280 Commits

Author	SHA1	Message	Date
builtbykev	aaa41134d4	Close the second leak path: /api/hero-prop bypassed the snapshot gate ... The landing hero reads the snapshot from Redis DIRECTLY via heroPropService, so it never passed through routes/snapshot.js and was still serving model_odds, ev_pct, value and takeable to anonymous visitors after the first fix. Same strip, same tier resolution, same private-cache rule for authenticated callers; the Next proxy now forwards the bearer token. PRODUCT CONSEQUENCE, FLAGGED RATHER THAN BURIED: the landing hero is served to anonymous visitors, so it now renders BOOK and FAIR with the model leg LOCKED instead of the full triplet it showed this morning. That follows the stated free-tier rule exactly, but it does trade a strong marketing moment (VALUE +21.1% VS FAIR on the shop window) for consistency of the gate. Reversing is one line — add 'model_price' to the free tier in src/config/tiers.js, or special-case the hero route — and is a product call, not a correctness one. Tests 3557 passed / 291 suites, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VCNgGSt5qvcLxaeQqa7Zpj	2026-07-20 19:52:00 -04:00
builtbykev	fbcb00b7b1	Close the public model-price leak; wire the read card's price layer ... PHASE 0.5 GATE — the three checks, and one correction. `fairLine` does not exist. Zero hits across src/ and web/src. Option A as written had no referent, but it resolves better than feared: `fair_odds` is already a real de-vigged American price on every graded snapshot row, so there is nothing to derive. Gate 1 (is it a price): PASS. fair_odds is American odds from impliedProbToAmerican inside devigTwoWay; fair_prob is the probability. Both distinct from `line`, the stat threshold. Gate 2 (numeric match): PASS, 8/8 exact. Recomputed fair_odds and fair_prob independently from the stored raw over/under prices; every value matched the stored one to the integer and to 3dp. Same de-vig, same numbers the component was proven against. Gate 3 (poison independence): PASS, and proven on the quarantined cohort itself. devigTwoWay's inputs are (over_odds, under_odds) — market prices only, no model term is reachable. The 8 rows recomputed above are all wrong_opponent_grade rows, and their fair prices reproduce exactly from the market. The poison is in the grade, not the price. Quarantine therefore suppresses the MODEL leg only; the fair leg stands, as designed. THE LEAK WAS REAL AND ALREADY LIVE. GET /api/snapshot/:sport is public and unauthenticated, and it was serving model_odds, p_win, ev_pct, value and takeable to anonymous callers on every graded row — 25 of 25 on the live wnba board. The Session-66 gate on /api/analyze was bypassed entirely by this endpoint. The strip covers more than model_odds, because model_odds is not the only way to read the model price: p_win IS the price in another base, and ev_pct is INVERTIBLE — ev is a function of p_win and book_odds, and book_odds is public, so leaving ev behind hands the price over. All five model-derived fields go. book_odds, fair_odds, fair_prob, overround and devig_method stay on every tier: the fair leg is never the paywall. Rows that keep a book+fair pair are stamped model_price_locked so a gated price is never mistaken for a missing one. Tier comes from resolveTierFromRequest, which reads a bearer token when one is present and otherwise returns 'free'. It FAILS CLOSED on every error path, so a resolution failure can only ever withhold the price. The response now varies by entitlement, so the /:sport handler downgrades Cache-Control to private for authenticated callers and the browser proxy forwards the bearer token — otherwise a CDN could hand a paid payload to an anonymous viewer, or every request would look anonymous and paid users would lose the leg. READ CARD — a manual scan carries no market. The request is {player, stat, line, direction}, so the engine has no over/under prices to de-vig and book_odds/fair_odds are legitimately absent from its response; that is why the triplet was hidden there. lookupSnapshotPrices recovers them from the pre-graded snapshot via the same cache-only read this route already performs for locked odds and team. The join is exact on player + stat + line + side (fair_odds is side-specific), and returns nothing unless book and fair are BOTH present — a user-chosen line the board never graded has no market attached, so the triplet stays hidden rather than borrowing another line's price. FAIR-LEG ABSENCE, measured before shipping: 636 graded rows, 636 with book, 636 with fair, 0 one-sided. Absence rate 0.0%. The hero number is not a sometimes-number on current data. Tests 3556 passed / 291 suites, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VCNgGSt5qvcLxaeQqa7Zpj	2026-07-20 19:47:42 -04:00
builtbykev	8cf9cbfc26	Price-layer token foundation + the price triplet, built natively on it ... PHASE 0 finding, reported before building: the token layer this order asked me to establish ALREADY EXISTS and already matches HANDOFF.md exactly. web/src/app/globals.css :root carries the design's surfaces, borders, text ramp, fonts and grade colours byte-for-byte (aligned 2026-07-16), and lib/colorContract.js already encodes the green-is-edge-only and glow-is-A-tier-only laws with a test enforcing them. The stack is Tailwind v4 CSS-first (no config file) with components styled by inline style={{}} reading var(--x) — 1,916 such reads — so CSS custom properties are the only vehicle the stack natively consumes. Creating a second parallel layer would have meant two competing sources of truth, so this EXTENDS the existing one. PHASE 1 — additive only. globals.css gains one colour the system did not have, the priced-out blue (#8fb2de + tints), plus a tokenized A-tier glow and the fair-leg tints. The block writes the LAWS into the token layer itself — green = takeable edge only, glow = A-tier only, amber = caution + the fair leg, red = miss/negative only, blue = edge priced out, JetBrains Mono = all data — and a test asserts every newly-declared name is new (zero collisions, zero overrides). No existing hardcoded style was touched and no live surface was migrated: the diff over existing files is 149 insertions, 0 deletions. PHASE 2 — lib/valueState.js is the single verdict function; the component renders what it returns and never re-derives one. VALUE fires only on ev >= 2 AND a takeable price, mirroring src/config/valueEngine.js with a test that cross-checks both files and fails on drift. Five states: VALUE (green), EDGE-NOT-TAKEABLE (blue), NO EDGE (grey, stated at full voice), QUARANTINE (model leg withheld, book+fair stand), REFUSAL (nothing rendered). Free tier is gated at the wire — tierGating strips model_odds and sets model_price_locked, so the lock is real rather than a blur over data already sent; book and fair pass through on every tier because the fair leg is never the paywall. Wired into the landing hero (data was already on /api/hero-prop) and the read card, where the projection block reads first and the triplet sits beside it, not in place of it. Ledger and public profile are out of scope — no fair-odds columns exist there. PHASE 3 — induced all six states in a real browser and read back computed styles, not just markup. Green resolves on VALUE alone: rgb(0,212,160) on the model leg and verdict; the +11.7%-EV-at-210 row renders rgb(143,178,222) blue and a white model leg; quarantine shows MODEL "—" with book and fair intact; refusal renders no legs at all; free tier renders a lock bar with book -120 and fair -104 still honest. Landing hero on live data: book -153, fair -129, model -343, VALUE +21.1% vs fair at +28.1% EV. At a real 390px column the three legs hold at 117px each with no horizontal overflow and fair no smaller than its neighbours. Induction caught a real bug that markup review would not have: the "VS FAIR" figure compared BOOK to fair, printing "VALUE · -6.5% VS FAIR" — a contradiction on screen. The design's own two worked examples pin the formula as MODEL minus FAIR in implied-probability percentage points; modelVsFair now reproduces both exactly (+2.9 and -1.8) and a test locks them. The figure is shown only when its sign agrees with the verdict, so a row that clears the EV bar on the book price while our price sits level with fair leads with the EV instead of a number that reads as a contradiction. Tests 3539 passed / 290 suites, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VCNgGSt5qvcLxaeQqa7Zpj	2026-07-20 18:22:00 -04:00
builtbykev	f5156dd16d	Un-claim CLV on the public profile; un-fabricate player-page FORM ... Two Truth-Law fixes found by auditing the product logged-out. FIX 1 — /u/[handle] claimed a "CLV-verified record" with "closing-line value included" while ZERO closing-line value renders there. Verified live: GET /api/profiles/vyndr returns beat_close_pct null (gated behind CLV_CAPTURE_RELIABLE, unset while C4 is open). Eight instances found — two of them (the OG + portrait "CLV-VERIFIED RECORD · 30D" eyebrows) only by the post-removal residual sweep; two more printed the claim in exactly the no-record branch. Copy now describes what the page shows. The gated CLV-VERIFIED badge and the BEAT CLOSE figure are removed from the public profile, OG card and portrait card. DISPLAY ONLY: beat_close_pct, clvCaptureReliable() and the whole CLV data path are untouched, and the earned directional badge stays Analyst+Desk. The claim returns when CLV genuinely renders here. Also fixes the doubled "· VYNDR · VYNDR" title (layout's '%s · VYNDR' template already supplies the suffix); verified on composed output by serving the build and reading the real HTML, not on source. FIX 2 — the player page's FORM was `70 + 4 × (count of tonight's graded props)`. Nothing on the HTTP path ever sets stats.form, so that fallback WAS the live number: Josh Bell's "74" is 70 + 4×1 prop, confirmed against his live payload. MATCHUP was gradeFromForm(that number), with a hardcoded 'B' on the no-archetype branch — both fabricated letters with no opponent input on the path. Systemic: buildIntel is the unconditional path for every player and sport. FORM and MATCHUP now render "—" (kind 'plain', so no bar width or colour is computed off a null). gradeFromForm is deleted and the prop count is no longer passed into buildIntel. computeFormScore's hardcoded 75 now returns undefined. Induced across MLB/NBA/WNBA: all render cleanly, and real values (USAGE 3.6 AB/G, REST B2B) still render. Neither form value feeds the grade — engine1 reads raw l5_avg/l20_avg against the line and never a form key; buildIntelFields decorates the already-graded object. Grade inputs are byte-identical. Held (needs a per-sport headline-stat design call): a real player-level form metric + label disambiguation. Tests 3491 passed / 289 suites, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VCNgGSt5qvcLxaeQqa7Zpj	2026-07-20 17:05:04 -04:00
