"Code that compiles is a hypothesis. A release is a proof. Don't confuse the two — especially when it's the family's money behind the door."
The verification contract
Keep has an explicit rule for when a release is actually done, and it's stricter than "the code is written." A release is complete only when the whole chain is verified end to end: backend tests pass, frontend tests pass, a production client build succeeds, the database passes integrity and count-parity checks, launchd process ownership is confirmed, HTTP health and HTTPS health both respond, PIN gating actually gates, PWA navigation works, and the Tailscale Serve mapping is live. Source code, or a development server alone, is never proof. The gap between "it compiles" and "it's verified running the way it'll actually run" is exactly where production breaks live.
Why 'it works on the dev server' is a trap
A dev server is a different environment from the real one: different build (unminified vs production), different process supervision (your terminal vs launchd), different transport (localhost vs Tailscale HTTPS), different auth posture (maybe you were already logged in). Every one of those differences is a place where something can pass in dev and fail in production. The verification contract exists because the creator of a thing is the worst-positioned to see its gaps — you tested the path you built, on the setup you built it on. Proof means checking the thing that will actually run, in the way it will actually run.
The stronghold, seen whole
Step back and look at what you've built across eight tracks. It's one coherent thing: a stronghold that observes but never advises. Every layer serves the same north star. The snapshot model keeps the record honest. Provider boundaries keep the data sourced and calm. Live-vs-close keeps prices truthful and paused by default. Reproducible scenarios explore possibility without pretending to predict. The Sidekick binds the brain without cloning it. And this final process — one owner, one locked door, one standard of proof — keeps the whole thing guarded and honest. Not one of those features raises your pulse. That was the entire point.