Q114: goal audits use the org's own auditor model and see pointers, not the executor's account

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/shared/desktop-api.ts

@@ -172,6 +172,7 @@ export interface DesktopApi {
   checkProviderModel(input: { orgId: string; providerId: string; model: string }): Promise<DesktopResult<ModelCheckResult>>;
   updateProviderPolicy(input: UpdateProviderPolicyInput): Promise<DesktopResult<AppSnapshot>>;
   setProviderPrices(input: SetProviderPricesInput): Promise<DesktopResult<AppSnapshot>>;
+  setGoalAuditor(input: { orgId: string; providerId: string; modelId: string }): Promise<DesktopResult<AppSnapshot>>;
   openExternalUrl(url: string): Promise<DesktopResult<null>>;
   createProviderResponse(input: CreateProviderResponseInput): Promise<DesktopResult<AppSnapshot>>;
   streamProviderResponse(input: StreamProviderResponseInput): Promise<DesktopResult<AppSnapshot>>;

src/shared/domain.ts

@@ -45,6 +45,9 @@ export interface OrganizationRecord {
   executionMode: string;
   autoApproveHires: boolean;
   reviewDeliverables: boolean;
+  /** The provider and model that audit goal completion, never the executor's own; null until the board sets them. */
+  auditProviderId: string | null;
+  auditModelId: string | null;
   createdAt: string;
 }
 

src/shared/ipc.ts

@@ -35,6 +35,7 @@ export const IPC_CHANNELS = {
   checkProviderModel: "agentcompany:check-provider-model",
   updateProviderPolicy: "agentcompany:update-provider-policy",
   setProviderPrices: "agentcompany:set-provider-prices",
+  setGoalAuditor: "agentcompany:set-goal-auditor",
   openExternalUrl: "agentcompany:open-external-url",
   createProviderResponse: "agentcompany:create-provider-response",
   streamProviderResponse: "agentcompany:stream-provider-response",