[bitmaster162]

Scope: 10-minute fictional Company Twin client demo — exact-head CI qualified; review-only

OWNER DECISION (15 Oct 2026): shift the active showcase effort to synthetic Company Twin. H3 native Windows broker is paused. Preserve open #209/#210 and #212–#215 unchanged. No merge, deploy, service/scheduler/TPM mutation, production admission, live connectors, or real Robert/client data.

Exact Git identity

• Protected base master: 517c7b48e270a3077e53d890e907c9cb2b3ce491 (tree fcb37ef8d9af2c349a62c576b5634798881a7fbe).
• Current published HEAD: 6737abf7ab3e317271eb4ff94a1df8e756899794 (TREE d3510f3c8c99738f62b855274fedd819518c9a2e), parent 82bb250c36e25c35df8890c29c5d920dc4e4c3a8. Original feature-only source commit 5eeaf532e483d8a57fbf8ce1ee8f3398c21d3ab2 (tree cc565aba9bdeadf90254da0031c772dd61680f5b).
• Four commits on the unchanged master baseline: original demo source 5eeaf532e483d8a57fbf8ce1ee8f3398c21d3ab2, empty CI-trigger 30af0c41205a27e32523beeed3b62800560d75b9, scoped wheel-test repair 82bb250c36e25c35df8890c29c5d920dc4e4c3a8, and docs-only CI evidence correction 6737abf7ab3e317271eb4ff94a1df8e756899794. Against master exactly four added paths; no changes to pre-existing runtime, memory, policy, workflows, schemas or held branches. Exact PR diff: four added paths, +763 / -0, four commits ahead / zero behind master.

Deliverable

• demo/company_twin_client_demo.py: demo-only fixture assembler + local HTTP presentation adapter, importing existing P2A/P2C/P2D APIs.
• demo/company_twin_client_demo.html: presentation-grade 10-minute browser walkthrough, SYNTHETIC DEMO on screen.
• tests/test_company_twin_client_demo.py: offline unit, access-boundary, replay, simulated agent, and HTTP write-denial tests.
• docs/COMPANY_TWIN_CLIENT_DEMO_R1.md: one-screen-equivalent walkthrough, honest claims, operation/testing instructions, scope and stop conditions.

What the client can see

• Entirely fictional Northstar Labs, 12 human staff + 3 teams + 1 human-managed agent.
• Company chronology including synthetic emails, tasks, documented decisions, observed outcomes.
• Decision Ledger showing fictional who / what / when / why plus evidence title and ACTIVE/SUPERSEDED.
• Deterministic as-of replay inside 2025: March 31 yields 2 authorized Director decisions; December 31 yields 5.
• Switch simulated Director → Sales / Product / Engineering workers → Atlas managed agent. P2A scopes intersect P2C grants and ACL: Sales cannot see restricted finance or Engineering-only records; Atlas is bound to human manager, gets only delegated READ/PROPOSE, not APPROVE/EXECUTE.
• Proposals remain pre-seeded PENDING_HUMAN_REVIEW metadata; there is no live agent/LLM or mutation path.

Evidence and limitations

• Local Windows 3.11 tests 96 passed, including 11 new focused cases plus existing P2A/P2B/P2C/P2D tests; PYTEST_DISABLE_PLUGIN_AUTOLOAD=1, no pytest cache or bytecode.
• Local offline --check PASS, GET / and GET /api/snapshot work on 127.0.0.1:8769. Edge headless visual smoke captured, no browser network dependencies. POST/PUT/PATCH/DELETE 405; non-loopback bind refused.
• Complete CURRENT exact-head CI: five checks SUCCESS on 6737abf7ab3e317271eb4ff94a1df8e756899794. Review gates https://github.com/bitmaster162/continuityos/actions/runs/38866664087 — Ubuntu / Python 3.11 SUCCESS, Windows / Python 3.11 SUCCESS (completed 2026-10-16T07:42:00Z). CodeQL workflow https://github.com/bitmaster162/continuityos/actions/runs/38866664057 — CodeQL SUCCESS and Analyze Python SUCCESS. P0 https://github.com/bitmaster162/continuityos/actions/runs/38866664001 — offline-shadow-continuity SUCCESS. Initial code HEAD 82bb250c36e25c35df8890c29c5d920dc4e4c3a8 also had all five SUCCESS. Older 30af0c4... wheel-only import failure was fixed by narrow scope tests/docs repair. Wheel-only deliberately records one SKIP for source-checkout-only demo; clean-source and editable runs exercise demo tests.
• Role dropdown simulates viewpoints; it is not authentication/SSO. Fictional decision-author attributes are not signed historical attestations. Synthetic fixtures are not a production security test or proof of OS sandbox.
• No customer/private sources, tokens, exchange/trading permissions, account data, or real model calls.
• Nonblocking engineering follow-up (no change in this PR): the demo presentation adapter subclasses private P2D _ConsoleHandler; consider a public extension interface in a later separately scoped change.

Run locally

python -B -m demo.company_twin_client_demo --check
python -B -m demo.company_twin_client_demo
# http://127.0.0.1:8769/

STATUS: REVIEW-ONLY / NOT MERGED / NOT_PRODUCTION_ADMITTED. Exact-head CI PASS on 6737abf7ab3e317271eb4ff94a1df8e756899794. Ready-for-review is administrative and does not authorize a merge. Any normal merge commit requires a separate, explicit, SHA/TREE-bound human authorization after fresh preflight. No deploy, release, branch deletion, runtime activation, or changes to #209/#210/#212–#215.