feat(projects): expose evidence-bound history in post detail

[seonghobae]

Closes #280. Adds the ADR 0224 read projection over existing normalized project, responsibility, and Event Lineage evidence; applies RBAC, corporate-entity scope, process-unit scope, source eligibility, and knowledge cutoff before child reads; and mounts the accessible Storybook-tested timeline in the existing post-detail popup. Free text does not create lifecycle facts. Issue #284 remains the separate authoritative ingestion boundary.

---

[coderabbitai]

Warning

Review limit reached

Next included review available in 51 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 9d8d338f-863f-4cca-a43b-d026e1b22767

📥 Commits

Reviewing files that changed from the base of the PR and between ff7431b and 234f975.

⛔ Files ignored due to path filters (2)

• docs/screenshots/project-history-time-source-desktop.png is excluded by !**/*.png
• docs/screenshots/project-history-time-source-mobile.png is excluded by !**/*.png

📒 Files selected for processing (21)

• CHANGELOG.md
• backend/app/main.py
• backend/app/project_history.py
• docs/adr/0243-evidence-bound-project-history-projection.md
• docs/adr/README.md
• docs/product-technical-gap-baseline.md
• docs/storybook-inventory.md
• frontend/src/App.test.tsx
• frontend/src/App.tsx
• frontend/src/api.ts
• frontend/src/components/ProjectHistoryTimeline.css
• frontend/src/components/ProjectHistoryTimeline.stories.tsx
• frontend/src/components/ProjectHistoryTimeline.test.tsx
• frontend/src/components/ProjectHistoryTimeline.tsx
• frontend/src/i18n.test.ts
• frontend/src/i18n.ts
• frontend/src/projectHistory.test.ts
• frontend/src/projectHistory.ts
• lineageweave/project_history.py
• tests/test_project_history.py
• tests/test_project_history_ingestion.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Validated the current head 97c5d39 in a clean detached worktree: project-history unit and ingestion tests pass (4 passed). Hosted required Checks remain pending and independent approval is still required.

[seonghobae]

Addressed the actionable project-history review edge at exact head facbae5: project-history action keys now use NFKC/case-normalized identity deduplication and choose a non-blank source-name fallback; added two focused frontend tests (2 passed). The far-focus behavior remains intentionally bounded to the selected authorized page and is documented as truncated evidence rather than a causal or complete history claim.

[seonghobae]

Applied the review follow-up at exact head f272f4b: project-history fetch results now use a request sequence guard so late responses cannot overwrite a changed post/project; SQL normalization now applies NFKC before trimming, matching Python for compatibility whitespace. The focus-post cutoff 404 remains fail-closed by design because a post newer than knowledge_cutoff is not authorized evidence. Backend focused tests (4 passed) and frontend project-history tests (2 passed).

[seonghobae]

Confirmed the two informational findings at exact head f272f4b: event_count is intentionally the displayed bounded page count and the explicit truncation message communicates that it is not a project total; the knowledge-cutoff dependency on the dialog reset effect is intentional to invalidate project-history state when the authorized snapshot changes.

[seonghobae]

Fixed in 1b8e1a99.

• Project-history event details now render raw time_basis_code, source_stage_code, and source_detail_state_code values (or an explicit not-applicable label) with localized field labels. This preserves source codes without assigning lifecycle meaning.
• The projection-level time disclosure now switches from the fallback explanation to the raw time-basis code when a non-fallback basis is received, so document_time is not misrepresented.
• The focused component and project-history tests cover the displayed raw values and all passed.

The focus-key and stale-response observations remain covered by the existing request-guard and matching-key tests; no additional code change is required for those informational findings.

[seonghobae]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[seonghobae]

Confirmed at exact head e452bf38: the earliest-events-plus-focus window is the intentional ADR 0226 contract, with truncation surfaced to the reader. No code change is required for this informational observation.

[devin-ai-integration]

Devin Review found 1 new potential issue.

[seonghobae]

Superseded by #762. PR #668's branch was built on an old base carrying 8k deletions of main's newer content; #762 three-way merges only the additive project-history layer (endpoint, client, timeline component, tests; +2279/-0) onto current main. The popup UI hookup is tracked as a scoped follow-up inside #762 because main's post-detail component tree moved past the branch's assumption.