Completed Plans Archive

Reference Type Extensions

!1

Complete

Session Middleware

!4, !5

Complete

Person and Household Data Model

!6

Complete

Rules Engine

!8

Complete

Determination Signing

!5

Complete

Security Audit Subscriber

!9

Complete

Application Intake

!10

Complete

SNAP Eligibility

!12

Complete

SNAP Deduction Calculation

!13

Complete

Eligibility Orchestrator

!14

Complete

SNAP Categorical Eligibility

!15

Complete

SNAP ABAWD

!17

Complete

SNAP Special Situations

!17

Complete

SNAP IEVS Verification

!19, !54, !58

Complete

SAVE Adapter

!21, !55

Complete

Notice Generation

!22

Complete

Typst Document Generation

!22

Complete

Fair Hearings and Appeals

!23, !58

Complete

IPV Disqualification

!25

Complete

SNAP Enrollment and EBT

!26

Complete

SNAP Renewals

!27, !53

Complete

SNAP Federal Reporting

!29, !62

Complete

Worker Portal — SNAP

!28, !37, !38, !56, !61

Complete (18 steps)

Worker Portal Remediation

!37

Complete

Code Quality Audit

!18

Complete

Code Quality Remediation

!18

Complete

Test Coverage

!24, !48

Complete

Crate Quality Parity

!42

Complete

Directive Compliance

!20, !43

Complete

Security/CI Remediation

!39

Complete

Deployment Profiles

!51

Complete

ADR-003 Compliance

!55

Complete

Devstack Staleness Guard

!57

Complete

UAT Documentation Pass

(in progress)

In progress

JDM Ruleset Happy-Path Tests

(TBD)

Complete (2026-04-27) — 12 fixtures, drift gate

Containerized Integration Tests

!133, (TBD)

Complete (2026-04-27) — ADR-015, in-network runner, validate-flip deferred

Cross-Program Functional Testing

(drift sweep, TBD)

Complete (2026-04-27) — TSNAP/TMA/Express Lane chains all wired + 9 e2e tests green

Medicaid Orchestrator EE15 Hierarchy Wiring

!138

Complete (2026-04-28) — closed via #338 (signing keys + raw-bytes signature verify + DB-roundtrip Decimal/timestamp normalisation)

canopy-caps List Endpoints + Authorization Field Reconciliation

!102

Complete (2026-04-21) — Step 8 E2E landed via canopy-seed-caps-wic-fixtures

canopy-wic List Endpoints for Determinations and Nutritional-Risk Assessments

!103

Complete (2026-04-21) — Step 8 E2E landed via canopy-seed-caps-wic-fixtures

Layered Config + Encrypted Secrets Migration (ADR-012 + ADR-017)

!163 - !182

Complete (2026-05-02) — 23-step rollout: tooling + canopy-devtools container + layered loader + 19 per-service migrations + multi-key SSN encryption rotation support

Outbox Drainer Lease Refactor (ADR-018 amendment)

(TBD)

Complete (2026-05-18) — three-phase lease-based drainer, 19 byte-identical migrations, 4 in-source lease_tests, removes held-tx-across-broker-roundtrip antipattern (#478)

Worker Intake + Program Independence (Plan 1 of demo-video three-plan split)

!390, !391, !393, !394, !395, !396, !397, (this MR)

Complete (2026-05-28) — 7 row plan + this MR closes row 6; ships per-program intake page, per-worker primary_programs claim, MyQueue rewire, audit_events.household_id, case-detail Audit section, multi-program demo personas. Unblocks Plans 2 + 3.

ELE 1-year-flag Expansion (Plan 2 of demo-video three-plan split)

!411, !413, !414, !416, !417, !418, !419

Complete (2026-05-29) — durable 1-year Express Lane Medicaid/PeachCare flag for children <19 (42 CFR 435.1102). Grant subscriber over service-token persons HTTP (deletes the pre-Plan-2 hardcoded express_lane.rs ladder; decision runs entirely through ele-grant/ele-renewal/ele-lapse JDM rulesets per ADR-003), advisory-locked hash-chained ele_grant_events (ADR-014), consent endpoint (#644, the Plan 3 dependency), source-closure lapse folded into the tanf.case_closed handler (one consumer group per event per service), admin revoke + manual renewal-run endpoints, daily renewal scheduler, and the case-detail identity-hero ELE badge. Follow-ups #649/#650/#651/#652/#654.

A8b — reporting least-privilege DB role + credential cutover (#1456, epic &73)

!1130 (plan), (impl MR)

Done (2026-08-12) — owner/app role split (chain-v2 pattern), catalog-loop ownership transfer, per-object grant matrix, SECURITY DEFINER janitor, boot guard + accountable override, devstack real-login cutover. Fleet prereqs #1463/#1464 + the #1465 residual shipped en route.