Workstream live ops · WS2 of 7
WS2 · Commission Engine · live ops.
Lead: Carla Oliver · Provider: CoSai · Current state: Implemented · Health: Green
Live board Workstream ops Registers Steerco papers Scoping · CRM CRM · truth doc CRM · features map CRM design · Contact 360° Deal room Hardening backlog Learn (ADKAR) Framework
As of 28 June 2026 ·
Reported by Carla Oliver (WS2 Lead · Technology — end-to-end through to exit per D110)
1 · Done · Doing · Next
The fortnight rhythm. Refreshed by the WS Lead each Steerco. This is the artefact Steerco reads to know what happened, what's happening, and what's next — without having to read the whole backlog.
Done · last fortnight
Sprint J (Deploy 3.1) shipped — Automated D1 backups live, risk R1 (production data loss) CLOSED
- Sprint J (Deploy 3.1) shipped 2026-06-28 — Daily 03:00 UTC backup of flip360-commission D1 → gzip → R2 bucket flip360-backups; retention 7 daily + 4 weekly + 12 monthly; admin UI at /crm/admin/backups with manual-trigger button and restore runbook; first real backup verified (66 tables, 680 rows, 131,775 bytes, 2.0s round-trip)
- Sprint PMO-Hub shipped 2026-06-27 (out-of-band) — cosaiflip360.org/engagement/pmo self-service workstream status cards so Matt + Corrina can read every workstream's status without asking
- Sprint I (Deploy 3.0) shipped 2026-06-27 — UAT Go-Live: migration 0023 provisioning Matt, Carla, Corrina as UAT users; admin sign-in-links page at /crm/admin/sign-in-links; legacy login picker restricted to Carla
- 10 delivery sprints (A through J) shipped to production: 88+ routes, 13 role-tailored surfaces, 24 D1 migrations applied (local + remote)
- Full-stack CRM live at flip360crm.org — contact + deal management, accounting-grade financial layer, audit surfaces, mobile drawer, magic-link auth, now-protected daily backup floor
- Three-way sync discipline verified at every close — sandbox = Cloudflare lockstep; GitHub push currently routed to CnCBrain-ai/flip360 pending personal-account App install (sync formality, not service-affecting)
Doing · this fortnight
Sprint K kickoff queued — Error monitoring + structured logging (next risk closure: R2 + R8 partial)
- UAT can commence immediately — sign-in links issuable on demand via /crm/admin/sign-in-links (Carla retains admin gate)
- Phase 1 progress: 1 of 4 hardening sprints complete (J ✅). Remaining: K (errors) → L (tests) → M (staging)
- One-time manual setup carla still owns for Sprint J: set BACKUP_CRON_SECRET as a GitHub Actions repo secret on the flip360 repo so the 03:00 UTC GH Actions cron can authenticate. Until that's set, scheduled run fails with a clear error; manual button on /crm/admin/backups already works in prod.
- Sprint M-original (Resend on flip360.ai) still PARKED — blocked on DNS access; current workaround (admin-issued sign-in links via WhatsApp) is functional, not broken
Next · upcoming fortnight
Phase 1 operational hardening — 3 sprints remaining after J's close. No user-visible features; all foundation work that protects existing capability.
- Sprint K (Deploy 3.2) — Error monitoring + structured logging: production bugs visible to engineering before users report them; per-role usage analytics. Closes R2.
- Sprint L (Deploy 3.3) — Automated test suite + Continuous Integration: every commit runs tests; regressions caught pre-deploy. Closes R3 + R8.
- Sprint M (Deploy 3.4) — Staging environment: new work deploys to staging URL first; production promoted only after staging validation. Closes R10.
- Phase 1 remaining duration: 3 sprints (≈ 1.5–3 working weeks). Phase 2 unlocks once Phase 1 closes — auth lifecycle, data quality, integrations (Xero, Gmail, Stripe), UX polish responding to UAT feedback
- Risk register heat-map after Sprint J: R1 closed, R2/R3/R8/R10 close inside Phase 1, remaining open risks (R4, R7, R9) sequenced to their respective Phases with acceptable interim mitigations
Health · Green
Workstream on track. CRM live in production, UAT ready to commence, Sprint J shipped on plan with first real backup verified end-to-end in production. Risk R1 (production data loss) — the highest open risk on the register — moved Open → Closed today. Sprint K cleared to start. Parked item (self-serve Resend email) blocked on external DNS dependency, workaround in place, not blocking.
