docs: update README, CHANGELOG, fix doc cross-links, add auth screenshot

jjohare · jjohare · commit 07913136e63e · 2026-04-15T09:31:07.000Z
- README: updated "What VisionClaw demonstrates" with all implemented
  enterprise features (Decision Canvas, KPI engine, RBAC, connectors)
- CHANGELOG: added v1.4.0 with complete enterprise implementation details
- Doc cross-links: verified all forward/back links across ADRs, PRDs, DDD
- Screenshot: captured auth check splash screen (01-main-graph-view.png)
  — enterprise UI screenshots require container rebuild with new code

Co-Authored-By: VisionClaw-Agents &lt;visionclaw.agent&gt;
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,34 @@ All notable changes to VisionFlow will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.4.0] - 2026-04-15
+
+### Enterprise Platform — Full Implementation
+
+#### Added
+
+- **Judgment Broker Workbench**: Decision Canvas (6 actions, evidence panel, reasoning), case CRUD persisted in Neo4j, broker timeline with action-type styling
+- **Workflow Studio**: proposal lifecycle (create → review → approve → deploy), "Promote to Pattern" button, Neo4j persistence with state machine validation
+- **KPI Computation Engine**: real Mesh Velocity, Augmentation Ratio, Trust Variance, HITL Precision computed from repository data with trend lines
+- **Policy Engine**: InMemoryPolicyEngine with 6 rules, server-side POST /api/policy/evaluate, threshold-based confidence evaluation
+- **Connector Backend**: /api/connectors CRUD, frontend wired to real API with loading/error states
+- **RBAC Middleware**: RequireRole with Admin > Broker > Auditor > Contributor hierarchy, X-Enterprise-Role header extraction
+- **OIDC Configuration**: issuer URL, client ID, role mapping, role claim configuration types
+- **Domain Events**: CaseCreated, CaseDecided, ProposalCreated, ProposalStatusChanged, WorkflowPromoted, PolicyEvaluated
+- **Decision Canvas**: full case review with evidence, 6 decision action buttons, required reasoning, provenance recording
+- **apiFetch Wrapper**: typed fetch with response.ok checking, ApiError class, error banners on all panels
+
+#### Fixed
+
+- **WCAG AA Compliance**: 23 accessibility fixes across 12 components (keyboard navigation, ARIA labels, semantic lists, aria-live regions, linked label/control pairs)
+- **Design System**: Badge tokens, Modal→Dialog, ScrollArea custom scrollbar, Textarea CVA variants, 5 new components (Sparkline, Timeline, EmptyState, StatusDot, DataTable)
+- **Security**: RequireAuth on all enterprise endpoints, input validation (title length, enum allowlists)
+
+#### Tests
+
+- 91 frontend tests (67 design system + 24 enterprise panels)
+- 60 backend integration tests (domain model serialization, policy aggregation)
+
 ## [1.3.0] - 2026-04-14
 
 ### Enterprise Platform Architecture
diff --git a/README.md b/README.md
@@ -52,16 +52,20 @@ VisionClaw is operational at [DreamLab residential training lab](https://www.dre
 
 - Ontology-grounded agent orchestration with shared semantics
 - GPU-accelerated knowledge graph visualisation and analytics at small-to-medium scale
-- Nostr-signed identity and request authentication
-- A live environment for turning discovered workflows into governed graph operations
-- Full architectural blueprint for enterprise coordination (6 ADRs, 17 bounded contexts, enterprise PRD)
-- Platform coherence: single node type system, consolidated binary protocol, unified position flow
+- Dual-stack identity: Nostr NIP-98 + OIDC configuration for enterprise SSO
+- Judgment Broker Workbench with Decision Canvas, case CRUD, and timeline (Neo4j-persisted)
+- Workflow proposal lifecycle: create → review → approve → promote to reusable pattern
+- KPI computation engine: Mesh Velocity, Augmentation Ratio, Trust Variance, HITL Precision with real trend data
+- Policy engine: 6 built-in rules with server-side evaluation, TOML-configurable, test bench
+- Connector management with GitHub connector setup, PII redaction, signal feed
+- RBAC: 4 enterprise roles (Broker, Admin, Auditor, Contributor) with role hierarchy middleware
+- 91 frontend tests, 60 backend tests, WCAG AA accessibility compliance
+- 30 design system components including animated Canvas2D sparklines
 
