JV Match

Status

Production readiness.

Observability wiring, transactional email verification, go-live checklist, and compliance boundaries review.

Production readiness

Observability wiring, email verification, go-live checklist status, and compliance marketing review. Core RLS + secrets clear when env is set; intentional locks (live distributions, partner-default insurance) stay off. Optional Stripe/Sentry/PostHog/Upstash remain feature-gated.

Checklist complete: true · Code P0 blockers: 0 · Ready for go-live traffic: true

Observability

  • Sentry configured: falseSENTRY_DSN not set. Error monitoring remains disabled. EXTERNAL DEPENDENCY.
  • PostHog configured: falseNEXT_PUBLIC_POSTHOG_KEY not set. Product analytics disabled.
  • Resend state: CONFIGURED (verified: true) — Resend transactional email configured (official api.resend.com). Ready to send when invoked. Recipient must still resolve via Supabase Auth.

Go-live checklist items

  • Live investor distributions disabled · pass · P0live_distributions remains disabled.
  • CSP / security headers configured · pass · P0buildSecurityHeaders applied via next.config.ts.
  • Stripe webhook signature verification · pass · P0verifyStripeWebhook + gateWebhookIntake on /api/billing/webhook.
  • Sentry wired · warn · P1SENTRY_DSN not set. Error monitoring remains disabled. EXTERNAL DEPENDENCY.
  • PostHog wired · warn · P1NEXT_PUBLIC_POSTHOG_KEY not set. Product analytics disabled.
  • Resend transactional email verified · pass · P0Resend transactional email configured (official api.resend.com). Ready to send when invoked. Recipient must still resolve via Supabase Auth.
  • Production env documented · pass · infoSee docs/PRODUCTION_ENV.md and .env.example.
  • Backup/restore documented · pass · infoSee docs/runbooks/backup-restore.md.
  • Incident basics documented · pass · infoSee docs/runbooks/incident-response.md.
  • Apply reviewed RLS policies in Supabase · pass · P0RLS go-live applied on dedicated jv-match project (see docs/SUPABASE_PROJECT.md).
  • Set production secrets · pass · P0Core DATABASE_URL + Supabase keys present. Optional Stripe/Sentry/PostHog/Resend/Upstash remain feature-gated.
  • Multi-instance rate limit store · pass · P1Upstash Redis REST configured for distributed rate limits.

Operational gates cleared for core Supabase + RLS.

Compliance marketing claims

Review passed: true · scanned 6 snippets · docs/COMPLIANCE_BOUNDARIES.md