May 19, 2026 · v6.0
Phase 6 — Polish & ops debt
statusaudit-log2fadpa
Trust
- Live status page at /status with per-component health (database, queue, jobs, analytics)
- AdminAuditLog with actor + IP + user-agent, retained 7 years
- 2FA enforced for the admin role via Clerk
- Counter-signed DPA returned within one business day at /security/dpa
Operational
- Cleanup-grace-period cron at 04:30 UTC drains 30-day-stale unpublished funnels
- Analytics-flush-v2 cron drains up to 20,000 events per 15 minutes
- Subscriber export now async-friendly via the developer API