Top 20 MVP Review Room

All 20 top-20 MVP tool lanes have public route, readiness, local proof, acceptance, and rollback labels.

EVE login, account saves, providers, payments, ads, Discord, email, and database writes remain off.

EVE SSO, reports account saves, provider communications, revenue, and private corp command remain owner/provider gated.

Production handoff, activation cockpit, launch runbook, owner handoff, monitoring, and release readiness are linked.

The review room excludes private EVE data, owner evidence values, provider credentials, account details, tokens, and separate-project details.

AI Intel Desk closes sprint one when public analyzer output, workflow links, local report handoff, and no-secret checks pass without account writes.

Readiness

5/5

Local Proof

browser-local analyzer handoff packet and local reports export

API Smoke

POST /api/tools/analyze?smoke=valid

Rollback

Keep provider AI, account save, private scout data, EVE token reads, and database persistence behind feature flags or protected review.

Fit Coach closes sprint one when pasted-fit review, Fit Lab handoff, local proof, and no-secret checks pass without private skills or fitting writes.

Readiness

5/5

Local Proof

browser-local Fit Lab save, comparison, import, export, and Fit Coach handoff

API Smoke

POST /api/tools/analyze?smoke=valid

Rollback

Keep private skills, implants, hangars, EVE fitting writes, and account sync behind feature-specific consent.

Loss Reviewer closes sprint one when loss analysis, public killmail evidence, SRP handoff, and no-secret checks pass without private killmail or payout reads.

Readiness

5/5

Local Proof

public killmail evidence fixture and browser-local review packet guidance

API Smoke

POST /api/eve/killmail?smoke=valid

Rollback

Keep private killmails, fleet participation, wallets, SRP decisions, payout actions, and protected queue rows behind owner review.

Appraisal closes sprint one when public item valuation, review checklist, local report handoff, and no-secret checks pass without private assets or wallets.

Readiness

5/5

Local Proof

public appraisal result, markdown report export, and market-readiness handoff

API Smoke

POST /api/eve/appraise?smoke=valid

Rollback

Keep private assets, wallets, contracts, market orders, account saves, and trade actions behind consent and protected review.

Market Command closes sprint two when public price comparison, watchlist proof, local ledger handoff, and no-secret checks pass without private wallets or order writes.

Readiness

5/5

Local Proof

browser-local watchlist, market comparison, and manual profit ledger proof

API Smoke

POST /api/eve/market?smoke=valid

Rollback

Keep private wallets, market orders, account ledgers, paid provider feeds, and trade actions behind feature flags or protected review.

Industry Lab closes sprint two when blueprint templates, public material estimates, local report handoff, and no-secret checks pass without private jobs or blueprint ownership.

Readiness

5/5

Local Proof

public blueprint template, material estimate, and browser-local industry report handoff

API Smoke

GET /api/eve/pi-plan?templates=1

Rollback

Keep private jobs, blueprint ownership, private asset locations, wallet records, corp industry data, and account persistence behind consent and protected review.

PI Planner closes sprint two when public P0-P4 planning, tax assumptions, local export proof, and no-secret checks pass without private colony or character data.

Readiness

5/5

Local Proof

public P0-P4 planning fixture, tax assumption checklist, and browser-local colony plan export

API Smoke

POST /api/eve/pi-plan?smoke=valid

Rollback

Keep private colonies, character planet data, tax records, EVE writes, and account-saved PI plans behind feature-specific consent.

Trade Route Screener closes sprint two when hub spread, route risk, taxes, local handoff, and no-secret checks pass without private route history or market-order actions.

Readiness

5/5

Local Proof

public hub spread fixture, route-risk review, and browser-local trade checklist handoff

API Smoke

POST /api/eve/trade-route?smoke=valid

Rollback

Keep private hauling routes, wallet exposure, market order actions, route-history records, and paid data providers behind protected review.

Route and System Risk closes sprint three when public route scout, system-risk proof, local packet handoff, and no-secret checks pass without private location tracking.

Readiness

5/5

Local Proof

public system-risk fixture, route scout review, and browser-local route packet handoff

API Smoke

POST /api/eve/system-risk?smoke=valid

Rollback

Keep private locations, fleet movement, route history, character location reads, and route decision automation behind feature flags or protected review.

Public Profiles closes sprint three when identity lookup, corp/alliance context, data-rights proof, and no-secret checks pass without private membership or token-backed records.

