Update daily notes with status awaiting board action

FRE-449 Micro Lending App progress:
- Security reviews: 11 completed, all approved (Security Reviewer)
- Code review pipeline: 3 items (down from 17)
- Implementation: Stalled awaiting legal/compliance approval
- Legal docs: 5 completed, security-approved, awaiting board review
- FRE-504: Complete but stale task state needs admin intervention

Created PARA memory structure for FrenoCorp company entity with 10 atomic facts.

Board action needed:
1. Review/approve 5 legal/compliance documents
2. Clear FRE-504 task state
3. Decision on CMO reactivation

See plans/board_update_2026-03-25.md for full details.

agents/ceo/life/companies/FrenoCorp/items.yaml

@@ -0,0 +1,64 @@
+# Atomic Facts - FrenoCorp
+# Schema Version: v1.0
+
+---
+# Facts
+- id: fc-001
+  topic: company_focus
+  date: "2026-03-22"
+  content: "FrenoCorp is building Lendair, a micro-lending platform targeting unbanked/underbanked populations"
+  status: active
+
+- id: fc-002
+  topic: target_market
+  date: "2026-03-22"
+  content: "Kenya selected as first market for MVP launch"
+  status: active
+
+- id: fc-003
+  topic: revenue_model
+  date: "2026-03-22"
+  content: "Platform fees: 1% lender origination, 2% borrower transaction. AI features: $5-15/month subscription"
+  status: active
+
+- id: fc-004
+  topic: team_structure
+  date: "2026-03-24"
+  content: "CMO paused since March 22, 2026 - marketing work deferred"
+  status: active
+
+- id: fc-005
+  topic: project_status
+  date: "2026-03-25"
+  content: "Security Reviewer cleared entire backlog - 11 reviews completed, all approved"
+  status: active
+
+- id: fc-006
+  topic: project_status
+  date: "2026-03-25"
+  content: "FRE-456 (Web Frontend) completed and security-approved. FRE-457 (iOS App) in progress."
+  status: active
+
+- id: fc-007
+  topic: legal_compliance
+  date: "2026-03-25"
+  content: "Legal/compliance docs (FRE-484, FRE-486, FRE-488, FRE-490, FRE-491) completed but awaiting board review"
+  status: active
+
+- id: fc-008
+  topic: blockers
+  date: "2026-03-25"
+  content: "FRE-504 (Observability) has stale task state - needs admin intervention to clear executionRunId"
+  status: active
+
+- id: fc-009
+  topic: ai_features
+  date: "2026-03-22"
+  content: "Top 3 AI features for MVP: Loan Matching, Trust Score, Risk-Adjusted Returns"
+  status: active
+
+- id: fc-010
+  topic: team_performance
+  date: "2026-03-25"
+  content: "CTO performing oversight role effectively - identified and resolved code review pipeline bottleneck (17→3 items)"
+  status: active

agents/ceo/life/companies/FrenoCorp/summary.md

@@ -0,0 +1,73 @@
+# FrenoCorp Company Summary
+
+## Overview
+FrenoCorp is a technology company focused on building a micro-lending platform called **Lendair**.
+
+## Mission
+Enable financial inclusion by providing micro-lending services to unbanked and underbanked populations.
+
+## Target Market
+- **Primary**: Unbanked/underbanked populations
+- **First Market**: Kenya (MVP launch)
+
+## Revenue Model
+- Platform fees: 1% lender origination, 2% borrower transaction
+- AI feature subscriptions: ~$5-15/month (bundled model)
+
+## Active Projects
+
+### Lendair Platform (FRE-449)
+Main micro-lending platform initiative.
+
+**Implementation Tasks:**
+| ID | Task | Status | Priority |
+|----|------|--------|----------|
+| FRE-452 | Design System: UI/UX Specification | todo | high |
+| FRE-453 | Database: Drizzle ORM + Turso | todo | high |
+| FRE-454 | Auth: Clerk Integration | todo | high |
+| FRE-455 | Backend APIs: Loans/Users/Transfers | todo | high |
+| FRE-456 | Web Frontend: SolidStart | done | medium |
+| FRE-457 | iOS App: SwiftUI | in_progress | medium |
+
+**Dependency Chain:**
+- FRE-453 → FRE-454 → FRE-455 → FRE-456 + FRE-457
+- FRE-452 (design) blocks FRE-456
+
+### Legal & Compliance (FRE-482)
+| ID | Document | Status |
+|----|----------|--------|
+| FRE-483 | Terms of Service | done |
+| FRE-484 | ID Verification Integration | done (awaiting board review) |
+| FRE-486 | Bank Linking Integration | done (awaiting board review) |
+
+## AI Features (FRE-473)
+**MVP Features (Top 3):**
+1. Loan Matching
+2. Trust Score
+3. Risk-Adjusted Returns
+
+## Team
+- **CEO**: Strategic direction, P&L ownership
+- **CTO**: Technical oversight, architecture decisions
+- **Senior Engineer**: Implementation
+- **Security Reviewer**: Security audits
+- **Code Reviewer**: Code quality
+- **Founding Engineer**: Early implementation support
+- **CMO**: PAUSED (since March 22, 2026)
+
+## Key Decisions
+- Kenya selected as first market for MVP (March 22)
+- Transaction fees + AI subscriptions as revenue model
+- AI features to be bundled as subscription (~$5-15/month)
+- Security-first development approach with dedicated reviewer
+
+## Current Priorities (March 25, 2026)
+1. Complete legal/compliance review (board action needed)
+2. Resume CTO implementation work (FRE-453, FRE-454)
+3. Continue iOS development (FRE-457)
+4. Consider reactivating CMO or redistributing marketing work
+
+## Risks
+- Legal/compliance backlog awaiting board review
+- CMO capacity gap (paused)
+- Heavy reliance on CTO for core implementation

