feat: name Weekly VOC and focus Event Lineage (v2.13.0)

AGENTS.md

@@ -170,6 +170,11 @@ adjudication does -- never a raw LLM API. Demo TEPP seed goes through
 envelope is Failed (`tepp_not_available` / `tepp_result_not_persisted`),
 never a fabricated theta or a local psychometric substitute.
 
+Buyer Board **Weekly VOC** is an ISO-8601 week list filter (ADR 0092).
+Opening that filtered post focuses Event Lineage (ADR 0093). Do not
+invent a week, a theta, or a cutoff body.
+
+
 ## Tests
 
 ```bash

ARCHITECTURE.md

@@ -280,7 +280,9 @@ Keycloak (`src/main.tsx`'s `AuthProvider`) -- no mocked auth, no static
 HTML. `src/api.ts` calls the FastAPI backend directly with the token
 Keycloak issued; `src/App.tsx` renders a git-branch SVG of
 `GET /api/lineage` (click a node to open that post; `post_admin` can
-rebuild), the post list, and a full detail popup: Korean
+rebuild), the post list with a named Weekly VOC ISO-8601 week filter
+(ADR 0092; opening that filtered post focuses Event Lineage, ADR 0093),
+and a full detail popup: Korean
 summary/key-events/R&R, VOC evidence excerpts, an Event Lineage panel
 (direct vs. indirect links; a link opens that post), the Keyman
 affiliate tree (resolved ancestors plus unresolved org roots), Keyman +

CHANGELOG.d/2.12.0-weekly-voc-iso-week.md

@@ -0,0 +1,5 @@
+# 2.12.0 Weekly VOC ISO-week list filter
+
+Weekly VOC on Board keeps Voice of Customer posts for the latest ISO-8601
+week (UTC Thursday rule). Other VOC types and older weeks drop out. The
+Board names Event Lineage as the next read. No TEPP theta is invented.

CHANGELOG.d/2.13.0-weekly-voc-open-event-lineage.md

@@ -0,0 +1,6 @@
+# 2.13.0 Opening Weekly VOC focuses Event Lineage
+
+Open a Voice of Customer post from an active Weekly VOC filter and the
+popup Event Lineage heading takes focus. The popup names that post as
+current and to read Keyman and evaluation next. Home-list opens do not.
+No TEPP theta is invented.

CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to this project are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versioning follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.13.0] - 2026-08-19
+
+### Added
+
+- Opening a Voice of Customer post from an active Weekly VOC filter now
+  focuses Event Lineage and names Keyman and evaluation as the next read.
+  Home-list opens do not add that focus or copy. No TEPP theta is
+  invented. No cutoff body is invented (ADR 0093 / ADR 0016).
+
+## [2.12.0] - 2026-08-19
+
+### Added
+
+- Board now names Weekly VOC as an ISO-8601 week list filter. The control
+  keeps Voice of Customer posts for the latest week present in the loaded
+  list (UTC Thursday rule) and tells the buyer to open a post to read
+  Event Lineage. Reset filters returns every VOC type and every week.
+  No TEPP theta is invented (ADR 0092).
+
 ## [Unreleased]
 
 ### Changed
@@ -18,6 +37,8 @@ All notable changes to this project are documented here. Format follows
 
 ### Fixed
 
+- Removed the completed one-shot Global Ask package-manager repair workflow;
+  normal product CI remains the only branch validation path.
 - `make smoke` and `make seed` now run through the locked project `uv`
   environment, so local OIDC and synthetic-data workflows resolve the same
   pinned dependencies as CI.
@@ -49,6 +70,26 @@ All notable changes to this project are documented here. Format follows
 - Large corpora now use bounded post and Event Lineage landing projections so
   buyers can open complete post-specific detail from a responsive first view.
 
+## [2.11.0] - 2026-08-18
+
+### Added
+
+- Relation verification now preserves a separately authorized internal source
+  post containing normalized organization and relationship context. The
+  counterparty popup can open that evidence without treating it as an
+  external-search URL or changing the external verification status.
+- Large corpora now use bounded post and Event Lineage landing projections so
+  the React screen remains usable before opening complete post-specific detail.
+
+## [2.10.0] - 2026-08-18
+
+### Added
+
+- Production OIDC can now use a real Keyverse issuer through
+  `KEYVERSE_ISSUER` and `KEYVERSE_CLIENT_ID`. The backend discovers the
+  provider's JWKS and verifies the issuer; Compose keeps local Keycloak only
+  as an explicit development fallback and does not emulate Keyverse.