2 · This week · Mon 22 June → Sun 28 June
The Mon-Sun sprint. Items pulled from the backlog into active work for this 7-day window. 2 items in sprint.
WS2-S003 · WS2-B007
P0
In sprint
Build CRM · high-level scoping document + RACI + UAT plan
Owner Carla Oliver (WS2 Lead) · Consult: Matt + Corrina
Days in 1d
Days left 4d
Evidence /engagement/pmo/scoping/crm
20% complete
WS2-S001 · WS2-B001
P0
In sprint
Stripe Connect end-to-end test mode validated
Owner Carla Oliver
Days in 8d
Days left 4d
25% complete
Blocker: Rolled over from previous sprint. Awaiting Stripe API key provisioning — Stripe support ticket open since 16 Jun. Escalate to D204 at SC#2 if still blocked Friday.
3 · Backlog · 7 items
Everything on the runway for WS2, grouped by status. Each item has an owner, an effort estimate, a target Steerco, and an acceptance test (the single sentence that defines "done").
In sprint 2 items
WS2-B001
P0
Feature
In sprint
Stripe Connect end-to-end test mode validated
Per Steerco #2 decision D204. Install Stripe SDK, wire API keys via Cloudflare secrets, build Connect onboarding route, validate test-mode payout end-to-end.
Owner Carla Oliver
Effort 4d
Raised 8 June
Target SC#3 (6 July)
Acceptance test
Test-mode payout completes end-to-end via Connect with a recorded screencast and a row on /chain showing the test transaction.
WS2-B007
P0
Feature
In sprint
Build CRM · high-level scoping document + RACI + UAT plan
Mathew briefed (21 Jun 2026): each flip 360 professional service provider (financial planner, accountant, mortgage broker) brings their own "telephone book" of clients into flip 360 as a private database, then opt-in/opt-out fabric exposes consented contacts to other providers for warm introductions — feeding the commission engine. Corrina wants full CRM utilisation of the opted-in warmed-up database (WS6 partner activation depends on this). Carla accepts WS2 Lead end-to-end accountability (design → build → cutover → hypercare → growth → exit) per D110. This week is the scoping sprint: produce the scoping document, RACI, functional spec mapping, and UAT plan — NOT the build itself. Build sequencing decided at Steerco #2 after this scoping artefact lands.
Owner Carla Oliver (WS2 Lead) · Consult: Matt + Corrina
Effort 5d
Raised 22 June
Target SC#2 (22 June)
Acceptance test
Scoping document live at /engagement/pmo/scoping/crm by Fri 26 Jun 2026 17:00 AEST containing: (1) business problem statement with Matt verbatim brief, (2) RACI matrix, (3) functional requirements mapped to surfaces, (4) privacy compliance scaffolding (APP 1, 3, 5, 6, 7, 8, 10, 11, 12, 13), (5) data model proposal, (6) UAT plan with named testers + acceptance criteria, (7) risk + dependency register, (8) sequencing options with effort estimates for Steerco #2 decision.
Next up 1 item
WS2-B002
P0
Governance
Next up
Six functional guarantees demo + ADR-7 ratification
Per Steerco #2 decision D205. Run the six functional guarantees demo at the start of SC#2; Mathew signs acceptance card live; ADR-7 drafted by 24 Jun and ratified by countersigned email by 27 Jun.
Owner Carla Oliver
Effort 2d
Raised 8 June
Target SC#2 (22 June)
Acceptance test
ADR-7 published on /docs with Mathew's acceptance signature + countersigned email logged.
Backlog 3 items
WS2-B003
P1
Tech debt
Backlog
Observability stack live (error rate + payout SLA dashboards)
Per Steerco #2 decision D206. Install Cloudflare Workers Analytics Engine binding; build /app/observability with error-rate ledger and payout SLA dashboard; alert thresholds set.
