Pick an option on each card and press Done; your answer goes straight
back to the session. The raiser's pick is marked. "I'm not sure" and "Take it to the engineering bridge" are real answers.
1Should gas-leak alert emails also go to managers at companies that are not live yet?
In plain terms. Gas-leak alert emails are held for a company that is not live yet (Fede's choice, 2026-09-16). We are shipping a fix so they still go out when our database can't read the company, but a company read as not-live stays held. Should not-live companies' managers also get gas-leak alerts?
Why, and what was tried
The session raising this recommends: No, keep holding Keeps Fede's recorded hold; no real caller reaches a not-live line yet. The outage fix ships either way; decider split by option order, and a cited 2026-09-18 ruling could not be located. Model receiptFABLE was asked, and escalated. Receipt fd293dd5a — NEEDS HUMAN. THE TWO PASSES DISAGREED, AND ONLY THE OPTION ORDER DIFFERED. as-given → 'A: audience staff, full bypass — not-live company managers also get gas pages' (high) reversed → 'B: bypass only on unreadable company; keep holding for a company read as not-live' (high) An answer a reordering can flip is not an independent judgement, it is position bias wearing one. Escalating with both readings attached.
as-given reasoning: This knowingly reverses Fede's 2026-09-16 note (page-property-manager.ts:471-475), argued: its sole ground is 'no real caller reaches this page for a not-live company yet' —…
b723b025 is parked on this.
2Should three old cleanup scripts be allowed to keep writing their log entries in an older format, so they can move onto the shared safe writer?
In plain terms. Three old cleanup scripts write their log entries in an older format. The new shared writer only accepts the current format. Do we let it accept that one older format too, so these three scripts finish moving onto it (with their entries unchanged), or leave them as they are for now?
Why, and what was tried
The session raising this recommends: Accept the older format The entries stay byte-identical and the writer still refuses anything else, which finishes the cleanup without touching old data. Tried first, unsuccessfully: ff71e8e6a
b723b025 is parked on this.
Answered and withdrawn (34)
b90913297 Should I close the billing bug card by rewriting its owner-only ask to match your same-access-for-everyone launch rule? Billing already finds each company's own payment account instead of guessing from a person's email; only that owner-only ask is left, and it goes against the rule you accepted. — answered: Rewrite the ask and close the card
b90913844 Should approving held rent-roll updates move off the developer page onto a proper staff page? Today a developer screen is the only place someone can approve a rent roll the system held for review, and that same button can rewrite a building's tenants and units. — answered: I would just go ask in the engineering bridge.
b90925783 Should I have the 30-minute background check that catches a revoked Microsoft sign-in switched on in production? Until it runs, the fix that stops the Connections pages from re-signing into Microsoft every time they're opened has to wait, because those page opens are today the only thing that notices a revoked sign-in. — answered: How would the industry do this on the normal basis? And I would also ask this in the engineering bridge to make sure like we're all aligned'cause I feel like 30 minute pulling sounds fine, but it could come with like consequences of us looking like a bot.
b90954390 Can you run one command to set up the weekly owner-report schedule, paused, so the fix that makes each company's report read only its own buildings can go live? After it merges you run one more command to switch it on; if this doesn't happen before Monday 15:30 UTC, that week's owner reports are skipped. — answered: Yes, I'll run both commands before Monday
b90954414 Can you load the nightly test login's two-factor codes into our settings and add one grading setting, so the live-site test sign-ins stop relying on the test login that skips two-factor? The change is built and waiting; the exact four steps are written on the PR, and nothing changes for customers. — answered: Wait, what is this for? Is it prop flow or for like at folio? If it's profit flow, we need to make sure we can give it an account where it can. So we're now with the two-factor authentication. You could use email. So maybe you could use the outlook email or something that we given it. Or maybe I can give it the password for some of the test emails. I'll go ahead and put a password on vercel PROPFLOW_TEST_ACCOUNT_USERNAME PROPFLOW_TEST_ACCOUNT_PASSWORD
b90954426 Can you run the stage cleanup that fixes 595 conversations missing their lookup record? Production needed none and the code fix is already live; until stage is cleaned it keeps raising a warning for each of those conversations. — answered: Yes, run it on stage
b90957087 Can you copy the test account's existing sign-in values into our shared settings? It's for PropFlow's own login, not AppFolio, and that account already has two-factor through an authenticator code, so no new mailbox or account is needed; the exact steps are on the PR and nothing changes for customers. — answered: I'm not quite following. I already I already have an Outlook account and a Gmail account. Which one do you need? Both of them are already on Vercel, so you should be able to get both the email like the password and the email. And then you can also use the email for the two-factor authentication, so you should be fine there too.