+
 ## [2.12.5] - 2026-08-18
 
 ### Fixed

CLAUDE.md

@@ -70,3 +70,11 @@ cited source. After that next action, the popup lands the first cited
 evidence. Changing the week first still
 focuses the report period field. Mean θ stays on the period-report
 panel.
+
+## Weekly VOC (v2.12.0 / v2.13.0)
+
+On Board, click **Weekly VOC**. Voice of Customer posts for the latest
+ISO-8601 week stay; other VOC types and older weeks drop out. The Board
+names Event Lineage as the next read (ADR 0092). Open a remaining post:
+Event Lineage takes focus and names Keyman and evaluation next
+(ADR 0093). A home-list open does not. Do not invent a theta.

backend/app/main.py

@@ -540,7 +540,7 @@ async def _lookup_post_labels(conn: asyncpg.Connection, rows: list[asyncpg.Recor
 
 async def _post_filter_options(
     conn: asyncpg.Connection, corporate_entity_ids: frozenset[str]
-) -> tuple[list[dict[str, str]], list[dict[str, str]]]:
+) -> tuple[list[dict[str, str]], list[dict[str, str]], list[str]]:
     """Return every authorized filter value, not only values on the current page."""
     visibility_sql = f"""
         select distinct post.visibility_code as code,
@@ -568,6 +568,15 @@ async def _post_filter_options(
            and {SOURCE_POST_ELIGIBILITY_SQL.format(alias='post')}
          order by display_order, code
     """
+    week_sql = f"""
+        select distinct to_char(post.created_at at time zone 'UTC', 'IYYY-"W"IW') as iso_week
+          from source_post post
+         where (post.visibility_code = 'public'
+            or post.corporate_entity_id::text = any($1::text[]))
+           and post.created_at is not null
+           and {SOURCE_POST_ELIGIBILITY_SQL.format(alias='post')}
+         order by iso_week desc
+    """
     # Safe SQL: both query strings are closed lookup statements; entity ids remain asyncpg parameters.
     visibility_rows = await conn.fetch(  # nosemgrep: python.lang.security.audit.sqli.asyncpg-sqli.asyncpg-sqli
         visibility_sql, list(corporate_entity_ids)
@@ -576,9 +585,14 @@ async def _post_filter_options(
     type_rows = await conn.fetch(  # nosemgrep: python.lang.security.audit.sqli.asyncpg-sqli.asyncpg-sqli
         type_sql, list(corporate_entity_ids)
     )
+    # Safe SQL: the ISO-week query is closed; entity ids remain an asyncpg parameter.
+    week_rows = await conn.fetch(  # nosemgrep: python.lang.security.audit.sqli.asyncpg-sqli.asyncpg-sqli
+        week_sql, list(corporate_entity_ids)
+    )
     return (
         [{"code": row["code"], "label": row["label"]} for row in type_rows],
         [{"code": row["code"], "label": row["label"]} for row in visibility_rows],
+        [row["iso_week"] for row in week_rows],
     )
 
 
@@ -1157,6 +1171,7 @@ async def list_posts(
     search: str | None = Query(None, max_length=200),
     voc_type: list[str] | None = Query(None, max_length=80),
     visibility: str | None = Query(None, max_length=80),
+    iso_week: str | None = Query(None, max_length=8, pattern=r"^\d{4}-W\d{2}$"),
     sort: Literal["newest", "oldest", "title"] = Query("newest"),
     account: CurrentAccount = Depends(get_current_account),
     pool: asyncpg.Pool = Depends(get_pool),
@@ -1165,7 +1180,7 @@ async def list_posts(
     _require_post_read(account)
     search_term = search.strip() if search and search.strip() else None
     async with pool.acquire() as conn:
-        voc_type_options, visibility_options = await _post_filter_options(
+        voc_type_options, visibility_options, iso_week_options = await _post_filter_options(
             conn, account.corporate_entity_ids
         )
         body_search_ids: list[str] = []
@@ -1211,7 +1226,7 @@ async def list_posts(
                        case
                            when $1::text is null then 0
                            when lower(coalesce(post.post_title, '')) like '%' || lower($1) || '%' then 0
-                           when post.post_id = any($5::uuid[]) then 1
+                           when post.post_id = any($6::uuid[]) then 1
                            else 2
                        end as search_priority,
                        count(*) over() as total_count
@@ -1275,7 +1290,7 @@ async def list_posts(
                             ) >= 0.45
                         )
                     )
-                    or post.post_id = any($5::uuid[])
+                    or post.post_id = any($6::uuid[])
                     or exists (
                         select 1 from post_project_mention project
                          where project.post_id = post.post_id
@@ -1342,18 +1357,22 @@ async def list_posts(
                )
                and ($3::text[] is null or post.voc_type_code = any($3::text[]))
                and ($4::text is null or post.visibility_code = $4)
+               and (
+                    $5::text is null
+                    or to_char(post.created_at at time zone 'UTC', 'IYYY-"W"IW') = $5
+               )
                  order by
                     search_priority asc,
                     case
-                        when $1::text is not null and post.post_id = any($5::uuid[])
