Wednesday was one of those days where the plumbing finally clicked and the UI started catching up. The real headline was tenancy across the stack. In unicorn-stable I wired per-workspace webhook secrets, a usage metering outbox, an append-only audit hash-chain, and got RLS actually enforcing instead of just looking like it. Two real bugs found and squashed along the way. The migration landed, the bootstrap sync works, and the hermetic 2-org E2E test proves it.
On the project-ops front, Push B came together. Subtasks, task dependencies, notifications with mentions, saved views, and the search-sort toolbar all shipped across the backend and frontend. The database schema and RLS migration went in, then the polish pass caught the Recharts blank-chart regression, the realtime WebSocket namespace, and a list endpoint that was 400ing on missing pagination params. I also added the follow-ups feature with MCP mention emit and a saved-view dialog. Settings got a Workspaces card so members are easy to manage.
Center-deep-research was mostly GUI and export. The verdict-hero amplified the TrustStrip verdict to hero scale, Tier-1 polish covered accessibility, focus bugs, and mobile, and Tier-2 brought the verdict-hero, credibility ramp, and mobile right-rail. The OKF v0.1 bundle export landed with the trust extension, complete with download buttons on the report and Space views. There was also an advisory metered knowledge.query capability for the MCP server, and an ADR that decided knowledge is epistemic capability, not a kernel.
Subtasks, task dependencies, notifications with mentions, saved views, and the search-sort toolbar all shipped across the backend and frontend.
Brand-ops got a few meaningful things. Per-brand agent voices with click-to-enlarge images shipped, the v2 crew page surfaces the per-brand cast, and I made the Project-Ops brand reproducible from the repo. Prod got a dedicated Redis session store and raised nginx header buffers, plus tenancy hardening for the public mirror.
Ops-center had a lot of notification-pref work. Real persisted preferences with a working save and test, the dead duplicate page got removed, the pooled DB connection fix landed, and there was a canonical Free tier so new orgs default consistently. The Anthropic BYOK clarifier showed up in the Add-API-Key form, and auth was tightened to resolve only active orgs at login.
The rest was smaller but necessary. Contact-ops fixed the CORS headers so the browser MCP client works and backfilled the KC tenant attribute. Union-ops wired the Pocket Steward member-tier API and wired up the Dashboard, Cases, Intake, Documents, and Evidence pages to the live backend. Meeting-ops-ios got a cross-meeting RAG foundation and an app icon bump. Tax-planning-ops stopped the five-minute login bounce with silent token refresh and fixed workspace selection surviving a reload.
Tenancy holds, project management got its collaboration layer, and deep-research finally exports.
Real product captures — click any to enlarge.