Everything that changed.

An internal review found that client-supplied point values and member ids on the approval path could mint arbitrary points, and that a negative value could break the never-negative invariant. Both are being fixed before further surfaces are built.

Company site shipped on vinext with prerendered routes behind the Workers static-assets cache, and a command palette over every product, page and action.

The service was taken offline. The repository is preserved and the AES-256-GCM addressing model is documented on the product page as shipping history.

Five endpoints, one Durable Object per family, an idempotent queue consumer reconciling ledger events into D1, and a fifteen-minute cron sweep. Type checks and a deploy dry-run pass.

Five theme packs where canvas, ink, primary action, secondary action and focus move together. Guardrails written as testable rules: never colour as the only signal, never coral for destructive actions.

A billing dispute triggered a single-change migration: Firestore to Postgres, security rules to row-level security, Functions to Deno Edge Functions, and Firebase Hosting to Cloudflare Pages.