Thoughts

Tat-Tally Session 54 complete summary: All Session 52 E2E audit findings are now fully resolved. This session handled the final two items plus the Sentry DSN deployment: 1. H4 (Sentry): Added @sentry/react to the registration app (last app missing it). Replaced stub sentry.ts with real Sentry.init() matching the other 5 apps. Wired initSentry() in main.tsx, switched to Sentry.ErrorBoundary in App.tsx. 2. L1 (Hardcoded port): Replaced hardcoded localhost:5176 in getEntryUrl() with VITE_ENTRANT_URL env var, falling back to window.location.origin. In production, all apps share the same origin so the fallback handles it. VITE_ENTRANT_URL is only needed for local dev. 3. H4-ENV (Sentry DSN): Found existing tat-tally project in Sentry (DSN already provisioned). Set VITE_SENTRY_DSN in Railway production env vars via Railway MCP. Triggered redeploy (deployment 2a5a86ec). Railway project details: projectId=7eec0cd1-4fe3-4bae-9bfc-89646eb7d3be, serviceId=fdf7aeb0-63a8-4f67-b85f-4c882120381f, environmentId=0cd206fa-91f7-4c3b-8240-f04365269f19 (production). All audit findings from Session 52 (B1, B2, H1-H5, M1-M6, L1, L2) are now complete. Remaining open items: A2P 10DLC registration (blocked on LLC/EIN), Supabase connection pool upgrade (pre-Norfolk), and Phase 12 Norfolk test event planning.

Tat-Tally Session 38 (2026-03-14): Infrastructure Hardening S18-S22 Completed all 5 infrastructure should-fix items from the pre-Norfolk audit: S18: Replaced custom ErrorBoundary class components in admin and display apps with Sentry.ErrorBoundary (matching judge/mc/entrant pattern). Errors now auto-report to Sentry instead of only console.error. S19: Added VITE_APP_VERSION as a Dockerfile build arg (defaults to "unknown"). Added to all 5 .env.example files. Pass git SHA at build time: docker build --build-arg VITE_APP_VERSION=$(git rev-parse --short HEAD) . S20: Added non-root user to Dockerfile production stage (addgroup/adduser + USER app). S21: Added HEALTHCHECK to Dockerfile using wget --spider http://localhost:3000/health with 30s interval and 5s timeout. S22: Changed CI node-version from 22 to 20, aligning with Dockerfile's node:20-alpine. Also in this session: Created GitHub repo (dave-tedder/tat-tally, private) and pushed all work from sessions 34-38 (117 files, 20k+ lines). Previously had no remote configured. Going forward, pushing after each session. Remaining should-fix items: S1 (Twilio signature validation), S8-S17 (error sanitization, DB locks, frontend resilience, safety guards). Multi-tenancy RLS (S3-S7) deferred past Norfolk.