b90957108 Should resetting a renewal for a demo also keep a record instead of erasing it? Resets that any team member can trigger will keep a record either way; this only decides the admin-only demo reset. — answered: I would add this in the engineering bridge, see what they figure out and decide.
b90960929 Which test account should our automatic test sign-ins use now that the old two-factor shortcut is going away? Your Gmail and Outlook test inboxes can't be read by our scripts without an extra app password, so the quickest option is the nightly test login that already has two-factor and just needs its three existing values copied into our settings. — answered: Use the nightly test login; I'll copy its 3 values.
b90967313 Should the automated test login's admin actions move to their own narrow key, instead of staying on the weak staff check? Either way the remaining staff-only admin actions get the stronger administrator check. — answered: Narrow reporting key; stronger check on user actions
b90974442 When a PropFlow staff member picks 'All companies', should the review queues, held emails and prospect counts ask them to pick one company for now, or keep showing everything until we build page-by-page loading? Asking to pick closes the leak today; waiting keeps the current all-company view for months. — answered: Wait for page-by-page loading
b90985627 Can you set a new secret called SMOKE_REPORTER_SECRET on Vercel (Production, Preview and Development, same random value in all three) so the smoke-test runs can keep posting results after the fix that takes the smoke account's admin rights away from that page? Until it is set, the fix stays unmerged; if it merged first, new smoke results would stop showing on the dashboard. — answered: Do we not already have some sort of seeker variable like this that we can use?
b90999422 When you run the two schedule commands before Monday, can you also register one more schedule, paused, for the weekly check that every message has an author? It's one command and it keeps the new version switched off until you say so: npx tsx scripts/temporal/upsert-conversation-author-completeness-schedule.ts — answered: I'm not sure — go find out
b91023945 When someone opens a link to a company they don't have access to, should the settings page say 'you don't have access to this company' (we'd add a small signal from the page frame), or should we leave the frame alone and rely on each page refusing on its own? Right now the fix we built makes one settings page wrongly say 'there is no building on this account yet'. — withdrawn
b91028034 On the staff review lists, after someone presses Load more, should the list keep refreshing every page they've loaded (so an item approved elsewhere stops showing Pending, at the cost of a few extra reads), or refresh only the first page as our design note says? — withdrawn
b91042282 To finish the page-security item, can you briefly switch off one new test login in production (we sign in first, switch it off, load a page within 5 minutes to prove the page itself refuses, then switch it back on) using the exact commands in the evidence file? — answered: Yes, I'll run it
b91061200 Session b723b025 is frozen on a prompt in its terminal (tmux pane %307) that Smith will not answer. Deciding here records your choice on the block; the keystroke itself still has to happen at the pane — nothing will type into a live menu on your behalf. — withdrawn
b91061749 Can you run the cleanup that removes the real residents' contact copies from the test company, in four steps: pause the test company's sync, run the dry run (it must say SET MATCHES and REFUSALS 0), run it with --apply --confirm-table=propflow-prod, then --verify (it must show 0 remaining and live customer holders still at 369)? — answered: Yes, I'll run it
b91061777 I checked: neither new weekly schedule exists in production yet (the owner report for #15439 and the conversation author check for #15830). Can you register both, paused, before Monday 08:45 UTC, using the commands in the note? — answered: Yes, I'll run them
b91062019 You asked if we already have a key we can reuse. We checked every one: each also opens dozens of other routes (cron jobs, admin tools, the login locks), so a leak would expose much more than test results. Can you add one new random value named SMOKE_REPORTER_SECRET in Vercel for Production, Preview and Development? — answered: done, added SMOKE_REPORTER_SECRET
