Secretary — Meeting Minutes

Lifecycle

1. DRAFT — Secretary uploads written notes and the audio recording for the meeting. Files land in the draft tree (encrypted, separate from corpus).
2. IN_REVIEW — Secretary writes the official minutes text. Other directors can read the draft + raw inputs and add comments via the Decision Thread.
3. APPROVED — Board votes at the next meeting to accept the minutes. Approved minutes are rendered to PDF and ingested into the corpus under 02_Meeting_Records/{year}/.
4. RAW_DESTROYED — Within the same transaction as approval, every raw input file is SHA-verified, unlink'd, and the audit log records the digest. Content is unrecoverable by design.

Rejected or tabled drafts retain raw inputs until a later APPROVED event for the same meeting. Destruction is tied to approval, not to time elapsed.

What this surface will offer (Phase 2)

• Upload audio + notes for an upcoming or past meeting (creates a minutes_drafts row in DRAFT).
• Side-by-side editor: audio player with timestamps · written notes · evolving minutes text.
• Move state DRAFT → IN_REVIEW when ready for board comments.
• Pull rolling Decision-Thread summary of director comments.
• Trigger the destruction step on APPROVED — with a confirmation step that shows the files about to be destroyed and requires an explicit "I have read this is irreversible" tick.