Audit
The monthly hands-off check, and every gate still waiting on a founder rather than on the machine.
Audit verdictWarnAugust 2026, run Aug 18, 2026.
Red checks0Nothing broke the hands-off promise this month.
Warn checks1A warning is a gate or a drift, not an outage.
Checks run7Every check the audit knows how to make, run in one pass.
Checks — August 2026
7 checks- founder-owes15 founder-owed gates open: supabase-money-gate, llm-keys, youtube-api-key, reddit-oauth, tiktok-ig-watch-risk, mimic-d3-disclosure-wording, ops-alert-transport, gbp-api-access, cloudflare-saas-zone, birdeye-key, callrail-contract-baa, twilio-baa-tier, nextech-request, managed-agents-option, client-2-salewarn
- scheduled-tasksboth scheduled tasks registeredok
- hooks-pathcore.hooksPath = hooks (pre-commit verify armed)ok
- stale-pdfsPDF twins currentok
- future-lastrunno future-dated lastRun entriesok
- stale-escalationsno escalations older than the action windowok
- build-sheet-driftBUILD-SHEET rows: 83, marked DONE: 37 (report only)ok
The audit runs dead last on the first Sunday of the month, so it reads the day's final state. It reports; it never repairs.
Founder-owed gates
15 open · 1 closed| Category | Gate | Status |
|---|---|---|
| money | supabase-money-gate Create the two Supabase projects + HIPAA add-on + Anthropic BAA/ZDR (W8-8). Unlocks phi mirrors, flywheel/exception tables, W5-4 parks. | open |
| money | llm-keys LLM keys (money gate 5): sampler paid legs, eval live leg, W11 pattern polish, W12 video-analysis deconstruction. | open |
| creds | youtube-api-key YouTube Data API key for live viral detection (DJ_YOUTUBE_LIVE, 100 search units/day cap). | open |
| creds | reddit-oauth Reddit API OAuth pair for watch-only ingestion (DJ_REDDIT_WATCH_LIVE). | open |
| legal | tiktok-ig-watch-risk TikTok/Instagram watch-only ingestion has no clean official API; arming DJ_TIKTOK_WATCH_LIVE / DJ_IG_WATCH_LIVE is the founder accepting the scraping/ToS risk line (PRODUCT-DESIGN §8 decision 2026-08-17). | open |
| legal | mimic-d3-disclosure-wording Tenant zero's live brand pack lacks compliance.aiPerformerDisclosure; the first live mimic test correctly BLOCKS until the practice's own wording is added. | open |
| sends | ops-alert-transport Pick the ops-alert transport. Until then escalations stage as portal alerts + draft files under ops/drafts/ and nothing sends. | open |
| creds | gbp-api-access Google Business Profile API access request (W7-5, outside clock). | open |
| money | cloudflare-saas-zone Cloudflare for SaaS zone + custom hostnames + live /collect hosting (W7-6). | open |
| creds | birdeye-key Birdeye client key (W8-7). | open |
| money | callrail-contract-baa CallRail contract + BAA, ~$150/mo (W9-6). | open |
| money | twilio-baa-tier Twilio Security/Enterprise BAA priced + signed (W9-7). | open |
| creds | nextech-request Nextech connection request + their review (W9-8); draft rides scripts/nextech-request.mjs. | open |
| money | managed-agents-option Anthropic Managed Agents as roster host: bills API usage (~$2.60/mo est. 2026-08-17), needs the store on Supabase first. Decision hinge = W8-8. Until then the Windows task stays. | open |
| sends | client-2-sale Client 2: the sale, credentials, and money gates (docs/RUNBOOK-CLIENT-2.md splits agent vs Sean). | open |
| task | task-registration Run scripts/register-run-due.ps1 elevated once — arms the daily roster task and the 5-minute review tick (W1-7/W7-7/W8-9/W9-9 lineage). | closed Aug 18, 2026 |
Only a founder moves a gate to done. The audit reports these forever and closes none of them — an open gate is a decision waiting, never a bug.