b91063187 When a renewal is reset, we now close it instead of deleting it, but its saved snapshots are still erased. They hold things the closed renewal can't rebuild (a manager's pause, which channels were tried, the earlier workflow state). Should we archive those snapshots too instead of erasing them? — answered: Archive them too
b91067017 You said yes to the 5-minute disable-and-restore check on a test login, but it leaves no trace in the logs and nobody wrote down which login it was, so I can't confirm it happened or that the login is enabled again. Did you run it, and which login was it? — answered: Not yet
b91070730 Can you run the one-time vendor-session key update in prod? It re-keys 65 vendor call sessions so the staff vendor-outreach list can page newest-first. The dry run found 65 to update and 0 odd cases, and it writes nothing else. — answered: Yes, I'll run it
b91075934 Can you create one dedicated test login (invite it from Admin, set a password) and put its email and password in a private file for me? Yes, I can do the disable-and-restore check myself once that exists; the only thing I cannot do is create the login, because that is a production account write and the existing test logins either skip two-factor or would break the nightly run if disabled. — answered: Yes, I'll make the login
b91080846 Can you create one production staff login on the admin roster, with two-factor, for the identity test tool to use? The last admin page that any company mailbox can still open (the person identity page) stays open only because that tool signs in as the smoke test account, which is deliberately not an administrator. — answered: Yes, I'll create it
b91083175 Should I register the two new weekly schedules in production myself, paused, so they are in place before Monday 08:45 UTC? You said you would run them, but as of 02:45 UTC Saturday night neither exists yet; registering them paused starts nothing until their PRs merge and someone un-pauses them. — answered: No
b91254412 May we re-sort the 84 live turnover records so the all-companies turnovers list can show newest first? This changes only a hidden sort key on each record, never what anyone sees, and a trial run found all 84 safe to change. — answered: Yes, run it on prod
b91320557 May we create the new tenant-list sort index on the live database, so staff's All-companies tenants page can later read newest-first? It adds an empty lookup table that changes nothing anyone sees until the follow-up steps run. — answered: Yes, create it
b91339752 Can two dashboard security fixes (work orders and the properties grid) merge on their automated tests alone, without a screenshot of what a user with no buildings sees? If not, we need one staging test login whose company has no buildings, which only you can create. — answered: Tests suffice, merge them
b91342610 May we run the one-time update that adds the new sort key to 1,395 existing tenant records on the live database? It only adds a hidden sort key, changes nothing anyone sees, and skips any record edited meanwhile. — answered: Yes, run it on prod
b91398707 Your two weekly schedules (the conversation author check and the owner report) still aren't set up in production, and they were due Monday. Will you run them today, or should I register them paused for you? — answered: I'll run them today
b91532222 When a building has no phone line, emergency texts and calls go out from Camellia House's real number. It happened once in 19 days, on a real after-hours emergency. Should we buy our own PropFlow emergency number to use instead, or skip contacting the on-call person and only alert our team? — answered: x
b91708481 Should vendor checks stop looking at other companies? Today, editing a vendor card and dispatching a vendor both peek at whether another company also uses that vendor. The isolation rules forbid customer code from learning facts about other companies. The design doc (design-final.md §20.8) says edits are per company and dispatch goes through an authorized relationship, which means dropping the cross-company peek. — answered: Per company only (drop the peek)
b91709361 Should an emailed gas-leak report be allowed to look up the sender's homes at other companies, the same way a texted one does? Today texts and calls can; emails arrive with only the mailbox address, not the address the new safeguard checks. Yes means emailed gas reports still reach every home the sender has. No means they page more managers and raise an error each time. — answered: Yes, use the mailbox (C)