SERL / OdosMark — Command Center

Live snapshot of 01 — Command Center and the 02 — Backlog Board in Craft. To refresh on demand, tell any Claude session: "refresh my command center dashboard."

🔴 Needs Manley now

MERGEPR #78 (housekeeping, 3 commits) — CI 6/6 green, Manley-approved, waiting on your merge click since 07-21.
MERGEPR #79 (provisioning runbook + scripts, Backlog #4) — CI 6/6 green, waiting since 07-21. Review first if you want eyes on it: initDb.ts change is default-neutral (demo seeds stay on unless SKIP_DEMO_SEED=true).
DECIDEDead-remote repos (ALRoadwaysTreatmentsMVP, VeriPath_Core_Old) — Neon account deleted 2026-07-22, so the old embedded credential is dead; this is now purely an archive-or-rehome call. Backlog #16.
REVIEWPending docs: Operating Org Chart (Company folder), fresh-start site content scope (2026-07-05), the workflow restructure.

🤖 AI read on the week

Bottleneck — Still the same two merge clicks, now three days old. Once #78 and #79 land, a chain unblocks: wip/treatment-nav-cleanup gets its PR (#5), the in-repo runbook supersedes the Craft runbook doc (#19), and the claims gate can pick up Speed Control for the public site. These two clicks are the highest-leverage 60 seconds available.

Momentum — The company grew a sales-intelligence loop this week: GA4 + RB2B live on odosmark.io, a daily visitor-recon task starting Monday, and a lead log feeding this dashboard. Marketing infrastructure now outpaces the deploy pipeline — #23 (Firebase auto-deploy) would close that gap and retire manual deploys.

Watch — New #22: npm audit shows 2 high-severity advisories on the public site's Astro 6 (XSS, esbuild, sharp). Low live risk on a static site, but it's now the only security-flavored item in the queue — worth the next CC session. LinkedIn launch tail (first post, verification, Founder link) still open.

📡 Site visitors & leads

LIVEVisitor tracking on odosmark.io — GA4 + RB2B shipped and verified firing 07-24 (company-level ID, US-only, 150/mo → Slack #odosmark-visitors).
MONDaily visitor intel starts Mon 07-27, 6:00 AM CT — each morning: new orgs ID'd, web recon vs ICP (county road depts / public works / DOTs), scored HOT/WARM/INFO into the "03 — Visitor Intel" log. HOT leads will escalate to Needs-Manley here with a LEAD badge.
No identified visitors yet — first data expected next week.

🟡 In flight

LIVELinkedIn company page (OdosMark) — launched 2026-07-22. Remaining: first post → invites, verification, Founder link, log URL.
CCSEO fix redeploy — tightened title (57) + description (152); build/deploy in progress via standard pattern.
CCwip/treatment-nav-cleanup-2026-07-20 — d0656a1, local-only; finish and PR now that #76 landed.
ALLWorkflow restructure — Command Center + Backlog Board live; remaining: push-daily adoption, gitleaks hook, Secret Manager (see backlog).

Backlog board — queued

P2 This-ish week · 6

#22 · CC · new 07-24
Astro 6→7 upgrade for odosmark-site — 2 high npm-audit advisories

XSS, esbuild dev-server, sharp CVEs. Breaking major: upgrade, build, visual QA, redeploy. No casual audit-fix --force.

#5 · CC
Finish wip/treatment-nav-cleanup → PR

Unblocked — #76 merged. Branch d0656a1.

#9 · CC
Gitleaks pre-commit hook + CI secret scan

Structural prevention; nothing gating it now.

#10 · CC
Migrate runtime secrets → GCP Secret Manager

Env templates become placeholders.

#11 · CC
VeriPath → OdosMark rename pass (user-visible tier)

features.json copy, demo emails, DB org_name, PDF footer, wordmark, tokens.

#12 · Claude
Claims-vs-reality audit: public materials vs codebase

Site/whitepaper claims vs shipped features.

P3 Someday · 8

#23 · Manley · new 07-24
Activate Firebase auto-deploy for odosmark-site

One-time: firebase init hosting:github as jerry@serl.tech, un-disable the workflow file, push. Every merge then deploys itself.

#13 · CC + Claude
Privacy page expansion (131 words → real policy)

#14 · Manley
odosmark.tech → odosmark.io forwarding

#15 · Manley
VeriPath-Build stash@{0}: apply or drop Weather Sensor UI rework

#16 · CC
Archive legacy repos read-only

Neon deleted — secret-scrub no longer a precondition.

#17 · Claude + CC
Command Center Phase 2: PWA dashboard

Scope doc now in Craft; only if this dashboard feels limiting.

#19 · CC
Refresh stale Master Status pointers

#21 · CC
bl003 trial-run media cleanup (~688MB untracked)

✅ Recently done · last 3 days

#1 · Manley · 07-22
PAT refreshed + Neon account deleted — all known live-secret exposure closed

— · Manley · 07-22
AL Ethics AO 2026-09 read in full

10-day filing rule for AL public-fund contracts is now a standing directive.

#4 · CC · 07-21
Provisioning & deployment runbook (PR #79)

#20 · CC · 07-21
PR #78 opened — housekeeping, CI green

#2 · 07-20
PR #76 merged — Speed Control, 14 commits

+9 more
Full history on the Backlog Board in Craft →

📅 Deadlines & triggers

Before first prospect demo / GCP prod deploy: merge #79; prod blockers listed in docs/provisioning-runbook.md (GCS upload, CORS, VITE_API_URL, tile footprint, no IaC).
Hire triggers: CPA before first revenue dollar · attorney at first gov contract · support at second paying tenant.
AL Ethics filing: any contract with AL public funds → file within 10 days of signing. No ALDOT business, ever (§36-1-11).
Secret rotation cadence: set once Secret Manager migration lands. No live secrets outstanding as of 07-22.

📌 Standing directives

VeriPath → OdosMark rename on all ongoing work; don't blind-rename live-wired infra.
Push-daily, small-batch: every CC session ends pushed; PRs ≤ ~3 commits of scope.
Claims gate: public site claims only merged + deployed features.
Agents draft, humans sign. CC local memory is local-only until copied to Craft.

⌘ SERL / OdosMark — Command Center