Ogur v1.1.0 — MVP-1 authenticated auditable reports¶
Genfit and Polygon employees follow an authenticated link and read an auditable report aligned with what they were presented, except for explicitly documented corrections.
That sentence is the MVP-1 gate, and this release is the code that satisfies it. Two words carry it. Authenticated — clients log in as themselves, and we know who read what. Auditable — every claim on the page traces to a real source, nothing on the page is fabricated, and the depth of evidence behind each claim is stated rather than implied.
MVP-1 is the delivery surface: it serves the report packs that exist today. Rebuilding those reports from the backend is MVP-2.
Gate A — authenticated named users and report authorization¶
Named-identity model with scrypt hashing and opaque session cookies; every request is attributable to a named user (#241). Report access is allowlisted per identity, and an ungranted landscape is indistinguishable from a nonexistent one — 404, not 403. LLM endpoints enforce a daily spend ceiling (#247, #255). Client login page, route guard and sign-out (#256, #260). A refused cross-client report renders its 404 state rather than an indefinite loading skeleton (#263).
Gate B — one same-origin deployment serving both frozen packs¶
The API boots from outside the repository root (#240). One delivery container serves the real React frontend — not a static export — both frozen report packs, and a read-only content database, all same-origin (#245). Warm Fly.io production app with persistent SQLite and a backup/restore procedure (#250), serving several frozen Explore packs from one deployment (#208).
Gate C — every client-reachable surface auditable¶
Every client-reachable route inventoried, with every mock surface gated behind a
build flag: the default build ships no fabricated provenance (#253). Each
client-facing source path declares its evidence depth — metadata-only,
title+abstract, or full document — so a client cannot infer that Ogur read a
paper body or patent claims when it did not (#254). Served pack digests are
verified against the built artifacts (#220), and every swimlane card is grounded
in a real source (#226). Derived-entity roster layers are registered with the
evidence-depth registry, so a pack carrying them serves rather than 503s (#262).
Gate D — durable attributable report feedback¶
Report feedback persists against document identity rather than a mutable row id, so it survives an application restart and a content reseed (#242, #249). One authenticated report-level feedback box with explicit submit and error states (#251).
Gate E — served reports aligned with the client-presented versions¶
The Polygon PLG-101 brief was rebuilt on a document layer — NCT, PMID and publication numbers rather than derived entity aggregations (#207) — and aligned with the deck shown to Polygon (#227). The GNS561 brief reached v3 with a patent scan and literature layer (#217), was rebuilt on v4 (#221), and aligned with the deck presented to Genfit (#228).
Security¶
Two release-blocking findings from the focused production security review are closed (#259): eleven briefing and evidence routes were reachable unauthenticated, and five of them ran the Synthesizer outside the spend ceiling. The five generation endpoints were deleted rather than gated.
Consciously accepted, not fixed: login rate limiting. The full review is at
docs/product/security-review-2026-08-12.md.
Also in this release¶
Word-boundary anchor matching in the discovery matcher, cutting acute-cardiac
candidates 527 → 128 on the 783-trial PLG-101 corpus (#194). The GNS561 / Genfit
autophagy landscape end to end (#199, #201–#204). A LandscapeClass adapter with
the RNAi implementation generalized behind it (#190) and a class-aware Explore
decompose endpoint (#192). The MVP scope contract and its four read-only product
gate agents (#223).
Full detail, including the fixes and tooling not listed here, is in the
[1.1.0] section of CHANGELOG.md.
Known limitations¶
- Explore's open-ended live search is not built. Ogur serves landscapes that were discovered offline and frozen into packs; it does not yet build one live.
- The literature layer is primarily title and abstract. Where that is true, the page says so.
- Login is not rate-limited.