The back room. The lamp's on.

The whole grant site runs locally on containers now: Postgres behind a Neon proxy, a mail catcher, a stand-in object store for receipts, and a shim for the rate limiter. Because the shim is real rather than absent, rate limiting and upload-session binding actually run locally instead of failing open, and receipts stay off the bucket holding applicant PII. Smoke tests came along with it, over the status machine, the CSV injection guard, and the mail switch. Building a nonprofit's intake system should never require a copy of the real applicants.

The notify list was one row per email with a single unsubscribed flag, so opting out of clinic mail also silenced the season broadcast that same address had asked for. It is keyed on the address and the lane now, each lane carries its own opt-out, and the lane is bound into the unsubscribe token so the confirm write cannot scope wider than the link somebody clicked. Tokens minted before any of this still verify, and still opt the address out of everything. An unsubscribe link that quietly does more than it promised is a broken promise, not a convenience.

A Lambda idle long enough gets frozen, and when it thaws, the database socket it was holding is already gone. The first visitor of the morning was the one paying for that, so reads retry instead of handing back a dead connection, and reserved concurrency is capped so a burst cannot quietly fan out into a bill the owner never agreed to. Serverless is cheap right up to the moment something you did not configure decides how much of it you use.

A parent looking for details mid-season used to land on the home page, eight scrolls below a call to action announcing that registration was closed, beside a promo for a different product at a different price. The season has a page of its own now, and every claim on it derives from one pure status service. Each state nulls out what it cannot support instead of substituting a marketing figure next to a live Register button, and pricing appears only when two independent reads of the table agree on which season they are describing. A page that cannot prove a number has no business printing one.

Crawlers were hitting the public pages around the clock, and every pass woke a serverless Postgres that had just gone to sleep. Public HTML is cached at CloudFront now, so the origin is out of the read path for anonymous visitors and the database only wakes for someone actually asking it a question. At this size the win is not latency, it is the invoice. Performance work on a small site is mostly about what you can arrange not to do at all.

One command now brings the entire site up locally with nothing installed on the host: Postgres behind the Neon WebSocket proxy, Mailpit catching every message, MinIO standing in for S3, and a Caddy front door handing it a real HTTPS hostname. No Neon branch, no AWS account, no mail key, no shared credential to leak. Local should rehearse production rather than approximate it, and it should never need a production secret to do it.

TCL Auto Detail went live at tclautodetail.com on the same AWS pattern the rest of the shop uses: the app in a container on Lambda behind CloudFront, Terraform in the repo, deploys authenticated by OIDC with no long-lived keys anywhere. The site prices the work plainly and turns a search into a quote request, which for a mobile detailer who drives to the customer is the entire job. The placeholder contact details came out before the DNS went in. A one-truck operation does not need a platform. It needs to be found, and believed, in about eight seconds.

stuntdudes.com points at the new site. The domain moved, the mail records got mirrored into Route 53, and outbound mail is authenticated for the domain so a booking inquiry lands in an inbox instead of a spam folder. Inquiries route to John, the sitemap and canonicals stopped advertising yesterday's URLs, and the favicon is an SD monogram instead of a framework default. The unglamorous half of a launch is the half that decides whether anyone can find you.

Cornerbell spent the last stretch getting smaller. The public marketing pages and the in-app payment flow came out entirely, which leaves what a promotion's staff actually opens on fight week: fighters, gyms, matchmaking, communications, and the day itself. The demo tenant now seeds a full promotion's worth of data in one command, so the tool can be shown without waiting for a live card to exist. Deleting the parts nobody opened was the biggest feature of the month.

Wired this site into the shared dev Caddy that Patrick Taylor built out on League-OS and Journey to Jericho. The Next.js container now joins a shirepath-edge Docker network, and one long-lived Caddy hands it a real HTTPS hostname, www.local.shirepathsolutions.com, signed by its own internal CA. No more guessing which localhost port belongs to which project. Patrick's idea was simple and right: run the reverse proxy as its own container, give every app a real name behind real TLS, and stop treating local as a lesser environment. Local now rehearses production instead of approximating it, and the same move drops into every repo I own.

Moved this site off Vercel and onto AWS. It runs as a single container: CloudFront in front, the Next.js app on Lambda through the AWS Lambda Web Adapter, the whole thing defined in Terraform and redeployed by GitHub Actions on every merge to main, authenticated with OIDC so there are no long-lived keys. CloudWatch alarms, a Route 53 health check, and SNS email alerts keep watch, and it all lands under $10 a month. Vercel and Neon are effortless, but both are thin wrappers over the cloud they run on. As their prices climb, going cloud native is the stronger bet, and I think it is where the industry is heading.

Journey to Jericho went live: a Columbia mentorship ministry that fathers the fatherless through the work of a motor shop. The site carries the whole model in one place, the mission story, a seven-pillar formation track, a twelve-badge growth system, and mentor, mentee, and volunteer paths that drop real applications with the team, plus a newsletter and a synced Instagram feed. A ministry built on showing up for young men now has a front door that does the same.

