Conclave features

The intelligence and control plane — capture, editor, insights, KB, sharing, audio.

This is the shipped feature catalog for the Conclave plane. Everything here is built and merged to main unless noted. Status vocabulary and the full board are on Status; the trust model covers what the architecture enforces and the receipts you can verify offline.

Capture / ingest surfaces

Feature	What it does	Status
In-person recording	Browser mic → live diart + ASR → finalize → TD post-pass + VFTEE	merged
Google Meet / Teams / Zoom bot	Paste URL → bot joins → streaming transcript; concurrency caps, warmed accounts	merged
Transcript upload	Paste/file text or JSON (Otter/VoxTerm/generic) → parse → enrich	merged
Audio-file upload	Voice-memo picker → record pipeline → Uploaded badge	merged
Calendar auto-record	Scheduler launches a bot ~15 min before toggled events	merged
Live segment streaming	Capture → Redis → SSE to `/recording/[id]`	merged

V2 inline word-level editor over a span-annotated transcript_v2 doc (separate from immutable raw_diarization), with a draft → approved workflow. Includes speaker tagging (name/email → voiceprint), personal vocabulary + autocomplete, spaCy NER pre-typing, approve → re-derive (re-runs enrichment from the corrected text), re-edit-after-approve, and heal-on-open (#13) — when a name is confirmed later, the summary regenerates on next open. All merged.

Versioning, sealing & redaction

Every approved edit appends an immutable, signed transcript version (#3) — a git-history-style chain, each version carrying an Ed25519 conclave-seal/v1 seal (key published at GET /v1/transcript-seal-key, #21). The Studio refine editor (#124) adds add / remove / merge / split / reassign speakers (#23). Verifiable redaction (#134, v1) strips PCI/PHI/PII in-enclave into a clean version plus a signed completeness receipt anyone can verify offline — see Verifiable redaction. All live in prod.

Insights & grounding

One LLM call at ingest fills summary + signals (action items, decisions, open questions). Meeting-intent grounding compiles a freeform focus + calendar description + in-person agenda (#12) into <meeting_intent> that steers the summary, with an "Agenda-grounded" badge. A short LLM title (#40) and per-workspace obligations / open-questions rollups round it out. All merged.

Knowledge base

Bi-temporal entity / obligation / fact extraction, definition-driven entity resolution, hybrid BM25 + embedding search (POST /search, RRF), Ask / RAG (POST /ask, the only read-path LLM call, always cited), a D3 entity graph, and per-entity pages. See Knowledge graph & search. Merged.

Feature	What it does	Status
Granular sharing (`#31`)	Per-share `{transcript, insights, audio}` booleans; insights independently withholdable	merged
Magic-link shares	Single-use email link → public resolve → session	merged
Transcript `.txt` download (`#52`)	Speaker-turn transcript as `text/plain` for authorized viewers	merged
Tag → email transcript (`#15`)	Tagging can also create the share + send the link in one step	merged
Data-dump + T&C (`#18`)	Owner-scoped ZIP export + blocking first-login T&C gate	merged
Retention	Per-meeting + account default; scheduled sweep purges raw, keeps summary + KB	merged
Contribute to Shape OS (`#20` Arm 1)	Host-approved v2 → Shape OS anonymous inbox, opt-in	merged

Audio (TEE-encrypted)

AES-256 at rest (#30, encrypt-on-write, dstack-sealed key), decrypt-on-read player with per-segment clips and click-to-seek (#41), a store-audio toggle, and service-token-gated audio-by-reference fetch for workers. Merged.

Auth, workspaces & lifecycle

Supabase OTP + OAuth with an auto-provisioned Personal workspace; multi-member team workspaces with invites, roles, and owner-private meetings (#32, merged); meeting origin (#38) / time-of-day (#39) / title (#40) surfacing; speaker-turn coalescing (#37); and a real delete + processing/failed lifecycle (#42).