Several reviewers per item, on purpose
The same item can be assigned to more than one reviewer, and "done" is tracked per reviewer.
- Why
- Agreement between independent experts is the only honest signal of how ambiguous the corpus is. Double review turns that into a consensus metric.
- Trade-off
- It costs reviewer time. Consensus reads 100% before anything has been double-reviewed (vacuously true), which the dashboard explains rather than hides.
C and D require a comment
Reconcile (C) and not-a-conflict (D) can't be saved without text.
- Why
- C's comment is the reconciled statement that goes back into the knowledge base. D overrides the detector, so it has to be defensible later.
- Trade-off
- A little friction on every C/D decision. A and B stay one click.
Append-only revisions and audit
Saves never update in place: each one appends a revision and an audit event.
- Why
- An edit from A to C means something different from an original C. Reviewers' second thoughts are data.
- Trade-off
- More rows and a "latest revision" query everywhere. Storage is cheap; lost history isn't recoverable.
An honest highlighter
Citations are fuzzy-matched against messy, OCR-ish document text. When a citation can't be located, the UI says so instead of guessing.
- Why
- Detectors sometimes cite text that appears in no document. A wrong highlight is worse than none, because reviewers trust what's lit up.
- Trade-off
- Some items show a "couldn't auto-locate" notice and the reviewer has to read more. Trust is worth the extra minute.
Invite-only, passwordless sign-in
Email one-time codes for a closed list of invited users, with tiered roles (super-admin > admin > reviewer).
- Why
- A small expert group doesn't need passwords to forget. Invitations are the access-control list.
- Trade-off
- Depends on email delivery. A dev-only impersonation bypass speeds up local work and throws if it ever runs in production.