We commissioned a review of ourselves
A full, independent, area-by-area technical review of the entire codebase - architecture to compliance - with every finding tracked publicly on this site until it was fixed.
Four years of solo building at speed leaves debts you can no longer see - you’ve walked past them too many times. So we commissioned a full technical review of the whole codebase: architecture, security, economy integrity, the data layer, child-safety compliance, duplication, dead code, and testability. The brief demanded evidence for every claim and an honest ranking by real-world impact, and it ended with the only instruction that matters: report and stop - no quiet fixes blurring the findings.
The result was thirty tracked actions, from “rotate every credential” to “there are no tests at all”. Rather than file it in a drawer, we put the whole thing on this site: the redacted reports, the commissioning prompt, and a live remediation log where every action shows its status and its history.
Three weeks later, every action was closed. The review area of this site is the receipt.