The first release ships source-backed local artifact builders. MVP means pasted text or CSV-style rows only; richer file import, OCR, saved mappings, collaboration, and recurring workflows remain Axal paths.
Deploys use reviewed source SHAs, immutable image digests, service smoke checks, live preflight checks, CodeQL, dependency review, image scanning, and built-output network scanning. External monitor targets are defined in the public runbook; do not treat this page as a real-time uptime feed.
This page is static. It documents required gates and launch boundaries, not current availability, incident state, queue depth, or live cluster health.
Last source-reviewed date: 2026-07-02.
Each source row also carries its own stale-after window; review the source register before relying on an output.
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Status: mvp
Source review: 2026-07-02
Review gates
These are the public repository gates and deploy checks that support the MVP status claim. They are evidence of review controls, not an availability guarantee.
| Check | Evidence | Source | Cadence | Boundary |
|---|---|---|---|---|
| verify | Runs pnpm audit:high and pnpm verify on pull requests and protected branches. | .github/workflows/ci.yml | Pull request, master push, tapish-codex branch push | Required protected check; includes typecheck, lint, tests, source freshness scan, build, and built runtime network scan. |
| Review gate | Blocks unresolved current-head review findings and requested-changes reviews. | .github/workflows/review-gate.yml | Pull request lifecycle, manual dispatch, scheduled trusted refresh | Findings gate only; it is not an approving reviewer-count requirement. |
| Analyze | Runs GitHub CodeQL with security-extended and security-and-quality queries. | .github/workflows/codeql.yml | Pull request, master push, weekly schedule | Static analysis signal; does not replace manual review of privacy and source claims. |
| Review dependency changes | Runs GitHub Dependency Review and fails on high-severity dependency changes. | .github/workflows/dependency-review.yml | Pull request | Dependency diff check; the app still avoids adding runtime data-network dependencies. |
| Image scan and digest promotion | Builds the static image, scans it with Trivy, then publishes and deploys by immutable digest. | .github/workflows/publish-image.yml and .github/workflows/deploy-production.yml | Master push publish; manual production deploy | Deploy requires a reviewed source SHA and published digest; this page does not expose live cluster state. |
| Live deploy smoke | Deployment checks /-/health, CSP headers, and public sitemap content through a service port-forward. | .github/workflows/deploy-production.yml | Production deploy | Post-rollout smoke only; use external monitors and incident review for availability claims. |