HITL file upload + review (e.g. S-corp proposal -> Paul review)

At a glance

Goals

Let HITL tasks carry uploaded evidence with an in-app review/approve flow, so business/legal docs (S-corp plan, trademark proof) move through the tracker instead of email.

Implementation — what to build

Build steps are in the Checklist below; specs are under Requirements.

Checklist

• ○ HITL panel listing internal_tracker_tasks (owner/reviewer/status/waiting-on + file)
• ○ Worker: signed Storage upload URL; record internal_files + file_events:upload; set evidence_file_id; waiting->review
• ○ Worker: signed download URL; approve (done) / return (waiting + reason)
• ○ Storage bucket policy: private + short-lived signed URLs only
• ○ Notify owner/reviewer (Slack/email) when a task is waiting on them

Gates & testing

• ○ A4 Business formation, trademark research, and partner contribution tracking are visible as HITL tasks with evidence.
  CODE TEST

Requirements

• REQ-HITL-003 implemented HITL tasks must support uploaded evidence with an in-app review/approve flow and per-task ticket pages.
  Done when: An owner uploads a doc (signed URL to private Storage) which sets evidence + flips to review; a reviewer approves/returns; upload/download/decision are audited; each task has a detail page.
  Spec: docs/tracking/hitl-upload-design.md · docs/tracking/decision-log.md#d18

Verify (done when)

An owner (e.g. Mark) uploads a doc to a HITL task (signed-URL to private Storage) -> sets evidence_file_id + flips to review; a reviewer (Paul) opens + approves/returns it; all audited via file_events + tracker events.

Cost triggers

No paid API / infra spend triggered by this item.

Status & editing

queued   Sprint: Foundation HITL

Edit status / sprint on the ★ Live Board → — changes are logged live with who / when / why.

Human-in-the-loop

Findings

None recorded yet.

Concerns

• Sensitive legal/equity docs — keep the bucket private, signed URLs short-lived, service-role only in the Worker.

Risks

None recorded yet.

Tech debt

None recorded yet.

Tools used

No tool calls recorded.

Files & artifacts

• Upload design note

Update log