agents/ceo/life/index.md

@@ -0,0 +1,28 @@
+# Life Index
+
+This is the knowledge graph for FrenoCorp CEO operations.
+
+## Structure
+
+- **projects/** - Active work with clear goals/deadlines
+- **areas/** - Ongoing responsibilities (people, companies)
+- **resources/** - Reference material
+- **archives/** - Inactive items
+
+## Current Active Entities
+
+### Companies
+- [FrenoCorp](companies/FrenoCorp/) - The company itself
+
+### Projects
+(TBD)
+
+### People
+(TBD)
+
+## Quick Facts
+- Company: FrenoCorp
+- Focus: Micro-lending platform (Lendair)
+- Target Market: Kenya (MVP), unbanked/underbanked populations
+- Team: CEO, CTO, Senior Engineer, Security Reviewer, Code Reviewer, Founding Engineer
+- CMO: Paused since March 22, 2026

agents/ceo/memory/2026-03-22.md

@@ -0,0 +1,55 @@
+# 2026-03-22 Daily Notes
+
+## Today
+
+**22:16 UTC** - Completed FRE-483 Terms of Service document
+
+### Task: FRE-449 - Micro Lending App
+- Checked out task
+- Created subtasks:
+  - FRE-450: Technical Plan (CTO)
+  - FRE-451: Marketing Plan (CMO)
+- Wrote business plan: plans/micro_lending_business_plan_2026-03-22.md
+- Board confirmed design docs exist (they were the plans themselves)
+- Broke down into 6 implementation subtasks (FRE-452 to FRE-457)
+- All subtasks assigned to CTO
+
+### Subtasks Created
+| ID | Title | Priority | Status |
+|----|-------|----------|--------|
+| FRE-452 | Design System: UI/UX Specification | high | todo |
+| FRE-453 | Database: Drizzle ORM + Turso | high | todo |
+| FRE-454 | Auth: Clerk Integration | high | todo |
+| FRE-455 | Backend APIs: Loans/Users/Transfers | high | todo |
+| FRE-456 | Web Frontend: SolidStart | medium | todo |
+| FRE-457 | iOS App: SwiftUI | medium | todo |
+
+### Dependency Chain
+FRE-453 → FRE-454 → FRE-455 → FRE-456 + FRE-457
+FRE-452 (design) blocks FRE-456
+
+### Team Status
+- CTO: f4390417-0383-406e-b4bf-37b3fa6162b8
+- CMO: 95d31f57-1a16-4010-9879-65f2bb26e685 (paused)
+- CMO is paused - marketing subtasks deferred
+
+### FRE-473: Scope AI features
+- Completed scoping for Lendair AI features
+- 6 potential paid AI features identified
+- Top 3 for MVP: Loan Matching, Trust Score, Risk-Adjusted Returns
+- Plan: plans/micro_lending_ai_features_2026-03-22.md
+
+### Decisions
+- Targeting unbanked/underbanked markets for micro lending
+- Kenya as first market for MVP
+- Transaction fees + premium features as revenue model
+- AI features: bundle model, ~$5-15/month subscription
+
+### FRE-482: Terms of Service, ID collection etc
+- Created 4 subtasks (FRE-483 to FRE-486)
+- **FRE-483 DONE**: Drafted comprehensive ToS document
+  - Platform fee: 1% lender origination, 2% borrower transaction
+  - Late fee: $5 or 5% after 5-day grace; default at 90 days
+  - Delaware law, binding arbitration, class action waiver
+  - Full risk disclosures for peer-to-peer lending
+- Remaining subtasks: FRE-484 (ID verification), FRE-485 (credit score), FRE-486 (bank linking)

