Security

Fact ledger

Every number, decision and failure named on this desk traces to a line here. The canonical copy lives in company/product-facts.md in the calabrodesign repo; this is a mirror, and the build fails if a page cites an id that is not on this list.

A line marked open has no answer yet. Pages that would need it say so and stay empty rather than filling the space with something nobody checked.

IdClaimSourceLast verifiedStatus
P-1The product's name. Not answered yet.none found2026-09-21open
P-2What the product does, in one sentence. Not answered yet.none found2026-09-21open
P-3What the product refuses to be. Not answered yet.none found2026-09-21open
P-4What fieldpack is. Not answered yet; no spec or shipped code was found in calabrodesign or in the linked calabro-mcp pointer as of 2026-09-21.none found2026-09-21open
P-5What runlog is. Not answered yet; no spec or shipped code was found in calabrodesign or in the linked calabro-mcp pointer as of 2026-09-21.none found2026-09-21open
P-6What evalset is. Not answered yet; no spec or shipped code was found in calabrodesign or in the linked calabro-mcp pointer as of 2026-09-21.none found2026-09-21open
P-7What fixturegen is. Not answered yet; no spec or shipped code was found in calabrodesign or in the linked calabro-mcp pointer as of 2026-09-21.none found2026-09-21open
P-8What skilldiff is. Not answered yet; no spec or shipped code was found in calabrodesign or in the linked calabro-mcp pointer as of 2026-09-21.none found2026-09-21open
D-1Evalset grades with deterministic graders, not LLM-as-judge. What was cut to get there: LLM-as-judge grading. The reason is not recorded yet.Bryan, product-facts kickoff request, 2026-09-212026-09-21recorded
N-1Every number for this product. None were supplied and none reproduce from a repo or report in scope.none found2026-09-21open
V-1DNS provider and domain registrar for bryancalabro.com. Not confirmed.none found2026-09-21open
V-2Hosting is Vercel. It serves the calabrodesign site build; vercel.json sets the SPA rewrite and the output directory. Data held: static build output and analytics events (see V-4).vercel.json and README.md in calabrodesign2026-09-21recorded
V-3Source control is GitHub, in the bryancalabro org. calabrodesign and its sibling repos live there, and pull requests and Actions run against it. Data held: repo contents, commit history, Actions logs.the calabrodesign git remote and .github/workflows/2026-09-21recorded
V-4Analytics is Vercel Analytics plus Vercel Speed Insights, on calabrodesign only. Data held: pageview and performance telemetry. The app itself collects no personal data.package.json dependencies and README.md in calabrodesign2026-09-21recorded
V-5The AI provider is Anthropic, via Claude Code. It is used to build, audit and draft across every first-party repo. Data passed in: repo source and app-inventory sheet content.AGENTS.md and CLAUDE.md in calabrodesign2026-09-21recorded
V-6The company email vendor. Not confirmed. Do not assume Gmail is it.none found2026-09-21open
F-1qr-forge served a 404 on /favicons/og-image.jpg after its OG and icon set merged. Found during the 2026-09-19 host verification pass on qr.bryancalabro.com. Fixed: the wordless OG and icon set was corrected and re-verified, and the file now returns 200.app-inventory sheet, qr-forge row notes2026-09-21recorded
F-2On the same qr-forge merge, Bryan's review pass flagged relative OG URLs and an under-wired PNG apple-touch icon. The sheet records this as noted, not as resolved, unlike the 404 beside it.app-inventory sheet, qr-forge row notes2026-09-21open
T-1Any milestone before 2026-09-19: when the product was scoped, when each tool's build started. Not answered yet.none found2026-09-21open
T-22026-09-19, qr-forge host verification: the og-image 404 was found and fixed, and the relative-OG-URL and apple-touch issue was flagged (see F-2).app-inventory sheet, qr-forge row notes2026-09-21recorded
T-32026-09-21, company/product-facts.md drafted for Bryan's review.the product-facts drafting task2026-09-21recorded
T-42026-10-03, Bryan's review of company/product-facts.md is due.Bryan, product-facts kickoff request, 2026-09-212026-09-21recorded
T-52026-10-11, wave 2 starts, gated on Bryan's sign-off on company/product-facts.md.Bryan, product-facts kickoff request, 2026-09-212026-09-21recorded