knit-app (app repo)Main + Knit rebrand merged
Codex fintech auditAll 13 fixed + merged + applied
2026-05-01 audit found 13 issues (3 Critical / 6 High / 3 Medium / 1 Low). All fixed in PR #1 → merged to main. Migration 006_fintech_hardening.sql applied to live Knit Supabase via session pooler 2026-05-01: Stripe idempotency, RLS hardening (BEFORE-UPDATE trigger blocks self-upgrade of is_premium / stripe_customer_id), Plaid webhook ES256 verification, cursor-based sync (added/modified/removed), Charityvest grant idempotency, web onboarding wired to Supabase auth, mobile error-check, MFA + email-confirmation. Verdict: production-ready blockers cleared.
knit-waitlistLive
Vercel · roundupforgood-waitlist.vercel.app · accepting signups
TestFlight workflowPipeline ready · Dan setup pending
GitHub Action .github/workflows/mobile-testflight.yml committed (in PR #1). Triggers on mobile-v* tag push: EAS Cloud build → TestFlight submit → Telegram notify. Dan one-time setup (~30-45 min, runbook at docs/testflight-setup.md): create App Store Connect app record, run eas credentials once locally, fill 3 IDs in eas.json, add EXPO_TOKEN to GH secrets. Then every release = one tag push.
Knit Supabase projectLive · Healthy · 6/6 migrations applied
Plaid sandboxNo monitor
No daily health check script yet. Plaid MCP not installed. Deferred to roadmap day 1-7.