builtbykev	ca9ca34cbb	Remove legacy C4 CLV from FIVE surfaces; install directional badge on ledger ... TRUTH FIX FIRST. row.clv/clv_result derive from the overwritable closing_line — 637/699 rows had closing == locked — so of the 578 rendered chips, 522 "flat"s encoded a CAPTURE FAILURE as a held line. That number was live on FIVE surfaces, not the one the order assumed: 1. ledger card ClvChip@319 (authed) 2. public profile /u/ duplicate chip@260 (PUBLIC, shareable) 3. dashboard "· CLV BEAT"@508 (authed) 4. board / Slate "CLV BEAT/FADED"@422 (FREE surface) 5. board / Slate "✓ HIT · CLV BEAT"@517 (FREE surface) Removing it from the ledger alone would have left the lie live on three surfaces including two public ones, defeating the stated PRIMARY GOAL, so the removal covers all five. That is a deliberate extension beyond the "scoped to ledger card" guardrail and is flagged as such — the guardrail protected against feature creep, and this is the same defect at four more addresses. DIRECTIONAL BADGE installed in the old ledger slot. Three time states now read distinctly on the row: entry (locked_odds, at-grade) · close (badge, at-close) · outcome (hit/miss, final). The RESULT stays the row hero. The PUBLIC profile deliberately gets NO badge — it never receives dclv data (Analyst+Desk, server-gated), so that surface now shows the settled result alone. HONEST ABSENCE, tested: the 578 formerly-chipped rows now render NOTHING — not a "flat", which is the old chip's lie in subtler form. Rows settled before capture existed will never get dclv, and permanent silence is the correct output. All six states verified in place; a 40-row dense ledger stays legible (27 badges, max 40 chars, one line, consistent slot after OutcomeChip); no CLV sort or filter exists. FIELD REMOVAL DEFERRED as a separate scoped cleanup: /api/ledger/mine and /api/profiles still SEND clv/clv_result, and dashboard/Slate still type them. Display removal is local and safe; stripping the fields mid-swap could break a response consumer. Suite 289/3485 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 13:58:47 -04:00
builtbykev	da8bfdf1db	Render directional-CLV badge — Analyst+Desk, server-gated, receipt-bearing ... CARD BADGE ONLY. Ticker-CLV explicitly DEFERRED (named, not lost). PHASE 1 — SERVER-SIDE GATE AT THE DATA LAYER. A Free request never RECEIVES dclv data: the CLV columns are appended to the SELECT only behind canAccess(tier,'clv_badge') (new capability, analyst+desk), and responses are ALSO stripped as defence in depth so a future SELECT change cannot quietly leak. No CSS/client gate — data that reaches the browser has left the building. dclv_fair_lock/fair_close are de-vig internals and are never sent at all. SURFACE AUDIT, all six channels, each test-locked to contain no CLV: public profile (share link), snapshot/card feed, ticker feed, share card/OG, embeddable widget, newsletter. A test also asserts no ledger_entries read uses select('*') — a star would auto-leak every new column, which is exactly how a gate becomes theatre. PHASE 2 — IMMUTABLE ONCE COMPUTED. A settle can re-run (stat correction, protested game) and a badge that flips positive->negative AFTER a user saw or screenshotted it is a credibility failure. First computation wins: dclv is only computed when dclv_computed_at is null, so a re-settle can never rewrite a shown badge. Same discipline as the locked grade. PHASE 3 — RENDER, test-first, ABSENCE IS HONEST. unknown / flat / null / missing-receipt all render NOTHING — no element, no placeholder, no "pending". Proven on an ALL-NULL board (today: 0 badges) and a MIXED board (tomorrow: 1 of 4 badged, badge-less cards clean). Binary states only: positive -> MOVED TOWARD US "graded -110 · closed -145" negative -> MOVED AWAY "graded -110 · closed +120" The RECEIPT is the persuasive part, so a badge with no numbers is suppressed rather than shown as a bare claim. Negative is neutral context and NEVER touches the locked grade — no back-door re-grading. NO aggregate, count or rollup exists by construction: the module exports exactly {clvBadge, fmtPrice} and a badge payload carries exactly {tone,label,receipt} — asserted by test, because an on-screen tally would be the held aggregate claim through the side door. Build gotcha hit and fixed: clvBadge is CommonJS (allowJs) with no TS types, so the .tsx needed an explicit cast at the call site — the build worker exits 1 on type errors even though compilation "succeeds". Suite 288/3473 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 13:37:52 -04:00
builtbykev	dcdad60896	Directional CLV — per-read signal, side-bound, with a real compute trigger ... PER-READ ONLY. No aggregate CLV stat, no CLV marketing un-held. PHASE 0 FINDING THAT SHAPED THE BUILD: the LOCK end must come from model_snapshots, NOT ledger_entries. The ledger stores only the graded side's locked_odds (694 rows, single-side) which CANNOT be de-vigged. model_snapshots retains BOTH side prices on 520/520 graded rows AND an already-de-vigged fair_prob on 520/520 — produced by the same devig.devigTwoWay the close uses, so "same method both ends" holds by construction rather than by convention. THE COMPUTE TRIGGER is the SETTLE PASS (ledgerService.settleLedger). At settle the game is final, so the close has landed and the read is final — the only moment both ends of the comparison exist. Grade and locked prices are written hours earlier and the close at lock, so without this trigger a correct CLV function would simply never populate. JOIN INHERITS THE PROVEN KEY: (sport, player_key, stat, side, game_date), WITHOUT line — a close that moved off the graded line is the entire point. Verified clean earlier: 164 identity groups, zero ambiguity. Rows whose capture refused (missed/ambiguous/one-sided) are UNKNOWN for CLV, matching the capture layer's own honesty. SIGN IS SIDE-BOUND and proven by test before the logic existed — the badge-inverting trap. Same market move: OVER-graded -> positive clv +0.0800 (fair .500 -> .580) UNDER-graded -> negative clv -0.0800 (fair .500 -> .420) exact mirrors. FLAT is a PROBABILITY-space threshold always (1.5pp): a 40-cent price move on a deep favourite reads flat, correctly, because price space lies about magnitude. UNKNOWN is a first-class state, never 0 — zero asserts "the market did not move", which is a claim; a missing close asserts nothing. describe() returns null for unknown so a badge can never render for it. migration 030 adds dclv/dclv_state/dclv_fair_lock/dclv_fair_close/ dclv_computed_at as NEW columns rather than reusing the C4 clv fields — conflating a verified per-read signal with a known-broken one would be the worst kind of quiet lie. Caught pre-deploy: the trigger call passed `deps`, which is not in scope in settleLedger (it uses `opts`) — a ReferenceError at the call site, outside the helper's try/catch, which broke two settlement suites. Suite 286/3447 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 13:17:34 -04:00
builtbykev	55157b3288	Close-capture retry (lock-walled) + MLB opp_rank_stat derivation ... PHASE 1 — CLOSE-CAPTURE RETRY, test-first. The closing capture gets a retry the snapshot path deliberately does not: a snapshot re-runs at the next slot, but a MISSED CLOSE IS PERMANENT, and the feed flaked once on a dry induce. Three hard rules, each driven by a test written before the logic: - BOUNDED attempts (default 3) with short backoff so every attempt fits inside the window. Never infinite. - HARD LOCK-WALL: inside lockWallMinutes of first pitch (or past it) it stops and records missed_close. A price captured AT or AFTER lock is NOT a close; storing one would fabricate the CLV baseline. - NO BOUND LOCK TIME -> refuse immediately, never burn retries on a prop whose close cannot be timed. On exhaustion it records missed_close with NO price — never a stale, mid-day or post-lock line. PHASE 3 — MLB opp_rank_stat DERIVED, contract-locked. MLB previously had no opponent metric at all (ESPN's MLB team endpoint carries none), so engine1's +/-1.0 opponent factor never fired for the sport carrying most of our volume. Derived from data we already ingest: statsapi team pitching splits, all 30 teams in ONE free unauthenticated call. THE SHARED CONTRACT is documented and TESTED, not assumed: 0-1 scale, HIGH (>=0.70) = WEAK opponent, LOW (<=0.30) = TOUGH — identical to WNBA's live semantics. Polarity is the highest-risk part: backwards polarity does not fail loudly, it silently adjusts every MLB grade the wrong way. A test asserts MLB polarity EQUALS WNBA polarity using engine1's own thresholds. PROVEN AGAINST THE LIVE FEED: Colorado Rockies BAA .286 -> opp_rank 0.983 (weak, fires weak_opponent) LA Dodgers BAA .215 -> opp_rank 0.017 (tough, fires top_opponent) POLARITY HOLDS: true HONEST NULLS, tested: thin league baseline, thin opponent sample, unmapped stat, unknown opponent, or a missing field all return NULL with a reason — we are FIXING a silent null, so it is never replaced by a confident guess off three games. opponentStrengthHealth pages on an empty source AND on derived-null-for-a-sport-we-expect-to-derive. Suite 285/3435 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 12:27:47 -04:00