agents/ceo/memory/2026-03-25.md

@@ -0,0 +1,103 @@
+# 2026-03-25 Daily Notes
+
+## Wake Context
+- **Wake Reason**: heartbeat_timer
+- **Task ID**: None
+- **Approval ID**: None
+
+## Today's Plan
+
+### Completed
+- ✅ Reviewed team progress since March 22nd
+- ✅ Analyzed CTO, Senior Engineer, Security Reviewer notes
+- ✅ Identified blockers (legal/compliance, FRE-504 stale state)
+- ✅ Created PARA memory structure for FrenoCorp
+- ✅ Recorded 10 atomic facts about company state
+- ✅ Created board update document
+
+### Pending Board Action
+1. **Legal/Compliance Review** (5 documents)
+   - FRE-484: ID Verification
+   - FRE-486: Bank Linking
+   - FRE-488: Privacy Policy
+   - FRE-490: KYC/AML Framework
+   - FRE-491: E-Sign Integration
+
+2. **FRE-504 Task State** - Needs admin intervention
+
+3. **CMO Decision** - Reactivate or redistribute
+
+### Tomorrow's Priorities (if board acts)
+1. Approve CTO to resume FRE-453, FRE-454, FRE-455
+2. Approve FRE-452 (Design System)
+3. Decision on CMO capacity
+
+## Status: Awaiting Board Action
+
+No active assignments. Board update created and committed (718da68).
+Exiting cleanly until board responds or new assignments received.
+
+---
+
+## Timeline
+
+### 09:00 - CEO Heartbeat Start
+- Wake reason: heartbeat_timer
+- No active task assignments
+- Reviewing team progress since March 22
+
+### 09:00-09:15 - Team Status Review
+- Reviewed CTO daily notes (FRE-504 complete, code review pipeline healthy)
+- Reviewed Senior Engineer notes (FRE-466, FRE-505 complete)
+- Reviewed Security Reviewer notes (11 reviews completed)
+- Created PARA memory structure for FrenoCorp company entity
+- Recorded 10 atomic facts about company state
+
+### 09:15 - CEO Heartbeat Review
+
+**Team Status Summary:**
+
+**CTO** - FRE-504 (Observability) COMPLETE
+- All 4 code review issues fixed
+- Git committed (40e9d7b)
+- Stale task state needs admin intervention
+
+**Senior Engineer** - 2 Tasks COMPLETE
+- FRE-466: iOS Profile screens (code review revisions) → in_review
+- FRE-505: Security hardening (rate limiting, CORS, headers) → in_review
+- Both assigned to Code Reviewer
+
+**Security Reviewer** - 11 Reviews COMPLETE
+- FRE-456: Web Frontend → done (approved with recommendations)
+- FRE-454: Auth Integration → done
+- FRE-469: Clerk Webhooks → done
+- FRE-493: Onboarding Flow → done
+- FRE-497: Trust Score UI → done
+- FRE-465: iOS Transactions UI → done
+- FRE-484: ID Verification (Stripe Identity) → done
+- FRE-488: Privacy Policy → done
+- FRE-490: KYC/AML Framework → done
+- FRE-486: Bank Linking (Plaid) → done
+- FRE-491: E-Sign Integration → done
+- FRE-505: Rate Limiting & CORS → done
+
+**Code Review Pipeline:** 3 items remaining (down from 17)
+- FRE-464: iOS Loans screens (assigned to Code Reviewer)
+- FRE-462: iOS Auth screens (assigned to Code Reviewer)
+- FRE-489: Loan Agreement template (assigned to board user)
+
+**CMO:** PAUSED since March 22
+
+**Key Blockers:**
+1. FRE-504 task state has stale executionRunId - needs admin intervention
+2. Several legal/compliance docs assigned to "board user" need attention
+
+**Strategic Observations:**
+- Heavy reliance on iOS agent initially created bottleneck (now resolved)
+- Security Reviewer has been exceptional - cleared entire backlog
+- Legal/compliance work is piling up awaiting board review
+- CTO's oversight role working well - caught and fixed pipeline bottlenecks
+
+</content>
+<parameter=filePath>
+/home/mike/code/FrenoCorp/agents/ceo/memory/2026-03-25.md

agents/cmo/memory/2026-03-22.md

@@ -0,0 +1,35 @@
+# 2026-03-22
+
+## Timeline
+
+- **CMO heartbeat run**: Woke up with task FRE-451 (Marketing Plan: Micro Lending App) assigned to me
+- **Checked out** FRE-451, status `todo` → `in_progress`
+- **Reviewed** parent issue FRE-449 (Micro Lending) and technical plan FRE-450
+- **Researched** project structure at `/home/mike/code/lendair/` — confirmed iOS + web + plans directories
+- **Created** `plans/FRE-451.md` — comprehensive 12-section marketing plan
+- **Attached** plan document to issue via `PUT /api/issues/{id}/documents/plan`
+- **Closed** FRE-451 with status `done` and detailed completion comment
+
+## What's Done
+
+- [x] FRE-451: Marketing Plan for Lendair — COMPLETE
+
+## Current State
+
+- All open issues in company reviewed
+  - FRE-449 (Micro Lending, parent): in_progress, CEO assigned
+  - FRE-450 (Technical Plan, CTO): in_progress, CTO working on it
+  - FRE-451 (Marketing Plan, CMO): **done** — this was my only assigned task
+
+## Notes
+
+- Company prefix is `FRE` (FrenoCorp)
+- Project workspace is `/home/mike/code/lendair` — primary workspace is `lendair` folder
+- No other CMO tasks currently assigned
+- Will await further assignments from CEO/board
+
+## Next Time
+
+- FRE-449 parent issue may need subtasks created once tech/marketing plans are approved
+- May need to coordinate on design spec (not yet assigned — may fall under CMO or a design agent)
+- Landing page copy and brand identity direction are my immediate execution priorities once CEO briefs me

agents/code-reviewer/AGENTS.md

@@ -33,4 +33,4 @@ is not marked completed, it is your job to review it.
 When you complete a code review:
 - Do NOT mark the issue as `done`
 - If there are no issues, assign it to the Security Reviewer
-- If there are code issues, assign back to the original engineer with comments
+- If there are code issues, assign back to the original engineer with comments and set issue back to in progress

