foxhunt/WAVE113_QUICKSTART.md

WAVE 113 QUICKSTART GUIDE

Mission: Fix P0 blockers → 96% Production Certified
Timeline: 18-35 days (1 dev) | 8-18 days (2-3 devs)
Current: 92.1% ready, BLOCKED by CVSS 5.9

---

CRITICAL PATH (P0)

Day 1-3: Phase 1 - Unblock Production

# 1. FIX SECURITY (Agent 1: 2-3 days)
cargo update -p prometheus --precise 0.14.0
cargo audit  # Should show CVSS reduced

# RSA fix (choose one):
cargo update -p sqlx  # If upgrade available
# OR configure PostgreSQL-only (remove MySQL)

# Replace unmaintained crates:
cargo remove failure && cargo add anyhow
cargo remove backoff && cargo add tokio-retry

# 2. FIX TESTING (Agent 2: 15 min)
# Edit services/api_gateway/Cargo.toml:
# secrecy = { version = "0.8", features = ["serde"] }

# 3. FIX COMPILATION (Agent 3: 1 hour)
./fix_wave112_compilation.sh
# OR manual: 17 lines across 4 files

# 4. MEASURE BASELINE (Agent 4: 1 hour)
cargo llvm-cov --workspace --html --output-dir coverage_wave113

Gate: CVSS 0.0, tests compile, coverage measurable

---

HIGH PRIORITY (P1)

Days 4-7: Phase 2 - Service Foundation

Trading Service (Agent 5):

# Fix buffer capacity (30 min)
# market_data_ingestion.rs: 1000 → 1024
# risk_manager.rs: 500 → 512

# Fix PnL logic (1-2 days)
# Review position_manager.rs update_unrealized_pnl()

# Add ExecutionEngine tests (2 days)
# Target: 0% → 60% coverage

Compliance (Agent 6):

# Add compliance tests (3-4 days)
# audit_trails.rs: 0% → 60%
# sox_compliance.rs: 0% → 60%
# ComplianceService: 0% → 60%

ML Training (Agent 7):

# Fix async tests (5 min)
# Add #[tokio::test] to price_change, vwap tests

# Add training pipeline tests (2 days)
# Target: 0% → 40%

Other Services:

• Backtesting (Agent 8): Strategy + Performance + gRPC
• Risk Manager (Agent 9): 8% → 80%
• Auth/RBAC (Agent 10): 6.67% → 85%

Gate: 0 test failures, services 40-50%, compliance 60%+

---

MEDIUM PRIORITY (P2)

Days 8-14: Phase 3 - Coverage Expansion

Critical Paths:

• Data Ingestion (Agent 11): DBN, WebSocket, Benzinga → 70%
• Storage (Agent 12): S3 backend → 70%, errors → 60%
• Broker Integration (Agent 13): Routing → 70%, IC Markets/IB → 60%
• ML Deployment (Agent 14): Fix 252 errors, re-enable module
• ML Models (Agent 15): Implementations → 50%, ensemble → 50%

Gate: Workspace 70%+, all critical paths tested

---

OPTIMIZATION (P3)

Days 15-21: Phase 4 - Quality & Certification

Quality:

• Clippy (Agent 16): 4,909 → <500 warnings
• Performance (Agent 17): E2E P99 <500μs, >100K req/s
• Secrecy (Agent 18): Proper v0.10 migration

Certification:

• Final Coverage (Agent 19): 70% → 85%+ workspace
• Certification (Agent 20): Validate 9 criteria, 96%+ score

Gate: PRODUCTION CERTIFIED

---

KEY METRICS TRACKING

Metric	Wave 112	Target	Status
Security CVSS	5.9	0.0	Phase 1
Compilation	99.4%	100%	Phase 1
Service Coverage	5.3%	75%+	Phase 2-3
Workspace Coverage	29.8%	85%+	Phase 2-4
Compliance Coverage	0%	60%+	Phase 2
Test Failures	15	0	Phase 2
Clippy Warnings	4,909	<500	Phase 4
Readiness Score	92.1%	96%+	Phase 4

---

AGENT ASSIGNMENTS

Phase 1 (3-5 days, 4 agents)

1. Security vulnerabilities
2. Secrecy migration
3. Compilation fixes
4. Coverage baseline

Phase 2 (5-10 days, 6 agents)

5. Trading service tests
6. Compliance coverage
7. ML training tests
8. Backtesting foundation
9. Risk manager testing
10. Auth/RBAC validation

Phase 3 (5-10 days, 5 agents)

11. Data ingestion paths
12. Storage & persistence
13. Broker integration
14. ML deployment module
15. ML model implementations

Phase 4 (5-10 days, 5 agents)

16. Clippy critical warnings
17. E2E performance benchmarks
18. Secrecy v0.10 strategic migration
19. Final coverage push
20. Production certification

---

DECISION POINTS

Secrecy Migration

• Tactical (recommended for Wave 113): Downgrade to 0.8 (5 min)
• Strategic (defer to Wave 114): Proper v0.10 migration (2-4 hours)

RSA Vulnerability

• Option A: Upgrade sqlx (if available)
• Option B: Switch to PostgreSQL-only (remove MySQL)

Coverage Target

• Realistic: 85% workspace (accounts for generated code)
• Aspirational: 95% (unrealistic, only 85% achievable)

---

QUICK COMMANDS

Security Audit

cargo audit
cargo update -p prometheus --precise 0.14.0
cargo audit  # Verify fix

Coverage Measurement

cargo llvm-cov --workspace --html --output-dir coverage_wave113
open coverage_wave113/index.html

Compilation Fix

./fix_wave112_compilation.sh
# OR manually edit 4 files (17 lines total)

Test Execution

cargo test --workspace --all-features
cargo test --package trading_service
cargo test --package api_gateway

---

SUCCESS CHECKLIST

Phase 1 (Days 1-3):

• CVSS 0.0 (cargo audit clean)
• Secrecy downgraded to 0.8
• 18 test errors fixed (0 remaining)
• Coverage baseline measured

Phase 2 (Days 4-10):

• All 15 test failures resolved
• Services 40-50% coverage minimum
• Compliance 60%+ coverage
• Risk manager 80%+ coverage

Phase 3 (Days 11-17):

• Workspace 70%+ coverage
• Data ingestion 70%+ coverage
• Broker integration 70%+ coverage
• ML deployment operational (252 errors → 0)

Phase 4 (Days 18-21):

• Clippy <500 warnings (from 4,909)
• Performance P99 <500μs validated
• Workspace 85%+ coverage
• Production readiness 96%+ CERTIFIED

---

EMERGENCY CONTACTS

Blockers:

• Security: RSA vulnerability no direct fix → PostgreSQL-only
• Testing: Secrecy 0.10 too complex → Tactical downgrade
• Coverage: Can't reach 95% → Adjust to 85% realistic target

Escalation:

• If Phase 1 blocked >5 days → Re-evaluate approach
• If test failures reveal deep bugs → Allocate buffer time
• If coverage gaps worse than expected → Adjust targets

---

Wave 113 Quickstart | 96% Production Certified | Start: Phase 1 Day 1