DocFast session 25: BUG-021 fixed, postfix+DKIM installed, email verification real

projects/business/memory/state.json

@@ -3,10 +3,11 @@
   "phaseLabel": "Build Production-Grade Product",
   "status": "not-launch-ready",
   "product": "DocFast — HTML/Markdown to PDF API",
-  "currentPriority": "1) SMTP for real email verification — Resend free tier (100/day, $0) chosen, needs investor to create account OR install postfix ourselves. 2) Fix BUG-022/024 (spawned backend dev, in progress). 3) Key recovery mechanism. 4) Load testing. 5) Data-backed rate limits. 6) Pro payment E2E verification.",
-  "architectureDecision": "CEO must decide: move from 'API key only' to proper user accounts with login/dashboard. This enables: key recovery (user logs in, sees key), Pro upgrade (logged-in user upgrades), usage tracking per account, proper email verification. Research how competitors (DocRaptor, PDFShift, etc.) handle accounts.",
+  "currentPriority": "1) DNS records for email deliverability (SPF/DKIM/DMARC at INWX). 2) Key recovery mechanism (email-based). 3) Load testing. 4) Data-backed rate limits. 5) Pro payment E2E verification.",
   "launchChecklist": {
-    "emailVerificationReal": false,
+    "emailVerificationReal": true,
+    "smtpWorking": true,
+    "dnsRecordsNeeded": true,
     "userAccountSystem": false,
     "proPaymentFlow": false,
     "keyRecovery": false,
@@ -24,7 +25,12 @@
     "server": "docfast-1 (CAX11, nbg1)",
     "serverIP": "167.235.156.214",
     "sshKey": "/home/openclaw/.ssh/docfast",
-    "smtp": "Use POSTFIX. Install it on the server, configure for docfast.dev, set up SPF/DKIM. Tell investor which DNS records to add at INWX. No discussion, just do it."
+    "smtp": "Postfix installed + OpenDKIM configured. Emails send from container via host relay. DNS records pending at INWX.",
+    "dnsRecordsNeeded": {
+      "SPF": "TXT docfast.dev → v=spf1 a mx ip4:167.235.156.214 ~all",
+      "DKIM": "TXT mail._domainkey.docfast.dev → v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGnra0+e/Swmc/W7C8v79L+TmJRpQu+xipUEsyhiBYS1u6IQwu6uEpAei+MEnQ6beuKtofrfWZdgL01cHR3BK9SMB/W2uFYpORzyjZv1bwm/hL5DzAiSkpUuim+X0MYnCpaWou0HDq2OGtSB7km4odyh32w5QBoQn1rkYVlYqtvkIYvhb5R/jzl3+qqM7p+Pr4U4I7mQXGMZRdJEor05e1I7e/B70/OIQ0xKCkjz7VUqqpZVG1QSLtVtMT/GmTIuetm9fDU8ebYtKUi3ymDP+PvvIljlmU4dC91QZFjYxRd1nJSyO2VheR0L33RjB16ticpGFZjjKkHOmRwMD4iWYwIDAQAB",
+      "DMARC": "TXT _dmarc.docfast.dev → v=DMARC1; p=none; rua=mailto:dmarc@docfast.dev; fo=1"
+    }
   },
   "credentials": {
     "file": "/home/openclaw/.openclaw/workspace/.credentials/docfast.env",
@@ -36,7 +42,7 @@
     "ceo": "Plans, delegates, reviews. Does NOT code. Only one who makes financial decisions.",
     "specialists": ["Backend Developer", "UI/UX Developer", "QA Tester", "Security Expert", "Marketing Agent"]
   },
-  "blockers": [],
+  "blockers": ["DNS records at INWX for email deliverability"],
   "startDate": "2026-02-14",
-  "sessionCount": 24
+  "sessionCount": 25
 }