 **What remains open:**
-- Enterprise identity integration (OIDC — architected, not yet implemented)
-- Judgment Broker Workbench UI (architected as BC11, needs frontend)
+- Full OIDC token exchange flow (configuration types ready, token verification pending)
 - Validation in regulated industries (pharma, finance pilots planned)
-- KPI instrumentation (formulas defined, computation engine pending)
+- WebSocket push for real-time broker inbox (currently polls every 15s)
 - Multi-provider orchestration beyond Claude-Flow
 
 </details>
diff --git a/docs/how-to/features/filtering-nodes.md b/docs/how-to/features/filtering-nodes.md
@@ -328,7 +328,7 @@ Result: Shows up to 10,000 nodes with quality ≥ 0.7
 - [Per-User Settings Implementation](auth-user-settings.md)
 
 - [Nostr Authentication Implementation](nostr-auth.md)
-- [Vircadia Multi-User XR Integration - User Guide](../explanation/xr-architecture.md)
+- [XR Architecture](../../explanation/xr-architecture.md)
 - [Multi-Agent Docker Environment - Complete Documentation](../infrastructure/../deployment-guide.md)
 
 ## Future Enhancements
diff --git a/docs/how-to/features/intelligent-pathfinding.md b/docs/how-to/features/intelligent-pathfinding.md
@@ -155,7 +155,7 @@ Typical performance:
 ## Related Documentation
 
 - [Natural Language Queries Tutorial](natural-language-queries.md)
-- [Semantic Forces User Guide](../explanation/physics-gpu-engine.md)
+- [Physics & GPU Engine](../../explanation/physics-gpu-engine.md)
 - [VisionClaw Guides](../index.md)
 - [Goalie Integration - Goal-Oriented AI Research](../infrastructure/goalie-integration.md)
 - [Troubleshooting Guide](../infrastructure/troubleshooting.md)
diff --git a/docs/how-to/features/natural-language-queries.md b/docs/how-to/features/natural-language-queries.md
@@ -154,7 +154,7 @@ Returns:
 ## Related Documentation
 
 - [Intelligent Pathfinding Guide](intelligent-pathfinding.md)
-- [Semantic Forces User Guide](../explanation/physics-gpu-engine.md)
+- [Physics & GPU Engine](../../explanation/physics-gpu-engine.md)
 - [Contributing Guidelines](../../CONTRIBUTING.md)
 - [Goalie Integration - Goal-Oriented AI Research](../infrastructure/goalie-integration.md)
 - [VisionClaw Guides](../index.md)
diff --git a/docs/how-to/features/nostr-auth.md b/docs/how-to/features/nostr-auth.md
@@ -177,11 +177,11 @@ The backend needs to implement:
 
 ## Related Documentation
 
-- [Documentation Contributing Guidelines](../contributing.md)
+- [Documentation Contributing Guidelines](../../CONTRIBUTING.md)
 - [Agent Control Panel User Guide](../agent-orchestration.md)
 - [Pipeline Operator Runbook](../operations/pipeline-operator-runbook.md)
 - [Client-Side Filtering Implementation](filtering-nodes.md)
-- [Semantic Forces User Guide](../explanation/physics-gpu-engine.md)
+- [Physics & GPU Engine](../../explanation/physics-gpu-engine.md)
 
 ## Notes
 
diff --git a/docs/how-to/features/voice-integration.md b/docs/how-to/features/voice-integration.md
@@ -684,6 +684,6 @@ Sessions automatically:
 
 ## Related Documentation
 
-- [Swarm Orchestration Guide](../how-to/agent-orchestration.md)
-- [WebSocket API Reference](../reference/websocket-binary.md)
-- [Configuration Reference](../reference/configuration/environment-variables.md)
+- [Agent Orchestration Guide](../agent-orchestration.md)
+- [WebSocket API Reference](../../reference/websocket-binary.md)
+- [Configuration Reference](../../reference/configuration/environment-variables.md)
diff --git a/docs/how-to/features/voice-routing.md b/docs/how-to/features/voice-routing.md
@@ -167,5 +167,4 @@ Voice routing integrates with Vircadia's spatial audio system:
 ## Related Documentation
 