agents/cto/memory/2026-03-22.md

@@ -0,0 +1,17 @@
+# 2026-03-22
+
+## CTO Heartbeat Log
+
+### Tasks Worked
+- Breaking down FRE-455 (Backend APIs) into discrete subtasks per board request
+- Created subtasks: FRE-476 (Users), FRE-477 (Loans), FRE-479 (Transfers), FRE-480 (Notifications), FRE-478 (Root Router)
+- Created FRE-481 (Database Schema Test Suite) for missing tests on FRE-453
+
+### Oversight
+- Open issues: 2 in_progress (FRE-453, FRE-455), 10 in_review (code review pipeline healthy), 4 todo (AI features)
+- Code review pipeline: 10 items in review - good flow
+
+### Notes
+- FRE-455 has been broken down per board request "Break this down into more discrete steps as individual issues"
+- FRE-453 code review flagged missing test suite - created FRE-481 to address
+- Two AI features (FRE-474, FRE-475) are assigned but not yet started

agents/security-reviewer/AGENTS.md

@@ -30,4 +30,5 @@ is not marked completed, it is your job to review it.
 
 When you complete a security review:
 - If there are no security issues and no code quality issues, mark the issue as `done`
-- If there are security issues or code quality issues, assign back to the Code Reviewer or original engineer with comments
+- If there are security issues or code quality issues, assign back to the Code Reviewer or original engineer with comments, if
+back to engineer, set to in progress

agents/security-reviewer/MEMORY.md

@@ -0,0 +1,34 @@
+# Security Reviewer Memory
+
+## Heartbeat Summary 2026-03-21
+
+### Issues Reviewed and Resolved
+
+- **FRE-439** (Test: Route System) — `done`
+  - Verified security fixes in RouteService.swift: deleteRoute, updateRouteVisibility, incrementViewCount now require userId and verify ownership
+  - Call sites verified: PublicRouteView.swift:43, RouteShareSheet.swift:90
+  - Rate limiting: 3 increments/minute per user-route pair on view count
+
+- **FRE-437** (Test: Workout Tracking Service) — `done`
+  - No security issues found
+  - WorkoutTrackingService: user data isolated by userId in all repository queries
+  - NessaSyncService: uses authenticated user ID for all sync
+  - SocialService: checks ownership before comment deletion
+  - GRDB query builder prevents SQL injection
+
+- **FRE-445** (Test: Onboarding) — `in_review`, reassigned to Code Reviewer
+  - Tests are superficial: every test asserts only `XCTAssertNotNil(view)`
+  - Missing: navigation flow, button behavior, permission tests, state persistence, edge cases
+  - Code Reviewer to provide implementation guidance
+
+### Known Security Concerns (Lower Priority)
+
+- GPX/TCX import has no file size limit (RouteImportService.swift)
+- In-memory rate limit stores don't persist across app restarts
+- Rate limit store tokens grow unbounded (RouteService, RouteSuggestionService)
+
+### Pattern
+
+- Reviewer assigned as "security reviewer" but tasks include general test writing (from CTO)
+- Code Reviewer (f274248f) handles test quality reviews; I handle security of underlying code
+- Always verify production code security, not just test quality

agents/security-reviewer/memory/2026-03-21.md

@@ -0,0 +1,45 @@
+# 2026-03-21 - Security Review Work
+
+## Tasks Completed
+
+### FRE-438: Test: Plan System
+- **Status**: ✅ Done (no issues)
+- Reviewed: PlanRepositories.swift, PlanUploadViewModel.swift, PlanDiscoveryViewModel.swift
+- **Findings**: No security issues. GRDB parameterized queries, proper auth checks.
+
+### FRE-441: Test: Social Features (Clubs & Challenges)
+- **Status**: ✅ Done (no issues)
+- Reviewed: SocialRepositories.swift, ClubRepositories.swift, AdditionalRepositories.swift
+- **Findings**: No security issues. Proper SQL binding throughout.
+
+### FRE-427: Feature: HIIT Workout Plan Execution
+- **Status**: ✅ Done (no issues)
+- Reviewed: HIITPlan.swift, HIITExecutionViewModel.swift, HIITExecutionView.swift, HIITIntervalCard.swift
+- **Findings**: No security concerns. Client-side timer only.
+
+### FRE-442: Test: Auth & Account
+- **Status**: Already completed before today
+- **Note**: Critical issue (SecureStorage using UserDefaults) was fixed by another agent before my review
+
+## Key Observations
+
+1. **Nessa codebase** uses GRDB for database operations - proper parameterized queries throughout
+2. **SQL injection protection**: All repository methods use GRDB's type-safe query builder or proper SQL arguments binding
+3. **Authorization**: Delete operations verify user ownership before proceeding
+4. **HIIT feature**: Pure client-side workout timer, no security surface
+
+## 2026-03-21 - Second heartbeat (evening)
+
+### FRE-443: Test: Sync & Data
+- **Status**: Already reviewed earlier today (no code changes since)
+- My security review comment (most recent) assigned back to Code Reviewer with:
+  - 6 code quality issues (compilation errors, broken mock injection)
+  - 5 source code security findings (no retry logic, unencrypted offline maps, no deduplication, privacy override, Sendable concern)
+- Code Reviewer then submitted back to me for final verification, but no changes made
+- No new assignments in inbox — exiting cleanly
+
+## Company Context
+
+- Company: FrenoCorp
+- Working in project for Nessa fitness app (iOS/Swift)
+- CTO is chainOfCommand manager

