The previous MVP could not be called production because:
users.jsonwas not durable on Vercel/serverless.- Admin access depended on a raw Basic auth endpoint.
- Billing activation had no durable event log.
- There was no route middleware protection.
This rebuild fixes the biggest production blockers:
- durable Postgres storage
- Prisma data model for users, posts, and billing events
- signed-in admin gating by email allowlist
- webhook event persistence for replay/idempotency
- middleware protection on sensitive routes
- no provider-created Tap sessions yet
- no Redis rate limiting
- no test suite
- no worker queue
- no observability stack
Verdict: sellable as a production baseline or managed setup service, not as a finished enterprise platform.