Owner Carla Oliver
Effort 6d
Raised 8 June
Target SC#4 (20 July)
Acceptance test
Live dashboards at /app/observability with error rate and payout SLA over rolling 7d window + alert rules documented.
WS2-B005
P2
Feature
Backlog
WebAuthn hardware-key signatures on payout approval
Marketing copy on /architecture references hardware-key signatures. Wire WebAuthn registration + signing flow for payout approval > $1k threshold.
Owner Carla Oliver
Effort 8d
Raised 15 June
Target SC#5 (3 Aug)
Acceptance test
Payout > $1k requires WebAuthn signature from approver; signature hash on /chain row.
WS2-B006
P2
Partner
Backlog
KPMG/EY anchoring of monthly trust ledger root
Marketing copy on /architecture references KPMG/EY anchoring. Engage one of the Big-4 to receive the monthly hash chain root as an audit attestation.
Owner Carla Oliver
Effort 10d
Raised 15 June
Target SC#6 (17 Aug)
Acceptance test
Signed engagement letter with one Big-4 firm + first monthly root submitted + countersigned receipt.
Done 1 item
WS2-B004
P0
Feature
Done
Legal agreements wired into live engine (Option C)
COMPLETED 2026-06-17 commit 966eeab. Three Pine Lawyers agreements (Introducer / Client Referral / Affiliate) wired as signable instruments. Signing auto-creates PARTNER contact + commission rule. "Governing agreement" column on /app/rules.
Owner Carla Oliver
Effort 3d
Raised 10 June
Target SC#2 (22 June)
Acceptance test
/legal hub + three instrument pages live + /app/rules shows governing-agreement column. ✅ Verified 2026-06-17.
4 · RAID · WS2 open items
Open Risks, Assumptions, Issues, Dependencies attributed to WS2. Closed items hidden — see the full RAID register filtered to WS2.
| ID | Type | Severity | Title | Owner |
|---|---|---|---|---|
| A003 | Assumption | Green | BD lead embodiment: Mathew Punter (Phase 1 dual-hat with Founder) CRM demo + production build treat Matt as BD lead in Phase 1; Settings → Roles & Access allows reassignment to a dedicated BDM hire under Phase 2 without code change. |
Carla (WS2 Lead) |
| A004 | Assumption | Green | Lifecycle stages default to Lead → MQL → SQL → Opp → Customer → Champion → At-risk → Churned Stages seeded as editable rows in config_lifecycle_stages; Corrina/Matt change names + ordering + transition rules via Settings → Lifecycle. No code change required. |
Carla (WS2 Lead) |
| A005 | Assumption | Green | Owner assignment defaults to round-robin within role Settings → Lead Routing exposes round-robin / territory / capacity / manual; default seed is round-robin; switchable per role at any time. |
Carla (WS2 Lead) |
| A006 | Assumption | Amber | Compliance gate default checklist: claims-substantiated · disclosure-present · brand-approved · legal-cleared Settings → Compliance Gates exposes per-asset-type checklist. Corrina + counsel ratify the production set at Steerco #3 before any /crm/* compliance gate goes live. Demo uses 4-default seed. |
Corrina (consulted) · Carla (accountable) |
| A007 | Assumption | Amber | Cooling-off period defaults to 14 days, vertical-agnostic Settings → Cooling-off exposes per-vertical / per-commission-type duration. Demo seeds 14 days flat; Matt ratifies vertical-specific durations at Steerco #3 before commission engine production cutover. |
Matt (consulted) · Carla (accountable) |
| A008 | Assumption | Amber | Commission base rate placeholder 10% until Matt-signed policy lands Settings → Commission Engine exposes per-vertical rate + tiered structure (volume / tenure / mix bonus). Demo seeds 10% flat placeholder. Production /me/commissions/* gated until Matt-signed policy is loaded into config_commission_policy. |
Matt (consulted) · Carla (accountable) |
| A009 | Assumption | Green | Payout schedule defaults to monthly, 15th of month Settings → Payouts exposes weekly / fortnightly / monthly / on-demand + minimum threshold + payment rails. Demo seeds monthly + 15th. |
Carla (WS2 Lead) |