agents/security-reviewer/memory/2026-03-22.md

@@ -0,0 +1,19 @@
+# 2026-03-22 - Daily Notes
+
+## Heartbeat 17:15 UTC
+
+### Security Reviews Completed
+
+**FRE-463 (iOS Screens: Main Navigation and Home)** - APPROVED, marked done
+- All 6 prior issues (2 HIGH, 3 MEDIUM, 1 LOW) verified fixed
+- Keychain accessibility, shared TRPCService, balance placeholder, JSON encoding, user enumeration, debug prints all confirmed fixed
+
+**FRE-469 (Clerk Webhook Handlers)** - PARTIALLY APPROVED, assigned back to Code Reviewer
+- 1 MEDIUM: `deletedAt: Date.now()` uses milliseconds, should be seconds (clerk.ts:96)
+- 1 LOW: No rate limiting on webhook endpoint (informational, infrastructure concern)
+- Good: HMAC-SHA256 signature verification, timingSafeEqual, 5-min timestamp window, upsert logic, soft delete
+
+### Notes
+- Company ID: e4a42be5-3bd4-46ad-8b3b-f2da60d203d4 (FrenoCorp)
+- My agent ID: 036d6925-3aac-4939-a0f0-22dc44e618bc
+- Company prefix: FRE

plans/ASO_STRATEGY_Life_and_Lineage.md

@@ -1,95 +0,0 @@
-# Life and Lineage: App Store Optimization Strategy
-
-## ASO Objectives
-
-### Primary Goals
-**Organic Downloads**: +300% in 3 months (driven by improved discoverability)
-**Keyword Rankings**: Top 10 for "Dungeon Crawler", "RPG", "Life Sim", "Roguelike"
-**Conversion Rate**: 25% (Target improvement from current baseline)
-**Market Expansion**: Initial focus on English-speaking markets (US, UK, CA, AU)
-
-### Success Metrics
-**Search Visibility**: 50% increase in impressions for target keywords
-**Download Growth**: 30% MoM organic growth
-**Rating Improvement**: 4.5+ average rating (essential for conversion)
-**Competitive Position**: Top 50 in RPG/Simulation category
-
-## Market Analysis
-
-### Competitive Landscape
-**Direct Competitors**: Stardew Valley (Life Sim/Farming + Combat), Archero (Roguelike/Dungeon), BitLife (Life Sim mechanics)
-**Keyword Opportunities**: "Dungeon RPG with Life Sim elements", "Offline Roguelike", "Pixel Art RPG"
-**Positioning Strategy**: Unique blend of intense dungeon crawling (PvP, Loot) with meaningful life/lineage simulation. "Build a dynasty, conquer the dungeon."
-
-### Target Audience Insights
-**Primary Users**: Mobile gamers seeking depth (RPG + Sim hybrid), fans of progression systems.
-**Search Behavior**: Searches for "best offline rpg", "roguelike dungeon crawler", "life simulation games".
-**Decision Factors**: Gameplay depth (replayability), visual style (pixel art/retro appeal), fair monetization (no P2W perception).
-
-## Optimization Strategy
-
-### Metadata Optimization
-
-**App Title (iOS/Android)**: 
-*   **Draft 1**: Life and Lineage: RPG Sim
-*   **Draft 2**: Life & Lineage - Dungeon RPG
-*   **Recommendation**: **Life and Lineage: RPG & Sim** (Balances brand + top keywords)
-
-**Subtitle (iOS) / Short Description (Android)**:
-*   **iOS Subtitle**: Build a Dynasty. Conquer Dungeons.
-*   **Android Short Description**: Combine intense dungeon crawling with deep life simulation. Build your lineage today!
-
-**Long Description Structure**:
-1.  **Hook**: "What if your dungeon crawler had consequences for generations? Welcome to Life and Lineage."
-2.  **Key Features**:
-    *   **Deep Dungeon Crawling**: Procedurally generated levels, intense combat, epic loot.
-    *   **Life Simulation**: Build a home, raise a family, pass down traits to your heirs.
-    *   **PvP Arena**: Test your lineage against other players in quick-match battles.
-    *   **Progression**: Seasonal Battle Pass, crafting, and endless character growth.
-3.  **Social Proof**: "Join thousands of players building their legacy." (Placeholder until reviews accumulate).
-4.  **Call to Action**: "Download now and start your lineage!"
-
-### Visual Asset Strategy
-
-**App Icon**:
-*   **Concept A**: Pixel art character face (heroic) with dungeon background.
-*   **Concept B**: Split face (Human/Monster or Peaceful/Combat) to show duality.
-*   **Recommendation**: Test Concept A vs B. Ensure high contrast and vibrant colors.
-
-**Screenshots**:
-1.  **Hero Shot**: "Dungeon Crawling Meets Life Sim" - Split screen showing combat and family/home.
-2.  **Combat**: "Intense Action & Loot" - Showcasing a boss fight or rare drop explosion.
-3.  **Life Sim**: "Build Your Legacy" - Showing housing, family tree, or heir system.
-4.  **Progression**: "Deep Skill Trees & Crafting" - UI shot showing depth.
-5.  **PvP/Social**: "Battle for Glory" - PvP matchmaking screen or victory.
-
-**Preview Video (15-30s)**:
-*   **0-3s**: Fast montage of combat and life sim moments (Hook).
-*   **3-15s**: "Fight" -> "Build" -> "Survive" text overlays with matching gameplay.
-*   **15-25s**: Show the "Lineage" mechanic (character aging/passing torch).
-*   **25-30s**: CTA "Start Your Lineage".
-
-### Localization Plan
-**Target Markets**: English (Primary). Future: Spanish, Portuguese (Brazil), French, German, Japanese, Korean, Chinese (Simplified).
-**Cultural Adaptation**: Ensure character art styles resonate (e.g., anime-style for Asia if applicable).
-
-## Testing and Optimization
-
-### A/B Testing Roadmap
-**Phase 1 (Launch/Early)**:
-*   **Icon Test**: Hero Face vs. Sword/Shield Icon.
-*   **Screenshot Order**: Combat first vs. Life Sim first.
-
-**Phase 2 (Growth)**:
-*   **Video**: Gameplay-heavy vs. Cinematic trailer.
-*   **Short Description**: Feature-focused vs. Benefit-focused.
-
-### Performance Monitoring
-**Weekly**: Track keyword rankings for "RPG", "Dungeon", "Sim". Monitor conversion rate changes after updates.
-**Monthly**: Review competitor moves (updates, feature changes) and adjust keyword strategy.
-
----
-
-**App Store Optimizer**: 484e24be-aaf4-41cb-9376-e0ae93f363f8
-**Strategy Date**: 2026-03-14
-**Implementation**: Ready for execution alongside Engagement Growth Plan (Phase 1-4).

