Deck
Everything Nova has teed up. A task with a complete brief is on deck — ready to fire in Cowork. A bare idea is still a draft, waiting on a brief.
01
JEJust Electrolyte · Sol
Kick off a JE marketing & advertising session
Dedicated JE session, marketing and advertising only. Open in ~/Command/just-electrolyte/ so Sol loads.
To do
02
RTRelease Timer · Piper
good-night design check parses only HSL tokens — hex-form token files resolve to zero
Shared-runner gap found during the 2026-07-25 /good-night run. release-timer's first successful nightly produced 136 escalations, 126 of them design findings — all false positives caused by this. Not a release-timer-only bug; filed here because this is where it surfaced.
To do
03
TtTacTile · Viv
web-mobile staging has no DNS record — the worker has been deploying into the void
Blocked
04
TtTacTile · Viv
QR parity: 15 snapshot fields have no control on either web surface, and none are documented as deliberate
Blocked
05
TtTacTile · Viv
ESCALATE → Matthew: 13 critical secrets 31-57 days overdue, hidden because verify short-circuits and CI is down
To do
06
TtTacTile · Viv
MATTHEW — irreversible before first Play upload: the signing cert says "TapTile Inc"
To do
07
TtTacTile · Viv
SPEC → backend: checkout returns every buyer to ONE origin, so app.tactile-connect.com buyers land on tactile.to
To do
08
TtTacTile · Viv
ROUND 9 · SESSION — Android + Web: finish the listing, finish QR
To do
09
TtTacTile · Viv
Decide the triggers for the 6 system error screens — all are unreachable
All six system sheets (loading, no internet, server error, scan failed, scan permissions, action not found) are built and wired into RootView but nothing ever triggers them. Needs a product decision on what each should respond to before anyone wires them.
To do
10
TtTacTile · Viv
web-mobile: send return_origin on checkout and the portal, or buyers still land on tactile.to (follow-up to t_4fefd007)
The API half of t_4fefd007 is PR #703 (draft): POST /api/billing/checkout and /portal accept an optional return_origin and honour it only if it exactly equals an origin in utils/cors.ts. No client sends it, so merging #703 changes nothing for a real buyer. This task is the client half and is what actually fixes the user-visible defect. Keep t_4fefd007 open until this ships.
To do
11
TtTacTile · Viv
QR picker reuses the DESTINATION filter panel — wrong content, unscrollable
QRPickerView drives DestinationFilterViewModel/ActionFilterPanel, so picking a QR code offers "Search destinations" and a grid of 13 destination types. The panel also cannot be scrolled, so Sort By is cut off.
To do
12
TtTacTile · Viv
DEFERRED: rotation night + Supabase key migration moved to launch prep (Matthew, 30 Sep)
To do
13
TtTacTile · Viv
Billing reinstate serves Pro-only custom domains to a Plus re-subscriber
Found 2 Oct overnight while tracing PR #702. In apps/api/tactile-api/src/routes/billing.ts, the reinstate on an active/trialing subscription event has no plan-tier check, and verifyHost serves on status=active alone. A customer whose Pro subscription lapsed (domain billing-suspended) who re-subscribes at Plus gets the Pro-only custom domain reinstated and serving. A related gap is listed in #702: account deletion cascades custom_domains rows away, which bypasses both the suspension hold and the 30-day cooldown.
To do
14
TtTacTile · Viv
Merge-order trap: #759's migration-order rule 3 flags open PRs whose migration sorts before main's newest (202610052300); #699 first
PR #759 (c05709c4) adds tests/unit/supabase-migrations-order.test.ts. Rule 3 requires every migration a PR adds to sort after the newest one at the merge-base (main today: 202610052300_revoke_anon_resolve_trigger_destination.sql). Six open PRs add older-dated migrations, including #699 under the #702 stack. Found by the r32 safety reader of t_3ef8ebe2.
To do
15
AtAthletic · Cadence
Recover matthewkvamme.com into source control + edit the wishlist
The public athlete site has no repo anywhere — Cloudflare Pages project 'matthewkvamme', source:null, direct upload, last deployed 2026-07-04. Products live in D1 'mk-kit'. Full brief at ~/Command/cycling/ON-DECK-recover-public-site.md
To do