| A010 | Assumption | Green | Data retention defaults to 7 years (AU financial-services norm) Settings → Data Retention exposes soft-delete-to-hard-delete window + audit-log retention. Demo seeds 7 years per AU FS norm; counsel confirms at Steerco #3. |
Compliance (consulted) · Carla (accountable) |
| A011 | Assumption | Green | GST treatment defaults to 10%, applied per AU GST rules on commission payouts Settings → Financial Defaults exposes GST rate + gross-up/inclusive/exclusive + PAYG withholding rules. Demo seeds 10%; counsel + accountant confirm at Steerco #3. |
Finance (consulted) · Carla (accountable) |
| A012 | Assumption | Green | Approval chains: single sign-off < $10k · dual ≥ $10k · tri for compliance-rule changes Settings → Approval Chains exposes per-action sign-off thresholds. Demo seeds default. Production thresholds ratified by Matt at Steerco #3. |
Matt (consulted) · Carla (accountable) |
| A013 | Assumption | Green | Working hours / SLA timers default to Mon-Fri 0900-1700 AEST/AEDT Settings → Working Hours exposes per-role SLA timers + AU public holiday calendar. Demo seeds AEST/AEDT business hours. |
Carla (WS2 Lead) |
| A014 | Assumption | Green | Notifications default to all in-app on, email digest 0800 AEST daily Settings → Notifications exposes per-trigger email vs in-app + quiet hours + opt-out controls. Demo seeds digest cadence; members configure their own once /me/* is live. |
Carla (WS2 Lead) |
| A015 | Assumption | Amber | Sales-internal + CS suite embodiers TBA until Phase 2 BAU hires Phase 1 demo uses TBA placeholders. Settings → Roles & Access allows assignment of real users to Sales / CS roles once Phase 2 BAU hires land. No code change. |
Carla (WS2 Lead) |
| R003 | Risk | Amber | Settings versioning + retroactive recalc risk on commission engine Commission policy changes must be effective-dated, never retroactive without explicit recalc approval. Historical commission records carry the policy-version they were calculated against. Dry-run preview before save shows "would change N commissions, total $X delta". |
Carla (WS2 Lead) |
| R004 | Risk | Amber | Misconfigured Settings could break commission engine or compliance gate Settings admin permission gated to specific roles (CFO + Compliance Officer). Financial-rule changes require dual sign-off. All changes audited with before/after diff. Recovery: every settings row versioned, one-click revert. |
Carla (WS2 Lead) |
| D002 | Dependency | Amber | Final commission policy from Matt before /me/commissions/* production cutover Demo seeds 10% placeholder. Production /me/commissions/* blocked until Matt-signed policy loaded into config_commission_policy. Settings → Commission Engine exposes the editor; Matt completes by Steerco #3. |
Matt (consulted) · Carla (accountable) |
| D003 | Dependency | Amber | AU regulatory clearance on member-side commission framing (AFSL / AUSTRAC / consumer law) Counsel-engaged sprint Steerco #2 → #3 covers AFSL applicability for referral payments, AUSTRAC AML/CTF for member payouts, ACL disclosure obligations. /me/commissions/* + /crm/compliance/* surfaces parameterised by counsel-ratified rules in Settings. |
Compliance (Pine Lawyers, consulted) · Carla (accountable) |
| I001 | Issue | Amber | Architectural pivot — /crm-demo/* must be a working CRM tool, not a styled walkthrough Decision D-PIVOT-CRM (Carla, 2026-06-24): /crm-demo/* refactored from visual narrative pages to a real three-pane CRM workspace backed by D1. New schema (migration 0003): contacts, deals, activities, tickets, notes, settings_rows. Sarah Chen + 24 demo contacts seeded. BD/Sales/CS/CMO workspaces share contact data so the cross-role thread is real, not narrated. Pipeline kanban actually drags; settings actually edit; cooling-off change actually propagates. Demo data only — /crm-demo/* gate held; /crm/* untouched. Resolves the risk Matt and Corrina decline sign-off on a visual mock. |
Carla (WS2 Lead) · Claude (build) |