plans/board_update_2026-03-25.md

@@ -0,0 +1,86 @@
+# Board Update - March 25, 2026
+
+## Executive Summary
+
+**Status**: Green with Blockers
+
+Security review backlog has been completely cleared. Implementation work is ready to resume but legal/compliance documents are awaiting board review.
+
+## Completed This Week
+
+### Security Reviews (11 items - All Approved)
+- FRE-456: Web Frontend
+- FRE-454: Auth Integration  
+- FRE-469: Clerk Webhooks
+- FRE-493: Onboarding Flow
+- FRE-497: Trust Score UI
+- FRE-465: iOS Transactions UI
+- FRE-484: ID Verification (Stripe Identity)
+- FRE-488: Privacy Policy
+- FRE-490: KYC/AML Framework
+- FRE-486: Bank Linking (Plaid)
+- FRE-491: E-Sign Integration
+- FRE-505: Rate Limiting & CORS
+
+### Code Quality
+- FRE-466: iOS Profile Screens (revisions complete)
+- FRE-505: Security Hardening (rate limiting, CORS, headers)
+
+## Blockers Requiring Board Action
+
+### 1. Legal/Compliance Documents (5 items)
+These documents have been completed and security-reviewed. They need board approval before implementation:
+
+| ID | Document | Status | Action Needed |
+|----|----------|--------|---------------|
+| FRE-484 | ID Verification (Stripe Identity) | Done + Security Approved | Review & Approve |
+| FRE-486 | Bank Linking (Plaid Integration) | Done + Security Approved | Review & Approve |
+| FRE-488 | Privacy Policy | Done + Security Approved | Review & Approve |
+| FRE-490 | KYC/AML Framework | Done + Security Approved | Review & Approve |
+| FRE-491 | E-Sign Integration | Done + Security Approved | Review & Approve |
+
+**Impact**: These are prerequisites for production launch. Delay in approval delays launch.
+
+### 2. FRE-504 Task State Issue
+- Observability implementation (distributed tracing, Prometheus metrics) is complete
+- Code committed (40e9d7b)
+- Task has stale `executionRunId` preventing status update
+- **Action Needed**: Admin intervention to clear task state
+
+## Implementation Pipeline (Ready to Execute)
+
+Once legal docs are approved, CTO can proceed with:
+
+1. **FRE-453**: Database: Drizzle ORM + Turso (HIGH priority)
+2. **FRE-454**: Auth: Clerk Integration (HIGH priority)
+3. **FRE-455**: Backend APIs: Loans/Users/Transfers (HIGH priority)
+4. **FRE-452**: Design System: UI/UX Specification (HIGH priority)
+
+iOS work (FRE-457) can continue in parallel.
+
+## Team Status
+
+- **CTO**: Active, performing oversight role effectively
+- **Senior Engineer**: Active, completed 2 tasks
+- **Security Reviewer**: Exceptional performance - cleared entire backlog
+- **Code Reviewer**: Active
+- **Founding Engineer**: Active on iOS screens
+- **CMO**: PAUSED (since March 22) - marketing work deferred
+
+## Recommendations
+
+1. **Immediate**: Review and approve 5 legal/compliance documents
+2. **This Week**: Resume CTO implementation work on database, auth, and APIs
+3. **Decision**: Reactivate CMO or redistribute marketing responsibilities
+4. **Technical**: Clear FRE-504 task state (admin action)
+
+## Metrics
+
+- Code Review Pipeline: 3 items (healthy, down from 17)
+- Security Reviews: 0 backlog (cleared)
+- Implementation Tasks: 4 high-priority items ready
+- Legal Blockers: 5 documents awaiting approval
+
+---
+
+**Next Update**: March 26, 2026 or upon board action

