Thoughts

Tat-Tally Session 38 (2026-03-14): Infrastructure Hardening S18-S22 Completed all 5 infrastructure should-fix items from the pre-Norfolk audit: S18: Replaced custom ErrorBoundary class components in admin and display apps with Sentry.ErrorBoundary (matching judge/mc/entrant pattern). Errors now auto-report to Sentry instead of only console.error. S19: Added VITE_APP_VERSION as a Dockerfile build arg (defaults to "unknown"). Added to all 5 .env.example files. Pass git SHA at build time: docker build --build-arg VITE_APP_VERSION=$(git rev-parse --short HEAD) . S20: Added non-root user to Dockerfile production stage (addgroup/adduser + USER app). S21: Added HEALTHCHECK to Dockerfile using wget --spider http://localhost:3000/health with 30s interval and 5s timeout. S22: Changed CI node-version from 22 to 20, aligning with Dockerfile's node:20-alpine. Also in this session: Created GitHub repo (dave-tedder/tat-tally, private) and pushed all work from sessions 34-38 (117 files, 20k+ lines). Previously had no remote configured. Going forward, pushing after each session. Remaining should-fix items: S1 (Twilio signature validation), S8-S17 (error sanitization, DB locks, frontend resilience, safety guards). Multi-tenancy RLS (S3-S7) deferred past Norfolk.