Raxx Application Status Map — RAG + Grey (2026-07-13 UTC)

Internal ops document. Not customer-facing. All times UTC. Prod flag state for feature flags is unverified unless explicitly noted — the main loop cannot read Heroku config directly. Where a flag has a B1 promotion migration or a comment noting a prod flip, that is called out. All others should be treated as "prod flag state unverified."

1. Legend

2. System / Component Diagram

flowchart TD
    classDef green fill:#d7f5d7,color:#1f7a1f,stroke:#1f7a1f
    classDef yellow fill:#fff3cd,color:#7a5800,stroke:#b58900
    classDef red fill:#f8d7da,color:#a61b1b,stroke:#a61b1b
    classDef grey fill:#e2e3e5,color:#444444,stroke:#666666

    Browser["🟡 Browser\n(Antlers / raxx-next)"]:::yellow
    iOS["🟡 iOS Raxx App\n(TestFlight Wave 2)"]:::yellow
    Landing["🟡 getraxx.com\n(CF Pages)"]:::yellow

    CF["🟢 Cloudflare\n(WAF + Access + Pages)"]:::green
    Raptor["🟡 Raptor API\n(backend_v2 / Heroku)"]:::yellow
    Console["🟡 Console\n(ops/admin / Heroku)"]:::yellow
    Velvet["🟡 Velvet\n(secret rotation svc)"]:::yellow
    StatusPage["🟡 Status Page\n(CF Worker + D1)"]:::yellow

    Postgres["🟢 Postgres\n(Heroku / migrations 0030)"]:::green
    Vault["🟢 Infisical Vault\n(secrets store)"]:::green
    CI["🔴 Woodpecker CI\n(scale-arbiter bug #4039)"]:::red
    WpConfigSvc["🔴 wp-config-svc\n(designed, never built)"]:::red

    Browser -->|"HTTPS / CF Access"| CF
    iOS -->|"HTTPS / CF Access"| CF
    Landing -->|"CF Pages"| CF
    CF -->|"origin request"| Raptor
    CF -->|"origin request"| Console
    Console -->|"API calls"| Raptor
    Raptor -->|"SQL"| Postgres
    Console -->|"SQL"| Postgres
    Velvet -->|"read/write"| Vault
    Console -->|"credential reads"| Velvet
    Raptor -->|"credential reads"| Vault
    CI -->|"deploy"| Raptor
    CI -->|"deploy"| Console
    WpConfigSvc -.->|"planned dependency"| CI

3. Primary User Journey Diagram

flowchart LR
    classDef green fill:#d7f5d7,color:#1f7a1f,stroke:#1f7a1f
    classDef yellow fill:#fff3cd,color:#7a5800,stroke:#b58900
    classDef red fill:#f8d7da,color:#a61b1b,stroke:#a61b1b
    classDef grey fill:#e2e3e5,color:#444444,stroke:#666666

    WL["⚪ Waitlist\n/ Signup\n(attorney gate\non Privacy Policy)"]:::grey
    EV["🟡 Email\nVerification\n(FLAG OFF;\nPostmark DKIM gate)"]:::yellow
    AUTH["🟡 Auth /\nPasskey\n(flags OFF;\nprod state\nunverified)"]:::yellow
    WIZ["🟡 Onboarding\nWizard\n(FLAG OFF;\n#4204 in develop)"]:::yellow
    DASH["🟡 First-Run\nDashboard\n(FLAG OFF;\n#4201 in develop)"]:::yellow
    PAPER["🟡 Paper Trade\n/ Options\n(in soak;\nFLAG OFF)"]:::yellow
    TAX["🟡 Tax /\nReporting\n(Wave 1-3\nall FLAG OFF)"]:::yellow
    BILLING["🟡 Billing /\nUpgrade\n(Stripe queue OFF;\nApple IAP ⚪)"]:::yellow

