Feedback
Ask for what you need, and see what everyone else is asking for.
Suggest a feature
Tell the displaced holder when a card is taken over: in-app notice, then Slack
Seeded from the repository state.
Card claims: refuse by default, explicit take-over, released when the card ships
Seeded from the repository state.
MCP endpoint and per-user API keys, mirroring the person's board grants
Seeded from the repository state.
Delete the phantom `arrivo` tenant that 005_tenants.sql leaves on every fresh control database
Seeded from the repository state.
Guard against seed drift: export the live board back into seeds/cards before every release
Seeded from the repository state.
Clean .env.example: drop the engine and MinIO blocks, document the store and the mail provider
Seeded from the repository state.
Remove the dead engine path: QUACKBACK_*, ARRIVO_FEEDBACK_SOURCE=engine, engineOptions
Seeded from the repository state.
Allowances as data: seats and products per tenant, with purchases deferred behind them
Seeded from the repository state.
SPF and DKIM on the sending domain, so links reach the inbox and not the spam folder
Seeded from the repository state.
Password reset on the same provider, so a forgotten password is not an operator task
Seeded from the repository state.
Magic-link sign-in through a free-tier transactional provider, with single-use hashed tokens
Seeded from the repository state.
Tenant loading in the console, wrapping the same code path the seed uses
Seeded from the repository state.
Fix createTenant: migration 010 made card_tenant_prefix not null and the console never sets it
Seeded from the repository state.
Invitations that can be accepted: /invite/<token> → set password → membership + board grants
Seeded from the repository state.
Sessions persisted in the database: revocation, sign-out everywhere, audit trail
Seeded from the repository state.
Rate limiting on the public write paths
Seeded from the repository state.
TLS through the proxy, verified
Seeded from the repository state.
Backups and a rehearsed restore
Seeded from the repository state.
Record who hid a card, and why
Seeded from the repository state.
Show customers that an item is not planned
Seeded from the repository state.
Real authentication
Seeded from the repository state.
Invitation redemption
Seeded from the repository state.
Changelog automation
Seeded from the repository state.
Release detection
Seeded from the repository state.
GitHub intake: installation, PR title parsing, webhook
Seeded from the repository state.
Tests for drag, hide, accept, ignore and delete
Seeded from the repository state.
Path-based tenancy for the production hostname
Seeded from the repository state.
Host-based tenant resolution with per-tenant theming and guard sets
Seeded from the repository state.
End-user identity for voting: email cookie, engine principal, one vote each
Seeded from the repository state.
Feedback, roadmap and changelog read path against a live engine
Seeded from the repository state.
Architect brief and the ADRs for the workflow store and disclosure gate
Seeded from the repository state.
Workflow store: control registry plus one database per tenant
Seeded from the repository state.
Delivery loop domain core: stages, transitions per source, capabilities
Seeded from the repository state.
Multi-product tenants: several boards under one contract
Seeded from the repository state.
Customer theme selection: presets, overrides, live preview, dark palette
Seeded from the repository state.
Anti-abuse: edge rate limits, duplicate detection, moderation trail
Seeded from the repository state.
Agent engine jobs: triage, changelog drafting, status sync
Seeded from the repository state.
Widget: panel, bundler, and the public tenant-scoped API it needs
Seeded from the repository state.
Billing, trial state, and agent-run metering
Seeded from the repository state.
Custom domain verification with visible DNS state
Seeded from the repository state.
Voter notifications: per-tenant sending domain, unsubscribe, and the legal text
Seeded from the repository state.
Authenticate /api/internal/* inside the app, not only at the edge
Seeded from the repository state.
Stop trusting X-Arrivo-Original-Host; derive the tenant from the host alone
Seeded from the repository state.
Observability: per-tenant metrics, log shipping, and the tenant flag
Seeded from the repository state.
Backups: a restore drill for control, tenant and engine databases
Seeded from the repository state.
Run Caddy: verify TLS, the on-demand certificate gate, and the internal paths
Seeded from the repository state.
Configure email for the engine so invitations and resets can work
Seeded from the repository state.
Replace the withdrawn object-storage image with a pinned Silo
Seeded from the repository state.
Pin the engine image to a digest, and write the upgrade procedure
Seeded from the repository state.
Isolation test suite, wired into CI
Seeded from the repository state.