Fix what is unsafe before anything goes public, and record the architecture decisions as ADRs.
October 13: #3–9 implementation complete; #10–12 ADRs drafted and awaiting human acceptance. Webhook enforcement #38 remains required before nonlocal exposure. Exit: accepted ADRs and verified fail-closed nonlocal credentials. Live Twitch/OBS and first release have a separate qualification milestone.
Accounts and OAuth login, tenants and roles, tenant-scoped data, token vault, overlay tokens, plans and entitlements, data lifecycle, self-host bootstrap, operations basics.
October 13: not started. Entry: accepted ADRs #10–12 and a reviewed Phase 1 implementation plan. Exit: proven two-tenant API/stream isolation, secure accounts/token custody, env bootstrap preserved, and data-driven plan limits; required operations/privacy gates remain #21–22.