Platform Maintenance Log

Appendix K: Platform Maintenance Log

Canonical record of end-of-day workspace sync, hardening, and polish passes. Each entry notes the tooling used and the scope covered.

Date	Tooling	Scope
2026-06-28	Grok Build Beta	PASS 0–5: cache purge (deml-cleanup.sh); 85 pytest + 28 vitest green; unified 1260px container (THEME.md / --container-max-width); Distroless Docker audit (backend, frontend, scanner); Firebase v2 functions/.env Redpanda config in CI; Swagger public /api/v1/ingest + /api/v1/predict with demo key deml_swagger_api_key; copyright/footer hardening (no Railway, no stray |); DB Browser for SQLite in Ch.1 setup; doc sync via scripts/sync_content.py.
2026-06-30	Cursor - Grok 4.3	PASS 0–5: cache purge (deml-cleanup.sh); 88 pytest + 33 vitest green; hero CTA spacing fix (Viking-inspired viking-btn classes, tighter icon–label gap, flex parity); Viking UI visual patterns synced via @deml/design-system (viking-inspired.scss in deml-components.css); Viking attribution in unified footers; CSP verified (test_csp_and_demo_auth.py, firebase.json unchanged); fixed SyntheticMonitor.checked_at stale-degradation (auto_now → explicit worker timestamp, migration 0038); telemetry normalization test aligned to get_normalized_service_info; THEME token fixes (--color-error, --color-warning, --white); vitest preflight via set-env.js; npm typescript override fix ($typescript → ~6.0.3); dead footer CSS pruned; Distroless Docker audit confirmed (backend python3-debian12, frontend nodejs22-debian12); scripts/build_search_index.py + Appendix K in search-index; Angular routes for /documentation, /book, /whitepaper, /compliance, /terms, /privacy; unified in-app footer/nav links; GitHub Actions ci-tests.yml (pytest + vitest).
2026-06-30	Cursor - Grok 4.3 (Session 3)	Multi-pass hardening: removed dead up.railway.app hostname detection from environment.ts + environment.development.ts (app fully migrated to deml.app); sanitized main.ts Sentry DSN comment (removed "Railway" deployment-provider branding); replaced hardcoded /tmp/sla_model.pt in ml/ml_services.py with tempfile.NamedTemporaryFile + os.unlink teardown (S108 fix, prevents temp file leakage); replaced hardcoded /tmp/gcp-service-account.json in config/settings.py with tempfile.mkstemp (S108 fix, OS-secure path allocation); added # noqa: S104 on intentional container 0.0.0.0 bind in start.py (Daphne Cloud Run entrypoint false positive suppression); scripts/sync_content.py re-ran → search-index 72 sections synced; 94 pytest green across all modules post-fix; TypeScript npx tsc --noEmit clean; Ruff S-rules audit documented (false positives annotated).
2026-07-02	Cursor Agent (818d)	PASS 0–5: cache purge (deml-cleanup.sh); 95 pytest + 27 vitest green; deml.app /home landing (marketing parity: hero, capability bands, pricing); Polars-style compact app-whitepaper-cta (animated bar grid + sparkline); legacy Angular Material SCSS removed (material-overrides, material-tokens, dead mat-* rules); root guard routes unauthenticated users to /home; explore page whitepaper CTA; Distroless Docker audit confirmed (backend, frontend, scanner).
2026-07-02	Cursor Agent (c5bc)	PASS 0–5: 95 pytest + 27 vitest green; pretest + vitest alias for @deml/viking-ui; CI build:viking-ui step; removed stale up.railway.app from set-env.js, firebase.json, nginx.conf; domain-pure marketing sitemap.xml (no cross-domain app routes); wired /telemetry/ landing; llms.txt AGENTS/MCP settings; auth-status hidden attr (no inline styles); Appendix D ci-tests.yml entry.