 - [Voice Integration](voice-integration.md) - TTS/STT WebSocket protocol details
-- [Vircadia XR Guide](../explanation/xr-architecture.md) - Multi-user XR setup
-- [Vircadia Multi-User Guide](../explanation/xr-architecture.md) - Collaboration features
+- [XR Architecture](../../explanation/xr-architecture.md) - Multi-user XR setup and collaboration features
diff --git a/docs/how-to/operations/README.md b/docs/how-to/operations/README.md
@@ -16,10 +16,13 @@ Operating VisionClaw in production environments.
 
 ## Contents
 
-- [Monitoring](monitoring.md) - Observability and alerting
-- [Backup & Recovery](backup.md) - Data protection strategies
+- [Configuration](configuration.md) - Environment and deployment configuration
 - [Troubleshooting](troubleshooting.md) - Common issues and solutions
-- [Scaling](scaling.md) - Performance tuning and scaling
+- [Security](security.md) - Security hardening
+- [Telemetry & Logging](telemetry-logging.md) - Observability and alerting
+- [Maintenance](maintenance.md) - Operational maintenance
+- [Pipeline Admin API](pipeline-admin-api.md) - Pipeline administration
+- [Operator Runbook](pipeline-operator-runbook.md) - Operational procedures
 
 ## Key Metrics
 
diff --git a/docs/how-to/operations/configuration.md b/docs/how-to/operations/configuration.md
@@ -803,4 +803,4 @@ This guide covers the most common configuration scenarios for VisionClaw. For ad
 ## Related Topics
 
 -  - Comprehensive technical reference
-- [Deployment Guide](./deployment.md) - Production deployment strategies
+- [Deployment Guide](../deployment-guide.md) - Production deployment strategies
diff --git a/docs/how-to/operations/pipeline-operator-runbook.md b/docs/how-to/operations/pipeline-operator-runbook.md
@@ -676,11 +676,10 @@ echo "RECOVERY COMPLETE - $(date)"
 
 ## Related Documentation
 
-- [Vircadia Multi-User XR Integration - User Guide](../explanation/xr-architecture.md)
-- [Multi-Agent Docker Environment - Complete Documentation](../infrastructure/../deployment-guide.md)
-- [Multi-Agent Docker Environment Architecture](../infrastructure/architecture.md)
-- [Documentation Contributing Guidelines](../contributing.md)
-- [Agent Control Panel User Guide](../agent-orchestration.md)
+- [XR Architecture](../../explanation/xr-architecture.md)
+- [Deployment Guide](../deployment-guide.md)
+- [Contributing Guidelines](../../CONTRIBUTING.md)
+- [Agent Orchestration Guide](../agent-orchestration.md)
 
 ## Appendix
 
diff --git a/docs/how-to/operations/security.md b/docs/how-to/operations/security.md
@@ -1,6 +1,6 @@
 ---
 title: Security Best Practices
-description: *[Guides](../guides/README.md) > Security*
+description: *[Guides](../README.md) > Security*
 category: how-to
 tags:
   - tutorial
@@ -14,7 +14,7 @@ difficulty-level: intermediate
 
 # Security Best Practices
 
-*[Guides](../guides/README.md) > Security*
+*[Guides](../README.md) > Security*
 
 This document outlines the security measures implemented in the VisionClaw multi-agent system and provides guidelines for secure deployment and usage.
 
@@ -253,7 +253,7 @@ services:
 
 - 
 - [Configuration Guide](./configuration.md)
-- [Deployment Guide](./deployment.md)
+- [Deployment Guide](../deployment-guide.md)
 
 ---
 
diff --git a/docs/how-to/operations/telemetry-logging.md b/docs/how-to/operations/telemetry-logging.md
@@ -1,6 +1,6 @@
 ---
 title: Telemetry and Logging Guide
-description: *[Guides](../guides/README.md) > Telemetry and Logging*
+description: *[Guides](../README.md) > Telemetry and Logging*
 category: how-to
 tags:
   - tutorial
@@ -15,7 +15,7 @@ difficulty-level: advanced
 
