Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Android›Android QA — Sign-off·94 in this wave

Approve: Android QA sign-offTo do · blocker Decide how QA runs against a prod-only database before Kaitlynn's phone passTo do · blocker QA: Destination creation — all 14 typesBlocked QA: Destination launchpad and editingTo do QA: Delete account and sign outDone QA: Auth and onboarding — all six stepsBlocked QA: New destination category gridDone QA: Category source pickersDone QA: Website destinationDone QA: Link Hub destinationDone QA: Payment destinationDone QA: Menu destinationDone QA: Gallery destinationDone QA: Video destinationDone QA: Audio destinationDone QA: Note destinationDone QA: Document destinationDone QA: Wifi destinationDone QA: Bluetooth destinationDone QA: Form destinationBlocked QA: Action destinations — all 8 sub-typesBlocked QA: Shop cart and checkoutDone QA: DashboardDone QA: CanvasDone QA: Assets — all four tabsDone QA: Group and family launchpadsDone QA: Analytics — all six subpagesDone QA: QR generation and design editorDone QA: NFC encoder and launchpadTo do QA: Settings — all seven screensDone QA: AI agent and approvals inboxBlocked QA: ConnectCard and vCard buildersDone QA: ShopDone QA: Canvas node tap and launchpad (confirmed silent dead end)Done QA: Canvas search overlayDone QA: Assets — Triggers tabTo do QA: Assets — Destinations tabDone QA: Assets — Groups tabTo do QA: Assets — Families tabDone QA: Group launchpad screenTo do QA: Family launchpad screenBlocked QA: Analytics — Deep DiveDone QA: Analytics — CompareDone QA: Analytics — Real-timeDone QA: Analytics — GoalsDone QA: Analytics — DashboardsDone QA: Analytics — MapDone QA: Analytics — pickers and sheetsDone QA: QR logo cropperDone QA: QR code list reachability (confirm currently unreachable)Done QA: Trigger launchpad (Manage QR / Manage NFC Tag)To do QA: Settings root listDone QA: Profile settingsDone QA: Appearance settingsDone QA: Notifications settingsDone QA: Help CenterDone QA: Contact supportDone QA: Custom domain settingsDone QA: Profile photo crop screenDone QA: Agent sessions sheetDone QA: Shop home and product detailDone FIX: Payment destination — Just testing the QADone FIX: Form destination [Android] — same issue with the menu (safari can't open... message)Done FIX: Action destinations — all 8 sub-types [Android] — for facetime, when i enter the phone number or apple ID field, the…Done FIX: Destination creation — all 14 types [Android] — link and payments creation looks good. previewer for payments doesn't…Done FIX: Destination launchpad and editing [Android] — the launchpads need work to visually match branding better and just…To do FIX: Auth and onboarding — all six steps [Android] — i can't test thisBlocked FIX: Gallery destination [Android] — when i am selecting images to add, the blue button at the bottom of the…Done FIX: Audio destination [Android] — when i hit the record audio button, it needs to open the device's…Done FIX: Analytics — Real-time [Android] — the main widget on the real-time dashboard does not match the UI. it…Done FIX: Help Center [Android] — the annimation that happens when a question is expanded looks bad.…Done FIX: Assets — Families tab [Android] — visually each family needs to be in a card to match the styling of…Done FIX: Analytics — all six subpages [Android] — map is totally messed up. when i select map from the list of dashboard…Done FIX: Contact support [Android] — when i hit the compose email button it opens the email but it should…Done FIX: Analytics — Map [Android] — seems totally broken. the map takes over the whole screen right now and…Done FIX: Assets — Triggers tab [Android] — the trigger groups listed at the top of the list of triggers still need…Done FIX: Help Center [Android] — the fix worked. now hide the troubleshooting section. hide the…Done FIX: Audio destination [Android] — still won't let me record auidoDone FIX: AI agent and approvals inbox [Android] — after asking it to make a red qr code then asking it to connect it to a…Done FIX: Assets — Groups tab [Android] — there is no group tab, since groups are listed at the top of the…To do FIX: Trigger launchpad (Manage QR / Manage NFC Tag) [Android] — looks pretty good for now i guess. however when i hit edit for any…To do FIX: Group launchpad screen [Android] — there currently is no group launchpad. that needs to be created.To do FIX: Family launchpad screen [Android] — remove the schedule section from family launchpad. there is no timeline…Done FIX: AI agent and approvals inbox [Android] — seems like nothing happens when i hit reject, tweak, or approve. no…Done Android Preview fires a real webhook — make destination preview side-effect-freeDone FIX: Destination creation — all 14 types [Android] — gallery looks good. the venmo payment preview looks ok but when i hit…Done FIX: Family launchpad screen [Android] — i need to be able to close the keyboard by sliding it down and tapping…Done FIX: Assets — Triggers tab [Android] — looks good. there needs to be a manage group page like there is for a…To do QA: Android analytics 24h chart groups scans by the hourBlocked QA: Android goal editor offers a Daily repeatBlocked QA: Android Free account sees upgrade cards on every Analytics pageBlocked QA: Android AI Insights asks a Plus account to upgrade to ProBlocked QA: Android AI agent draws a failed step with a red mark, not a green checkBlocked QA: Android Program NFC still recognises a normal TacTile stickerBlocked

