Project_Velocity/.Agent Context/Sprint 1/sentinel_execution_tracker_2026-04-02.md

Sentinel QD Engine Execution Tracker

Updated: April 2, 2026

Milestone	Scope	Current Status	Completed Truth	What Is Left
1	Database & Auth	Complete	Types, store slice, schema, addendum schema, asyncpg pool, RBAC dependencies, FastAPI entrypoint, NVMe PostgreSQL deployment, and schema application are done.	Nothing required to satisfy the original milestone.
2	Velocity Link & Notifications	Complete	Vault link generation, vault-open logging, notification socket hook, notification center UI, and App wiring are implemented.	A live broker acceptance pass on the deployed frontend is still useful, but the milestone itself is complete.
3	Perception Pipeline	Complete	Landmark encoder, MediaPipe hook, PerceptionPlayer, Sentinel live session wizard, and Sentinel subtab split are implemented.	No code gap remains for the milestone definition.
4	NemoClaw Sandbox	Complete with architecture change	Prompt files, Sentinel router, backend reasoning client, AWS gateway bootstrap, and active env configuration are in place. The live reasoning path is now NVIDIA-primary instead of local Ollama-primary.	The only remaining improvement is better structured-output robustness from the NVIDIA model.
5	CCTV & Auto Mode Integration	Code complete, external producer hookup pending	backend/routers/cctv.py, backend/scripts/cctv_ocr_bridge.py, backend/services/auto_mode_matcher.py, and prompt placement to NVMe are done.	A real ONVIF/RTSP/OCR producer still needs to post to /api/cctv/event in production.
6	Video Scene CSV Upload	Complete	backend/routers/scenes.py, scene-aware backend lookup, frontend scene CSV upload UI, and scene-linked session packets are implemented.	Optional broker training and a production CSV content pass remain operational tasks, not engineering blockers.
7	AWS Deployment	Complete	NVMe-backed backend tree, env file, PostgreSQL on NVMe, schema execution, velocity-backend.service, nemoclaw-velocity.service, nginx TLS proxy, and backend health recovery on the current node IP are complete.	Replace dynamic IP and self-signed TLS with stable production networking and certificate management.
8	Integration Tests	Complete at repo level	Backend NemoClaw scoring test, backend vault notification flow test, Playwright live-session tests, and Playwright notification-center test are implemented and passing locally.	A live deployed end-to-end acceptance run through the broker-facing UI is still recommended before declaring production signoff.

Residual Risks

1. NVIDIA structured output remains imperfect on the full QD prompt. The client now includes malformed-response recovery, but this is still the main inference correctness risk.
2. The AWS public IP is dynamic. The system should move to an Elastic IP or a stable DNS record.
3. CCTV ingestion is implemented at the API boundary, but the production camera/OCR producer is not yet hard-wired.
4. TLS is functional, but the deployment still needs a trusted certificate chain for full production readiness.

April 2 Addendum

1. The live-session video picker now loads catalog-backed marketing videos from GET /api/videos/marketing instead of hardcoded mock cards.
2. The assigned-mode lead selection step now includes client-side search.
3. The current four walkthrough assets are intended to live under /opt/dlami/nvme/assets/videos with broker-facing metadata in catalog.json.