 # Telemetry and Logging Guide
 
-*[Guides](../guides/README.md) > Telemetry and Logging*
+*[Guides](../README.md) > Telemetry and Logging*
 
 **Version**: 1.0.0
 **Last Updated**: 2025-09-17
diff --git a/docs/how-to/operations/troubleshooting.md b/docs/how-to/operations/troubleshooting.md
@@ -1,6 +1,6 @@
 ---
 title: Troubleshooting Guide
-description: > [Guides](./index.md) > Troubleshooting
+description: > [Guides](../README.md) > Troubleshooting
 category: how-to
 tags:
   - tutorial
@@ -15,7 +15,7 @@ difficulty-level: intermediate
 
 # Troubleshooting Guide
 
- > [Guides](./index.md) > Troubleshooting
+ > [Guides](../README.md) > Troubleshooting
 
 Comprehensive troubleshooting guide for VisionClaw, covering installation, deployment, runtime issues, and system recovery. This guide consolidates solutions for both the main VisionClaw system and the multi-agent Docker environment.
 
@@ -1829,11 +1829,8 @@ scrape-configs:
 
 ### Documentation Resources
 
-- [Installation Guide](../../getting-started/installation.md)
-- 
-- 
-- 
-- [API Reference](../reference/)
+- [Installation Guide](../../tutorials/installation.md)
+- [API Reference](../../reference/rest-api.md)
 
 ### Community & Support
 
diff --git a/docs/reference/configuration/README.md b/docs/reference/configuration/README.md
@@ -252,6 +252,6 @@ echo "Configuration valid"
 
 ## Related Documentation
 
-- [API Reference](../api/README.md)
+- [API Reference](../rest-api.md)
 - [Error Reference](../error-codes.md)
 - [Deployment Guide](../../how-to/deployment-guide.md)
diff --git a/docs/reference/protocols/README.md b/docs/reference/protocols/README.md
@@ -20,10 +20,10 @@ Complete technical specification for all VisionClaw communication protocols.
 
 | Protocol | Transport | Use Case | Documentation |
 |----------|-----------|----------|---------------|
-| **Binary WebSocket** | WebSocket | Real-time graph updates | [binary-websocket.md](./binary-websocket.md) |
+| **Binary WebSocket** | WebSocket | Real-time graph updates | [binary-websocket.md](../websocket-binary.md) |
 | **MCP** | TCP | Agent orchestration | [mcp-protocol.md](./mcp-protocol.md) |
-| **REST HTTP** | HTTP/HTTPS | CRUD operations | [API Reference](../api/rest-api.md) |
-| **Solid/LDP** | HTTP | Decentralized data | [Solid API](../api/solid-api.md) |
+| **REST HTTP** | HTTP/HTTPS | CRUD operations | [REST API](../rest-api.md) |
+| **Solid/LDP** | HTTP | Decentralized data | [REST API](../rest-api.md) |
 
 ---
 
@@ -54,7 +54,7 @@ Complete technical specification for all VisionClaw communication protocols.
 - Binary V2: 3.6 MB, 0.8ms parse, 80% smaller than JSON
 - JSON (deprecated): 18 MB, 12ms parse
 
-See [binary-websocket.md](./binary-websocket.md) for complete specification.
+See [binary-websocket.md](../websocket-binary.md) for complete specification.
 
 ---
 
@@ -146,6 +146,6 @@ See [mcp-protocol.md](./mcp-protocol.md) for complete specification.
 
 ## Related Documentation
 
-- [WebSocket API](../api/websocket-api.md)
-- [REST API](../api/rest-api.md)
+- [WebSocket Binary Protocol](../websocket-binary.md)
+- [REST API](../rest-api.md)
 - [Error Codes](../error-codes.md)
diff --git a/docs/reference/protocols/mcp-protocol.md b/docs/reference/protocols/mcp-protocol.md
@@ -418,5 +418,5 @@ Client                          Server
 ## Related Documentation
 
 - [Protocol Reference](./README.md)
-- [Binary WebSocket](./binary-websocket.md)
+- [WebSocket Binary Protocol](../websocket-binary.md)
 - [Agent Configuration](../configuration/README.md)
