Coherence Review

4. Check Auth Middleware Alignment

• Verify auth middleware is applied to all protected routes.
• Confirm token format and claims match between auth service and consumers.
• Check RBAC roles in middleware match the roles defined in security spec.

5. Verify CI/CD Coverage

• Confirm every deployable service has a CI pipeline.
• Check that test, lint, build, and deploy stages exist.
• Verify environment variables are documented and present in CI config.

6. Identify Integration Gaps

• List any mismatches found in steps 2-5.
• Categorize each gap: breaking (will fail at runtime) vs drift (works but inconsistent).
• Prioritize breaking gaps first.

7. Create Fix Tasks

• For each gap, create a concrete fix task with:
  • What to change, in which file, by which specialist.
• Update state/STATE.md with the gap summary and fix tasks.
• Log findings in logs/claude_log.md.

8. Review Checklist

• API contracts verified (frontend vs backend).
• DB schema matches service queries.
• Auth middleware covers all protected routes.
• CI/CD pipelines exist for all services.
• All gaps documented with fix tasks.