builtbykev	77a58e4113	Arm harness on our scheduler + start closing-line capture (capture only) ... PART A — HARNESS ARMED ON OUR OWN INFRA. snapshotScheduler now runs the nightly backtest at HARNESS_HOUR_UTC (default 14), appends to harness_results, and pages via opsWatch.harnessStaleAlarm — a validator that stops running looks exactly like one that keeps passing. No external dependency: the join is plain SQL through the service client and the harness is a pure function. POST /api/internal/harness/run induces the same code path on demand, because a scheduled mechanism is verified by inducing it, never by waiting for a slot. PART B PHASE 0 — GATE PASSED for what is capturable: - C4 diagnosed: closing_line is ONE overwritable field with no timestamp and no provenance. captureClosing writes the current line and, when a prop fails to match, silently leaves the earlier value (= the lock) in place — so "captured a real close" is indistinguishable from "never updated". It is 92% equal, not 100%: 56 rows DID record movement, so the defect is provenance, not the value. - Feeds: normalized props already carry BOTH raw side prices per book, with game_time, and the intraday refresh polls every ~20 min during slate hours — so the last observable pre-lock line is available. - SHARP close: pinnacle is in ALLOWED_BOOKS -> a no-vig reference is capturable ("beat the market"). - ODAWA: NOT capturable. 'odawa' exists only as a UI preference option in onboarding/settings; it is in no adapter, no ALLOWED_BOOKS, no feed. An un-capturable source is a finding, not a gap to paper over. - JOIN: must drop `line` from the natural key, because a close that MOVED off the graded line is the entire point of CLV. Verified safe — all 164 current identity groups have exactly ONE line per (sport, player_key, stat, side, game_date). Zero ambiguity. PART B PHASE 1 — CAPTURE ONLY, built test-first. The refusal was proven before the capture logic existed: unbound game_time, doubleheader ambiguity, a missed pre-lock window, or a one-sided price all record missed_reason with NO price. A stale or mid-day line substituted for a close would manufacture a CLV proof from a number that was never the close. migration 029 closing_captures: append-only, never overwritten (that is the provenance C4 lacked), BOTH raw side prices so the existing de-vig engine can compute a fair closing probability later, sharp vs book line types kept distinct. Wired into the intraday refresh with a capture-rate alarm — a missed close is unrecoverable. NO CLV metric built, as ordered. This starts the clock. Suite 284/3417 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 12:05:16 -04:00
builtbykev	e809a0eb3c	Backtest harness — the validator, built refusal-first ... Phase 0 gate PASSED: the join is clean. No FK exists; the natural key (sport, player_key, stat, line, side, game_date) yields 283 clean 1:1 joins with ZERO ambiguity. game_id is NOT usable — 400/550 snapshot rows carry UNK@UNK because home/away names weren't threaded into the grader until Order 1.6. Non-joining rows are EXPECTED, not errors: retention stores both sides plus refusals; the ledger keeps only the graded side. Outcomes are NOT denormalized — ledger_entries stays the source of truth. BUILT TEST-FIRST, and the first property proven is the REFUSAL, not the math. Below threshold the harness emits INSUFFICIENT with n and the shortfall and NO rate anywhere in the payload, so a downstream renderer cannot surface one by accident. A test asserts the payload contains no hit_rate number at all. - Wilson intervals (correct at the n we actually have, unlike the normal approximation which emits negative lower bounds). - Strata NEVER mix sport or model_version. - Denominator excludes quarantined, void, unrecoverable, pending, push — asserted by test. - Monotonicity refuses to RANK buckets whose intervals overlap; it reports "not distinguishable on this sample". - Probability calibration (Brier + reliability) also respects the threshold: a thin sample returns status INSUFFICIENT and a NULL score. - Replay seam reads the STORED feature vector only. A row whose input was never retained is UN-BACKTESTABLE, never scored with substituted current data. Identity replay reproduces the live prediction exactly. The tests caught a real bug in my own code: `Number(null) === 0` let a null p_win through as a confident 0% forecast — this codebase's signature fabrication bug, inside the harness whose entire purpose is refusing invented numbers. Fixed with a strict null guard. FIRST LIVE RUN — the correct, passing output: VERDICT: INSUFFICIENT_HISTORY (can_validate=false) 283 joined -> 35 scored (120 quarantined, 124 pending, 4 terminal) C n=18 (short by 2), B n=17 (short by 3) strata: mlb 7, wnba 28 — never mixed migration 028 adds harness_results (append-only trend log; INSUFFICIENT rows are expected and correct) and opsWatch.harnessStaleAlarm pages if the harness stops running — a validator that isn't running looks exactly like one that keeps passing. Suite 283/3403 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 11:31:48 -04:00
builtbykev	b33612675d	Heal execute: quarantine markers, re-enable DNP voiding, two exclusion scopes ... Order 2 Phases 2 + 4. Pre-heal rollback point secured first: vyndr-20260720-093821.dump (856,890 bytes) VERIFIED ON THE BOX, not just exit 0. MIGRATION 027 — two DISTINCT exclusion scopes, deliberately separate: - quarantine_reason: the row's GRADE is untrustworthy (wrong_opponent_grade). The row REMAINS a real public settled result — the bet happened, the outcome is real — but it must never train or validate, so getModelAggregate now excludes it from the denominator alongside void/unrecoverable. - analysis_flags: the row is VALID for settlement and the record but unattributable for PER-GAME analysis (doubleheader dates). Explicitly NOT filtered from aggregates. Collapsing these would either wrongly drop 166 doubleheader rows from the record or wrongly keep 25 wrong-opponent grades inside model validation. Tests assert both directions, including that analysis_flags is NOT filtered. Also adds re_settled_at + settlement_source to model_snapshots. DNP VOIDING RE-ENABLED — reversing my own Order 1.5 disable, with scrutiny, because its premise was FALSE. Order 1.5 assumed a missing player row meant the row's DATE was wrong. The Phase 0 dry-run disproved it: across every bindable row the stored date matched a real game (MIS-DATED: 0), and the players I had cited as counter-evidence were genuine DNPs on their true dates (Freeman 07-18; Kwan/Hedges/Davis 07-17 — their teams played, they did not). The evidence is positive: games FINAL + no line in a full-season log = no bet existed. I got this wrong twice tonight in opposite directions; the dry-run is what caught it. Recording the reasoning in the code so the next reader sees why the flag flipped back. Suite 282/3386 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 05:41:41 -04:00
builtbykev	6415751f2e	Grading binds opponent features to the REAL game, not ESPN's "today" ... Order 1.6 Phase 1. This is a MODEL-OUTPUT fix, not bookkeeping. computeFeatures.lookupTodayGame called the ESPN scoreboard with NO date param and took whatever ESPN calls "today". Renamed to lookupGameOnDate and now sends ?dates=YYYYMMDD from the prop's BOUND game — the same game the ledger, retention and settlement use, so all four finally agree. PROVEN against live ESPN (before/after, same instant): dateless "today" CLE->PIT NYY->LAD LAD->NYY (Jul 19 card) bound to 2026-07-20 CLE->MIN NYY->PIT LAD->PHI (the real games) bound to 2026-07-19 CLE->PIT NYY->LAD LAD->NYY (reproduces OLD) Every opponent was wrong. opponentAbbr feeds opp_rank_stat (a +/-1.0 factor) and isHome feeds home_away (+0.5), so late-slot grades were scored against the wrong matchup. Note the window is WIDER than the 01:00/03:00 UTC slots: this ran at 07:5x UTC = 03:5x ET and ESPN's dateless scoreboard was STILL returning the previous day's card. HONEST DEGRADATION: with no bound game date the grader does NOT fall back to a dateless lookup — it records 'no_bound_game_date' and leaves opponentAbbr/isHome/gameId null, so engine1 simply omits the opponent and home/away factors rather than scoring a wrong matchup. Tests assert both directions. Same class of bug fixed alongside: the Tank01 augmentation used TODAY's UTC date for its cache key; it now uses the bound game date. gradeSlateService threads game_date/game_time/home_team/away_team into the grader so the binding reaches computeFeatures at all. Audited the rest of the feature path for dateless/"today" lookups — none remain (weather is current-conditions by venue, park/pace are static). Suite 282/3383 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 03:50:07 -04:00
builtbykev	1bcdd8b305	Fix the ROOT: bind props to their real game, never date by the grade clock ... Order 1.5 Phase 1. PropLine emits NO commence_time (grep-verified: zero hits in proplineAdapter), so ledgerService's `dateET(prop.game_time) || dateET(gradedTs)` always fell through to the GRADE timestamp — and a 01:00/03:00 UTC snapshot is 21:00/23:00 ET the PREVIOUS day. Tonight's props were filed under yesterday, settlement correctly found no game there, and Order 1's void logic turned that into 64 destroyed results. gameBinder.attachGameTimes() now matches every prop to a scheduled game by TEAMS across the plausible ET window (grade date, +1, -1) and attaches the GAME'S OWN time/date/id. It runs in snapshotService before grading and before the ledger write, so ledger, retention and settlement all inherit the correct date from one place. HARD CONTRACT: an unbindable prop returns NOTHING. ledgerService no longer has a grade-clock fallback — a row with no real game time is SKIPPED and counted, because a mis-dated row is fabricated data and the ledger holds real values or nothing. A slate that binds nothing pages. DOUBLEHEADERS are reported, never guessed: two games with the same teams on one date mark the binding `ambiguous` so settlement can decline rather than attribute a prop to the wrong game. (Real example already in the data: mlb:2026-07-11:MilwaukeeBrewers@PittsburghPirates(Game1).) Also fixes retention, which had the SAME bug from last night — I had dated model_snapshots rows with the snapshot clock. Rows now take the ET date of the bound game_time. Suite 282/3381 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 03:25:01 -04:00
