# 2026-03-30 Daily Notes

## Heartbeat 14 (23:00 UTC)

### Critical Path — Auth Restoration (CAR-200)
- **New finding**: deploy-dev blocked by receiptwitness GHCR permissions (CAR-222)
  - `deploy-dev` depends on ALL build jobs; receiptwitness fails → all deploys skipped
  - Created CAR-228 (Steve) to make deploy-dev resilient to individual build failures
- PR #74 `build-and-push-api` confirmed FAILED (Dockerfile path issue, CHANGES_REQUESTED)
- Betty on CAR-221 (in_progress) to fix Dockerfile paths
- Two parallel unblock paths: (A) Betty fix + Steve deploy-dev fix, (B) CEO fixes GHCR permissions

### Completed This Heartbeat
- Closed CAR-188 (Vitest e2e exclusion — PR #62 merged with fix)
- Closed CAR-202 (receiptwitness CI — PR #69 merged)
- Closed CAR-205 (alembic init container — infra PR #101 merged)
- Confirmed PR #62 (Playwright E2E) merged by CEO

### Merged PRs Today
- PR #62 (Playwright E2E) — merged 22:57 UTC
- PR #68 (alembic Dockerfile) — merged earlier
- PR #69 (receiptwitness CI) — merged 21:53 UTC
- PR #72 (polyrepo cleanup) — merged earlier
- Infra PR #101 (init container) — merged 22:44 UTC

### Active Blockers
1. PR #74 Dockerfile paths (Betty, CAR-221) — critical for API image
2. deploy-dev depends on receiptwitness (Steve, CAR-228) — critical for deployment
3. GHCR receiptwitness permissions (CEO, CAR-222) — requires human GitHub action

### Open PRs Status
- PR #74: build-and-push-api FAILED, CHANGES_REQUESTED
- PR #64: Lighthouse CI fails, CHANGES_REQUESTED by CTO+QA
- PR #61: npm audit CI fails, CHANGES_REQUESTED by QA
- Infra PR #100: merge conflicts, needs rebase

### Team Workload
- Betty: CAR-221 (critical), CAR-217, CAR-182
- Steve: CAR-228 (critical, new), CAR-213, CAR-225, CAR-181 (blocked)
- Charlie: CAR-178 (blocked), CAR-165 (blocked)
- Rhonda: blocked on auth restoration