Until now the league could only reach parents by email blast, with no record a family could go back and re-read. League-OS adds an in-app inbox: admins post an announcement, the targeted families see it in the parent portal with an unread badge, and it stays there to open again. League news finally has a home parents can return to, not just an email that scrolls away.

When a player drops a team, the waitlist admin can now pull the best replacement for that specific team instead of just the next name in line. League-OS scores each waitlisted player against the open team on the signals that matter, requested friends, same school, how close they live, and do-not-pair conflicts, then surfaces them as plain great, good, or okay tiers with conflicts flagged red. Filling a roster spot becomes a judgment call the software actually helps with.

Biblical Battle Plans replaced its bare landing page with a full long-scroll marketing page in the app's pixel-art RPG style: a parchment hero, a feature grid, an animated progression ladder, a product showcase, and a guild spotlight, with sprites and parallax that move as you scroll. It's the first surface that sells the app the way the app actually feels to play. The front door finally looks like the adventure waiting inside it.

Cornerbell now has a front door of its own: a product-marketing site on the base domain with home, features, and about pages, capped by a contact page whose demo-request form and waitlist feed a single lead endpoint. The platform that hosts everyone else's site can finally pitch and capture interest in itself. The thing that builds other people's sites now has one worth visiting.

Stunt Dudes traded a Wix template for a custom site: a dark tour-poster build with shows, a media gallery, a tour schedule, and a booking-inquiry form, all editable through a real admin CMS instead of a page builder. Structured data, an llms feed, and per-page metadata went in from day one so promoters and search engines can both find them. A stunt team's web presence that finally hits as hard as the act.

Cornerbell crossed from being one promotion's website to a platform any organization can stand up as its own. A fresh tenant now provisions in a single command, brands itself, and runs its own teams, partners, photos, and media from the dashboard, with every public page served from that tenant's content behind a private, per-org media pipeline. Sign on, and the site is entirely yours, not a skin over someone else's.

The team-formation board now has a head-coach picker, the follow-up that #373 deferred when only team rename was wired in. Admins assign a head coach to each team directly from the board, and the existing updateTeamAction primitive validates and persists the headCoachRegistrationId behind it. Building a team now starts where it should: by naming who's running it.

The public site, admin, and apply flow got a full visual overhaul, ported from a design handoff into a photo-led, black-and-white layout with an evergreen accent and a new cross/plus brand mark. The client gave broad creative freedom, and this is the direction it landed on across every surface a visitor or applicant touches. The cause now looks like something you'd trust with your name.

Real Zambia Safari Co got a greenfield site built around the founders' own Zambia photography: a cinematic landing, a Zambia hub with five destination pages, sample itineraries, and an enquiry form that drops leads in the inbox with a branded confirmation. A secret-gated admin with a WYSIWYG editor lets them run the blog without a developer. A Zambian-led outfitter now looks the part to the travelers it's courting.

The admin review dashboard goes live, turning the Phase 1 scaffolding (auth tables, a status state machine, audit logging, CSV export) into a working place to actually process applications. The notification email from Phase 1 finally lands somewhere real: its /admin/applications/{id} link now opens a screen where the admin can move an application through review and export the results. The application someone submitted now has a human on the other end who can act on it.

No More Fatherless went live with its first public slice: a marketing site and, more to the point, an online grant application that lets families apply for support with document uploads instead of paperwork. Submissions persist securely and fire a branded confirmation, so an applicant knows the ministry received them. A cause built on helping families can finally take their request the moment they're ready to ask.

The email-blast panel now lets admins preview the rendered SMS with a live segment count, edit the body per-blast to override the template without touching code, and fire a real test SMS to a phone they pick. That test routes through the same Twilio kill-switch and recipient gates as a live send, so it proves the real path instead of a mock. Admins stop guessing what a blast looks like and start seeing it before it reaches a single parent's phone.

Post a real workout and the daily-floor rows now mark themselves "COVERED BY" with a strikethrough and stop accepting taps, so PAX no longer double-tap to acknowledge a floor a workout already satisfied. The floor header spells out its own purpose, the workout-type row is relabeled "Today's Post" with a one-line explainer, and admin buddy pairings now show F3 nicknames through the shared paxDisplayName helper instead of legal names. Less tapping, clearer rules, and the names everyone actually goes by.

New GET /api/trips/shared/[token] endpoint returns the privacy-projected public trip, opening the door for shared-trip pages backed by a real API instead of one-off URLs. Quote and Itinerary PDFs now embed up to two aircraft photos with photographer credit plus a fine-print broker disclosure block, and the Operating-carrier row hides on the Itinerary so the brokered identity stays where it belongs. Calculator and search hardening rounds it out: in-progress edits no longer get clobbered by a late preferences fetch, and LIKE-pattern escaping closes a % / _ injection seam in the search route. The documents brokers hand to clients now look and behave like the documents clients expect.

