Business: SMTP, user accounts, self-sufficiency — CEO must build real infrastructure

projects/business/memory/state.json

@@ -3,16 +3,18 @@
   "phaseLabel": "Build Production-Grade Product",
   "status": "not-launch-ready",
   "product": "DocFast — HTML/Markdown to PDF API",
-  "currentPriority": "Build production infrastructure. In order: 1) Email verification for signup (send verification email, confirm, then issue key). 2) Pro checkout → key delivery E2E flow. 3) Key recovery mechanism. 4) Automated database backups. 5) Load testing to determine actual capacity. 6) Rate limits based on real capacity data. 7) UI/UX polish. ALL of these are required before launch. Do not skip or defer any.",
+  "currentPriority": "CRITICAL INFRASTRUCTURE: 1) Set up SMTP on the server (postfix or similar) for REAL email verification. You have root access to the server — install it, configure it, set up SPF/DKIM records. Tell the investor which DNS records to add afterward. No excuses. 2) Rethink the user model: proper account system — register with email (verified via SMTP), login, dashboard where users can see their key, reset it, upgrade to Pro. This is how real SaaS works. 3) Key recovery flows from the dashboard. 4) Load testing. 5) Data-backed rate limits.",
+  "architectureDecision": "CEO must decide: move from 'API key only' to proper user accounts with login/dashboard. This enables: key recovery (user logs in, sees key), Pro upgrade (logged-in user upgrades), usage tracking per account, proper email verification. Research how competitors (DocRaptor, PDFShift, etc.) handle accounts.",
   "launchChecklist": {
-    "emailVerification": true,
+    "emailVerificationReal": false,
+    "userAccountSystem": false,
     "proPaymentFlow": false,
     "keyRecovery": false,
     "databaseBackups": true,
     "loadTested": false,
     "rateLimitsDataBacked": false,
     "landingPageHonest": true,
-    "zeroConsolErrors": true,
+    "zeroConsoleErrors": true,
     "mobileResponsive": true,
     "securityAuditPassed": true
   },
@@ -21,7 +23,8 @@
     "url": "https://docfast.dev",
     "server": "docfast-1 (CAX11, nbg1)",
     "serverIP": "167.235.156.214",
-    "sshKey": "/home/openclaw/.ssh/docfast"
+    "sshKey": "/home/openclaw/.ssh/docfast",
+    "smtp": "NOT SET UP — install postfix or use a transactional email service. You have root on the server."
   },
   "credentials": {
     "file": "/home/openclaw/.openclaw/workspace/.credentials/docfast.env",