Mark CXXXIV
The Audit Pass
Shipped April 26, 2026
What it is
Post-research-batch hardening sweep across CXXXI / CXXXII / CXXXIII surfaces driven by a parallel codebase audit. (1) lib/excerpt-stats getExcerptEchoes gains ECHO_MIN_PUBLIC_TAKES=3 mini-k-anon gate — strip stays empty until 3+ public takes exist for the excerpt, preventing single-sharer re-identification by feed ordering. (2) lib/analytics EventName union extends with streak_warning_shown + streak_warning_dismissed typed events. (3) StreakWarning fires shown ONCE per mount via shownFiredRef + dismissed on close-button click — gives clean cohort split for retention analysis. (4) StreakWarning dismiss button accessibility upgrade: aria-label expanded + sr-only span text added (WCAG 2.1 AA). (5) lib/founding restored cleanly via Write tool (no heredoc) after the original CXXXIII deploy break — pagination params built conditionally to avoid the Stripe SDK starting_after:undefined contract issue; isStripeConfigured tightened to exact-match the placeholder sentinel. Pure quality pass — no new SEO surfaces, all retention/analytics/privacy hardening on the freshly shipped CXXXI–CXXXIII batch.
Related — same category
Auth, schema, RLS posture. The first stone of the kingdom.
Email magic-link auth + COPPA-aware DOB capture for minors.
Server-side analytics — typed event union, PostHog backbone.
Parent consent flow for minors. COPPA-clean teacher access.
See it in the product.
Every Mark exists because string players asked for it. Free demo, no card.