Skip to content
AskFlorence
Main Navigation ArchitectureFlorence AIAgentsMembersAgent PlatformValidationInfrastructure

Appearance

Sidebar Navigation

Overview

Home

Glossary

System Architecture

Consumer & Agent Flow

Florence AI

Overview

Principles

Runtime

Tool surface

Adding a tool

Tool registry

Knowledge: SBC scenarios & CSR

Voice

Evals & observability

Provider risk & portability

Outage playbook

Roadmap

Build plan

Agents

Overview

Workflows & pain points

Members

Overview

Medicaid coverage gap

Carriers

Overview

Marketplaces

Overview

Agency

Overview

Regulations

Overview

Agent Platform

Overview

Auth Architecture

MongoDB Permissioning

Compliance Model

Data Models

Data Sources

Overview

CMS Marketplace API

CMS dependency map

PUF Data

State Subsidies

SBE Ingestion Playbook

SBE State Watchouts + Decisions

CA Phase C/D Playbook

NY Phase C/D Playbook

Validation

Overview

Methodology

APTC Formula

California 2026

New York 2026

CAPS Formula

Scenario Results

Infrastructure

Account Inventory

AWS Setup Runbook

AWS Organizations

CloudTrail

GuardDuty

Security Hub

Config

CloudFront + WAFv2

Data sources & ingest

Phase 4 DNS

Change Log

Vulnerability Management

MongoDB Setup

Access Control

Data Classification

Documentation Hosting

Post-deploy Smoke

Development

Preflight (local CI mirror)

Testing strategy

Compliance

Overview (auditor entry point)

SOC 2 Control Mapping

HIPAA Control Mapping

CMS EDE Appendix A Mapping

Risk Assessment

Encryption Policy

Data Retention Policy

Privacy Impact Assessment

Consent Capture & Versioning

Incident Response Plan

Access Control Policy

Marketing vs. Portal Analytics

Vendor / Subprocessor Register

Dependency Vulnerability Policy

BAA / Compliance Evidence

Compliance-Automation Integration

Compliance-Automation Vendor Evaluation

Penetration Test Reports

Architecture

Portal entry handoff

Mobile app strategy

Deferred architecture decisions

Session cookie architecture

Share flows

Decisions (ADRs)

Index

0001 — Atlas project isolation

0002 — Append-only audit log

0003 — Narrow-scoped Mongo users

0004 — Cross-cluster Atlas PrivateLink

0005 — Delayed-job architecture

0006 — Mongo user simplification

0007 — Terraform owns ECS task def

0008 — E2E testing strategy

0009 — Self-hosted analytics + observability (superseded)

0010 — PostHog HIPAA Cloud (supersedes 0009)

Runbooks

Security Incident Response

Break-Glass Root Login

Onboard Team Member

Offboard Team Member

Atlas user provisioning

Deploy via Terraform (ENG-277)

Rollback via Terraform (ENG-277)

S3 data bucket migration (planned Phase 11)

Access Reviews

2026-Q2 Review

Session log

Index

2026-04-23 — Phase 10 DNS cutover

2026-04-22 — Phase 8 prod AWS mirror

2026-04-22 — Phase 7 Atlas VPC peering

2026-04-22 — Phase 6 CloudFront + WAF

2026-04-21 — Phase 5 staging go-live

2026-04-17 — Atlas staging

Briefs

Index

Member portal plan (ENG-187)

2026-04-16/17 handoff

2026-04-17 Atlas handoff

System briefing (2026-04-17)

Creative AdBundance proposal brief

Creative AdBundance analytics brief

ElevenLabs RN integration research

Policies

Overview

On this page

Session Brief: April 16-17, 2026 ​

15 commits shipped over ~18 hours. Three parallel tracks landed: agent platform Phase 1 (landing + waitlist), agent platform Phase 2 (discovery survey + legal scaffolding), and internal tooling (docs gate + brand voice guide). Version walked from v0.2.2 to v0.4.3.

Agent Platform Phase 1 — Landing and Waitlist ​

v0.3.0 (41129c4) +1,474 / -3 Shipped /agents marketing landing page and /agent-onboarding waitlist stub. Eight-section landing: hero with mirrored consumer visual treatment, 6 pain points, 5-step how-it-works, two partnership models (50/50 Full Service, 80/20 Submit-Ready), features grid, earnings table, founder mission, FAQ, final CTA. Onboarding form: 5 fields + NPN validation. Extended /api/waitlist to dual-purpose (consumer + agent) with Resend ops notification to agents@askflorence.health and split PostHog events.

v0.3.1 (7e4b0ad) +517 / -155 Mobile polish round 1. Hamburger nav on /agents. Added "I'm signing up as..." role toggle (Individual agent / Agency owner or manager) with conditional team-size select for agencies. Reframed company name as optional. Numbers table becomes stacked cards on mobile instead of horizontal scroll.

v0.3.2 (ece63c0) +62 / -3 Floating mobile CTA bar on /agents mirroring MobileEarlyAccessBar pattern. Shows after scroll > 420px, hides when final CTA enters viewport.

v0.4.0 (222c222) +239 / -127 Intentional mobile design pass. 100svh hero, dedicated stats section below hero, scroll cue, entrance animations. Replaces reactive mobile tweaks with mobile-first layout.

v0.4.1 (f0896b9) +194 / -72 Reframed 80/20 value proposition. Away from "commission rate" framing (which reads as "we keep more of your money"), toward throughput framing (agents close more, faster, with AskFlorence handling submission mechanics). Stronger story for the target audience.