| A016 | Assumption | Green | Demo data lives in D1 (not constants) but namespace stays /crm-demo/* Per D-PIVOT-CRM: D1 tables prefixed `demo_` (e.g. demo_contacts, demo_deals) — written/read by /crm-demo/* only. Real /crm/* namespace will use the same schema shape but un-prefixed tables, created only after D116 mechanical-build kickoff. Settings → Demo Reset surface (later) wipes demo_* on demand. |
Carla (WS2 Lead) |
| A017 | Assumption | Green | Wave 1 UAT scope = 4 workspaces walking Sarah-Chen end-to-end on real data Per D-PIVOT-CRM: BD (Matt) → Sales-internal → CS → CMO. One contact (Sarah Chen) progresses through all four workspaces; each role sees a real working surface (kanban, queue, account-health, dashboard) with data from the same D1 rows. Wave 2 + Wave 3 stubs hold their coming-soon state until Wave 1 is signed. |
Carla (WS2 Lead) · Matt + Corrina (UAT) |
5 · Steerco decisions referencing WS2
D110 · SC#1
Approved
Carla accepts WS2 Lead end-to-end accountability for CRM + commission engine through to exit
Verbatim from Carla 21 Jun 2026: "claude, as workstream lead of workstream TECHNOLOGY i am responsible for the design building and implementation cutover to hypercare, growth and exit of the crm and commission engine, with consult on user requirements from matt and corrina". This formalises the RACI for the platform's two most business-critical surfaces: the commission engine that moves money, and the CRM that holds the federated telephone books. Matt and Corrina are explicitly consulted stakeholders on user requirements only — they do not own technical architecture, sequencing, data model, or compliance scaffolding.
D112 · SC#1
Approved
AUD $500 ex-GST + $50 GST = $550 AUD total · AI workforce credits budget · CoSai CFO Services to invoice + procure · payable today
Carla's verbatim instruction Mon 22 Jun 2026: "I NEED $500 AUD as the budget for this scope of work, payable today 22 monday 26, cosai cfo services to issue an invoice for payment. cosai cfo services to buy the ai workforce credits (tokens)" — clarified same day: "$500 + $50 GST = $550 total" (the $500 is ex-GST, the gross figure payable is $550 AUD). WS2 Lead is funding the AI workforce credits required to execute WS2-B007 (the CRM scoping sprint). CoSai CFO Services Pty Ltd (where Carla is Principal) procures the credits on Flip 360's behalf under the master engagement signed at /engage in May 2026 (CSC-INV-2026-001). This is the credit-funding sub-invoice — separate from the monthly PMO services invoice.
D204 · SC#2
Pending
WS2 · Stripe Connect — sprint, re-baseline, or accept slip
WS2 Milestone W4·SC#2 was "Stripe Connect test mode validated end-to-end". Bottom-up report 17 Jun 2026: Stripe SDK is not installed, no API keys wired, no Connect onboarding route exists. ABA file rail is wired and working. The marketing copy on /faq, /sweetener and /architecture references Stripe Connect as the rail.
D205 · SC#2
Pending
WS2 · Ratify ADR-7 via live six-guarantees demo at SC#2
WS2 Milestone W1·SC#1 was "six functional guarantees demo + ADR-7". Bottom-up report 17 Jun 2026: the demo surfaces (/demo, /walkthrough, /see-it-work, /architecture) exist but no formal demo was run with Mathew signing acceptance, and no ADR-7 document exists in /docs.
D206 · SC#2
Pending
WS2 · Lock observability vendor decision
WS2 Milestone W8·SC#4 is "observability stack live". Bottom-up report 17 Jun 2026: no observability dependency installed, no error-rate dashboard, no payout SLA dashboard. 8 weeks away — still time to plan, not yet time to escalate.
D207 · SC#2
Pending
WS2 · Acknowledge marketing-copy-vs-runtime delta and approve hardening sprint plan
Bottom-up report 17 Jun 2026 surfaces that current marketing copy on /faq, /sweetener and /architecture references Stripe Connect, hardware-key signatures and KPMG/EY anchoring as live capabilities. These are aspirational at this date. The PMO position is: never soften the ambition — accelerate the build so the copy becomes true.