MVP readiness
Dry-run only
API
Configured health endpoint and Paddle webhook route.
Scanner
Safe public checks only. No admin paths, no exploit probes, no form spam.
Outreach
Paused until DNS, mail auth, unsubscribe, suppression, and dry-run previews pass.