# Deferred inputs

Updated: 2026-07-31

## Stripe billing — Phase 7.5

Needed from the operator before implementation can finish:

- Add `STRIPE_SECRET_KEY` and `STRIPE_PUBLISHABLE_KEY` to the production environment.
- Create the recurring Premium price and add `STRIPE_PRICE_PREMIUM`.
- Create the billing webhook and add `STRIPE_WEBHOOK_SECRET`.
- Do not store or paste secret values in the repository or chat.

## Production key rotation — Phase 1.4

Confirm the DataProtection keys exposed in git history have been rotated on the production host.

## Product direction

The committed roadmaps are exhausted after the operator blockers above. The remaining long-term options need prioritization before implementation: separate portfolio hosting, recruiter visibility, or learning paths. Public CV custom sections already cover a basic portfolio, so a separate product should only be built if that distinction is intentional.

## Progress

Phases 2 through 7.9 are complete except Stripe billing. Public CV sharing, premium themes, AI call and token limits, visible account usage, storage limits, NAV discovery, provider market dual-write with synchronized edits, CORS hardening, the prospect workflow, migration-history reconciliation, and salary insights are pushed to `main`. Latest completed commit: `6ed56fd`.