Lab digest — 2026-W26

Window: ISO week 2026-W26 (2026-06-22 → 2026-06-28, UTC).

Heavy Embed product week — visitor file uploads, per-widget model/voice selectors, and ReBAC sharing all shipped end-to-end. Atlas hardened its multi-tenant isolation model and gained a deny-by-default approval gate.

🏆 Headline achievements

Embed widget platform (#773 mega-ticket)

The Embed product crossed several launch-critical milestones across five repos (openalice-embed, openalice-embed-app, openalice-agent-lite, openalice-tenants, openalice-tts):

• Visitor file uploads — full pipeline: widget composer UI, signed upload/serve URLs, per-widget file_upload_max_mb cap, vision content-safety gate, bomb guard, GDPR file purge. Owner toggle in dashboard Settings. _(embed · high)_
• Per-widget AI model selector — region+tier-aware LLM model catalog in tenants, catalog-driven UI in embed-app, server-side gating on widget update. _(embed · high)_
• Per-widget voice selector — voice catalog with region+tier, Fish Audio TTS adapter (cheap US standard voice), voice preview endpoint in agent-lite, CS-register emotion control via Fish s1 markers, premium accessible voice/model dropdowns. _(embed · high)_
• Widget sharing (ReBAC #772) — widget_grants table, FGA per-widget guest grants in the embed schema, owner-side grant UI, email-based invite flow with accept page, guest read-path guard extended to safe subresources, FGA_SHADOW/FGA_ENFORCE rollout flags wired. _(embed · high)_
• Conversation reload-persistence + host-page events API — configurable launcher position (4 corners), conversation history survives page reload. _(embed · medium)_
• Inbox depth — conversation tags, operator notes, search in both agent-lite and embed-app dashboard. _(embed · medium)_

Alice core (openalice)

• Claude Code provider — bricks 3–7 shipped: LLM provider impl with feature gate, stdin transport (no ARG_MAX limit), real token streaming, subscription-aware config via CLAUDE_CONFIG_DIR, persistent long-lived session client. _(core · high)_
• `consult_advisor` tool — Claude second-opinion advisor behind tool-advisor opt-in flag, forward chain wired. _(core · medium)_

Atlas (openalice-atlas)

• Security Approvals (HITL) — deny-by-default time-boxed access grants for the ATLAS↔SYSTEM chat; live per-second countdown on /approvals. Chat-open leases visible in History. _(atlas · high)_
• External-tenant isolation — complete read isolation across all org-wide endpoints; semantic /search KB hits scoped to agent's own notes; /agents roster made internal-only with explicit 401 for non-privileged callers. _(atlas · high)_
• Roster v2 — /orgs with org-grouped roster joining SYSTEM's subscription map (codex/claude bot subscriptions mapped), admin-gated. Internal agent slugs unified to openalicelabs-<firstname>. _(atlas · medium)_
• External agent toolkit — membership contract, onboarding playbook, wiki standard, per-room mention-only delivery mode. _(atlas · medium)_
• UnCorded competitive teardown — research doc with lessons for openalice-social; Social catalog row pointed at the teardown. _(research · medium)_

Tenants / platform

• Durable background-job queue — retry/backoff/DLQ; dunning email wired as first consumer. _(tenants · medium)_
• Voice emotion default — voice_emotion_default validated to customer-service register across tenants and agent-lite. _(tenants · low)_

📊 By the numbers

Top repos by commit activity this week:

🔭 Next

• Embed launch readiness — remaining #773 polish, bundle QA, and production deploy gate
• Atlas W27 audit — already committed (docs(audit): weekly audit 2026-W27); follow-up on feature-status coverage gaps (embed-app at 6/224, embed at 0/66)
• Claude Code provider — remaining bricks past 7 (tool bridge, session lifecycle)
• Social — UnCorded teardown lessons → openalice-social development kick-off
• Mollie live key — still blocking real recurring billing E2E

_Generated by codex-cron on 2026-06-29. Atlas cockpit at atlas.blal.pro↗._