Codex/chat topic scope trust tier

.env.example

@@ -27,6 +27,7 @@ DATABASE_URL=
 # under-18, budget/rate-limit and rollout review pass.
 # Store OPENAI_API_KEY only in a server-side secret manager.
 OPENAI_API_KEY=
+# Direct web-search accepts any syntactically valid OpenAI model ID.
 OPENAI_MODEL=gpt-5.4-mini
 # Optional override for web search only; falls back to OPENAI_MODEL. The model
 # must support the web_search tool with domain filters (the Government-source
@@ -42,7 +43,7 @@ AI_WEB_SEARCH_ENABLED=false
 # the provider and reconciles actual usage afterwards.
 AI_WEB_SEARCH_DAILY_TOKEN_BUDGET=500000
 AI_WEB_SEARCH_RESERVATION_TOKENS=12000
-AI_PROVIDER_TIMEOUT_MS=10000
+AI_PROVIDER_TIMEOUT_MS=30000
 AI_PROVIDER_MAX_REQUESTS_PER_MINUTE=30
 AI_SHADOW_MAX_CASES=5
 

AGENTS.md

@@ -29,8 +29,12 @@ must stay traceable to a user story and a technical specification.
   consistent.
 - Code review prioritizes correctness, legal-source integrity, security,
   regressions, and missing tests.
-- Legal citations shown to users must come from reviewed application data. AI
-  output must not invent or silently alter a citation.
+- Legal citations presented as verified application evidence must come from
+  reviewed application data. For MVP, unreviewed web-search output may show a
+  reference fine, document number, provision or effective date only when the
+  response is prominently labelled "chưa kiểm chứng/chỉ tham khảo", keeps its
+  guarded consulted-source link, and is not promoted to reviewed RAG evidence.
+  AI output must not invent or silently alter a citation.
 
 ## Status vocabulary
 
@@ -39,4 +43,3 @@ must stay traceable to a user story and a technical specification.
 - `Partial`: some acceptance criteria have evidence, but the story is incomplete.
 - `Done`: every acceptance criterion is checked and has verification evidence.
 - `Blocked`: progress requires an explicit external decision or dependency.
-

app/admin/AdminDashboard.tsx

@@ -37,6 +37,7 @@ type CandidateCitation = {
   issuedAt?: string;
   effectiveFrom: string;
   effectiveTo?: string;
+  effectivityNote?: string;
   lastVerifiedAt: string;
 };
 type CandidateSnapshot = {
@@ -59,6 +60,10 @@ type CandidateRow = {
   createdAt: string;
   updatedAt: string;
   snapshot: CandidateSnapshot | null;
+  draftSnapshot: CandidateSnapshot | null;
+  intakeTitle: string;
+  intakeAnswer: string;
+  publicationEligible: boolean;
   sources: Array<{ title: string; url: string }>;
   history: Array<{
     action: string;
@@ -301,7 +306,7 @@ function CandidatePanel() {
     const today = new Date().toISOString().slice(0, 10);
     setEditing(candidate);
     setDraft(
-      candidate.snapshot ?? {
+      candidate.snapshot ?? candidate.draftSnapshot ?? {
         topic: "Giao thông",
         title: "",
         answer: candidate.initialAnswer,
@@ -407,6 +412,7 @@ function CandidatePanel() {
                 <label>Ngày ban hành<input type="date" required value={citation.issuedAt ?? ""} onChange={(event) => setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, issuedAt: event.target.value } : item) })} /></label>
                 <label>Ngày hiệu lực<input type="date" required value={citation.effectiveFrom} onChange={(event) => setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, effectiveFrom: event.target.value } : item) })} /></label>
                 <label>Ngày hết hiệu lực<input type="date" value={citation.effectiveTo ?? ""} onChange={(event) => setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, effectiveTo: event.target.value || undefined } : item) })} /></label>
+                <label>Ghi chú hiệu lực<input value={citation.effectivityNote ?? ""} onChange={(event) => setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, effectivityNote: event.target.value || undefined } : item) })} /></label>
                 <label>Ngày kiểm chứng<input type="date" required value={citation.lastVerifiedAt} onChange={(event) => setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, lastVerifiedAt: event.target.value } : item) })} /></label>
                 <label>Điều<input value={citation.article ?? ""} onChange={(event) => setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, article: event.target.value } : item) })} /></label>
                 <label>Khoản / điểm<input value={[citation.clause, citation.point].filter(Boolean).join(" / ")} onChange={(event) => { const [clause, point] = event.target.value.split("/").map((value) => value.trim()); setDraft({ ...draft, citations: draft.citations.map((item, itemIndex) => itemIndex === index ? { ...item, clause, point } : item) }); }} /></label>
@@ -422,15 +428,16 @@ function CandidatePanel() {
             <span className={`admin-status ${candidate.status}`}>{candidate.status}</span>
             <small>{candidate.providerModel} · {candidate.totalTokens ?? "?"} tokens</small>
           </div>
-          <h3>{candidate.snapshot?.title || "Bản nháp chưa được biên tập"}</h3>
-          <p>{candidate.snapshot?.answer || candidate.initialAnswer}</p>
+          <h3>{candidate.snapshot?.title || candidate.intakeTitle || "Bản nháp chưa được biên tập"}</h3>
+          <p>{candidate.snapshot?.answer || candidate.intakeAnswer || candidate.initialAnswer}</p>
+          {!candidate.publicationEligible && <p><strong>Hướng dẫn an toàn MVP:</strong> nội dung này không đi vào kho căn cứ pháp lý.</p>}
           {candidate.reviewReason && <p><strong>Lý do từ chối:</strong> {candidate.reviewReason}</p>}
           <div className="admin-actions">
-            {canEdit && (candidate.status === "draft" || candidate.status === "rejected") && <button onClick={() => startEdit(candidate)}>Biên tập</button>}
-            {canEdit && candidate.status === "draft" && candidate.snapshot && candidate.editorPrincipalId === principalId && <button onClick={() => void action(candidate, "submit")}>Gửi duyệt</button>}
-            {canReview && candidate.status === "pending_review" && candidate.editorPrincipalId !== principalId && <button onClick={() => void action(candidate, "approve")}>Duyệt & đưa vào RAG</button>}
-            {canReview && candidate.status === "pending_review" && candidate.editorPrincipalId !== principalId && <button className="danger" onClick={() => void action(candidate, "reject")}>Từ chối</button>}
-            {canReview && candidate.status === "published" && <button onClick={() => void action(candidate, "archive")}>Lưu trữ</button>}
+            {candidate.publicationEligible && canEdit && (candidate.status === "draft" || candidate.status === "rejected") && <button onClick={() => startEdit(candidate)}>Biên tập</button>}
+            {candidate.publicationEligible && canEdit && candidate.status === "draft" && candidate.snapshot && candidate.editorPrincipalId === principalId && <button onClick={() => void action(candidate, "submit")}>Gửi duyệt</button>}
+            {candidate.publicationEligible && canReview && candidate.status === "pending_review" && candidate.editorPrincipalId !== principalId && <button onClick={() => void action(candidate, "approve")}>Duyệt & đưa vào RAG</button>}
+            {candidate.publicationEligible && canReview && candidate.status === "pending_review" && candidate.editorPrincipalId !== principalId && <button className="danger" onClick={() => void action(candidate, "reject")}>Từ chối</button>}
+            {candidate.publicationEligible && canReview && candidate.status === "published" && <button onClick={() => void action(candidate, "archive")}>Lưu trữ</button>}
           </div>
           <details>
             <summary>Lịch sử ({candidate.history.length})</summary>

