last.vet-api documentation index
Purpose: API-repo documentation for LastVet backend engineering, compliance tracking, and operational runbooks. Cross-product authoritative docs (Bible, AWS inventory, CARIN PDFs, gate specs) live in lastvet-gates.
Last reorganized: August 2026 (docs-reorganization branch).
Directory layout
docs/
├── README.md ← this index
├── api/ ← integrations, RLS, VA demos, consent
├── compliance/ ← VA access tracker, counsel / audit correspondence
├── deployment/ ← AWS, environments, ops console (local copy)
├── planning/ ← gate thresholds, handoffs, decisions
├── security/ ← posture docs, pentest, secrets audit
├── runbooks/ ← cutover, E2E logs, gate exit checklists
└── misc/ ← exports, generators, archival
Reading order (new engineer)
../README.md — repo orientation
../../lastvet-gates/AGENTS.md — Phase 1 scope and gates
../../lastvet-gates/docs/lastvet/LASTVET_BIBLE.md — product law
deployment/ENVIRONMENT_TOPOLOGY.md — staging vs prod walls
../../lastvet-gates/docs/lastvet/AWS_ENVIRONMENT.md — canonical AWS inventory
compliance/VA_PRODUCTION_ACCESS_TRACKER.md — VA + CARIN milestone timeline
../../lastvet-gates/docs/compliance/ — CARIN signed attestation + Faltz confirmation PDFs
Subdirectory index
api/
| File |
One-line purpose |
CONSENT_AND_DOCUMENT_CATEGORIES.md |
Consent types and document category model |
DOCUMENTS_REPOSITORY.md |
Documents repository and RLS context |
DUAL_GRANT_SPEC.md |
Dual-grant revocation defect and fix |
GOOGLE_SIGNIN.md |
Google Sign-In for provider portal |
LAST1_ID_INTEGRATION.md |
last1.id consent outbox integration |
provider-email-templates.md |
Provider email templates |
RLS_BATCH1_CALLSITE_AUDIT.md |
RLS batch 1 call-site audit |
RLS_BATCH2_PLAN.md |
RLS batch 2 plan |
TRACK3_PHI_RLS_PLAN.md |
Broader PHI RLS plan |
VA_* |
VA architecture, demo, sandbox, and data-persistence docs |
compliance/
| File |
One-line purpose |
VA_PRODUCTION_ACCESS_TRACKER.md |
VA Lighthouse production access + CARIN timeline |
HL_ENGAGEMENT_PACKET.md |
Hogan Lovells engagement packet |
DELOITTE_FOLLOWUP_COVER_NOTE.md |
Deloitte follow-up cover note (historical) |
deployment/
| File |
One-line purpose |
AWS_MIGRATION_ASSESSMENT.md |
LastVet → AWS migration assessment |
AWS_OPS_CONSOLE.md |
Ops console guide (canonical copy: lastvet-gates/docs/lastvet/) |
DEV_STAGING.md |
Dev and staging environments |
ENVIRONMENT_TOPOLOGY.md |
Single-account hard walls |
planning/
| File |
One-line purpose |
GATE_1_THRESHOLD.md |
Gate 1 traction threshold |
SESSION_STATE_2026-07-16.md |
Cold-resume session handoff |
gate-0.5/DECISIONS.md |
Gate 0.5 decisions log |
security/
| File |
One-line purpose |
SECURITY_POSTURE_*.md |
Database, imaging, token custody posture |
SECURITY_PENTEST_STATUS.md |
Pentest remediation status |
gate-0.5/BITWARDEN_AUDIT.md |
Bitwarden secrets audit |
runbooks/
| File |
One-line purpose |
VA_PRODUCTION_CUTOVER_RUNBOOK.md |
VA production cutover |
gate-0.5/GATE_0.5_STATUS.md |
Gate 0.5 exit checklist |
gate-0.5/E2E_RUN_LOG_*.md |
Scripted and human E2E run logs |
misc/
| Path |
Note |
exports/ |
Cursor chat exports (archival; not operational docs) |
generate-*.py, generate-pdf.sh |
Demo printout generators |
Ambiguous placements (override welcome)
AWS_OPS_CONSOLE.md kept under deployment/ for discoverability; canonical vendored copy is lastvet-gates/docs/lastvet/AWS_OPS_CONSOLE.md.
DELOITTE_FOLLOWUP_COVER_NOTE.md filed under compliance/ as counsel correspondence; could also live in misc/.
- Chat exports under
misc/exports/ — historical agent transcripts, not source-of-truth specs.