An honest build map for Woven OS

Complete foundation: tenancy, auth, graph, actions, audit, AI authority, and quality gates

• Multi-tenant core schemaCore schemas exist for tenants, users, graph, work, finance, communication, AI, and audit.
• Session middleware and tenant bootstrapAuthenticated tenant context is established before protected app routes are used.
• Relationship graph and universal action queuePeople, organizations, roles, relationships, and source-linked actions are available as shared primitives.
• Company Blueprint WizardCreates module recommendations from company context.
• AI authority model and testsLevel 1 draft-then-approve is the default; policy tests pass in CI.
• Event envelope modelExecutable helper and tests exist for tenant-scoped event shape and validation.
• Release-safe migration checksCI includes Supabase migration safety checks; future schema changes stay behind the same gate.
• Phase 1 security gateProtected routes, tenant-scoped patterns, AI authority checks, and CI/Vercel gates are in place for the kernel foundation.

Complete foundation: finance, CRM, communication connections, documents, approvals, dashboard, and sandbox proof

• Client sandbox proof foundationAdmins can provision, seed, reset, and inspect a reusable client training and QA sandbox.
• Seeded business truth datasetSandbox seed covers relationship graph, CRM opportunity/activity, invoice, bill, posted ledger entry, document, approval, object links, and actions.
• Sandbox proof loopsProof page scores billing/AP-to-ledger, relationship-to-CRM-to-action, and document-to-approval-to-action loops against sandbox data.
• Financial Core foundationGL, invoices, bills, reports, banking, assets, payroll, tax, projects, and costing surfaces exist as the Phase 2 foundation.
• CRM Core foundationPipeline, parties, and activity timelines exist on the relationship graph.
• Executive dashboard foundationDashboard surfaces live operating and financial data for executive visibility.
• Documents and approvals foundationDocuments, approval requests, object links, and action handoffs are available and included in sandbox proof loops.
• Communication connection foundationMicrosoft, Google, and Slack provider connection scaffolding exists; full inbox intelligence moves to Communication OS.
• Phase 2 regression gatesCI includes sandbox proof checks for reset safety, seed write handling, schema-error reporting, active finance status filters, and graph/link evidence.

Complete platform trust foundation: admin, auth, sandbox operations, AI safety, quality gates, and runbooks

• In-platform user managementTenant-scoped admin mutations, role changes, active/inactive controls, and last-owner protection are in place with regression checks.
• Passkey / WebAuthn sign-inBrowser-bound challenges, active-user checks, challenge cleanup, and security regression checks are in place; expanded real-device coverage belongs to later release certification.
• Sandbox operations maturityProvision, seed, reset, proof loops, runbook, scenario packs, and automated static simulated-user checks are in place.
• AI Quick ActionAuthenticated active-user tenant context, rate limits, input caps, approval metadata, safer navigation, audit events, and regression tests are in production.
• Feedback tool and platform guideUseful for QA loops, platform explanation, and internal product feedback.
• Production quality gatesCI uses locked installs, Node 22, least-privilege permissions, stale-run cancellation, test-before-build, Vercel preview, and quality-gate regression checks.
• Operational readiness runbookRelease gates, AI/passkey/tenant/sandbox controls, incident response, simulated-user QA, and Phase 3 completion criteria are documented and tested.
• Simulated-user QA planScenario packs cover sandbox, AI, passkey, admin, cross-tenant isolation, provider failure, business truth, migration preview, and release-gate flows.

Complete preview foundation: companies can safely see themselves in Woven before onboarding or replacing anything

• AI Migration StudioMigration Studio now has a product surface and preview-pack generator for source files, mappings, detected issues, preview records, and confidence reports.
• Migration preview workspacePreview sessions are preview-only by default and designed to show a safe, exciting Woven version of a business before onboarding.
• Source-system connectors and file imports foundationThe foundation supports CSV/XLSX/document/manual/connector source records; live direct connectors move into later integration phases.
• AI mapping, cleanup, and reconciliation foundationPreview packs include AI-proposed mappings, duplicate/entity issues, confidence, rationale, and human-review statuses.
• Migration confidence reportConfidence reports cover overall score, finance reconciliation, entity ownership, relationship graph quality, workflow readiness, assumptions, and recommendations.
• Reusable client sandbox proof loopSandbox proof is the first validation lane for every future client.
• Generic vertical configuration packs foundationThe company wizard and roadmap preserve construction, HVAC/service, distribution, real estate, and professional-service patterns without hardcoding a customer.
• Field-to-office action loops foundationSandbox proof validates source-linked actions; deeper dispatch/technician/mobile behavior belongs to later operating-module depth.
• Multi-entity accounting proof loopEntity-owned AR/AP, GL, payments, period controls, consolidation primitives, and intercompany primitives are modeled and regression checked.
• Project/job cash impact visibility foundationProject/job cash visibility is represented as a required proof pattern; deeper job-cost workflows mature in later operating modules.
• Simulated user acceptance testing foundationStatic simulated-user scenario packs and migration-proof checks are in CI before client onboarding begins.