Go-live readiness: verified gaps audit + launch-hardening work #4086 — ccantynz/alecrae.com

Originally written by @ccantynz-alt on GitHub.
Imported from https://github.com/ccantynz-alt/AlecRae.com/pull/45

What this is

A code-audited, dated assessment of how far AlecRae is from public launch, plus launch-hardening work that closes the real code gaps the audit found.

Landed so far

GO_LIVE_GAPS.md — verified 2026-06-07, supersedes the stale LAUNCH_READINESS.md (2026-05-08, last build-verified 2026-04-24).

Verified ground truth

Code is genuinely feature-complete and DB-backed (66 Drizzle schemas, real auth, ~90% billing, ~95% org/team/SSO/admin).
Zero infrastructure is provisioned — this, not code, is the launch blocker. "100% complete" was true for code, false for operational.

Incoming commits (in-flight, separate commit)

Launch-hardening from a parallel agent fleet:

Preflight env + connectivity validator (scripts/preflight.ts)
Stripe dunning / failed-payment retry state machine
GDPR DPA self-serve signing workflow (enterprise gate)
k6 load-test harness wired to performance budgets
Plus audit reports: build verification, security review, OAuth/AI-fallback completeness, bundle-budget check

Critical path (Craig)

The fastest path to a live URL is the infra checklist in GO_LIVE_GAPS.md (~3 hrs): Neon, Upstash, Meilisearch, Stripe, Anthropic/OpenAI keys, Google/Microsoft OAuth, DNS cutover. SOC 2 is the long pole for enterprise sales and should start now in parallel.

Draft until the in-flight hardening work is integrated and the full build passes.

https://claude.ai/code/session_01CQjWseikSJdamHS8W6Kygz

Generated by Claude Code