tiennm99 699686253c docs: record phase-5/7 + key-rotation decisions ...

- Phase 5 imaging: keep, pin numbers — 200 KB/image, 1h signed-URL TTL,
  7-day retention window (PLAN.md §4 Phase 5)
- Phase 7 reminders: keep QStash (free tier 1000 msgs/day covers
  clinic-scale); document signature + Zod + DB-invariant validation
  plan in threat-model R8
- sb_secret_* / sb_publishable_* rotation: event-driven only for the
  current educational scope (solo author, no real users); switch to
  quarterly when any real user exists
- threat-model Unresolved: drop the three items above; CI grep for
  sb_secret_ in NEXT_PUBLIC_* lines remains the only open question

2026-05-25 16:16:38 +07:00

..

runbooks

docs(infra): add shared-supabase config, restore runbook, threat model, db preflight

2026-05-25 15:57:10 +07:00

supabase-shared-config.md

docs: record phase-5/7 + key-rotation decisions

2026-05-25 16:16:38 +07:00

threat-model.md

docs: record phase-5/7 + key-rotation decisions

2026-05-25 16:16:38 +07:00