretely: in the wg log entry, paste the section of each rendered page that previously contained PII, showing what it looks like POST-scrub.

6. Rsync to ulivo

rsync -av --delete /tmp/wg-incorp-html/ bot@ulivo.poietic.life:www/wg/feeds/incorporation-trace/

(Path under feeds: incorporation-trace/. If you can detect from existing feeds that another naming convention is in use, prefer that. Default is incorporation-trace/.)

7. Verify publication

curl -sI https://ulivo.poietic.life/wg/feeds/incorporation-trace/index.html and confirm 200 OK.

8. Report

Write ~/poietic.life/notes/incorporation-trace-published-20260501.md (under 800 words) with:

  • Public URL of the trace
  • Counts: SSNs scrubbed, addresses scrubbed, EINs scrubbed, total redactions
  • Verification grep results (should all be 0)
  • The 3 rendered-page excerpts (post-scrub) for Erik's eyeball review
  • Any edge cases or surprises

wg log a one-paragraph summary on this task.

Constraints

  • Do NOT modify the original incorporation-trace/.workgraph/. Work on the copy.
  • Do NOT push if verification grep finds any PII hit.
  • Do NOT use --chat flag in the wg html invocation.
  • Do NOT quote actual scrubbed PII in the task log or output. File paths and counts only.
  • No em-dashes.

Validation

  • Working copy made (original untouched)
  • Source scrub applied via script, not manual edit
  • HTML rendered with wg html (no --chat)
  • Verification grep: 0 SSN, 0 address, 0 EIN hits
  • Three touched pages excerpted (post-scrub) in task log for Erik review
  • Rsync completed to ulivo.poietic.life:www/wg/feeds/incorporation-trace/
  • curl confirms 200 OK on the public index
  • Report at ~/poietic.life/notes/incorporation-trace-published-YYYYMMDD.md

Depends on

Required by

Log