app/admin/api/web-search-candidates/route.ts

@@ -84,6 +84,36 @@ export async function GET(request: Request) {
           snapshot = null;
         }
       }
+      let intakeDraft: unknown = null;
+      let publicationEligible = true;
+      let intakeTitle = "";
+      let intakeAnswer = "";
+      for (const event of eventsByCandidate.get(id) ?? []) {
+        if (typeof event.metadata_json !== "string") continue;
+        try {
+          const metadata = JSON.parse(event.metadata_json) as Record<
+            string,
+            unknown
+          >;
+          if (
+            metadata.intakeDraft &&
+            typeof metadata.intakeDraft === "object" &&
+            !Array.isArray(metadata.intakeDraft)
+          ) {
+            intakeDraft = metadata.intakeDraft;
+            const draft = metadata.intakeDraft as Record<string, unknown>;
+            intakeTitle =
+              typeof draft.title === "string" ? draft.title : intakeTitle;
+            intakeAnswer =
+              typeof draft.answer === "string" ? draft.answer : intakeAnswer;
+          }
+          if (metadata.publicationEligible === false) {
+            publicationEligible = false;
+          }
+        } catch {
+          // Invalid historical metadata is ignored by this read-only projection.
+        }
+      }
       return {
         id,
         initialAnswer: candidate.initial_answer_text,
@@ -99,6 +129,10 @@ export async function GET(request: Request) {
         createdAt: candidate.created_at,
         updatedAt: candidate.updated_at,
         snapshot,
+        draftSnapshot: publicationEligible ? intakeDraft : null,
+        intakeTitle,
+        intakeAnswer,
+        publicationEligible,
         sources: (sourcesByCandidate.get(id) ?? []).map((source) => ({
           title: source.title,
           url: source.official_url,
@@ -151,6 +185,33 @@ export async function PATCH(request: Request) {
     return noStoreJson({ error: "Candidate hoặc version không hợp lệ." }, 400);
   }
   try {
+    const workflow = await listWebSearchCandidates();
+    const publicationBlocked = workflow.events.some((event) => {
+      if (
+        event.candidate_id !== candidateId ||
+        typeof event.metadata_json !== "string"
+      ) {
+        return false;
+      }
+      try {
+        const metadata = JSON.parse(event.metadata_json) as Record<
+          string,
+          unknown
+        >;
+        return metadata.publicationEligible === false;
+      } catch {
+        return false;
+      }
+    });
+    if (publicationBlocked) {
+      return noStoreJson(
+        {
+          error:
+            "Đây là hướng dẫn an toàn cho MVP, không được đưa vào kho căn cứ pháp lý.",
+        },
+        409,
+      );
+    }
     const result =
       action === "save_revision"
         ? await saveWebSearchCandidateRevision(