    WL --> EV --> AUTH --> WIZ --> DASH --> PAPER --> TAX --> BILLING

4. Feature Domain Diagram

flowchart TD
    classDef green fill:#d7f5d7,color:#1f7a1f,stroke:#1f7a1f
    classDef yellow fill:#fff3cd,color:#7a5800,stroke:#b58900
    classDef red fill:#f8d7da,color:#a61b1b,stroke:#a61b1b
    classDef grey fill:#e2e3e5,color:#444444,stroke:#666666

    subgraph RAPTOR["Raptor (backend_v2)"]
        R_SEC["🟢 Security Headers\n(default ON)"]:::green
        R_SESS["🟡 Session Auth\n(ON in prod 2026-05-28)"]:::yellow
        R_AUTH["🟡 WebAuthn Endpoints\n(flags OFF; HC-AUTH-1/3 merged)"]:::yellow
        R_PAPER["🟡 MBT Paper Engine\n(in soak; FLAG OFF)"]:::yellow
        R_IDEM["🟡 Idempotency\nWave 1+2 in develop"]:::yellow
        R_TAX["🟡 Tax APIs\n(Wave 1-3; all FLAG OFF)"]:::yellow
        R_BETA["🟡 Beta Walk APIs\n(survey #4206 in develop)"]:::yellow
        R_TRACE["🟡 Audit / Trace Chain\n(schema built; all SC flags OFF)"]:::yellow
        R_RBAC["🟡 RBAC v2\n(schema built; all flags OFF)"]:::yellow
        R_BILLING["🟡 Billing Routes\n(Stripe Queue OFF)"]:::yellow
    end

    subgraph ANTLERS["Antlers (raxx-next)"]
        A_SIGNUP["🟡 Signup UI\n(passkey_signup_ui OFF)"]:::yellow
        A_EV["🟡 Email Verify UI\n(promoted; Postmark gate)"]:::yellow
        A_WIZ["🟡 Onboarding Wizard\n(middleware in develop; FLAG OFF)"]:::yellow
        A_DASH["🟡 First-Run Dashboard\n(CE-skinned; in develop; FLAG OFF)"]:::yellow
        A_TRADE["🟡 Trade Window\n(flag OFF)"]:::yellow
        A_IC["🟡 IC / Options Builder\n(flag OFF)"]:::yellow
        A_BACKTEST["🟡 Backtest Charts\n(flag OFF)"]:::yellow
        A_TAX["🟡 Tax UI\n(all flags OFF)"]:::yellow
        A_LEFT_NAV["🟡 Left Nav\n(promoted; FLAG OFF)"]:::yellow
    end

    subgraph CONSOLE["Console (ops/admin)"]
        C_STATUS["🟡 Status Dashboard\n(flags partially OFF)"]:::yellow
        C_FLAGS["⚪ Flag Promotions\n(FLAG OFF; #4187 operator-action)"]:::grey
        C_BETA["🟡 Beta Admin\n(blueprint; FLAG OFF)"]:::yellow
        C_BILLING_DASH["🟡 Billing Dashboard\n(promoted; FLAG OFF)"]:::yellow
        C_RBAC["🟡 RBAC Management\n(rbac_v2 OFF)"]:::yellow
        C_WAITLIST["🟡 Waitlist View\n(promoted; FLAG OFF)"]:::yellow
    end

    subgraph IOS_APP["iOS Raxx App"]
        IOS_SHELL["🟡 App Shell\n(TestFlight Wave 2 #891)"]:::yellow
        IOS_AASA["🟡 AASA Passkey\n(ios_aasa FLAG OFF)"]:::yellow
    end

    subgraph GETRAXX["getraxx.com"]
        G_LANDING["🟡 Landing Pages\n(surface pages promoted; FLAG OFF)"]:::yellow
        G_WAITLIST["⚪ Waitlist Form\n(attorney gate #3149)"]:::grey
        G_COOKIE["⚪ Cookie Banner\n(attorney gate #590)"]:::grey
        G_DIFF["🟡 Differentiation\nSection (promoted 0158)"]:::yellow
        G_PERSONA["🟡 Persona Blend\n(promoted 0164)"]:::yellow
    end

    subgraph CI_INFRA["CI / Infra"]
        CI_WP["🔴 Woodpecker\n(scale-arbiter bug; 5h outage)"]:::red
        CI_WPCFG["🔴 wp-config-svc\n(never built; #4141/#4142 blocked)"]:::red
        CI_VAULT["🟡 Velvet / Vault\n(adapters built; all flags OFF)"]:::yellow
    end

    subgraph SHAPE["Shape / Sentiment"]
        SH_PIPE["⚪ Shape Phase 1\n(attorney consent + privacy\npolicy gates #3858 #3840)"]:::grey
    end

