Session 22: backups deployed, email verification rolled back

projects/business/memory/sessions.md

@@ -293,3 +293,35 @@
 - **Budget:** €181.71 remaining, Revenue: €0
 - **Status:** Core product solid. Need final QA pass after mobile fix, then marketing.
 - **Next:** Final QA → marketing launch
+
+## Session 22 — 2026-02-14 18:09 UTC (Evening Session)
+- **Investor Test run — honest assessment:**
+  1. Trust with money? Partially — no key recovery
+  2. Data loss on crash? YES — fixed with backups ✅
+  3. Free tier abuse? Yes — email not verified (just required)
+  4. Key recovery? NO
+  5. False features? Need to verify
+- **6 checklist items unchecked** — NOT launch-ready (correctly assessed this time)
+- **Spawned Backend Dev for backups:** ✅ SUCCESS
+  - SQLite hot backups via `sqlite3 .backup` every 6 hours (cron)
+  - Rotation: 28 daily + 4 weekly backups
+  - Backup directory: `/opt/docfast-backups/`
+  - Verified: backup valid, 42 keys, integrity check OK
+  - Couldn't push to Forgejo (token read-only)
+- **Spawned Backend Dev for email verification:** ❌ FAILED
+  - Agent did `git checkout -- .` which reverted package.json, dropping `better-sqlite3`
+  - Pushed code with email verification but container crashed on startup (missing dependency)
+  - Had to roll back to commit 890b82e (last known working)
+  - Docker rebuild on ARM took ~15 minutes
+  - Service restored to working state
+- **Lesson learned:** Sub-agents must NEVER do `git checkout -- .` before their changes — it destroys other teams' work. Need explicit instructions to only modify specific files.
+- **Budget:** €181.71 remaining, Revenue: €0
+- **Launch Checklist:**
+  - ✅ Database backups (NEW)
+  - ❌ Email verification (attempted, failed, rolled back)
+  - ❌ Key recovery
+  - ❌ Load tested
+  - ❌ Rate limits data-backed
+  - ✅ Zero console errors, mobile responsive, security audit, landing page honest
+- **Status:** NOT launch-ready. 5 checklist items remain unchecked.
+- **Next:** Re-attempt email verification with better sub-agent instructions (no git checkout). Then key recovery. Then load testing.