New read-only Readiness Dashboard at /league/team-formation/readiness gives admins a per-division pill (red/amber/green) covering roster fill, freeze-form coverage, and address/school signals, so blocked divisions stand out at a glance before formation begins. A new targetTeamCount column on divisions lets admins override the default (8 players per team for coed, 10 for girls) on a per-division basis, and clinic-format divisions are filtered out at the SQL layer since they don't go through formation at all. Phase 1 of the team-formation arc: see the state of every division before trying to solve it.

A sticky 256px sidebar nav now appears on lg+ screens (mobile keeps the existing BBottomNav), with each page capping its own width inside a row layout so the empty space lives on the right instead of around a centered column floating in the void. The layout fetches requireOnboardedUser and getNavFlags once per render via the React cache and threads the secondary nav items into the sidebar so they aren't fetched again page by page. The app no longer looks like a phone screenshot pasted onto a 27-inch monitor.

Public homepage now matches the v3 Claude Design handoff with a dark editorial direction, while every existing wire (registration CTAs, hero photo, season status, sponsors, schedule, scholarship, contact) stays intact underneath. The "Get notified at launch" CTA is no longer cosmetic: it captures the email, stores the subscriber, and a new clinics page slots into the same nav. Visitors who couldn't sign up before now can, against a homepage that doesn't look five years old.

Email OTP, Email + Password (with a 3-tier strength meter and a server-side policy that rejects weak passwords even when the client gate is bypassed), and Google OAuth join the existing magic-link flow, all behind an email-first login that asks for the address once and then offers the available methods against it. A new /forgot-password and /reset-password pair handles credential recovery, and onboarding's height field is now separate ft/in inputs with digit-only filtering on age, weight, and goal weight. The login screen finally meets people where they are instead of forcing one auth flavor.

New Ready to Pull tab on the payments page showing every check released from the hold pile but not yet posted, grouped by PDF batch. Each row surfaces payer, check number, amount, promoted player, and physical PDF location, with per-row Confirm & Queue, bulk confirm, and per-batch Post All Confirmed driving a live progress bar that reattaches across page reloads. The deposit team's checklist is now the app's home screen, not a printed sheet next to the keyboard.

New operator-side Broker P&L view, the missing margin, commission, and forecast surface for the trips workflow. Linked from the user dropdown above Settings and from the mobile FAB so it's one tap away from anywhere. Answering "did this month make money" no longer requires a spreadsheet export.

Added a Suggested Links tab to the YLAFL admin and rolled the design refresh across the surface: tighter type, calmer color, fewer competing primaries. No business logic, server actions, or types touched, just chrome. The fastest way to make the app feel new is to make it stop fighting itself visually.

Rebuilt the dashboard settings page against the Settings v2 design: sticky sidebar nav driven by IntersectionObserver, eight section cards on a 240px + main grid, trip-number prefix and pad-width promoted to first-class operator preferences. A settings page that finally feels like part of the product instead of an admin afterthought.

Added a self-serve "Import default price sheet" button on the ABC Supply page so a fresh org admin goes from zero pricing rows to a complete estimate without anyone touching the database. The server action is org-scoped, idempotent, and ships with the 18 SKUs that show up on every residential reroof. The first estimate now happens before the first hand-holding call.

Shipped production error alerting on League-OS. Vercel log drains pipe into a webhook proxy, the proxy fans out to Slack with a tightened allowlist so only our drains can trigger it. When something breaks after midnight, I know before the first parent does. Quiet ops work, the kind that pays for itself the first time it catches something.

Quiet milestone: the automated check-processing pipeline crossed $50,000 in posted payments. Cash, check, and money order still dominate youth sports, so the app has to turn a photo of a check into a posted payment. Parent uploads to Google Cloud Storage, a Cloud Run container renders pages to images, a Postgres job engine orchestrates the steps, and the payment lands on the ledger. None of it is generic SaaS plumbing. It only exists because the league needed it, and now it's quietly moving real money.

Added profit math to every trip in Jettison Air: wholesale cost, service revenue, margin, running totals. First time the operator can look at a week and say "this one was worth it, this one wasn't" without exporting to a spreadsheet. The spreadsheet was the competition.

Public REST API v1 with admin-issued bearer tokens. There are no integrations yet, and that's the point: drawing the line between "my data, your app" and "our shared surface" before anyone needs it is cheaper than drawing it after.

Manufacturer → grade → component. Pick one, the next field narrows. Roofing has a thousand SKUs and every estimator types the same five. The UI does the typing for you now. Catalog seed, labor matrix, and pricing grid landed the same week. The shape of the product is finally visible.

Roof Guru now pulls measurements straight from HOVER PDFs on intake and projects commission off the estimate the moment it's saved. Estimators already have the data; the app just has to stop asking for it twice.

Finishing a reading plan in Biblical Battle Plans now awards an XP bonus. Tiny change, big feel. Completion wasn't rewarded before, and now it has a number. Games ship feedback loops; reading apps usually don't. This one does.