Standup — 2026-05-22

Daily standup for 2026-05-22. What shipped:

Admin foundation spec and implementation plan landed. The account-lookup admin design spec defines a CF Access-gated operator SPA at admin.membersintel.com — user search, account detail, four write actions (password reset, email change, tier, resend verification), and an escalation queue. The JWT versioning + audit log plan sequences that foundation into two PRs: PR 1 adds users.jwt_version and the jwtv claim; PR 2 adds admin_audit_log and the log_admin_action helper.

Auth approach simplified. The spec dropped the polyglot bearer-JWT fallback (c357898). Admin endpoints now have one path: CF Access JWT verification. Browser sessions get it from the Access cookie; the CLI migrates to a service token (a Cloudflare dashboard provisioning step, ~10 lines of script change). Eliminates a class of phishable high-value artifacts.

JWT versioning shipped. #126 wired the jwtv claim and the version check in get_current_user. Missing claim is treated as version 0 — existing tokens keep working without a reissue.

Feedback / escalation cluster. A run of work landed across #116–#123:

• Thumbs-down now captures optional category + reason
• Eval-set capture and regression-replay eval over 👎 rows
• escalate_to_human LLM tool + escalation queue, with three follow-on fixes to the banner copy and tool description
• Escalation review endpoints + CLI
• Scheduled regression-replay sweep + runbook

Standup bot. #7 merged — PR mentions in daily and weekly standups are now markdown links. Post-processor is idempotent; 10 new tests; 138/138 passing.

Notable. Today’s run revealed two real bugs in the standup pipeline itself: the v1-repo PR fetch had been silently failing (token scope), so the LLM was hallucinating URLs against this KB repo. And the LLM was treating doc source paths from the activity blob as if they were deployed KB URLs. Both fixed in a follow-up PR — commit-message fallback for PR discovery, strict URL hardening, defensive doc-link stripping.

---

Window: 2026-05-21T13:00

→ 2026-05-22T13:01

.084Z · Sources: memberintel @ 98890b6, memberpress-intel @ afd9790 · Manually corrected 2026-05-22: rewrote PR URLs to memberintel repo, stripped broken doc-source links, appended Notable paragraph documenting the pipeline fix.