    subgraph BETA_SYS["Closed-Beta System"]
        B_TOKEN["🟡 Invite Tokens\n(promoted 0173; FLAG OFF)"]:::yellow
        B_NDA["🟡 NDA Ack\n(promoted 0174; FLAG OFF)"]:::yellow
        B_WALK["🟡 Walkthrough (5 screens)\n(promoted 0181; scaffold in develop)"]:::yellow
        B_SURVEY["🟡 Survey + Scoring\n(promoted 0176; #4206 in develop)"]:::yellow
        B_INVITES["⚪ Send Cohort Invites\n(operator-action #4193)"]:::grey
    end

5. Status Table

6. Decisions Waiting on Kristerpher

Each item below is a concrete yes/no or A/B choice that no agent can make autonomously.

1. CI runner floor cost (#4039 soak): Add on-demand base capacity (~$120/mo) to prevent future 100%-spot outages like the 5h dark 2026-07-13? → Yes (pay floor) or No (accept outage risk)?

2. wp-config-svc build (#4141 / #4142): Authorize design + build of the Woodpecker CI config service (ADR-0137 + code) that both issues depend on? → Yes, build it now or defer?

3. Activate FLAG_CONSOLE_FLAG_PROMOTIONS in prod (#4187): Wave 7 smoke verified clean (#4200). Ready to flip? → Yes, flip now or wait for additional soak?

4. Send first closed-beta cohort invites (#4193): Who goes in Wave 1, and when? → Choose recipients and give the send order.

5. v1 launch go/no-go (#4166): Walk through the staging walkthrough yourself and sign off on the checklist. → Go or No-Go?

6. Privacy Policy + ToS on getraxx.com (#3149): Attorney-drafted versions needed before waitlist goes live. → Engage attorney now or defer waitlist?

7. PA fictitious-name (DBA) registration (#3145): File "Raxx" under MooseQuest LLC with PA Dept of State. → File now?

8. PA SaaS sales-tax posture (#3146): Confirm with CPA before charging first subscriber. → Engage CPA now?

9. IP assignment to MooseQuest LLC (#3142): Attorney Adam Schwartz to execute. → Schedule and execute?

10. Securities attorney (#3141): §202(a)(11) exemption + hero copy clearance. → Engage attorney now?

11. S-Corp election (Form 2553) (#3144): CPA engagement required; due 2026-08-06. → Engage CPA before deadline?

12. Apple IAP E2E verification (#3688): Requires ASC sandbox tester + on-device StoreKit purchase taps. → Block time for on-device test?

13. Shape Phase 1 consent notice (#3858): Attorney must review in-flow consent copy before prod flag flip. → Send copy for attorney review now?

14. Privacy policy update for Shape 1 (#3840): PrivacyPolicy.jsx update needed before FLAG_SENTIMENT_JOURNAL prod flip. → Approve draft update or revise?

15. pg_audit external log-sink (#1494): Needs SaaS vendor selection + possible Heroku plan upgrade. → Choose vendor (Datadog / Papertrail / other) and authorize plan spend?

16. FreeScout audit webhook secret (#3286): FREESCOUT_AUDIT_WEBHOOK_SECRET missing from vault; SC-A4 can't activate. → Provision secret?

17. FreeScout TOTP enrollment (#3285): Admin account TOTP status unknown; recovery codes absent from vault. → Confirm or complete enrollment and vault recovery codes?

18. Order Ticket V2 copy sign-off (#3147): Polish card awaiting operator review of help-mode copy. → Approve or revise?

19. SC-12 Ed25519 signing keys (#2129): Vault paths for trace-signing private keys need operator confirmation before FLAG_TRACE_SYS_SIGNING can flip. → Confirm paths and provision keys?

20. BFM re-enable on raxx.app (#987): CF Access WAF skip rules landed; BFM can be re-enabled once verified clean. → Re-enable now?

Evidence sources: backend_v2/api/feature_flags.yaml (5459 lines, read in full), console/migrations/versions/ (promotion chain through 0181), gh pr list --base develop (PRs #4173–#4208 merged 2026-07-12/13), open operator-action issues retrieved via gh issue list --label operator-action, session known-state facts.

Agent: product-manager Bot identity: raxx-pm-bot Workflow UUID: n/a Refs #78