Sprint: TCOIN production launch readiness

[KazanderDad]

Why

TCOIN is close enough to launch that the remaining risk is no longer ordinary code completeness; it is release alignment across GitHub, Vercel, remote Supabase, hosted smoke paths, Buy TCOIN configuration, OTP/signed-in flows, pay-link behaviour, and worker scheduling that CI cannot fully prove yet.

Coordination Objective

Coordinate a Preview-first, Production-second launch-readiness sprint for TCOIN. The sprint should prove the intended hosted environments, keep Buy TCOIN sandboxed before live approval, collect evidence inside each Goal, and leave Production merge/go-live decisions human-owned.

Scaffold Notes

• Scaffolded early from: GreenPill-TO/Genero, GreenPill Project, issue Goal: Align hosted release environments and remote Supabase readiness #74, and production-readiness interview on 2026-07-16.
• Still to finalize: exact secret values, Supabase linked-write approvals at time of action, Preview faucet funding details, Production seeded wallet availability, and Supabase-side scheduler implementation choice.

In Scope

• Configure/confirm GitHub Environment secrets and variables for Preview – tcoin and Production – tcoin where agent permissions allow.
• Confirm Vercel environment variables and retired aliases for Preview and Production.
• Align remote Supabase schema/API exposure and release-alignment workflow evidence, with no linked database write unless explicitly approved at the moment of action.
• Smoke Preview first, including signed-in OTP via hubert.cormac@gmail.com, faucet-funded pay-link create/resolve, and Buy TCOIN sandbox.
• Configure and prove Supabase-side indexer/onramp worker scheduling.
• Smoke Production after main merge, including a fresh post-merge Production pass.
• Keep NEXT_PUBLIC_ENABLE_BUY_TCOIN_CHECKOUT=false unless Buy TCOIN is fully configured and smoke-tested for the target environment.

Out Of Scope And Follow-On Candidates

• Full Dependabot/security backlog triage unless a vulnerability blocks launch smoke.
• CI automation for OTP and authenticated browser sessions; this sprint uses manual or agent-assisted Gmail OTP retrieval for speed.
• Live Buy TCOIN enablement before sandbox evidence and explicit human approval on the main path.
• Direct linked Supabase database writes without separate just-in-time human approval.

Brainstorm Summary

• Selected current-scope idea: four-Goal production-readiness sprint with Preview first, then Production.
• Strong follow-on candidates: seeded auth fixture for repeatable e2e, dependency/security triage sprint, automated hosted authenticated e2e, and mainnet seeded-wallet operational playbook.
• Rejected or out-of-bounds ideas: merging Buy TCOIN live and sandbox into one Goal, treating Preview smoke as sufficient for Production, and hiding evidence in a separate packet rather than each Goal.
• Evidence still useful: workflow run URLs, Vercel deployment URLs, Supabase schema/API checks, OTP screenshots/notes, pay-link token lifecycle notes, Buy TCOIN sandbox receipts, worker queue/cron health, and final Production smoke notes.

Sequencing

• Goal 1: Goal: Align hosted release environments and remote Supabase readiness #74 Align hosted release environments and remote Supabase readiness.
• Goal 2: Goal: Prove Preview sandbox smoke and Buy TCOIN sandbox #79 Prove Preview sandbox smoke, including Buy TCOIN sandbox and faucet-funded pay-link flow.
• Goal 3: Goal: Prove Supabase-side worker scheduling #80 Prove Supabase-side worker scheduling and queue drain behaviour.
• Goal 4: Goal: Prove Production smoke and live Buy TCOIN gate #81 Prove Production smoke and live Buy TCOIN gate.

Codebase Findings

• release-alignment-tcoin.yml already exists and can run wallet preflight, TorontoCoin ops checks, PostgREST reload, and optional smoke against SMOKE_BASE_URL.
• Existing issue Goal: Align hosted release environments and remote Supabase readiness #74 tracks the original remote/deployment release alignment gap and is now Goal 1 under this Sprint.
• PR [codex] promote dev workflow cleanup to main #77 is the current dev to main promotion PR; agents must not merge it because it targets main.

Guardrails

• GitHub Environment secrets/vars may be configured directly where permissions allow.
• Vercel env confirmation may be performed directly where permissions allow.
• Linked Supabase writes require separate explicit approval at the moment of action.
• Production must receive its own post-merge smoke pass before this Sprint closes.
• Evidence belongs in each Goal, not in a separate evidence-packet Task.
• If Buy TCOIN is not fully green, proceed with NEXT_PUBLIC_ENABLE_BUY_TCOIN_CHECKOUT=false.

