Changelog

2026-06-21 - Production hardening branch

• - Tenant isolation hardened for project-scoped MCP tools, browser routes, API keys, documents, and repo access.
• - Public trust surface added for overview, docs, pricing, privacy, security, support, Claude connector, AI guidance, robots, and sitemap.
• - Claude connector review packet added with OAuth metadata, reviewer prompts, tool annotations, and safety evidence.
• - Durable database-backed rate limiting added for public auth and support flows.
• - Production health, smoke, monitor, backup drill, email deliverability, and Stripe billing verification commands added.
• - Production signup now fails closed after first-user bootstrap unless self-serve signup is explicitly enabled with Stripe billing configured.

Billing status

Stripe checkout, customer portal, webhook verification, subscription sync, and entitlement enforcement are implemented behind environment gates. Public self-serve billing remains gated until Stripe configuration and the signed webhook replay check pass on the production host.

Connector status

TaskFlow is being prepared as a hosted remote MCP connector for AI-agent work state. The first public path is a design-partner beta with reviewer credentials provided out of band and normal signup kept invite-only.