-                        then array_position($5::uuid[], post.post_id)
+                        when $1::text is not null and post.post_id = any($6::uuid[])
+                        then array_position($6::uuid[], post.post_id)
                     end asc,
-                    case when $8::text = 'title' then lower(coalesce(post.post_title, '')) end asc,
-                    case when $8::text = 'oldest' then post.created_at end asc,
-                    case when $8::text in ('newest', 'title') then post.created_at end desc,
+                    case when $9::text = 'title' then lower(coalesce(post.post_title, '')) end asc,
+                    case when $9::text = 'oldest' then post.created_at end asc,
+                    case when $9::text in ('newest', 'title') then post.created_at end desc,
                     post.post_id desc
-                   offset $6
-                   limit $7
+                   offset $7
+                   limit $8
             )
             select page.*,
                    case
@@ -1400,17 +1419,18 @@ async def list_posts(
                 case when $1::text is not null then page.search_priority end asc,
                 case
                     when $1::text is not null and page.search_priority = 1
-                    then array_position($5::uuid[], page.post_id)
+                    then array_position($6::uuid[], page.post_id)
                 end asc,
-                case when $8::text = 'title' then lower(coalesce(page.post_title, '')) end asc,
-                case when $8::text = 'oldest' then page.created_at end asc,
-                case when $8::text in ('newest', 'title') then page.created_at end desc,
+                case when $9::text = 'title' then lower(coalesce(page.post_title, '')) end asc,
+                case when $9::text = 'oldest' then page.created_at end asc,
+                case when $9::text in ('newest', 'title') then page.created_at end desc,
                 page.post_id desc
             """,
             search_term,
             list(account.corporate_entity_ids),
             [code.strip() for code in voc_type if code.strip()] if voc_type else None,
             visibility.strip() if visibility and visibility.strip() else None,
+            iso_week,
             body_search_ids,
             offset,
             limit,
@@ -1426,6 +1446,7 @@ async def list_posts(
         "offset": offset,
         "voc_type_options": voc_type_options,
         "visibility_options": visibility_options,
+        "iso_week_options": iso_week_options,
     }
 
 

backend/tests/test_api.py

@@ -452,7 +452,12 @@ def _insert_post(
                 "Ada West at Test Corp followed up with Priya Nair at Northridge Grid about the delayed shipment. "
                 "The weather in Gwangju was irrelevant.",
             )
-            other_private_post_id = _insert_post("Other-corp private post", other_corp_id, "private")
+            other_private_post_id = _insert_post(
+                "Other-corp private post",
+                other_corp_id,
+                "private",
+                created_at="2026-02-03T12:00:00Z",
+            )
             late_own_private_post_id = _insert_post(
                 "Late own-corp private post",
                 own_corp_id,
@@ -1474,6 +1479,8 @@ def test_post_list_includes_public_and_own_corp_but_excludes_other_corp(client,
     assert {option["code"] for option in payload["voc_type_options"]} == {"voc"}
     assert {option["code"] for option in payload["visibility_options"]} == {"public", "private"}
     assert next(option for option in payload["visibility_options"] if option["code"] == "public")["label"] == "Public"
+    assert set(payload["iso_week_options"]) == {"2026-W02", "2026-W04"}
+    assert "2026-W06" not in payload["iso_week_options"]
 
 
 def test_post_list_supports_bounded_offset_pages(client, demo_analyst_token, seeded_db) -> None:
@@ -1493,6 +1500,15 @@ def test_post_list_supports_bounded_offset_pages(client, demo_analyst_token, see
     assert title_sorted.status_code == 200, title_sorted.text
     assert title_sorted.json()["posts"][0]["post_title"] == "Edited own-corp private post"
 
+    week_filtered = client.get(
+        "/api/posts?iso_week=2026-W04",
+        headers={"Authorization": f"Bearer {demo_analyst_token}"},
+    )
+    assert week_filtered.status_code == 200, week_filtered.text
+    assert [post["post_title"] for post in week_filtered.json()["posts"]] == [
+        "Late own-corp private post"
+    ]
+
     invalid_sort = client.get(
         "/api/posts?sort=unsupported",
         headers={"Authorization": f"Bearer {demo_analyst_token}"},

docs/adr/0092-weekly-voc-iso-week-filter.md

@@ -0,0 +1,35 @@
+# ADR 0092: Weekly VOC is an ISO-8601 week list filter
+
+- Status: Accepted
+- Date: 2026-08-19
+
+## Context
+
+Board already exposes checkbox VOC-type filters (ADR 0060). Buyers still need
+one named control that shows this week's Voice of Customer posts without
+inventing a measurement or collapsing other VOC types into a guessed default.
