M MemberIntel KB
Activity Decisions

standup

Standup — 2026-07-23

The Pillar-3 release pipeline closed its loop today.

▶ Watch the 48s summary — Daily standup — Standup 2026-07-23

Daily standup for 2026-07-23. What shipped:

The Pillar-3 release pipeline closed its loop today. #620 merged the POST /internal/plugin-releases backend endpoint (Task 3.1), and #617 merged the full CI workflow — build → KMS-sign → GCS upload → publish. The endpoint enforces immutability: identical artifact is idempotent, divergent artifact (same version+channel, different bytes) returns 409. Auth is a dedicated INTERNAL_OIDC_RELEASE_CI_SAS allowlist, scoped to this endpoint only, wired in #621.

#628 quietly dropped beta from the release workflow’s channel dropdown — the backend already hard-rejects channel=beta with 422 until Task 3.2 ships promotion tooling, so removing the option prevents a workflow_dispatch that’s guaranteed to fail mid-run.

Platform connectors expanded. #571 merged the MemberMouse module — the first connector implementing both Billing_Module and Engagement_Module in one class, reading mm_* tables via MM_TABLE_* constants (correct on legacy-DB installs). #625 patched the playbook review-gate vocab to include cross-platform vendors, which was blocking all non-MemberPress content PRs from passing the gate. The 17-entry BuddyBoss community-ops batch (#574) and the re-reviewed 23-entry EDD batch (#590) both merged after that fix landed.

Plugin security and chat also moved. #615 shipped /update-check and /download (Tasks 1.2 + 1.3). #613 wired HMAC signing across all five plugin routes (Pillar-4, 1.12.0). #611 fixed a deeper connect bug: the manual API-key path was hardcoding integrations=["memberpress"] regardless of what’s installed, and the known-platform vocab set in integrations.py silently dropped any non-MemberPress value.

Notable. The EDD batch was merged before Copilot/Bugbot finished their review pass, those reviews landed post-merge, and only 2 of 23 files could be re-reviewed in-place. The batch was reverted (#589) and resubmitted as a single PR (#590) with all fixes baked in. The revert-and-redo adds latency but is the right call — 23 files reviewed piecemeal post-merge is not a review.


Window: 2026-07-22T13:00

→ 2026-07-23T13:37
.429Z · Sources: memberintel @ 2ee32cd, memberpress-intel @ da84572

For: S Seth Shoultes