Everything we build.
Every day.
In public.

Took over Closer backend audit from Codex: reviewed history, reconciled folders, inventoried unwired code (~2.6K lines parked), replaced open-ended 14-area audit with a pilot-readiness gate (security A1-A9 + M8 journeys B1-B7) · Security attack-surface inventory of ~135 entrypoints with ranked risks (RLS bypassed in prod, unauth sidecar crash, capture IDOR, fail-open env, admin/billing gating)

Full dashboard reporting audit: 3-layer trace, live prod verification, 15 defects confirmed — headline: Completed Registrations displayed ~2x actual (63 vs 32) · Staging environment at staging.sparkacademymorton.com: isolated D1/KV (fixed preview env writing to prod data), NOTIFY_EMAIL routing to testable inbox, branch-alias DNS, noindex

Phase 3 e2e completion: verified meal-photo approval loop; fixed iOS phone-auth custom URL scheme crash and coach invite-sheet RenderFlex overflow · Phase 4 dynamic trainer identity (de-Bret): ~40 hardcoded 'Bret' strings across Flutter + Cloud Functions rewritten, CurrentCoach now hydrates live from trainerDirectory, new coachIdentity.ts helper fixes cross-tenant push-copy leak, Theo Live voice prompt de-Bret + pronoun scrub, grep gate clean

Billing system architecture plan: grounded codebase research (2 explore agents mapping enforcement points), 31-decision technical spec · Phases 1-3: Stripe foundation (migration 0027, DB accessors), signature-verified idempotent webhook state machine, 3-layer suspension enforcement (API 402, publish-boundary drop, self-parking workers)

Sprint plan: 8 raw ideas -> 9-phase implementation plan, built from a 4-agent codebase audit · True-cost (COGS) model: verified pricing for Fly/Neon/Clerk/Vercel/Inngest/R2/AssemblyAI/DeepSeek, scaled to 10/20/50/100 agents and 5/10/20 dealerships

Reskinned Alpha Strength into a mobile-first class tracker UI with strength/cardio tabs, focused setup flow, branded assets, and improved exercise picking. · Built strength and cardio tracking workflows with max entry, percentage breakdowns, best-time logging, recent history, delete confirmation, and refresh-safe selected exercise state.

Redesigned the Closer iPad capture app: 3 sandbox concept directions, picked Glass Sibling, refined to rev-2 (discreet recording welcome-mat + session bar, dock, tagline) · Ported the agent app to SwiftUI: GlassTheme tokens, role-gated app shell, discreet capture states, list-first client rolodex (list -> full-screen profile), legacy testing-layout behind a wrench toggle

Sprint 3B follow-up drafter: finalize-time AI cadence ghostwriting (day-0/2/5/10 email/text/call in the salesperson's voice, grounded in transcript + close_path/personal_context insights) → existing follow_ups table, migration 0015, shared Zod contracts, orchestrator wiring, FOLLOW_UP_DRAFT_MODEL override, 10 unit tests · Sprint 3B rolodex + lead-lifecycle API (:3002 sidecar): rolodex list, lead detail (identity/history/facts/vehicles/insights/decrypted drafts), follow-up status transitions, lead won/lost/reopen, remind-me (presets + exact-day picker), reassign, roster, redraft — with attribution_events + fail-closed auth + route tests

Phase N.2 vehicle threading: extraction schema v1.1 vehicles[] (engagement ladder, per-participant reactions, prices, eliminations) across all 5 finalize providers; conversation_vehicles persistence; flat vehicle_preferences derived from top candidate; rolling currently_discussing end-to-end (migration 0013) · Phase N.3 Insight Analyst: full-transcript reasoning pass → conversation_insights with evidence hard-gate + 'no insight' legal output; presence-gated periodic cadence via manager_presence heartbeats (migration 0014); finalize + catch-up-on-connect + brief-me/insights/detail sidecar endpoints; Sonnet default w/ DeepSeek Reasoner route for N.5 A/B