+PR #259 stacked a `<select>` week filter on a stale Board that used a single
+string type filter; current Board keeps `typeFilter` as `string[]`.
+
+## Decision
+
+Weekly VOC is a Board list filter, not a report and not ADR 0051 named hints.
+
+- The **Weekly VOC** control sets VOC type to `voc` only and selects the
+  latest ISO-8601 week (`YYYY-Www`) present among authorized Voice of
+  Customer posts.
+- Week membership uses the UTC date of `created_at`. Thursday decides the
+  ISO week-year (ISO 8601 week date).
+- An explicit ISO-week `<select>` remains available beside the named
+  control. Reset filters returns both the checkboxes and the week to All.
+- The Board names the next action: Voice of Customer posts for that week
+  are current; open a post to read Event Lineage.
+- No TEPP theta is invented. No cutoff body is invented (ADR 0016).
+
+## Consequences
+
+- Weekly VOC composes with the existing checkbox VOC vocabulary instead of
+  replacing it.
+- Posts whose `created_at` cannot be parsed contribute no week and cannot
+  be selected by this filter.
+- Home-list and Customer-master opens are unchanged until ADR 0093.

docs/adr/0093-weekly-voc-open-focuses-event-lineage.md

@@ -0,0 +1,33 @@
+# ADR 0093: Opening a Weekly VOC post focuses Event Lineage
+
+- Status: Accepted
+- Date: 2026-08-19
+
+## Context
+
+ADR 0092 names Weekly VOC as an ISO-week list filter and tells the buyer to
+open a post to read Event Lineage. Report-member opens already focus the
+popup Event Lineage heading. A home-list open must not steal that focus or
+add that next-action copy.
+
+## Decision
+
+Opening a Board post while Weekly VOC is active (`voc` only and a concrete
+ISO week) is a `fromWeeklyVoc` open. That open reuses the existing Event
+Lineage focus path used by report-member opens:
+
+- The popup Event Lineage heading takes focus.
+- The popup names the opened post as current in Event Lineage and tells
+  the buyer to read Keyman and evaluation next.
+
+A Board open from the unfiltered home list, a reset filter list, or any
+path that did not set `fromWeeklyVoc` does not focus Event Lineage and
+does not add that copy. Closing the popup clears the Weekly VOC open flag.
+
+No TEPP theta is invented. No cutoff body is invented (ADR 0016).
+
+## Consequences
+
+- Weekly VOC and report-member opens share one focus contract.
+- Changing VOC checkboxes or the ISO week so Weekly VOC is no longer
+  active makes the next Board open a home-list open.

docs/adr/0092-internal-relation-evidence.md → docs/adr/0094-internal-relation-evidence.md

@@ -1,4 +1,4 @@
-# ADR 0092: Preserve authorized internal evidence for relation verification
+# ADR 0094: Preserve authorized internal evidence for relation verification
 
 - Status: Accepted
 - Date: 2026-08-18

frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "frontend",
   "private": true,
-  "version": "2.12.6",
+  "version": "2.13.0",
   "type": "module",
   "scripts": {
     "dev": "vite",