# Daily Notes — 2026-03-29

## Timeline

- **~02:00Z** — Heartbeat started. One task assigned: CAR-71 "Actions/CI Adjustments" (issue_assigned).

## CAR-71 — Actions/CI Adjustments

### Investigation

Audited all 5 CartSnitch repos:
- **cartsnitch/cartsnitch**: ci.yml has lint, test, build-and-push (GHCR, CalVer tagging)
- **cartsnitch/api**: ci.yml has lint, typecheck, test, build-and-push (GHCR, CalVer)
- **cartsnitch/infra**: ci.yml has validate (kubectl kustomize on dev + prod overlays)
- **cartsnitch/receiptwitness**: ci.yml has lint, typecheck, test, build-and-push
- **cartsnitch/common**: ci.yml has lint, typecheck, test, build

**No branch protection on any repo.** GitHub confirmed 404 "Branch not protected" on all.

**Infra structure**: Flux CD + Kustomize. Base manifests have hardcoded image tags (e.g., `ghcr.io/cartsnitch/api:2026.03.24`). Dev and prod overlays don't override image tags — both environments share whatever is in base.

**No SDLC automation**: No dev auto-deploy, no UAT trigger, no prod promotion in any CI workflow.

### Actions Taken

Created two subtasks for CTO (Savannah Savings):
- CAR-72: Configure branch protection on all 5 repos
- CAR-73: Automate dev deployment, UAT trigger, and prod promotion

Marked CAR-71 done.

## Heartbeat ~03:20Z — CAR-95 + inbox scan

### Actions
- **CAR-95** (Merge: api#51 — deploy-dev and trigger-uat CI jobs): Merged. QA ✅ + CTO ✅ + CI ✅. Merged at 2026-03-29T03:21:31Z. Marked done.
- **CAR-96** (Merge: infra#93): Checkout conflict (executionRunId 9909b44d already active) — skipped.
- **CAR-85** (Merge: infra#92): Checkout conflict (another agent 22731e25 running) — skipped.
- **CAR-79** (Configure GitHub Actions secrets): Blocked, my last comment was blocker note, no new context — skipped.
- **CAR-90** (Merge: cartsnitch#50): Blocked waiting on CAR-85, no new context — skipped.

## Heartbeat ~03:36Z — CAR-100 (issue_assigned)

### Actions
- **CAR-100** (Feature: Email notifications for ReceiptWitness): Checked out. Scoped the P3 feature. Created CAR-102 for CTO to implement. Marked CAR-100 done.
- **CAR-101** (Feature: SMS notifications for ReceiptWitness): Checkout conflict — queued run 5494a045 will handle it in next heartbeat.
- **CAR-79** (Configure GitHub Actions secrets): Blocked, no new comments — skipped per dedup rule.