Recommended Approach

Keep this as a lean four-Goal Sprint. Each Goal should be independently executable by Codex or a human operator, with evidence captured on the Goal and exact blockers recorded rather than silently bypassed.

Alternatives Considered

Option	Pros	Cons	Decision
Four Goals	Clear sequence, manageable issue count, evidence per lane	Requires careful dependency tracking	Chosen
Three Goals	Fewer issues	Worker scheduler risk gets buried	Rejected
Five Goals	More precise Buy TCOIN split	More overhead before launch	Deferred unless vetting recommends it

Evaluation Criteria

• Preview target release-alignment workflow completes green.
• Preview hosted smoke proves signed-in OTP, faucet-funded pay-link create/resolve, and Buy TCOIN sandbox.
• Supabase-side worker scheduling is configured and queue drain evidence is captured.
• Production target has its own post-merge smoke evidence.
• Buy TCOIN remains disabled unless the target environment is fully configured and smoke-tested.

Validation Plan

• GitHub release-alignment workflow for Preview and Production.
• Vercel deployment checks for TCOIN Preview and Production.
• Wallet preflight and TorontoCoin ops checks from the correct environment profile.
• Manual/agent-assisted Gmail OTP smoke using hubert.cormac@gmail.com.
• Faucet-funded pay-link create/resolve on Preview.
• Production read/resolve-only pay-link smoke until a seeded mainnet wallet is provided.
• Worker queue and scheduler health checks.

Project Metadata

• Project: GreenPill Project
• Priority: High
• Initial status: Scoped
• Labels: none
• Assignees: none

Goals And Tasks

• Goal: Align hosted release environments and remote Supabase readiness #74 Goal: Align hosted release environments and remote Supabase readiness.
• Task: Configure GitHub Environment secrets and vars for TCOIN release alignment #82 Task: Configure GitHub Environment secrets and vars for TCOIN release alignment.
• Task: Confirm Vercel Preview and Production environment configuration #83 Task: Confirm Vercel Preview and Production environment configuration.
• Task: Confirm remote Supabase schema/API alignment and release preflight readiness #84 Task: Confirm remote Supabase schema/API alignment and release preflight readiness.
• Goal: Prove Preview sandbox smoke and Buy TCOIN sandbox #79 Goal: Prove Preview sandbox smoke and Buy TCOIN sandbox.
• Task: Configure and smoke Buy TCOIN sandbox on Preview #85 Task: Configure and smoke Buy TCOIN sandbox on Preview.
• Task: Run Preview signed-in OTP wallet smoke #86 Task: Run Preview signed-in OTP wallet smoke.
• Task: Run Preview faucet-funded pay-link create/resolve smoke #87 Task: Run Preview faucet-funded pay-link create/resolve smoke.
• Goal: Prove Supabase-side worker scheduling #80 Goal: Prove Supabase-side worker scheduling.
• Task: Configure Supabase-side indexer/onramp scheduler #88 Task: Configure Supabase-side indexer/onramp scheduler.
• Task: Verify worker queue drain and health reporting #89 Task: Verify worker queue drain and health reporting.
• Task: Capture scheduler runbook evidence and failure handling #90 Task: Capture scheduler runbook evidence and failure handling.
• Goal: Prove Production smoke and live Buy TCOIN gate #81 Goal: Prove Production smoke and live Buy TCOIN gate.
• Task: Run Production deployment preflight and hosted smoke after main merge #91 Task: Run Production deployment preflight and hosted smoke after main merge.
• Task: Run Production signed-in OTP and pay-link read/resolve smoke #92 Task: Run Production signed-in OTP and pay-link read/resolve smoke.
• Task: Enforce live Buy TCOIN approval gate and disabled fallback #93 Task: Enforce live Buy TCOIN approval gate and disabled fallback.

Risks And Mitigations

• External env permissions may block direct configuration: record exact blocker and operator action.
• Linked Supabase writes may be required: stop for explicit approval before any write.
• Buy TCOIN may not be launch-ready: keep checkout disabled and launch without it if other paths are green.
• OTP delivery may be flaky: use Gmail browser for fastest retrieval and record timing/evidence.