Agent Platform Phase 2 — Discovery Survey and Legal Scaffolding ​

v2026.04 Legal pages (04275bc) +955 / 0 Shipped /privacy and /terms at version 2026.04 effective April 17 2026. Clean brand system, versioned URLs (/privacy?v=2026.04) so consent records can reproduce the exact text a user agreed to. Closes issue #55, unblocks Phase 2.

v0.4.2 (973242b) +2,674 / -5 11-screen /agent-discovery research survey live at https://askflorence.health/agent-discovery:

  1. Welcome + name/company/email + consent checkboxes
  2. OEP / SEP volume
  3. Lead sources + cost + conversion rate
  4. Client demographics (self-employed %, Medicaid-rejected %, top reasons, age range)
  5. Enrollment process (tools, time, time-savings rating, biggest friction)
  6. Compliance (consent docs, storage, clawback)
  7. Retention (rate, proactive renewal, auto-renewal harm)
  8. Pain points + wishlist + 6-feature 1-5 rating scale
  9. PMPM range + carriers (20+ list) + adjacent interests
  10. Partnership preferences + intros
  11. Review screen + submit

Data flow: POST /api/agents/discovery → Zod validation → rate-limit → disposable-email block → consent sub-document captured → persisted to agent_survey_responses → confirmation email → ops notification → PostHog event. Draft auto-save to sessionStorage, motion transitions, mobile-first layouts, honeypot. /unsubscribe CAN-SPAM compliant HMAC-token flow wired into confirmation email.

Env vars set in Vercel: UNSUBSCRIBE_TOKEN_SECRET, MONGODB_WRITE_URI (temporary until #56 creates app_writer_survey, then swap to MONGODB_URI_SURVEY_WRITE — code already checks that first with fallback, so zero-code-change migration).

Legal version alignment (8839376) +9 / -2 LEGAL_VERSIONS had "v2026.04", pages had "2026.04". Consent records reference these strings exactly for consent reproducibility. Aligned to "2026.04" to match page constants.

v0.4.3 (50876cd) +1,193 / -55 Survey UX fixes: sticky header, full review screen (every field, not a summary), state-filtered carriers (only show carriers licensed in the states the agent works).

Internal Docs and Brand ​

Docs PIN gate (3379472, 82253c2) +243 / -34 PIN-protected the VitePress internal docs site. Second commit fixed hydration by rendering layout under gate as overlay rather than replacement.

Agent Platform docs (451ab97) +861 / 0 Shipped internal documentation: auth design (Tier 1 magic link, Tier 2 magic link + TOTP), MongoDB permissioning plan (Issue #56), compliance architecture (SOC 2 / HIPAA / CMS EDE ready), data models (agent, member, survey, audit, consent).

Brand Voice Guide (00f27ce) +1,406 / -1 Internal /brand-voice guide with AI prompt library. No em dashes rule codified, tone guardrails, Florence metaphor canon, DO/DON'T examples, copy prompts for consumer vs agent vs investor audiences.

/asad update (7b62744) +4 / 0 Added VC/investor research duties under Research and Strategy on the founding team offer page.

Session Continuity ​

CLAUDE.md rewrite (bc8e590) +215 / -28 Comprehensive update capturing compliance-first architecture, Phase 5 auth design, super-admin path, NIPR validation plan, ID verification vendor-adapter pattern, audit logging retention, consent versioning, and the full agent platform phase roadmap (Phases 1-6).

Version Timeline ​

VersionCommitFocus
v0.3.041129c4/agents landing + /agent-onboarding waitlist
v0.3.17e4b0adMobile polish, hamburger, role toggle
v0.3.2ece63c0Floating mobile CTA bar
v0.4.0222c222Intentional mobile design — 100svh hero
v0.4.1f0896b980/20 reframed around throughput
v2026.0404275bc/privacy + /terms pages
v0.4.2973242b/agent-discovery survey + /unsubscribe
(patch)8839376Legal version string alignment
v0.4.350876cdSurvey UX — sticky header, full review, state-filtered carriers

Open Followups ​

  • Issue #56 — create app_writer_survey MongoDB user and swap MONGODB_URI_SURVEY_WRITE env var (zero-code-change)
  • Dependabot flagged 3 vulnerabilities on main (1 critical, 2 moderate) — https://github.com/askflorencehealth/ask-florence/security/dependabot
  • Issue #17 now has the full Drug Coverage Checker product brief attached as context
  • Issue #44 now has the full Member Portal Roadmap attached as context
  • Stale v2026.04 still in docs/agent-platform/data-models.md:318-319 and docs/agent-platform/compliance.md:93 (cosmetic, doc examples only)
Pager
Previous pageMember portal plan (ENG-187)
Next page2026-04-17 Atlas handoff

AskFlorence Internal Documentation. Not for public distribution.

AskFlorence

Internal Documentation

Access restricted. Not for public distribution.