Wave

Android QA — Sign-off

Page-by-page human sign-off on PHONE ONLY. Owner Kaitlynn, gate Matthew. Tablet verification is a separate later wave (Android QA — Tablet), because phone must prove the backend and feature logic before any tablet effort. All 16 checks were rewritten to phone-only on 2026-07-26.

TacTile › Launch TacTile › Android › Android QA — Sign-off

68/94 done26 open2 open blockers

Selected taskclear

Decide how QA runs against a prod-only database before Kaitlynn's phone pass

To doOwner · met_68803c02Blocker

The Android debug build writes to the production database, which has no backups. Needs a decision on how the QA pass runs, not an engineering fix.

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Decide how QA runs against a prod-only database before Kaitlynn's phone pass** · to do · blocker

The Android debug build writes to the production database, which has no backups. Needs a decision on how the QA pass runs, not an engineering fix.

Where it sits: TacTile › Launch TacTile › Android › Android QA — Sign-off

## The brief on file

[eod 1 Oct 2026 — DECISION for Matthew, read this first] (was owner: ai)
Decision: Accept that QA, demo data and the gallery/video/audio/documents verification writes run on the backup-less production DB, on labelled QA accounts?
Recommend: Yes — after a verified dump exists (today's backup attempt failed; see t_665ad7fa run-list note) — and revisit before any external beta.
Why: It is already the de-facto state: Kaitlynn's candidates talk to prod, staging shares the prod DB, and you declined Pro on 30 Sep; the run script deletes only hashes it created.
Cost/risk: No money; deletes are scoped but irreversible on a DB with no backups; the script is untested, so Viv dry-reads it first.
If no: Gallery/video PATCH and audio/documents reads stay proven only by mocks; "Approve: Backend API" (28 dependents) can't fully go green.
Needs from Matthew: A yes.
[/eod]

STILL UNANSWERED since round 4, and it now blocks THREE things rather than one. Raising it again with what changed.

THE QUESTION IS UNCHANGED: QA and demo data would be written to the production database, which has pitr_enabled: false and zero stored backups (verified against the Supabase Management API 2026-07-28). There is no staging DB — branching needs a paid plan (t_a2ccb527) and staging-api.tactile.to's Supabase secrets come from the same 1Password item as prod (wrangler.toml:216-218).

WHAT NOW DEPENDS ON IT:
1. Kaitlynn's QA pass (w_4e1d3ad0) — 58 tasks, untouched since 2026-07-27.
2. Play screenshots (t_640bb552) — the account is empty, so captures show "No triggers yet" and a flat chart. Unshippable.
3. Any external beta.

WHAT ROUND 7 FIXED so this is no longer ALSO a silent-default problem: scripts/android/wire-local-config.sh:19 used to default SUPABASE_REST_URL to the production project ref, so anyone running it the documented way got a prod-writing build without being told. That default is gone — the variable is required, and pointing at prod now needs an explicit ALLOW_PROD_DB. CI has the same guard. The tooling can no longer choose prod FOR you; it can only make you choose.

So the remaining decision is purely yours: (a) accept prod for QA/demo on a clearly-labelled account, (b) resolve t_a2ccb527 first, or (c) something narrower.

Recommendation unchanged: (a) now, (b) before any external beta.

[2026-09-27 restart audit] Stale premise: Kaitlynn's Android QA pass is active (same-day fix/retest loop 2026-09-21/22), not untouched since 2026-07-27.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Android QA — Sign-off

Decide how QA runs against a prod-only database before Kaitlynn's phone pass