|
|
@@ -677,6 +677,7 @@ Configure HTTP security headers at the Caddy reverse proxy level (not in next.co
|
|
|
- [ ] 9.18 — Docker security test: verify Kong/Postgres ports not accessible from host; verify Studio not publicly accessible; verify all default Supabase secrets have been replaced; verify Caddy TLS certificates persist across container restart
|
|
|
- [ ] 9.19 — Backup test: verify pg_dump backup runs daily; test restore procedure
|
|
|
- [ ] 9.20 — Sign-out test: verify sign-out clears the Supabase session cookie and redirects to landing page; verify signed-out user cannot access authenticated routes; verify sign-out control is distinct from `/api/admin/logout`; confirm no anonymous-account warning dialog appears (per 5.9 decision). NOTE: manual click-through verification was performed against the dev server in the 5.9 implementation round; no automated Playwright e2e test was added. This task remains open until automated coverage is in place.
|
|
|
+- [ ] 9.21 — Realtime capacity review: before launch, consult `research/TECHFILE.md` "Realtime Scaling Limits" section and assess whether projected concurrent users approach any documented capacity trigger (CPU >70%, WAL growth, p95 broadcast latency). No action required if projections are well below thresholds; document the assessment outcome here.
|
|
|
|
|
|
### Phase 10: Launch (June 22 - July 5, 2026) — Full Feature Complete
|
|
|
|
|
|
@@ -776,4 +777,5 @@ _Features added after initial scope. Complete current Implementation Plan progre
|
|
|
|
|
|
| Date | Summary |
|
|
|
| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
|
+| 2026-05-08 | Added task 9.21 — Realtime capacity review referencing `research/TECHFILE.md` "Realtime Scaling Limits" section (documented 2026-05-08, commit 8444d3d). No content duplicated; task is a pre-launch assessment gate only. |
|
|
|
| 2026-05-07 | Walkthrough audit: marked complete — 1.1–1.5, 1.8, 1.9, 2.1–2.3, 3.1–3.3, 3.5, 5.5. Kept open — 1.7 (production deploy pending; code done locally), 5.8 (no server deploy yet). Added known bug to 3.8: real-time UPDATE events for watched state don't propagate to other clients. Added partial gap to 5.6: offline search shows false-empty instead of error. Sub-todo on 1.1: pre-push hook not yet wired. Phase 4 and Phases 6–10 unchanged. |
|
User