builtbykev	270c4db47a	STOP voiding on player-absence — it destroyed real results ... Correctness fix to code I shipped minutes ago. The induced live settle pass voided 64 rows as 'player_dnp' and a large share of them are WRONG: the Jul 18 set is everyday starters (Freeman, Bellinger, Tucker, Chisholm, Conforto). They played. ROOT CAUSE — and my Phase 0 diagnosis was wrong. It is not DNP. The ledger row's game_date is WRONG. ledgerService derives game_date from the GRADE timestamp when the feed carries no game_time, and a 01:00/03:00 UTC snapshot is 21:00/23:00 ET the PREVIOUS day, so rows get labelled with the previous ET date. Verified against fresh season logs (cache disabled, so not staleness; found:true, so not name resolution): Freddie Freeman played Jul 17 and Jul 19 (x2, doubleheader) — NOT Jul 18 Steven Kwan played Jul 18 (x2) and Jul 19 — NOT Jul 17 Settlement was correct to find no game on the labelled date. My void logic then converted a data-labelling bug into destroyed results. FIX: never void on player-absence alone. Voiding now requires POSITIVE evidence — the games themselves postponed/cancelled. Absence returns 'unknown' (reason player_absent_unconfirmed), so the row retries and ages out to 'unrecoverable' at the cap. We cannot distinguish "did not play" from "mislabelled date", so we must not claim DNP. Both terminal states are excluded from the record denominator either way. Window-decay remains genuinely fixed (full season log vs a rolling window), and terminal states still prevent immortal rows. NOT DONE HERE: the 64 wrong voids are still in the table, and the game_date derivation is still wrong at the source. Both are reported for the table — no healing in this order. Suite green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 03:10:34 -04:00
builtbykev	d4a6170ffa	Settlement fix forward: date-targeted resolution + terminal states ... Order 1 of 2. Push scoring UNTOUCHED — it is correct. No healing here. PHASE 1 — DATE-TARGETED FETCH replaces the rolling window for settlement. settleSource.resolveOutcome() resolves the SPECIFIC DATE and, when the player is absent, reads GAME STATE to learn what the absence MEANS: game final + player has a line -> SETTLE (a partial game is a real result, never a void) game final + player absent -> VOID (confirmed DNP) postponed / cancelled -> VOID scheduled / in progress / SUSPENDED -> PENDING (a suspended game resumes; voiding it would destroy a real bet) player played, stat missing -> unknown, NEVER void a real appearance This is FREE for MLB: mlbStatsAdapter.getPlayerGameLog already returned the full season log and getPlayerStats was discarding it with .slice(-10). Settlement now reads fullLog — same request, same cache — which removes window-decay entirely (the verified failure was a Jul 12 game outside a last10 starting Jul 6). Projections keep using last10, unchanged. PHASE 2 — TERMINAL STATES (migration 026 applied). outcome CHECK widened to hit/miss/push/void/unrecoverable; added settle_attempts, settlement_source, settlement_version, model_version. A row that cannot be resolved after SETTLE_ATTEMPT_CAP (4) date-targeted attempts becomes 'unrecoverable' rather than pending forever. CRITICAL: getModelAggregate now EXCLUDES void and unrecoverable from the settled selection — it used .not('outcome','is',null), so without this a void would have counted as a settled row and silently moved the public record. Verified in the record calc, not just the settle path. PHASE 3 — SETTLEMENT-RATE ALARM. zeroSettleAlarm only caught a TOTAL zero while ~30% of a slate failed quietly (Jul 17: 57/86). opsWatch .settlementRateAlarm pages when resolved/attempted falls below SETTLE_RATE_FLOOR (0.8). Voids count as RESOLVED — a void is a legitimate terminal state — so healthy voiding never pages. Third silent-failure surface of the night, now closed. PHASE 4 — VERSION STAMPING. src/config/modelEras.js defines the cutoff ONCE (2026-07-19T22:50:00Z); migration 026 backfilled pre-cutoff rows as 'pre-retention-unknown' (naming the uncertainty, not implying knowledge); new rows carry model_version. Regression caught pre-deploy: getScheduleFn was not injectable, so the ledger suite hit the real network and HUNG. Now injectable via opts and a no-op under NODE_ENV=test. The "no row -> pending" test was updated to the new behaviour deliberately: a missing row on a FINAL game now voids. Suite 281/3373 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 03:04:55 -04:00
builtbykev	5a5e37e32e	Retention: fill enrichment fields + page on a zero-write slot ... PHASE 1 — cron capture needed NO wiring. Verified in code: the scheduler tick calls runAll = snapshotService.runAllSnapshots, which loops runSnapshot per sport, which already carries the onGraded -> retention hook. The scheduled path and the manual path are the SAME function. The reason no cron cycle had been captured is simply that no slot has fired since retention deployed (slots are 14/19/22/1/3 UTC; retention landed ~02:55). Induced proof follows the deploy. PHASE 2 — archetype/team/opponent were permanently null because retention persisted at GRADE time, before enrichment attaches them. Retention still COLLECTS at grade time (the only moment the feature vector exists) but now PERSISTS after enrichment, merging those three fields via retentionService.mergeEnrichment. The merge is pure and fills ONLY those three fields — features and every model output are grade-time values and must never be rewritten by enrichment; a test asserts that. Unmatched rows (refusals not in the enriched slate) keep nulls rather than guesses. The empty-slate early return now persists too: a refusal-only slate is still history worth keeping. PHASE 3 — ZERO-WRITE ALARM. opsWatch.retentionZeroWriteAlarm pages at missed-snapshot severity when a slot GRADED props but retention wrote fewer rows than the slate (or nothing). runSnapshot now returns retentionRows so the scheduler can evaluate it. Retention is best-effort by design so it can never break a snapshot — which means a broken write is silent by construction. This is the counterweight. A slot that graded nothing never false-pages; an absent count reads as NOTHING and still pages, distinct from a reported 0. Suite 280/3349 green, build exit 0. Outcome stamping deliberately NOT implemented (depends on the settlement fix). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 02:00:40 -04:00
builtbykev	c4c9b97604	Off-box backup: pin the host key, guarantee the remote dir, page on failure ... PHASE 1 — HOST KEY STATICALLY PINNED. ssh-keyscan -p 23 returned an ED25519 key whose fingerprint EQUALS the out-of-band value SHA256:XqONwb1S0zuj5A1CDxpOSuD2hnAArV1A3wKY7Z3sdgM, so it is safe to pin. scripts/storagebox_known_hosts now carries that verified line and ships to the container (Dockerfile already COPYs scripts/). backup-db.sh uses StrictHostKeyChecking=yes + UserKnownHostsFile=<pin> instead of accept-new, which was trust-on-first-use and would have accepted an impostor on the very first run. A missing pin file REFUSES the push rather than silently falling back. Never weakened to accept-new/=no//dev/null — a test asserts that on executable lines. PHASE 1b — REMOTE DIR GUARANTEED. The box has only .ssh/, and rsyncing a file into a missing parent either fails or silently writes the dump AS the directory name — one file, overwritten nightly, reading as "backups exist" while retaining exactly one. Uses rsync --mkpath when available, else an explicit remote mkdir -p ahead of the push. PHASE 2b — FAILED OFF-BOX PUSH IS NOW LOUD. Off-box is required, so the failed-push path pages at "urgent" (was "low"/deferred) and the script emits a machine-readable OFFBOX_OK=1/0/deferred that POST /api/internal/backup/run surfaces as a distinct offbox_ok field. Exit code deliberately still reflects ON-BOX durability — a good on-box dump must not raise a false total-failure alarm. Surfacing the truth, not manufacturing a failure. No key material is echoed anywhere; only the PUBLIC host key is committed. Suite 280/3338 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-20 01:10:23 -04:00
