standup
Weekly — week of 2026-07-13
Four major systems shipped this week — billing, brain safety, admin redesign, and observability — alongside a string of fixes that each revealed a deeper proble
▶ Watch the 1:09 summary — Weekly status — Week of 2026-07-13
Weekly digest for the week of 2026-07-07 → 2026-07-13. What shipped:
Four major systems shipped this week — billing, brain safety, admin redesign, and observability — alongside a string of fixes that each revealed a deeper problem than the one originally filed.
Billing went end-to-end. #299–#308 landed the full Stripe Pro stack: checkout, idempotent webhook, customer-mapping recovery, self-serve portal, daily reconciliation backstop, dunning banner, and lifecycle emails. The 14-day MemberPress trial (#349) and per-additional-site pricing (#343/#344) layered on top. Prod go-live is still gated on counsel sign-off. Several quiet billing bugs were closed en route: empty email footer hosts across five transactional templates (#317), missed-webhook rows not getting terminal-status refreshes (#320), and a $0 invoice trap that would have misfired the payment_received email on trial start (#349).
Brain citations changed shape. ADR-0033 (superseding ADR-0029) pulled brain/playbook material out of member-visible citations entirely — it informs answers but doesn’t surface as a named source. #332 closed the related distillation hole where POST /api/v1/search was still member-reachable and returning raw brain content. The retrieval-event log (#310, ADR-0032) now records every candidate per answer — rank, score, surfaced, cited — distinguishing “was in the top-k” from “the model actually wrote [n].” Six ADR pages (0019–0024) were missing from the KB entirely since mid-May due to a regex variant in the sync script; all 33 ADR pages now sync and are indexed into RAG.
Admin redesign started shipping. #350 laid the mi-* token foundation — dark collapsible sidebar, top bar, ⌘K scaffold — with legacy screens coexisting inside the new chrome until individually reskinned. Users, Escalations, Entry Performance, and Audit Log all moved onto mi-* this week (#363, #364, #368, #375).
Cost control and observability went in together. The LLM circuit breaker (#381) enforces a daily spend ceiling fail-closed at the call.py chokepoint. The admin Cost controls panel (#384) and status endpoint with degraded banner (#386) sit on top of it. #400/#401 added structured LLM metrics and a Health page with a job_runs audit table; stripe-reconcile got its first exception handling as a side effect. Two entitlement race conditions were closed: streaming quota commits were going into a request-scoped session that rolls back on disconnect (#396), and a lost-update plus concurrent IntegrityError in the same service were consolidated into a single INSERT ... ON CONFLICT DO UPDATE WHERE ... RETURNING (#397).
Notable. The streaming-quota race (#396) was masked in new conversations because get_or_create_conversation incidentally committed the session. The exposure was the majority of real turns — existing conversations, which are the common case — not the edge case the code path implied. It was caught during code review of the fix, not in production.
Synthesized from 6 daily standups in [2026-07-07, 2026-07-13].