Standup — 2026-08-06

▶ Watch the 59s summary — Daily standup — Standup 2026-08-06

Daily standup for 2026-08-06. What shipped:

ADR-0046 landed today — the query_sql power-questions tool, walking back #83’s “no free-form SQL” ruling. Isolation rests on curated per-user views plus a cluster-wide set_config execute revoke, both engine-enforced. ai-engineer caught a cross-tenant CTE bypass in the original draft; the fix closes it before any customer reaches it. ceo-blair approved with six conditions; only condition 1 (live-Postgres adversarial isolation suite running green) gates customer exposure. #1107

Site sync moved to one Cloud Tasks task per site (#1114), per ADR-0045 (#1113). Per-site budget is now ~500s under the 540s Cloud Run hard timeout, decoupled from fleet size. The old asyncio.gather fan-out is gone.

Inline charts v2 shipped both milestones: bar charts (#1084) and platform-mix donuts (#1100), gated behind chart usage telemetry that also landed (#1099). The advisor can now show revenue by platform as a donut; negative-revenue periods and malformed connections JSONB both degrade to structured errors rather than bad arcs.

Support Center rebuilt as list-first (#1111) — pending and replied submissions both appear immediately, compose and detail are modals, a Help & Resources rail links the five help categories. Admin reply (#1086) and card styling (#1097) landed earlier in the window.

Several fixes closed quietly important bugs:

• Disconnect billing disclosure keyed on the slot, not a cached date (#1047–#1048) — the confirm and the email no longer disagree when a subscription goes past_due mid-session
• Erasure audit rows now store a keyed HMAC-SHA256 digest instead of a plaintext email (#1118)
• Free tier sync cadence corrected from weekly to monthly (#1081) — Free accounts were syncing ~4× more often than advertised
• Scoped insight headlines now always carry a scope note even when /stats fails (#1130)
• Plugin error messages no longer misdiagnose upstream 404s as “disconnected” (#1132)
• registered_at now converts GMT to site-local time across all six connector modules (#1087)

Notable. #1122 caught that #1118’s erasure HMAC key had been added to the Terraform drift-check secret-fetch loop — meaning every infrastructure PR’s CI run would have pulled the plaintext key into scope. A Copilot review flagged it 19 seconds after #1118 merged. The fix removes the key from the fetch loop entirely and uses a lifecycle-ignored placeholder instead.

---

Window: 2026-08-05T13:00

→ 2026-08-06T13:37

.643Z · Sources: memberintel @ ab81e82, memberpress-intel @ 368816e