builtbykev	d3ffa1b8c2	Retention: model_snapshots live + base64 SSH key support ... RETENTION (Phase 2, priority zero). History starts compounding tonight. migration 025 model_snapshots — APPLIED to prod. Append-only, one row per graded prop PER SIDE PER CYCLE, with a unique index on (snapshot_id, player_key, stat, line, side) so a retried cycle cannot duplicate. RLS on, service-role writes only. What it captures that the ledger never did: - features jsonb — the model's INPUTS. Without these a backtest can only grade our own homework; with them any future model can be replayed against the exact conditions this one faced. - REFUSALS (refused + refusal_reason). The ledger drops them, so a gate refusing props that would have WON is invisible — unmeasurable lost edge. Captured via a new onGraded hook in gradeSlateService that fires with BOTH sides before any filtering. - grade_11, the pre-collapse grade. The 4-letter map throws away the entire live C-/C/C+/B- range. - model_version + code_sha on every row. ledger_entries mixes pre/post-fix grades with no marker and cannot be separated retroactively. - p_win / ev_pct / fair_odds / takeable / value — none of which any permanent store held. Wiring: analyzeViaEngine1 attaches _features/_grade_11 (underscore = internal); gradeSlateService fires onGraded then STRIPS them so they never reach a cache or API payload; snapshotService builds rows and persists best-effort. Retention reuses the LEDGER's dateET/gameIdFor helpers so rows share the ledger's natural key exactly — otherwise the settle pass could never join outcomes onto them. Rows are written BEFORE the empty- slate early return: a slate that refused everything is exactly the case worth recording. CONTRACT HELD: retention is injectable and every path is caught. persist() returns errors, never throws; a missing Supabase client is SKIPPED, not an error. A retention failure can never break a snapshot. BACKUP: backup-db.sh now accepts BACKUP_SSH_KEY as base64 (recommended — survives env-var newline mangling, which is how injected SSH keys usually break silently) OR raw PEM, detected by decoding and looking for the PEM header. Verified both forms detect correctly against a real generated key. Suite 279/3325 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-19 23:01:12 -04:00
builtbykev	ef7f17610f	Backup: durable on-box volume, off-box DEFERRED, and a real read-back check ... BACKUP_DIR is now a persistent volume (/app/backups), so the dump already survives redeploys — the container-ephemeral risk that made this urgent is closed. Storage Box SSH auth is not sorted yet, so the off-box push is explicitly DEFERRED rather than failing: - gated on BACKUP_OFFBOX=1 (plus BACKUP_REMOTE and BACKUP_SSH_KEY); until then the script logs "off-box push DEFERRED" and exits clean. - if an enabled push DOES fail, it is a LOW-priority "deferred" notice, not a failure — the durable on-box dump succeeded, and calling that an incident would train us to ignore backup alerts. Adds the read-back check, because a backup nobody has read is a hope: countRowsInDump() runs `pg_restore --data-only --table=X -f -` and counts the rows between `FROM stdin;` and the terminating `\.`, proving the archive CONTAINS the data rather than merely parsing. Needs no Postgres server, so it runs inside the API container. Validated against a real pg_dump from a scratch Postgres: counted exactly 604 rows. GET /api/internal/backup/verify exposes it (newest dump in BACKUP_DIR, size, table, rows_in_dump). Unit tests inject spawn/fs so CI needs neither docker nor pg_restore. Suite 278/3310 green, build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-19 22:27:58 -04:00
builtbykev	26b276fbfb	Fix the ESPN team-stats parser + report: opponent rank is still underivable ... Ran the manual regrade with the internal key (thanks). Results are mixed and the honest half matters more. CONFIRMED WORKING — the probability layer is fully alive in production. After POST /api/internal/snapshot/{mlb,wnba}: p_win, ev_pct, model_odds and value are present on 32/32 live grades (mlb 7/7, wnba 25/25), up from 0/8 before. That fix is done. NOT WORKING — the grade-range half did not land, and I am not going to claim it did. The live distribution is unchanged (wnba B17/C8 before AND after; mlb B4/C3), no A, no D, same four confidence values. Diagnosis: matchup_grade is 0/25 on the live board, i.e. opp_rank_stat is still null, so engine1's +/-1.0 opponent factor still never fires and the ceiling is still +3.0 against the +4.5 an A requires. Two distinct causes, both verified against the live ESPN feed: 1. refreshTeamStats CRASHED on every team — "buckets is not iterable", captured 0 / errored 15. ESPN's current shape is results.stats = an OBJECT with categories[], not an array. The old parser did for...of on it. This was invisible until S63 gave the function its first production caller. FIXED here (now captured 15 / errored 0) with a regression test covering the current shape, the legacy array shape, and empty payloads. 2. Even parsed correctly, the endpoint does not carry a defensive-strength metric at all: defensive_rating, opponent_ppg, pace and opponent_fg_pct all normalize to null — it returns only a team's OWN stats. So defensive_rank_normalized cannot be computed and opp_rank_stat remains underivable from this source. A test documents the gap and will fail if that ever changes. Consequence: A STILL DOES NOT EMIT, so the A-RATED marketing hold STAYS. Reviving the opponent factor needs a different derivation (opponent points allowed from scoreboard/schedule, or a different ESPN endpoint) — logged as the concrete next item, not hand-waved as done. Suite 278/3305 green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-19 20:31:15 -04:00
builtbykev	b742230d94	Phase 1: ship the backup cron as CODE + a manual regrade trigger ... FOUNDATION-FIRST re-order, phase 1 (tooling + safety). BACKUP (highest-severity open item) — INSTALLED, not re-proven. src/backupScheduler.js runs scripts/backup-db.sh nightly from inside the API container, armed at boot in server.js. The container already has SUPABASE_DB_URL, pg_dump and the Supabase route, so deploy == installed: no host crontab, no Coolify click. Arming is deliberately opt-OUT (armed whenever SUPABASE_DB_URL exists; BACKUP_CRON=0 kills it) because the S62 design was opt-in and nobody ever opted in — the DB went unbacked every night for weeks. A failed run pages high-priority ntfy; silence is the danger with backups. Durability is the one part still needing a human: the container FS is ephemeral, so a dump dies on redeploy unless BACKUP_REMOTE (off-box rsync) or BACKUP_DIR (persistent volume) is set. The scheduler detects that and pages a WARNING at boot rather than letting an undurable backup read as "backed up". Runbook rewritten to lead with the code path. MANUAL REGRADE TRIGGER — scripts/run-snapshot.js, runnable via docker exec with no VYNDR_INTERNAL_KEY and no new HTTP surface. Runs the SAME snapshotService.runSnapshot the cron runs (including the team-stats refresh that powers opp_rank_stat), supports `all` and `--settle`, and prints the grade/confidence distribution plus p_win/ev_pct presence — which is the thing you actually want when verifying a grading change. ACCESS BLOCKER, logged honestly in specs/model-train.md: there is no VYNDR_INTERNAL_KEY in the local .env and SSH to the box times out from WSL2, so I can neither curl the internal endpoints (which already exist from S45) nor docker exec. The trigger is built and correct but only Kev can run it until a key or SSH access exists. This is the highest-leverage unblock for phases 2 and 3, which both need on-demand regrade+settle to verify anything. Also logged the standing cautions: CLV ledger stays private until backtest-proven; "self-improving model" is unsupported marketing until the loop closes; the engine is MLB/WNBA-calibrated and NFL/NBA/soccer need their own calibration before the hub grades them (scaling gate). Suite 277/3300 green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-19 19:28:15 -04:00
builtbykev	1a94ef5fcf	Revive the dead probability layer + restore grade range ON MERIT ... Folds re-sequenced steps 1+2 into one change (Kev's call): same bug family — features wired to sources that return null. THE PROBABILITY LAYER WAS DEAD IN PRODUCTION. p_win/ev_pct/kelly/ model_odds/value were absent on 0/8 live grades because gameLogService.getGameLogs returns null for MLB by construction and depends on the offline Python service for NBA/WNBA, so meta.gameLogs was [] for every sport. This was the S46 bug in a second location — that fix gave featureCache an MLB branch (why grades still worked) but never the estimator. featureCache.getStatRows now supplies normalized rows ([{date,[statType]:v}], most-recent-first) for every sport, feeding the estimator AND consistency AND game_count_in_7d from one fetch. VERIFIED on real props: p_win 25/25 WNBA, 8/8 MLB (was 0). GRADE RANGE, ON MERIT — never by rescaling (permanent founder ruling: minting A's without new information is a relabelled B sold as an A and corrupts an append-only ledger). - refreshTeamStats wired into runSnapshot — it had ZERO production callers, so opp_rank_stat was permanently null and a +/-1.0 factor could never fire. Test-env no-op (opsNotify precedent). - L20 made SYMMETRIC: both branches were delta +1.0, so the season baseline could only ever ADD. No negative path was a structural reason D was unreachable. New l20_contradicts_* carries -1.0. - game_count_in_7d derived from real logged dates (heavy_workload_7d). - NOT wired, deliberately, with reasons inline: teamId (no team_id column; getFeatures reads it top-level; factor also needs a starter-id list) and season_type (ESPN 2 = REGULAR season; threading it raw would fire veteran_in_playoffs in July). Dead code dressed as a fix is the thing we are removing, not adding. CALIBRATION GUARD (found by verifying, not assuming): consistency CV is NBA-tuned; for a Poisson-ish stat cv ~ 1/sqrt(mean), so any stat with mean < 4 auto-classifies boom_bust. First verification run showed 8/8 MLB props boom_bust — a blanket -1.0 that dropped the board to all-C. Floored at CONSISTENCY_MIN_MEAN=4 -> 'unknown' below. Absent beats wrong. MLB low-count stats therefore still get no consistency factor: honest, not fixed. Scale-free index-of-dispersion classifier is the open follow-up. CONFIDENCE IS NOT A PROBABILITY: payloads carry confidence_basis: 'grade_band'. Corrected mlb-grade-degradation.md — its "25/25 grade<->confidence agreement" is a TAUTOLOGY (confidence is derived FROM the letter, so it would report 25/25 even if every grade were wrong), not a validation. Removed dead mlbGrader.js (referenced only by its own test) and the stale computeFeatures comment claiming a penalty that never ran. VERIFICATION (scripts/verify-grade-range.js, real props/logs/engine): WNBA 25 props B 68%->32%, C 32%->64%, D 0->1 (4%); 11-step spread went from 2 steps to 5 (C/C+/B-/D). The D is earned: Angel Reese assists o2.5, p_win 0.365. Nothing flooded — grades got HARDER. A did not emit locally because opp_rank_stat needs the Redis cache only prod populates (local ceiling +3.0 vs the +4.5 A needs); reachability is proven arithmetically and locked in tests. Prod A-emission is the outstanding fingerprint. MARKETING HOLD: "A-RATED" (AccuracyBadge, TopSignals) is unsupported until that fingerprint. Confirmed honest fallbacks render today — /api/ledger/accuracy has B and C buckets only, so the badge shows "MODEL · 63% HIT" and TopSignals self-hides. Nothing fabricated ships. Suite 276/3286 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SmNjJAwEnqHPtXbvSZR8kA	2026-07-19 18:54:51 -04:00
