Refresh GitHub README

Author: shayons

README.md

@@ -3,12 +3,13 @@
 Reference application for **Build stateful agentic AI workflows with Aurora, MCP, and AgentCore**.
 
 <p align="center">
+  <a href="https://github.com/aws-samples/sample-stateful-agentic-ai-workflows-aurora-mcp-agentcore/actions/workflows/application-ci.yml"><img alt="Application CI" src="https://github.com/aws-samples/sample-stateful-agentic-ai-workflows-aurora-mcp-agentcore/actions/workflows/application-ci.yml/badge.svg?branch=main&style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT-0" src="https://img.shields.io/badge/License-MIT--0-2EA44F?style=flat-square"></a>
+  <img alt="Python 3.11+" src="https://img.shields.io/badge/Python-3.11%2B-3776AB?style=flat-square&logo=python&logoColor=white">
+  <img alt="Node.js 20+" src="https://img.shields.io/badge/Node.js-20%2B-339933?style=flat-square&logo=nodedotjs&logoColor=white">
   <img alt="Amazon Aurora PostgreSQL 18+" src="https://img.shields.io/badge/Amazon_Aurora-PostgreSQL_18%2B-527FFF?style=flat-square&labelColor=232F3E">
   <img alt="Amazon Bedrock AgentCore" src="https://img.shields.io/badge/Amazon_Bedrock-AgentCore-FF9900?style=flat-square&labelColor=232F3E">
-  <img alt="Claude Sonnet 5" src="https://img.shields.io/badge/Claude-Sonnet_5-191919?style=flat-square&logo=anthropic&logoColor=white">
-  <img alt="Model Context Protocol" src="https://img.shields.io/badge/MCP-Model_Context_Protocol-000000?style=flat-square&logo=modelcontextprotocol&logoColor=white">
-  <img alt="LangGraph StateGraph" src="https://img.shields.io/badge/LangGraph-StateGraph-1C3C3C?style=flat-square&logo=langchain&logoColor=white">
+  <img alt="Model Context Protocol" src="https://img.shields.io/badge/MCP-Model_Context_Protocol-000000?style=flat-square">
 </p>
 
 Meridian is a realistic agentic travel concierge operating on live relational
@@ -27,7 +28,7 @@ security, audit trails, and checkpoints keep every turn governed and resilient.
 
 <p align="center"><sub>Live Aurora results pair realistic trip cards with disruption recovery, traveler context, and inspectable system proof.</sub></p>
 
-**[Quick start](#quick-start)** · **[Five-phase architecture](#what-it-demonstrates)** · **[Stateful architecture](meridian/docs/STATEFUL_ARCHITECTURE.md)** · **[Demo script](meridian/DEMO_SCRIPT.md)** · **[Presenter guide](meridian/docs/PRESENTER_GUIDE.md)**
+**[Quick start](#quick-start)** · **[Five-phase architecture](#what-it-demonstrates)** · **[Stateful architecture](meridian/docs/STATEFUL_ARCHITECTURE.md)** · **[Validation](#validation)** · **[Demo script](meridian/DEMO_SCRIPT.md)** · **[Presenter guide](meridian/docs/PRESENTER_GUIDE.md)**
 
 ## What It Demonstrates
 
@@ -65,11 +66,12 @@ The runnable application lives in [`meridian/`](meridian/).
 cd meridian
 python -m venv venv
 source venv/bin/activate
-pip install -r requirements.txt
+python -m pip install --require-hashes -r requirements.txt
 
 cp .env.example .env
 # Fill in Aurora cluster ARN, secret ARN, database, and AWS region.
 
+# Fresh or disposable database only: rebuilds the base schema.
 python scripts/init_aurora_schema.py
 python scripts/seed_data.py
 
@@ -80,19 +82,21 @@ uvicorn backend.main:app --reload --port 8000
 
 ```bash
 cd meridian/frontend
-npm install
+npm ci
 npm run dev
 ```
 
 Open [`http://localhost:5173/showcase`](http://localhost:5173/showcase). The
-root route redirects to the showcase.
+root route redirects to the showcase. For an existing database, do not rerun
+`init_aurora_schema.py`; apply tracked upgrades with
+`python scripts/apply_migrations.py`.
 
 ## Demo Surfaces
 
 | Surface | Route | Purpose |
 | ------- | ----- | ------- |
 | Meridian Showcase | `/showcase` | Primary live experience and system-proof surface |
-| Meridian Pro | `/pro` | Supporting architecture and builder walkthrough |
+| Demo Stage | `/demo-stage`, `/stage` | Kiosk loop and presenter playback |
 
 ## Documentation
 
@@ -102,6 +106,7 @@ root route redirects to the showcase.
 | [meridian/DEMO_SCRIPT.md](meridian/DEMO_SCRIPT.md) | Extended demo script and optional code walkthrough |
 | [meridian/docs/PRESENTER_GUIDE.md](meridian/docs/PRESENTER_GUIDE.md) | Concise run of show, claim boundaries, and readiness checklist |
 | [meridian/docs/OPERATIONS.md](meridian/docs/OPERATIONS.md) | AgentCore deployment and day-of operations |
+| [meridian/docs/STATEFUL_ARCHITECTURE.md](meridian/docs/STATEFUL_ARCHITECTURE.md) | Durable-state, transport, and checkpoint architecture |
 | [CONTRIBUTING.md](CONTRIBUTING.md) | Contribution guidelines |
 
 ## Tech Stack
@@ -110,10 +115,39 @@ root route redirects to the showcase.
 - **Backend:** FastAPI, Strands Agents, LangGraph
 - **Models:** Claude Sonnet 5 on Amazon Bedrock, Cohere Embed v4, Cohere Rerank 3.5
 - **Data:** Aurora PostgreSQL 18+, pgvector, RDS Data API, pooled psycopg, identity bindings, Row-Level Security
-- **Protocols and services:** Model Context Protocol, Bedrock AgentCore Runtime, Gateway, Memory, and Identity
+- **Protocols and services:** Model Context Protocol, Bedrock AgentCore Runtime, Gateway, Memory, and IAM or AgentCore workload identity
 
 This sample authorizes AWS or AgentCore workload identities. A shared hosted
 application must also authenticate its end users and bind the verified user
 subject, such as a Cognito `sub`, to the traveler record. Apply your
 organization's networking, observability, availability, and governance
 requirements before production use.
+
+## Validation
+
+The GitHub Actions workflow runs backend, frontend, and AgentCore CDK checks on
+every push to `main`. Run the same commands locally:
+
+```bash
+cd meridian
+source venv/bin/activate
+python -m pytest
+python -m pip_audit -r requirements.txt
+```
+
+```bash
+cd meridian/frontend
+npm ci
+npm run lint
+npm run test:run
+npm run build
+npm audit --audit-level=high
+```
+
+```bash
+cd meridian/meridian_agentcore/agentcore/cdk
+npm ci
+npm run build
+npm test -- --runInBand
+npm run format:check
+```