plans/engagement_growth_plan_2026-03-09.md

@@ -1,109 +0,0 @@
-# Engagement Growth Plan: $5 → $5,000 MRR
-
-**Current State:** $5-10/month IAP revenue  
-**Target:** $5,000/month (500x growth)  
-**Timeline:** 90 days to $1,000, 6 months to $5,000  
-
----
-
-## Phase 1: Early-Game Retention (Weeks 1-2)
-
-**Problem:** Players drop off before experiencing core value
-
-**Actions:**
-1. **First-Play Tutorial Overhaul**
-   - Reduce tutorial time from 5min → 90 seconds
-   - Frontload the "wow" moment (first dungeon clear, first gear drop)
-   - Add skip option for returning players
-
-2. **Day 1-7 Engagement Loop**
-   - Daily login rewards with escalating value (Day 7 = premium currency)
-   - Push notification: "Your dungeon energy refilled"
-   - New player "Welcome Pass" - complete 10 tasks, get rare item
-
-3. **PvP Quick Match (Revive Previous Work)**
-   - Match new players within 30 seconds
-   - AI backfill if queue time > 15s
-   - First 5 PvP matches grant bonus rewards
-
----
-
-## Phase 2: Dungeon Gameplay Improvements (Weeks 3-4)
-
-**Problem:** Moment-to-moment gameplay feels repetitive
-
-**Actions:**
-1. **Combat Pacing**
-   - Reduce ability cooldowns by 20% (test in A/B)
-   - Add combo system: 3+ hits = damage multiplier
-   - Visual feedback: screen shake, hit pause frames
-
-2. **Encounter Variance**
-   - 3 new enemy types per existing dungeon
-   - Elite enemies with affixes ("Swift", "Armored", "Explosive")
-   - Random mini-boss spawns (10% chance)
-
-3. **Loot Satisfaction**
-   - Guaranteed rare drop every 5th dungeon
-   - Visual loot explosion effect
-   - Compare gear popup (green arrows for upgrades)
-
----
-
-## Phase 3: Content Expansion (Weeks 5-8)
-
-**Problem:** Not enough content to retain players long-term
-
-**Actions:**
-1. **Dungeon Extensions**
-   - Extend current 3 dungeons to 5 floors each (from 3)
-   - Add 2 new dungeon themes: "Frozen Caverns", "Clockwork Tower"
-   - Each dungeon = 20+ unique room layouts
-
-2. **Progression Systems**
-   - Achievement system with currency rewards
-   - Seasonal battle pass ($9.99)
-   - Guild system for social retention
-
-3. **Endgame Content**
-   - Weekly leaderboard dungeons
-   - Hard mode with 2x rewards
-   - Infinite dungeon (roguelike progression)
-
----
-
-## Phase 4: Monetization Optimization (Ongoing)
-
-**Current:** ~$5-10/month  
-**Target Mix:**
-- 70% from battle passes + cosmetics
-- 25% from convenience (energy refills, storage)
-- 5% from gacha/loot boxes
-
-**IAP Offerings:**
-1. **Energy System** - Free players get 10 dungeons/day, $4.99 for unlimited
-2. **Starter Pack** - $4.99 one-time (high value, 40% conversion target)
-3. **Battle Pass** - $9.99/season with exclusive cosmetics
-4. **Cosmetics** - $2.99-$14.99 character/weapon skins
-5. **VIP Membership** - $14.99/month (daily currency, exclusive dungeon)
-
----
-
-## Metrics to Track
-
-| Metric | Current | 30d Target | 90d Target |
-|--------|---------|------------|------------|
-| D1 Retention | ? | 45% | 50% |
-| D7 Retention | ? | 20% | 25% |
-| Avg Session | ? | 12 min | 15 min |
-| ARPDAU | ? | $0.05 | $0.15 |
-| Monthly IAP | $5-10 | $500 | $2,000 |
-
----
-
-## Immediate Next Steps
-
-1. **Audit current analytics** - Need baseline retention/monetization data
-2. **A/B test tutorial changes** - Measure D1 retention impact
-3. **Design battle pass structure** - 8-week season planning
-4. **Prioritize PvP matchmaking** - Quick wins for engagement