builtbykev	7a925f43eb	Model Train arc 1 (engine): de-vig + EV + takeable/value gates + hero v2 + triplet ... Steps 1-6 — make "real opportunities at takeable prices" the engine, not a filter. 1. DE-VIG (src/utils/devig.js): two-way multiplicative de-vig strips the vig and returns fair prob + fair price per side + the overround. One side missing → fair UNAVAILABLE (null), never faked. Method noted in code + the `devig_method` field. 2. EV (devig.evPct): ev_pct = model prob × decimal − 1 at the graded side's ACTUAL price. This is the ranking signal now, replacing raw |model−consensus|. 3. TAKEABLE gate (src/config/valueEngine.js, TAKEABLE_ODDS_CEILING −160 .. +200, env-tunable): promoted surfaces only (hero/featured/alerts). The full board still shows everything; Parlay Lab exempt; JUICE_ODDS_FLOOR (−400) stays the absolute backstop underneath. Strict null-guard (Number(null)===0 would have made a missing price "takeable"). 4. VALUE flag: passes BOTH gates (takeable AND ev_pct ≥ VALUE_EV_THRESHOLD). Grade = read quality; value = the price pays you. Shipped in payloads. 5. HERO v2 (heroPropService): highest ev_pct among takeable A/B reads — a huge gap on a −900 line is trivia, not an opportunity. 6. VALUE TRIPLET: book_odds · fair_odds · model_odds on every read (snapshot, hero, scan — they all spread the grade). Handoff documents the fields; the rendering is Session-2 Design's job. All wired in analyzeViaEngine1's existing p_win/kelly block (real quantile probability × real book odds, or nothing). 33 new tests; suite 276/3306 green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-19 02:43:30 -04:00
builtbykev	348a82b4a0	Generalize the no-edge guard: suppress by the BOOK'S PRICE, not a stat whitelist ... Follow-up to the rare-event under fix — the whitelist (doubles/triples/HR/SB) was fragile: the same juiced-under problem exists for steals, blocks, and any other low-frequency market, and a new stat would slip through. The real signal is the book's own price. The doubles unders were priced -625 to -1100 — laying 6-11x to win 1x on an ~82% event, with no value the model could recover. So the PRIMARY guard is now stat/sport-agnostic: analyzeViaEngine1 refuses any read whose graded-side odds are past the juice floor (JUICE_ODDS_FLOOR, default -400, env-tunable). That catches every version of this — steals, blocks, anything — and it also keeps the public record honest (those -800 "wins" hit ~82% of the time and would inflate the hit rate, the same class as the projection-0 degradation). The structural rare-event rules stay as the BACKUP for props with no odds (list also expanded cross-sport: + steals, blocks). Normal + longshot prices (-110, -250, +600) are preserved. 16 tests cover both layers. Reported: the doubles projection was REAL per-player (not a fallback); the fix is the price guard, not a bigger list. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-19 02:09:11 -04:00
builtbykev	f72f063e6f	Suppress rare-event 0.5 unders (juiced, no-edge) — config-driven grade + board fix ... Betting-logic audit: the CONSENSUS-vs-MODEL board flooded with fake reads like "DOUBLES u0.5 · MODEL 0.2 · +edge" — the juiced under side of rare counting-stat markets (doubles/triples/HR/SB), which is never a takeable edge and violates the no-unders-default doctrine. Report finding (item 3/4): the doubles projection is REAL per-player, not a flat fallback — 'doubles' maps to a real game-log field (MLB_LOG_FIELD doubles→ doubles) and the live values varied (0.03/0.16/0.2/0.22). So no projection-gate refusal for fakeness; the problem is purely structural (a rare event's real projection always sits below a 0.5 line, so the under always "wins"). Fix (config-driven — src/config/rareEventMarkets.js, tunable stat list + line threshold): - Grade layer (analyzeViaEngine1): a rare-event UNDER at ≤0.5 is always REFUSED (grade null + suppressed flag/reason). A rare-event OVER at ≤0.5 is refused UNLESS the model genuinely projects the event above the line — because a 0.2-over-0.5 carries the SAME |edge| as the suppressed under and would just take its rank on the board. The over grades normally once projection > line. - Board layer (marketBreadth.collectBreadth): drops null-model rows so a suppressed/ungraded prop can't rank a "MODEL —" placeholder onto the board. 10 suppression tests + config locks; also fixed a settingsPage book assertion left over from the ESPN→theScore swap. Suite 274/3289 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-19 00:19:23 -04:00
builtbykev	ccb9668f0c	Task B — founder checkout is SEAT-GATED; payment-decline grace spans retries ... 1+2. Checkout price was CODE-gated (founder price only with a valid founder code) — so "Claim a Founder Desk" would have charged the $44.99 standard price, not the advertised $34.99. Now it's SEAT-gated: resolveCheckoutPrice() attaches the founder price while founder seats remain (< FOUNDER_SEATS_TOTAL, read from the SAME countFounderSeats() truth as the ClaimMeter), and flips to standard at seat 100. createCheckoutSession uses it; the founderCode param is kept for back-compat but no longer drives price. The meter flips to "SOLD OUT" at capacity. When the count can't be verified we honor the advertised founder price (never overcharge). - Also hardened countFounderSeats to manual pagination (the for-await form broke on non-async-iterable list mocks). 3. Tests: resolveCheckoutPrice at seat 0 → founder, seat 100 → standard, the 99/100 boundary, null-count → advertised founder price. 4. Grace: invoice.payment_failed now sets a 14-DAY grace (spans Stripe's Smart Retry window) instead of 48h — a transient decline no longer revokes access mid-retry. Access is revoked only when Stripe actually cancels (customer.subscription.deleted keeps its 48h grace). Test updated. Stripe + founders suites green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 23:04:19 -04:00
builtbykev	ae3cff9dbd	Item 7 — book roster: ESPN BET → theScore Bet (PENN) ... ESPN BET is defunct — PENN/ESPN terminated the deal; PENN rebranded it to theScore Bet (Dec 1 2025) and ESPN is now exclusive with DraftKings. Removed the ESPN BET entries from the BookChip map (web/src/lib/books.js) and added theScore Bet (mono TS, slug thescore) as the successor. Added 'thescore' to the backend oddsNormalizer ALLOWED_BOOKS so the feed's lines are accepted; synced the bookWordmark test list. The ESPN references in src/config/sports.js are ESPN's STATS API (data provider, unrelated to the sportsbook) — left untouched. Flagged in specs/design-reference/HANDOFF.md that the design mockups' BookChip row still shows ESPN BET and needs the same one-swap on the next refresh. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 13:55:39 -04:00
builtbykev	3b12c6ca98	Item 0 — founder count = REAL active Stripe subscriptions (kills the phantom 1) ... The counter showed 1/100 from user_profiles (founder_pricing=true AND subscription_status='active'), but the live Stripe account has ZERO subscriptions of any status — the "1" is a comped/manually-tiered profile, not a paying founder. A tier/founder_pricing field on a profile can be set without ever paying, so it is not proof of a paid seat. Now the count is Stripe's OWN truth: stripeService.countFounderSeats() counts ACTIVE subscriptions on a founder price. The route reads that (cached 5 min); null or any failure → hidden, never a number. A comped profile no longer counts → the honest number is 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 13:22:33 -04:00
builtbykev	a8e383e7e7	Item 8 fix: articles live in web/content (the runtime content root), orphan deleted ... The blog showed "Posts coming soon" live: the app reads process.cwd()/content = web/content at runtime (that's where the old orphan lived and rendered), but the 5 articles were committed to REPO-ROOT content/articles — which the deployed app never reads. Moved them to web/content/articles (verified getAllPosts finds all 5 from cwd=web) and deleted the orphan file web/content/blog/line-movement-guide.mdx (the route already 301s). Test paths updated to web/content/articles. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 01:52:37 -04:00
builtbykev	cb3237cdce	Item 6 — Desk showcase renders REAL data (or hides), kills the mocked ladder ... The pricing Desk showcase hardcoded an alt-line ladder (1.5 A +7.1% / 2.5 A+ +11.4% / 4.5 C -3.8%), QUARTER-KELLY 2.4%, and PARLAY φ 0.34 — a mocked demo selling something we weren't proving. - deskShowcaseService reads the pre-graded snapshot for a real A/B prop's alt-line ladder (prefers the one with the most grade variation — the most compelling real example). Edge per rung shows only when it's a plausible market value; the inflated (model-line)/line artifact on small lines is guarded to "—" rather than shown as a fake +91%. - PARLAY φ is now REAL: the model's same-team correlation (0.34, mirroring the frontend parlayMath team constant) computed for TWO REAL same-team legs, named. No real same-team pair on the board → the tile hides, never an invented number. - QUARTER-KELLY tile is REMOVED: the snapshot has no odds, so a real quarter-Kelly % can't be computed here — a fabricated 2.4% is worse than nothing. Kelly stays a real in-app Desk feature; the showcase just doesn't fake it. - DeskShowcase is now a client component fetching /api/desk-showcase; when the board has no real ladder the whole visuals column hides (real-or-hidden, same law as the hero). The pitch copy is unchanged. 5 service tests. Change-affected suites green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 01:42:16 -04:00