Readiness

5/5

Local Proof

public pilot, corporation, and alliance lookup fixture with data-rights boundary proof

API Smoke

POST /api/eve/profile?smoke=valid

Rollback

Keep private member lists, standings, contacts, mail, account exports, and token-backed character data behind consent and protected review.

SRP Proof closes sprint three when proof intake, reviewer packet labels, reserve planning, local export proof, and no-secret checks pass without automated payout or wallet reads.

Readiness

5/5

Local Proof

public SRP proof packet builder, batch planner, reserve sandbox, and reviewer handoff proof

API Smoke

GET /api/fleet-srp/reviewer

Rollback

Keep wallet reads, payout approval, ISK movement, protected reviewer packet contents, account saves, and SRP queue mutation behind owner review.

Fleet and Timer Ops closes sprint three when manual fleet/timer publishing, route handoff, readiness proof, and no-secret checks pass without calendar, Discord, or EVE fleet automation.

Readiness

5/5

Local Proof

manual fleet board, timer publishing checklist, route handoff, and browser-local ops packet proof

API Smoke

POST /api/eve/route?smoke=valid

Rollback

Keep fleet membership, calendar writes, Discord command registration, EVE fleet writes, structure timers, and protected ops updates behind owner review.

Buyback Request closes sprint four when public quote intake, appraisal handoff, protected review labels, local packet proof, and no-secret checks pass without contract creation or ISK movement.

Readiness

5/5

Local Proof

public buyback quote fixture, appraisal handoff, protected queue label, and browser-local request packet proof

API Smoke

POST /api/eve/buyback?smoke=valid

Rollback

Keep private asset details, contract creation, wallet movement, payout approval, protected queue mutation, and account saves behind owner review.

Mining Ledger closes sprint four when public mining intake, ledger guidance, protected review labels, local export proof, and no-secret checks pass without automated payouts or private ore records.

Readiness

5/5

Local Proof

public mining ledger checklist, buyback context, protected queue review, and browser-local mining handoff proof

API Smoke

GET /api/mining/readiness

Rollback

Keep private ore ledgers, fleet participation, payout decisions, wallet reads, protected reviewer notes, and mining queue mutation behind owner review.

Recruitment and HR closes sprint four when public application intake, recruiter review guidance, profile-context proof, local packet proof, and no-secret checks pass without Discord or EVE automation.

Readiness

5/5

Local Proof

public recruitment application checklist, recruiter review labels, profile context, and browser-local HR packet proof

API Smoke

GET /api/recruitment/readiness

Rollback

Keep applicant notes, private contacts, standings, Discord role sync, EVE corp actions, messages, and protected recruiter decisions behind owner review.

Access and Permission Requests closes sprint four when public access intake, reviewer policy proof, consent-preview labels, local packet proof, and no-secret checks pass without grants or role sync.

Readiness

5/5

Local Proof

public access request checklist, reviewer policy matrix, consent preview labels, and browser-local access packet proof

API Smoke

GET /api/access/readiness

Rollback

Keep access grants, expiry changes, Discord role sync, private scope prompts, protected access queue mutation, and approval actions behind owner review.

Wormhole Mapper closes sprint five when public wormhole ops guidance, browser-local chain proof, scout handoff, and no-secret checks pass without shared private mapper writes.

Readiness

5/5

Local Proof

browser-local wormhole chain map, scout brief, import/export label, and no-shared-private-map proof

API Smoke

GET /api/wormholes/readiness

Rollback

Keep private chains, bookmarks, mapper provider sync, scout contacts, shared route state, and protected wormhole notes behind owner review.

Structure and Timer Watch closes sprint five when public structure guidance, timer/fuel parsing proof, local watch packet, and no-secret checks pass without private structure reads.

Readiness

5/5

Local Proof

browser-local structure watch checklist, public fuel/timer parser labels, and protected structure review handoff

API Smoke

GET /api/structures/readiness

Rollback

Keep private structure names, ACL records, fuel bay details, timer secrets, calendar writes, and protected ops updates behind owner review.

Corp and Character Audit Shells close sprint five when public audit shells, future-scope mapping, permissions proof, and no-secret checks pass without private wallet, member, or account reads.

Readiness

5/5

Local Proof

browser-local corp and character audit shells, future-scope mapping labels, and permissions-readiness handoff

API Smoke

GET /api/corp-command/reviewer

Rollback

Keep private member data, wallet data, roles, standings, contacts, account exports, and token-backed audits behind consent and protected review.

