Production Gaps

This list separates current repository state from production readiness.

Repository

• apps/backend, apps/web, and apps/mobile are placeholders.
• packages/contracts and infra do not exist yet.
• No root Makefile or full-system local dev command.
• No CI workflows are present.

Mobile POC

• App lives under reference/mobile_app_demo, not apps/mobile.
• Backend URL is hard-coded.
• No authentication.
• No secure credential storage.
• No generated API client.
• Current asset view is in memory.
• No test directory in the current checkout.
• Android is the only exercised platform.
• Release signing is not production-ready.

Backend And Web

• Backend service is not scaffolded.
• Web dashboard is not scaffolded.
• OpenAPI contract is not created.
• Database migrations are not created.
• Auth model is not implemented.

Before Production

• Create contract package and generation commands.
• Scaffold backend, web, and production mobile modules.
• Add infrastructure and CI.
• Add auth, roles, permissions, audit logging, and secure config.
• Add full test coverage for the first vertical slice.
• Validate deployment and rollback in staging.