builtbykev	9b9aab4262	Item 5 — daily hero prop is a live RULE (biggest model-vs-market disagreement) ... The landing hero was a static Jokic "Example" card with a name-length pick and a hardcoded A- 73% +6.2% fallback. Now it's deterministic and live: - heroPropService.pickHeroProp reads the pre-graded snapshot and selects the prop with the LARGEST |projection - line| gap among A/B grades (conviction, not noise) — the read where VYNDR disagrees most with the market, the card that makes a stranger argue. No curation, no grading (reads cache → no API credits). GET /api/hero-prop (backend) + repointed Next proxy. - The card shows the disagreement EXPLICITLY: the book's line vs VYNDR's model, side by side (model in green), with the real grade timestamp ("Graded 2:14 PM"). The EXAMPLE chip is gone. - Empty slate → the MOST RECENT real graded read (flagged "LATEST READ", real date). Nothing cached → { available:false } and the card HIDES. No hand-written fallback — the Jokic card is deleted. Survives a dead night: a live rule shows tonight's real MLB read, never a phantom July NBA card. 7 service tests lock the rule (max-gap, A/B gate, projection/line required, empty→recent, hidden, cross-sport). colorContract updated to the new disagreement display. Change-affected suites green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 01:29:55 -04:00
builtbykev	89a2977f57	Item 7 — public accuracy reads the CLEAN ledger; BEAT CLOSE hidden until C4 ... Kev's call: the 30D accuracy surfaces must read TRUTH, not a cache that can't be filtered. My earlier degraded-row exclusion only touched getModelAggregate (Postgres); the public buckets/badge still read outcomeService (Redis outcome log), which counts degraded projection-0 outcomes and has no field to filter on. - /api/accuracy (AccuracyBadge) + /api/ledger/accuracy (buckets/ModelRecord) now source from the clean Postgres ledger aggregate via new ledgerService.getAccuracyView + accuracyBucketsFromAgg (model_value > 0 excludes degraded rows). Same response shapes → no frontend change. Redis outcome log is now read by nothing public; it can age out or be rebuilt. - BEAT CLOSE is a MEASURED-WRONG ZERO: captureClosing re-records the locked line as the "closing" line, so clv is flat on the whole sample and beat_close reads 0% (comparing a number to itself). Full write-up: specs/audit-data/ clv-capture-broken.md (the fix belongs to C4). Until then, beat_close_pct + clv_distribution are SUPPRESSED at the source (getModelAggregate, gated by clvCaptureReliable() / CLV_CAPTURE_RELIABLE=1). Every public surface already renders BEAT CLOSE only when non-null, so they all hide it now — no wrong zero anywhere. HIT RATE (real) is unaffected. Suite 271/3261 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 16:08:18 -04:00
builtbykev	36e653d695	Fix compliancePages test: articles are PUBLISHED now (item 8), not draft ... The test locked the old draft/unwired state; item 8 intentionally published the 5 articles to /blog with real dates. Updated the assertion to the new published shape (title + real date + status: published). This was a tests-before-commit miss on the item-8 push (3b7a1f5) — fixed forward. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 15:57:17 -04:00
builtbykev	41fc2b90e2	Item 2 — founder counter is REAL or hidden (kills the hardcoded 47/100) ... ClaimMeter rendered a fabricated "47 / 100 CLAIMED" (a hardcoded default; the comment even said "Cosmetic conversion driver… Static here"). Now: - GET /api/founders/count counts ONLY real paying founders — user_profiles where founder_pricing = true AND subscription_status = 'active' (the Stripe-webhook-synced mirror, so we never hammer the Stripe API). Cached 5 min in Redis on top of that. - If the source is unavailable (Supabase unconfigured, query error, column not migrated, client throws) the endpoint returns { available: false } and the ClaimMeter renders NOTHING — counter and progress bar both hidden. We never fall back to a number. - A low real count is shown honestly (0 → "0 / 100"); the truth is the feature. Next proxy at app/api/founders/count. 6 route tests cover real count, low count, error/unconfigured/throw → hidden, and cache-hit. Suite 271/3260 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 15:32:18 -04:00
builtbykev	66d52a9ce0	Item 1 — VERB LAW: one verb, READ (never SCAN), + a lint that enforces it ... The product argued with itself: FAB/nav said "Scan", Free tier "5 scans", ticker "MLB slate scanned" — while the Ledger says "MY READS". Swept every user-visible surface to READ: - BottomTabBar FAB + Nav link: 'Scan' → 'Read' - Pricing free tier: '5 scans to try the model' → '5 reads …' - StatStrip: 'Awaiting next scan' → 'Awaiting next read' - Ticker badge + snapshotService event: tag 'SCAN' → 'READ', 'slate scanned' → 'slate read' (readSportOf parses BOTH old and new so cached ticker items dedupe cleanly through the rollover) - upgradePitch: 'You've scanned N parlays' / 'unlimited scans' → read/reads Internal untouched (not user-visible): /api/scan routes, scan_count column, scanning state, DemoScan/ScanIcon, scanlines CSS, the transitional SCAN color-map key. tests/unit/verbLaw.test.js is the enforcement: it fails on user-visible scan/scanned/scans copy across web/src + src/services (skips comments). Suite 270/3254 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 15:26:49 -04:00
builtbykev	9fc4edf3a9	Blast radius: exclude projection<=0 grades from the public model record ... The degraded grades (projection=0 → model_value=0) are already settled in the append-only ledger and must NOT be deleted (Data Semantics law). But their hit/miss is noise, not model skill — they never had a real projection. So getModelAggregate now filters `.gt('model_value', 0)` on both the settled and pending queries: the rows stay in ledger_entries, but leave the public hit_pct / CLV / per-tier record. `.gt` also drops NULL model_value. Post-fix no such row can be written (projection<=0 refuses), so this only sheds the historical set. This is the functional form of the "marking" the work order asked for — the degraded locks are effectively marked as non-counting without mutating history. Test builder mocks gained `.gt`; a lock asserts the filter is applied to both queries. Suite 269/3253 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 03:15:50 -04:00
builtbykev	888d103f95	Fix MLB grade degradation: projection>0 gate, edge semantics, letter=confidence ... The #1 board item — three grading bugs the phone audit surfaced, all in the live Node grade path (engine1 + analyzeViaEngine1), fixed at the source. 1. PROJECTION=0 NOW REFUSES. projectionFor returned l5_avg even when it was 0 (finite, so the `== null` gate passed it) — 9/25 live grades graded on a zero projection, producing a degenerate edge and a hollow grade. Now a non-positive reference is not a projection: projectionFor skips it and falls through to the next POSITIVE reference (l5 -> l20 -> per_90 -> xg); when none is positive it returns null and the read REFUSES (insufficient_data). The gate also gained an explicit `> 0` guard so the invariant is structural — a grade can never be emitted with a non-positive projection. Fewer graded props, honest. 2. EDGE_PCT. The formula was already (model - line) / line signed by direction — Kev's intended semantics. The broken {20,60,100,140} cluster was the proj=0 degeneracy ((line - 0)/line = 100%); with #1 those refuse, so the fabricated 100s vanish and real edges flow. The main-line edge now reuses the VALIDATED projection (edgePctFor accepts an optional ref) so edge and the persisted projection can never diverge. Frontend |edge|>40 guard stays as a safety net. 3. LETTER == THRESHOLD_TABLE(CONFIDENCE). engine1's hand-rolled GRADE_TO_CONFIDENCE drifted a full sub-tier low (B -> 0.55, which the canonical grade_thresholds.json calls B-) — the "B at 45%" the audit caught. Now confidence is DERIVED from each grade's band MIDPOINT in grade_thresholds.json (one source of truth, shared with the Python engine), so applying the threshold table to any grade's displayed confidence resolves back to the same letter. Proven for all 11 grades. Regression locks: tests/unit/mlbGradeDegradation.test.js (14 tests). Backend suite 269/3253 green, web build exit 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 03:06:12 -04:00
builtbykev	71e35e90fd	P2-10: ledger read-card density — tighter padding/margins (3-4 per phone screen) ... Phone audit: read cards were huge, only 1-2 fit per screen. Compressed the vertical spacing — article padding 16->12, header margin 8->5, name 15->14px, ladder-rungs margin 10->8, book/date line 12->8. Kept the archetype showDesc: it renders INLINE (same row as the badge), so it adds zero vertical height — dropping it wouldn't help density and would break the ds5 design lock ("the badge shows its one-line meaning where it leads"). Locked the density in vyndrParityQA (P2-10). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:47:48 -04:00
