| [VERIFY-1] |
Is tsconfig.app.json's strict: true actually set? Many starter templates ship with strict: false. |
architecture-overview.md |
| [VERIFY-2] |
What's the production hosting layer (S3+CloudFront / Lightsail+nginx / Vercel / other)? |
build-and-deploy.md, configuration.md, security.md (for CSP) |
| [VERIFY-3] |
Are /uploadLogo and /uploadCompanyLogo actually implemented in Someli-admin-api? They're called from api.ts but absent from the BE inventory. |
api-consumption.md |
| [VERIFY-4] |
What does the production vite build output look like (chunk count, sizes)? |
performance.md, build-and-deploy.md |
| [VERIFY-5] |
Are all forms migrated to react-hook-form + zod + shadcn Form, or do some still use raw useState? |
ui-component-library.md |
| [VERIFY-6] |
What CI / deploy mechanism actually deploys this? (Not in repo.) |
build-and-deploy.md |
| [VERIFY-7] |
Confirm whether the FE actually uses next-themes anywhere |
dependencies-inventory.md, ui-component-library.md |
| [VERIFY-8] |
Confirm sonner-vs-shadcn-toast adoption — which one is the "main" toast pattern? |
ui-component-library.md |
| [VERIFY-9] |
Is console.log of PII in AuthContext.tsx intentional (debug) or leftover? |
observability.md |
| [VERIFY-10] |
Are there any dangerouslySetInnerHTML uses anywhere in the codebase? |
security.md F-9 |
| [VERIFY-11] |
Does the production HTML actually preserve the cdn.gpteng.co script tag, or does someone strip it before deploy? |
security.md F-3 |
| [VERIFY-12] |
What is the BE-side mapping of the role IDs configured in VITE_* env vars? Is the alignment auditable? |
configuration.md |