IMMIGROW NEXT
Domain + Workflow + Intelligence Re-architecture
Program State
ON TRACK — FOUNDATION PHASE
Last Updated
September 27, 2026 at 09:00 AM UTC
Active Stage
01 · Slice 1.1 — Secure Foundation
Current Focus
Slice 1.1 — making GitHub the complete source of truth, proving a fresh database rebuilds from zero, and closing tenant-isolation drift before the new domain architecture begins.
01
Live Delivery Sequence
Evidence-based statuses only. No estimated percentages — progress is shown through completed, active, and blocked work.
Objective
Prove the entire platform can be rebuilt from a clean checkout: schema, seeds, configuration, and security posture — with no hidden production-only state.
Current State
Foundation work is underway. Migration history is being consolidated, environment drift is being catalogued, and tenant-isolation policies are under review and repair.
Blockers / Risks
- Legacy production-only configuration must be catalogued before it can be eliminated
Completed Work
- Full audit of production-only state and undocumented configuration
- Migration baseline established for zero-to-database rebuilds
- Tenant-isolation gap analysis across all row-level security policies
Active Work
- Consolidating migrations into a clean, replayable chain
- Repairing row-level security drift between environments
- Documenting every secret, env var, and external dependency in-repo
Next Actions
- Complete fresh-environment rebuild rehearsal end to end
- Close remaining tenant-isolation findings
- Sign off Slice 1.1 exit criteria and open the Domain Contract
Evidence / Notes
- Rebuild rehearsal script runs from a clean clone
- RLS audit spreadsheet tracking every table and policy
- Exit criteria: fresh DB → full schema → seeded → tests green
02
Executive Snapshot
Active Stage
01 · Slice 1.1
Next Stage
02 · Domain Contract
Stages Sequenced
08
Open High Risks
02
Immigrow Next is a staged rebuild, not a big-bang rewrite. Security and reproducibility come first; domain semantics second; workflow automation third; AI only after the underlying world is clean enough to query deterministically. The visible next-gen product architecture begins with the Domain Contract once Slice 1.1 closes.
03
What Changed Since Last Update
- Slice 1.1 opened as the active delivery stage; all later stages formally sequenced.
- Tenant-isolation gap analysis completed across row-level security policies.
- Migration baseline established — fresh-database rebuild path is now defined.
04
Architecture — North Star
- 01Person is fundamental.
- 02Person ≠ Login ≠ Immigration File.
- 03File / Matter is the operational workspace.
- 04Facts and evidence are canonical and reusable, with provenance.
- 05Requirements and checklists are generated from rules.
- 06AI sits on top of the clean domain through permission-aware deterministic tools.
- 07Build the world correctly. Then make it intelligent.
System Shape
People side
Operational side
Intelligence Fabric — permission-aware AI spanning the system
AI is layered on top of the clean domain through deterministic, permission-aware tools — never inside the domain itself.
05
Risks & Blockers
Hidden production-only state
Configuration or data that exists only in production would make rebuilds non-deterministic and block the Domain Contract.
Mitigation
Full catalogue in progress; every finding is either moved into GitHub or formally decommissioned before Slice 1.1 closes.
Tenant-isolation drift
Row-level security policies have drifted between environments, creating potential cross-tenant exposure.
Mitigation
Gap analysis complete; repairs are being applied and locked behind rebuild-time verification.
Sequencing pressure
Pressure to start visible product work before the foundation is proven would re-introduce the drift this program exists to eliminate.
Mitigation
Stage-gate discipline: the Domain Contract does not open until Slice 1.1 exit criteria are evidenced.
06
Recent Milestones & Next Actions
Recent Milestones
- Program Command dashboard liveSeptember 27, 2026
Executive status surface established as the standing twice-weekly communication channel.
- Tenant-isolation gap analysis completedSeptember 24, 2026
Every table and RLS policy audited; repair list finalized.
- Migration baseline establishedSeptember 20, 2026
Zero-to-database rebuild path defined and scripted.
- Immigrow Next program charteredSeptember 15, 2026
Staged rebuild approved: security/reproducibility first, domain second, workflow third, AI last.
Next 3 Actions
- 1Complete the fresh-environment rebuild rehearsal end to end.
- 2Close the remaining tenant-isolation findings from the RLS audit.
- 3Ratify Slice 1.1 exit criteria and schedule the Domain Contract kickoff.
07
Decision Log
Staged rebuild, not big-bang rewrite
Security and reproducibility first; domain semantics second; workflow automation third; AI only once the underlying world is clean enough to query deterministically.
Person is fundamental — Person ≠ Login ≠ Immigration File
Identity, authentication, and case files are separate concerns. Conflating them in the legacy system is the root of the drift being corrected.
GitHub is the complete source of truth
Any state that cannot be rebuilt from the repository is a liability. Hidden production-only state is being eliminated, not documented around.
No percentage-based progress reporting
Executive reporting uses evidence-based statuses and qualitative indicators only — precision without evidence is fiction.
08
Executive Brief Archive
Twice-weekly executive briefs are archived here as PDFs. Entries appear with date and summary as soon as they are issued; the download link is attached when the PDF is supplied.
Immigrow Next Executive Product Brief — September 2026
September 27, 2026Program charter, staged rebuild rationale, Slice 1.1 scope, and the north-star domain architecture.