diagnosis: record portal AIOS visibility gap for SR-04

docs/proposals/V1R4C4-SR04-portal-aios-visibility-gap.md

@@ -0,0 +1,168 @@
+# V1R4C4 SR-04: Portal AIOS Visibility Gap
+
+Status: visibility gap confirmed; activation decision required
+
+Priority: P1 / user-visible integration
+
+Risk: medium
+
+## User Report
+
+The authenticated user portal entry does not show the expected new AIOS features:
+
+```text
+/portal/me/
+```
+
+## Current Finding
+
+The current baseline is V1R4C3.
+
+V1R4C3 completed several backend and governance capabilities, but the Portal AIOS Integration Merge was explicitly deferred. Therefore, the user portal not showing new AIOS modules is consistent with the current deployment state.
+
+This is not primarily a browser cache issue. It is a merge/deploy visibility gap.
+
+## Evidence
+
+A related branch already contains portal integration work:
+
+```text
+patch/user-portal-me-route-diagnostics-20260709
+```
+
+Observed contents include:
+
+- `active-runtime/app/portal_aios_module_registry.py`
+- `active-runtime/app/portal_aios_navigation.py`
+- `active-runtime/app/portal_aios_dashboard_api.py`
+- `active-runtime/app/portal_aios_module_api.py`
+- `active-runtime/app/portal_integration_api.py`
+- `active-runtime/app/portal_integration_health.py`
+- `active-runtime/app/portal_system_health_adapter.py`
+- `config/portal-aios-frontend-contract.yaml`
+- `acceptance/portal-aios-integration-matrix.yaml`
+
+The branch defines expected portal APIs:
+
+```text
+/portal/me/aios/manifest
+/portal/me/aios/dashboard
+/portal/me/aios/health
+```
+
+It also defines role-visible AIOS modules, including:
+
+- Task Center
+- Operations
+- System Health
+- Search Governance
+- Agent Observability
+- Architecture Changes
+- Architect Research
+- Governance
+
+## Diagnosis
+
+Current state:
+
+```text
+AIOS backend/governance features exist or are staged
+        ↓
+Portal integration branch exists
+        ↓
+Portal integration is not in current baseline/main deployment
+        ↓
+/portal/me/ does not display new modules
+```
+
+Therefore, the missing portal feature is expected until SR-04 is integrated and deployed.
+
+## Required Fix
+
+Activate SR-04 as a controlled portal integration task after reliability guardrails are satisfied, or explicitly approve fast-track portal visibility integration if user-visible delivery is now higher priority.
+
+Minimum integration requirements:
+
+1. Backend route registration for:
+
+```text
+/portal/me/aios/manifest
+/portal/me/aios/dashboard
+/portal/me/aios/health
+```
+
+2. Portal frontend route/menu integration under:
+
+```text
+/portal/me/
+```
+
+3. API proxy configuration from user portal to AIOS backend routes.
+
+4. RBAC mapping:
+
+```text
+user -> task center / authorized modules only
+group_admin -> operations, health, search, agents
+owner -> governance, architecture, owner modules
+```
+
+5. Production deployment refresh.
+
+## Acceptance Criteria
+
+After login, the portal must show the expected modules by role.
+
+### User
+
+- sees authorized user modules;
+- does not see owner-only modules.
+
+### Group admin
+
+- sees task center;
+- sees operations;
+- sees system health;
+- sees search;
+- sees agents.
+
+### Owner
+
+- sees all AIOS modules;
+- sees governance and architecture modules;
+- sees owner gate / approval modules.
+
+### APIs
+
+The following must return valid data after authentication/proxy:
+
+```text
+/portal/me/aios/manifest
+/portal/me/aios/dashboard
+/portal/me/aios/health
+```
+
+## Safety Constraints
+
+- Do not combine SR-04 with SR-01 root-cause repair unless explicitly approved.
+- Do not bypass RBAC checks to make the UI visible.
+- Do not deploy portal integration without confirming auth callback and proxy routes.
+- Do not treat backend route existence as frontend visibility; both must be verified.
+
+## Recommended Path
+
+Because the user has now observed that new functionality is not visible, SR-04 should move from `deferred` to `activation-ready`.
+
+Recommended execution order:
+
+1. Complete or confirm SR-01 reliability guardrails.
+2. Integrate SR-02 watcher cleanup if already green.
+3. Start SR-04 portal visibility integration as P1 user-visible work.
+4. Validate portal modules after login.
+5. Include successful SR-04 in V1R4C4 or a follow-up V1R4C5 if reliability gating requires separation.
+
+## Current Decision Needed
+
+If user-visible portal delivery is required now, approve activation of SR-04.
+
+If reliability remains the only priority for V1R4C4, keep SR-04 deferred and record this report as expected-not-yet-deployed behavior.