Raxx · internal docs

internal · gated

Wake-up brief — 2026-05-23 UTC

T-0 to operator-testing-ready per [[project_launch_posture_personal_use]] — personal-use launch window opens today; CF Access stays on raxx.app + getraxx.com. Prod healthy: raxx-api-prod web.1 up 18h.

Section 1 — PRs since 2026-05-22 06:00 UTC

Merged: 6. Demo-flow chain shipped end-to-end (#2709 redis dep, #2710 Heroku TLS self-signed cert fix) + CE-skin wave on pre-auth surfaces (#2705 LoginPage, #2706 PublicLanding, #2707 SignupPage). Yesterday's wake-up brief #2704 landed too.

Open: 1#2694 docs.raxx.app organization pass. Held on Decision 3 follow-up (5 TBD features on pricing.md need operator confirmation). REVIEW_REQUIRED.

Operator-blocked PRs: zero. Sole open PR is on an operator-decision queue item, not a PR review gate.

Section 2 — Operator-action queue (22 open) + needs-decision (30 open)

Launch-relevant operator-action items (none gate operator-testing today): - #2688 remove CF Access from tickets.raxx.app — held; revisit when customers exist - #2443 Queue prod deploy blocked — 2 gates need operator - #1645 remove CF Access from getraxx.com — held per personal-use posture - #1849 backfill clean-state terraform apply across 9 roots

Pre-launch-blockers (3 open): - #1632 Stripe Price ID backfill on Founders subs — real work, post-launch-window safe - #1025 B5 remove CF Access from raxx.app/api.raxx.app — api.raxx.app done 2026-05-21; raxx.app stays gated through this window per locked decision - #1022 B2 wire auth routes — shipped 2026-05-21; close once operator confirms signup completed

Decision queue highlights: #2299 console flag-UX hardening · #2232 deploy modal phase granularity (CI emits 3, UI expects 5) · #2266 FreeScout 5-state workflow JSON · #2076 FreeScout 5-state path A/B/C · #1384 ORATS license · 5 stale bandit HIGHs (#2473-#2477, #2362).

Section 3 — Wave performance

Section 4 — SEV alerts

No SEV-1 / SEV-2 open. 15 CI failures since yesterday 06:00 UTC, all non-customer-impacting and recurring: - Release workflow (5) — release-please cadence; benign - CI — main (4) — pre-existing test flakes - WAF Synthetic Probes (1), Trace integrity cron (1), Terraform email-delivery-stack (1) — all tracked under existing cards - Nightly Security Scan still red 3 nights running per yesterday's security-agent triage #2708

Section 5 — T-0 to operator-testing-ready

Today's milestone: signup + demo flow are both end-to-end functional behind CF Access. Sign in with passkey, navigate /backtest, paper-trade through Alpaca, demo flow at /demo from a fresh IP (rate-limit per-IP).

Yesterday's ship chain (demo enablement): 1. Provisioned heroku-redis:mini on raxx-api-prod (~$3/mo) 2. FLAG_DEMO_SESSION + FLAG_DEMO_PAPER_FILL + FLAG_DEMO_SESSION_MIGRATE flipped 3. redis python dep added (PR #2709) 4. Heroku Redis self-signed TLS cert handled (PR #2710) 5. All 5 /api/demo/* endpoints alive: session, propose, paper-fill, anon-session, migrate

Outstanding for actual customer-facing launch (not blocking today): - SignupPage / LoginPage / PublicLanding CE skins shipped + live behind CF Access — operator review pending - Docs PR #2694 held on 5-TBD-feature follow-up - BOOTSTRAP_TOKEN_SIGNING_KEY still not in vault (#2699) - Nightly scan workflow red (#2708)

Recommendation today: operator walks through signup + demo end-to-end on raxx.app, files CE-skin feedback if any, then closes #1022 + #1025 once verified.