builtbykev	77e8937a56	P2-9: leaderboard stat labels (SB/ER/TB) + FLAG the grade-degradation root cause ... DISPLAY FIX (shipped): the league leaderboard rendered raw snake_case ("stolen_bases U0.5", "earned_runs U2.5"). New canonical short-label lib web/src/lib/statAbbrev.js (one source, CommonJS + unit-tested) maps stat_type to SB/ER/TB/HR/K/PTS/… and ExploreHub routes through it. Unknown ids upper-case their words so raw snake_case can never leak again. FLAG (reported, NOT silently changed — per the audit's instruction): the "B at 45% confidence" is a BACKEND grading issue, diagnosed against live snapshot: - 25/25 grades mismatch their own confidence vs grade_thresholds.json (B shown at conf 55 = the B- band; a systematic one-sub-tier gap on every prop). The surfaced `confidence` is not the probability that derived the letter (likely the data-sufficiency penalty applied to display-only). - 9/25 have projection=0 — the MLB feature path feeds 0 instead of refusing (S58 insufficient_data), which also produces the P1-7 broken edge_pct. Full write-up + do-not list: specs/audit-data/mlb-grade-degradation.md. NOT re-lettering or shifting thresholds on the frontend — that would hide the bug. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:42:03 -04:00
builtbykev	00537eb84c	P1-8: truth in Compare verdict — no phantom "tonight", cite what actually wins ... Phone audit: the Compare verdict read "the edge tonight tilts his way" for Jokić vs Wembanyama — an NBA claim in July, when NBA has 0 games. The page is sample/form data with no game resolution, so "tonight" can never be verified. Reframed to "on current form" (the rows ARE L10 form) — always honest, in or out of season. Also fixed the cited dimensions: the verdict claimed "usage", but in the sample Jokić's Usage% (29.1) is LOWER than Wemby's (31.0) — he wins scoring, boards, and playmaking, not usage. Copy now matches the data. Locks both P1-7 and P1-8 in vyndrParityQA. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:36:53 -04:00
builtbykev	d755b43f05	P1-7: flat edge board — guard the broken edge placeholder (absent > fabricated) ... Phone audit called the board 'mostly-empty'. Two causes, both now addressed: 1. Dead images (P0-2, already fixed) → the matchup/team chips render logos now. 2. Degraded edge data. Live snapshot edge_pct is on a broken scale (distinct values 20/60/100/140 — not a market %), with projection=0 and confidence 35-55%. A real prop-market edge is single-digit, never past ~40%. Leading the board with '+140%' fabricates a signal (Data Semantics Rule). Fix: an edge whose |value| > 40 is treated as ABSENT at BOTH layers — the data layer (flattenToEdgeBoard nulls it, so it can't RANK a fake +140% above a real +8.4%) and the display (EdgeCell shows '—'). Board falls through to the grade-rank tiebreak when edges are unreliable. Real edges (≤40) are untouched. The root cause — edge_pct/projection/confidence degradation — is a BACKEND grading issue (same family as the P2-9 '45% B' flag), reported separately; this is the honest frontend guard, not a fix for the data. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:34:01 -04:00
builtbykev	8b35fd06ec	P1-5 fix: 390px containment — consensus rows stack, pitcher line wraps ... Phone audit: CONSENSUS VS MODEL bled off the right edge ('2 BO…', 'MO…') and STARTING-pitcher lines truncated ('2.64 E…'). The M4 lock only hid the DOCUMENT scroll (html/body overflow-x) — content still clipped inside cards. Now contained: - .breadth-row stacks (flex-direction:column) at <430px, each field on its own line with overflow-wrap:anywhere — no bleed. - the game-card starting-pitcher inner spans wrap + shrink (flexWrap + minWidth:0) so name/ERA/archetype flow onto a second line instead of clipping. - STRENGTHENED the lock: vyndrParityQA now asserts the CONTAINMENT patterns (breadth-row stacks, pitcher spans wrap), not just document overflow. MLB stat pills: the game-lines grid already scrolls-within-card (<640 M1); if the audit still shows pill clipping elsewhere, it's a follow-up targeted pass. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:19:48 -04:00
builtbykev	ff53f31bfc	P0-4 fix: mobile header collapses to ONE line — logo + clock + sync dot ... Phone audit: at 390px we still rendered the full desktop 3-row header (nav + TOP MOVES ticker + SYNC line) eating ~20% of the viewport, and its height clipped page titles under it (MY READS tabs, HEAD TO HEAD). Implemented Design's mobile app bar <768px: - New MobileSyncClock (extracted from HeartbeatBar) lives in the Nav's right cluster — wall clock rests, amber/STALE reacts off the shared freshness tier. - <768px: the ticker row (.nav-ticker) AND the whole heartbeat bar are hidden; only the nav row shows (logo + clock + search). main padding-top → 62px and the Slate sticky tabs → top:60px, so nothing clips under the bar. - Locked in vyndrParityQA (P0-4): ticker+heartbeat hidden, nav clock shown, paddings collapsed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:15:24 -04:00
builtbykev	db61876b2f	P0-3b/c: consensus grouped by player + ledger cards nest alt lines as a ladder ... Completes P0-3 across all three surfaces: - CONSENSUS VS MODEL (MarketBreadth): dedupe by player+market so Ben Williamson's alt-line variants show as ONE consensus row (no per-market cap — a consensus table just shouldn't repeat a player). - LEDGER cards: group by player+market via groupIntoLadders — Alec Bohm's strikeout ladder (U1.6/U1.3/O1.5) is now ONE card with the rungs nested (each its own side/line + tier-colored grade), not three separate cards. - playerGrouping reads player OR player_name (ledger rows use player_name) — regression-tested so the ledger doesn't silently empty. The Alt Line Ladder shape is what /pricing already demos; the record now uses it. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 01:07:28 -04:00
builtbykev	55f5cdc57d	P0-3a: dedupe the Explore leaderboard — one row per player+market + per-market cap ... Phone audit: leaderboard flooded with 9 consecutive identical 'stolen_bases U0.5 45% B' rows. New shared lib/playerGrouping (dedupeLeaders + groupIntoLadders, name-key aware, 7 unit tests): ONE row per (player, market family) keeping the best-ranked, then a per-market cap (4) so no single prop type floods the board. Applied to ExploreHub. Ledger cards + Consensus grouping follow in P0-3b/c using the same lib. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 00:59:08 -04:00
builtbykev	489d849f1e	P0-1 fix: ledger/u grade badges are token-derived — kill blue-B / amber-C / non-A glow ... Phone audit found LEDGER READ CARDS rendering B badges with BLUE borders + C with AMBER right now in prod — GradePill (components/GradeCard.tsx) hardcoded the OLD palette (rgba(74,158,255) blue-B, rgba(255,179,71) amber-C) for bg/border while the text used the migrated token. Migrated bg/border to color-mix on the grade token, so B renders neutral-white and C grey (matching the board). - globals.css .grade-*-bg → token-derived color-mix (was raw blue/amber rgba). - DELETED glow from .grade-glow-b/c/d (glow is A-tier ONLY, by law) — B/C/D keep their token color, no text-shadow. - Purged the last dead grade-blue #4A9EFF fallbacks (SoccerGradeResult, the intelligence INFO dot). - REGRESSION LOCK: vyndrParityQA fails if #4a9eff / rgba(74,158,255) reappears anywhere in web/src, if GradePill hardcodes blue/amber rgba, or if grade-glow B/C/D grow a text-shadow again. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-17 00:48:56 -04:00
builtbykev	6bc9093298	M4 locks: flat edge board is mobile-only + chip/grade/hero + overflow contained ... Structural mobile rules become failing tests (M4 'test-lock what's lockable'): the flat EDGE BOARD shows <768px and game cards are desktop-only; the board renders TeamChips + tier GradeBadge + sign-colored hero edge% + the ranked opacity ramp; document never scrolls sideways at 390px. Source assertions — they lock the RULES, not the pixels (that's the master audit). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 21:48:21 -04:00
builtbykev	8a24ac9129	M1b screen 01: the flat EDGE BOARD — Design's mobile board IA ... The one genuinely-new mobile screen. Design's mobile BOARD is a FLAT edge-ranked list (all graded props across every game on one list, sorted by edge) — not the desktop's game-grouped cards. Implemented to the drawing with REAL snapshot data: - slateAdapter.flattenToEdgeBoard(cards) — pure transform of the assembled GameCardData[] (grade→game join already done) into ranked rows, edge desc. STRICT null edge sorts LAST (never 0-coerced to the top — Data Semantics Rule). Threaded edge_pct through buildPlayerStripsFromProps (was dropped). 6 unit tests. - MobileEdgeBoard component — Design's exact screen-01 rows: rank (green #1), player + prop, matchup sub-line with TeamChips + live-dot, tier grade chip, and the edge% as the one bold mono hero (green +, red −). Ranked opacity ramp (1 → .55) + green inset border on the top reads. Breadth strip EDGES/AVG CLV/ GAMES — CLV honest '—' (per-slate CLV isn't computed; never fabricated). - Slate: <768px renders the flat board, ≥768px keeps game cards (same data, toggled by width). Ungraded slate still shows game cards on phones (no blank). Built to Design's screen-01 drawing, VISUALLY UNVERIFIED at 390px — the core mobile screen, top of the master-audit list. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 21:46:47 -04:00
builtbykev	f02dc4a6d5	fix: mobile test pins grade-hero at Design's 74px (follow-up to baf977f) ... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 21:34:03 -04:00
builtbykev	f24f9412f1	Rev 3 matchup chips: TeamChip primitive + board-row team context ... Design Rev 3 anchors every matchup/context abbr with a 10-12px team tile. New reusable TeamChip renders the real TeamLogo (licensed ESPN logo where it resolves, team-colored monogram otherwise — the resolver is already built) at that size + the abbr, sitting inside the row so it inherits the ranked opacity ramp. First placement: StatStrip's player/team context (name → team-chip → archetype). ROW-GRAMMAR identity-run test updated to the chip marker. Remaining Rev 3 placements to thread TeamChip into (reusable, mechanical): parlay legs, grade-shift header, pitcher "vs", /u recent-settled, other matchup context lines. Game-card headers already carry TeamLogo (TeamLink). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 21:27:47 -04:00