# Mi-Insite decision register

This register records product and architectural decisions. Status values are Accepted, Pending,
Superseded or Deferred.

| ID     | Status   | Decision                                                                                          | Rationale / consequence                                                                       |
| ------ | -------- | ------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------- |
| DR-001 | Accepted | Use the existing cPanel server for development only.                                              | No production data, production credentials or availability commitment belongs on this host.   |
| DR-002 | Accepted | Production data and infrastructure remain in South Africa.                                        | Applies to databases, objects, backups, logs and AI content processing.                       |
| DR-003 | Accepted | Design initial capacity for 20 tenants.                                                           | Volume assumptions remain pending; load tests must use explicit content and job rates.        |
| DR-004 | Accepted | Initial client profiles are The Presidency, Gauteng Tourism Authority and Gauteng Gambling Board. | Strong tenant isolation, audit, approval and evidence controls are foundation requirements.   |
| DR-005 | Accepted | Initial social networks are Facebook, Instagram, X and TikTok.                                    | Implement Meta first, X under cost controls and TikTok behind audit/capability flags.         |
| DR-006 | Accepted | No licensed media provider for MVP.                                                               | Only curated RSS/direct/manual sources are supported; coverage is explicitly partial.         |
| DR-007 | Accepted | MVP response scope is a subset.                                                                   | Owned public comments, replies and supported mentions only; DMs and reviews are deferred.     |
| DR-008 | Accepted | Require MFA without enterprise SSO initially.                                                     | TOTP is mandatory; keep OIDC-compatible identities for a later enterprise phase.              |
| DR-009 | Accepted | White-labelled reports and client portals are MVP scope.                                          | Use tenant configuration, not code forks; custom domains are deferred.                        |
| DR-010 | Accepted | Build Gemini, OpenAI and Claude adapters.                                                         | Live data remains denied until an exact provider/model has approved South African processing. |
| DR-011 | Accepted | Development operating ceiling is USD 100/month.                                                   | Use mock data and local PostgreSQL-compatible storage; production budget is separate.         |
| DR-012 | Accepted | Use a TypeScript modular monolith in an npm monorepo.                                             | Separate web/API/worker/scheduler processes without premature microservices.                  |
| DR-013 | Accepted | Use PostgreSQL as the system of record and initial durable queue/search substrate.                | Supports transactions, RLS, full text, JSON, job leasing and future vectors.                  |
| DR-014 | Accepted | Use PGlite for credential-free local development and tests.                                       | Same PostgreSQL migration language without installing system packages or Docker.              |
| DR-015 | Accepted | AI never publishes autonomously.                                                                  | Every external response or report narrative has an accountable human review gate.             |
| DR-016 | Accepted | Default approval and SLA policies are supplied but tenant-versioned.                              | Gives an operational baseline while preserving regulatory/client differences.                 |
| DR-017 | Accepted | Use forward-only expand/migrate/contract database changes.                                        | Application rollback does not assume a destructive database rollback.                         |
| DR-018 | Accepted | Use immutable, commit-addressed deployments with health gates.                                    | No deployment occurs in the current local-only phase.                                         |

## Pending decisions

| ID     | Owner              | Decision required                                                                            | Needed by                                  |
| ------ | ------------------ | -------------------------------------------------------------------------------------------- | ------------------------------------------ |
| DR-P01 | Product/commercial | Approve a viable production infrastructure and provider budget.                              | Before production architecture procurement |
| DR-P02 | Client/security    | Define daily content, interaction, search and storage volumes per tenant.                    | Before load-test design                    |
| DR-P03 | Legal/procurement  | Approve source-by-source RSS/direct capture and archive rights.                              | Before live ingestion                      |
| DR-P04 | Platform owners    | Confirm social accounts, permissions and developer-app ownership.                            | During discovery                           |
| DR-P05 | Security/legal     | Confirm whether any Gemini model contractually processes and stores content in South Africa. | Before live AI                             |
| DR-P06 | Security/legal     | Decide whether a locally hosted open-weight model is acceptable.                             | Before live AI fallback                    |
| DR-P07 | Client owners      | Approve tenant-specific business hours, SLA exceptions and approval chains.                  | Before pilot configuration                 |
| DR-P08 | Compliance         | Approve retention periods, legal-hold authority and evidence export policy.                  | Before evidence ingestion                  |
| DR-P09 | Brand/product      | Approve white-label limits and whether custom domains are Phase 2.                           | Before portal design sign-off              |

## Default assumptions pending override

- Africa/Johannesburg is the tenant time zone.
- Business hours are weekdays 08:00–17:00 excluding South African public holidays.
- P1 incidents run continuously and never pause for internal approval.
- Client portals are read-only in the MVP.
- Live AI is off by default.
- Platform-wide public listening and direct messages are out of MVP scope.
- Shared-schema PostgreSQL with row-level security is the initial tenant model.