Support and Protected Ops Review closes sprint five when public support intake, protected-review labels, provider-gate proof, local handoff, and no-secret checks pass while live sends and payments stay gated.

Readiness

5/5

Local Proof

manual support intake, protected reviewer packet labels, provider-gate checklist, and no-send/no-payment proof

API Smoke

GET /api/support/readiness

Rollback

Keep support message bodies, private contacts, email sends, payment links, provider console actions, protected reviewer notes, and account saves behind owner review.

20/20 top-20 lane(s), 100 route proof label(s), and 20 API smoke label(s) are ready.

Next Action

Owner-review the top-20 public MVP surfaces and keep any external activation gated until the cockpit blockers are cleared.

Acceptance

All 20 public MVP lanes stay ready with route proof, readiness proof, local proof, acceptance labels, rollback labels, and no-secret boundaries.

Rollback

Keep the production handoff and top-20 pages public while leaving OAuth, providers, account saves, payments, ads, Discord, and email off.

19 public-MVP-ready lane(s) can be visually reviewed and tightened while owner/provider blockers remain open.

Next Action

Continue visual polish, route smoke, source wording, local-report behavior, and mobile review across the highest-demand public tools.

Acceptance

Public polish remains buildable only when it does not start OAuth, call providers, write databases, save account data, or expose private EVE data.

Rollback

Revert any polish-only change without touching provider setup, feature flags, account persistence, or protected review surfaces.

Callback, approved scopes, and owner live test must be recorded before public login turns on.

Next Action

Record owner-pilot evidence and review the public login/account-save decision before exposing login or account persistence.

Acceptance

Public login and account saves stay off until callback, scope, owner live-test, token-health, and rollback evidence are recorded.

Rollback

Keep EVE SSO feature flags and Reports account saves disabled if any owner-pilot, callback, token, or scope evidence is missing.

Discord and email actions stay disabled until provider approval and signed smoke evidence are ready. Stripe, AdSense, telemetry, and search lanes stay gated until owner/provider evidence is ready.

Next Action

Close Discord, email, Stripe, AdSense, telemetry, and search verification evidence before enabling live sends, ads, payments, or analytics.

Acceptance

Provider actions stay disabled until provider credentials, smoke evidence, privacy review, and owner approval are recorded outside public pages.

Rollback

Disable provider feature flags and hide public provider actions if verification, privacy, or owner evidence is incomplete.

Protected monitoring is covered; recovery drill evidence remains the launch review item.

Next Action

Review production monitoring and recovery drill evidence before treating the app as fully operationally complete.

Acceptance

Monitoring evidence remains valid only if public status/health stay green and protected recovery evidence remains secret-safe.

Rollback

Keep recovery-drill and protected export actions admin-only until owner review passes.

Private corp dashboards stay gated until EVE SSO, role policy, token health, and audit logging pass. Protected intake and reviewer surfaces are ready for owner review before broader activation.

Next Action

Keep private corp dashboards, role sync, high-trust scopes, and alliance automation behind owner/provider review while public intake stays usable.

Acceptance

Private corp/alliance features stay gated until EVE SSO, role policy, token health, audit logging, and reviewer approval evidence are complete.

Rollback

Disable private dashboards, role sync, and write-action scopes if any high-trust evidence or owner approval is missing.

uses only public top-20 tool labels, sprint labels, public route labels, readiness labels, decision-lane labels, blocker counts, owner-review counts, and no-action safety booleans

keeps protected owner evidence values, setup packet bodies, support message bodies, private EVE data, account records, provider console details, tokens, credentials, private logs, and separate-project details excluded

does not start OAuth, call EVE or CCP, call providers, write database rows, save account reports, send email, create payment links, register Discord commands, load ads, flip feature flags, approve launch, or mutate external services

separates public top-20 tool review from live activation so BOSS can inspect the MVP without enabling EVE login, account saves, payments, ads, email, Discord, telemetry, or private dashboards

keeps one protected-review support lane visible only as a public-safe label while support request bodies, payment details, and protected ops evidence remain excluded

requires owner/provider evidence before any public EVE login exposure, Reports account saves, provider communications, Stripe support links, AdSense loading, Discord command activation, email sends, telemetry activation, or account persistence