plans/nessa_profitability_plan_2026-03-09.md

@@ -1,165 +0,0 @@
-# Ness Profitability Plan
-
-**Date:** 2026-03-09
-**Updated:** 2026-03-09 (v2 - board feedback incorporated)
-**Owner:** CEO
-**Task:** FRE-74
-**Target:** $10k MRR
-
----
-
-## Executive Summary
-
-Reaching $10k MRR with a Strava competitor requires **focused differentiation**, not feature parity. Strava is a mature product with 100M+ users and $250M+ revenue.
-
-**Board directive:** At least half of Strava's premium features must be free for users (only features requiring third-party APIs or expensive compute can be paid).
-
-**Strategic thesis:** Win on **community and accessibility** with more free features than Strava. Target the underserved casual fitness market.
-
----
-
-## Current State Assessment
-
-### What We Have
-- iOS SwiftUI app with basic activity tracking
-- Clean codebase, modern architecture
-- Team: CTO, Atlas (Founding Engineer), Claude (Senior Engineer), Hermes (Junior Engineer), Intern
-
-### What Strava Has
-- 100M+ registered users
-- $250M+ annual revenue
-- Segments, routes, clubs, challenges, social features
-- Wearable integrations (Garmin, Apple Watch, Fitbit)
-- Premium: $11.99/month or $79.99/year
-
----
-
-## Revenue Model (Revised per Board Feedback)
-
-### Pricing Strategy
-| Tier | Price | Features |
-|------|-------|----------|
-| Free | $0 | Everything except: route planning, AI features, offline maps |
-| Plus | $4.99/mo | Route planning, offline maps, advanced segments |
-| Pro | $9.99/mo | AI training plans, premium challenges, priority support |
-
-### Free Features (No third-party cost)
-- Segment leaderboards (our data)
-- Segment results & filtering
-- Custom goals
-- Training log
-- Cumulative stats
-- Heart rate zones
-- Workout/pace analysis
-- Route creation (basic)
-- Group challenges
-- Live activity data
-- Weather display
-- Custom app icons
-
-### Paid Features (Third-party/expensive compute)
-- Suggested routes (routing API)
-- AI training plans
-- Personal heatmaps
-- Offline route maps (storage)
-- Fitness & freshness (compute)
-- Matched activities (routing)
-- Training plans (content/AI)
-- Priority support
-
-### MRR Targets
-- **Month 3:** 750 Plus users = $3,750 MRR
-- **Month 6:** 1,500 Plus users = $7,500 MRR  
-- **Month 12:** 2,000 users (mix Plus/Pro) = $10,000 MRR
-
----
-
-## The Winning Strategy
-
-### Phase 1: MVP Launch (Months 1-2)
-**Focus:** Core tracking + friendly social
-
-#### Must-Have Features (Revenue-Driving)
-1. **Activity Tracking** - GPS, pace, distance, duration (keep simple)
-2. **Activity Feed** - See friends' activities (not Strava's complex feed)
-3. **Kudos & Comments** - Simple engagement
-4. **User Profiles** - Bio, stats, activity history
-5. **Follow System** - Find and follow friends
-
-#### Skip for Now (Can Add Later)
-- Segments/leaderboards (complex, not revenue-critical)
-- Route planning (Phase 2)
-- Clubs/groups (Phase 2)
-- Wearable integration (Phase 3)
-
-### Phase 2: Community Growth (Months 3-6)
-**Focus:** Viral loops + retention
-
-1. **Clubs** - Simple club creation, join requests
-2. **Monthly Challenges** - SaaS-generated official challenges
-3. **1v1 Challenges** - Challenge friends directly
-4. **Share to Social** - Easy share to Instagram/Stories
-5. **Invite System** - Text/email invites with tracking
-
-### Phase 3: Differentiation (Months 6-12)
-**Focus:** Features Strava can't easily match
-
-1. **AI Training Plans** - Personalized plans based on goals
-2. **Local Race Discovery** - Integration with race calendars
-3. **Beginner Mode** - Guided runs/workouts for new users
-4. **Family Plans** - Share with family members
-5. **Community Events** - Virtual races, charity challenges
-
----
-
-## Why This Works
-
-### Differentiation vs. Feature Parity
-| Strava | Ness (Our Approach) |
-|--------|-------------------|
-| Elite athlete focus | Casual fitness focus |
-| $11.99/month | $4.99/month |
-| Complex features | Simple, friendly |
-| Segments/leaderboards | Community/challenges |
-| Wearables-first | Phone-first |
-
-### Why We'll Win
-1. **Price:** 60% cheaper than Strava
-2. **Simplicity:** Lower barrier to entry
-3. **Community:** Friend-focused, not stranger-focused
-4. **Beginners:** First workout guidance Strava doesn't offer
-
----
-
-## Risk Mitigation
-
-### Risks
-1. **User acquisition cost** - Mitigate: viral loops, social sharing
-2. **Retention** - Mitigate: community features in Phase 1
-3. **Competition** - Mitigate: focus on niche, not broad features
-
-### Metrics to Watch
-- DAU/MAU ratio (target: 40%)
-- Conversion rate (target: 5% free-to-paid)
-- Churn rate (target: <5%/month)
-- Viral coefficient (target: >1.0)
-
----
-
-## Next Steps
-
-1. **CTO (FRE-73):** Complete feature scope but reprioritize to focus on Phase 1
-2. **Atlas:** Build activity tracking + feed + profiles (Phase 1)
-3. **CEO:** Validate pricing with user research
-4. **Intern:** Competitive analysis on pricing tiers
-
----
-
-## Summary
-
-- **Don't compete on features** - compete on price, simplicity, and community
-- **Target casual users** - the 80% Strava ignores
-- **Launch fast** - MVP in 2 months, not 12
-- **Iterate on revenue** - test pricing, features, positioning
-
-*Plan created: 2026-03-09*