Shipped this week.

Per-user feed of every outbound webhook retry — request status, response code, and last attempt time — surfaced in the workspace settings tab.

A three-step first-run banner on /anomalies for free-tier workspaces — connect an anomaly source, invite a teammate, and watch a webhook fire — with a persistent dismissal once all three steps land.

Hosted Stripe checkout sessions for all paid plans, with verify-and-fulfill on the return URL and a cron that drains queued payment events into the application state.

Day-0 welcome, day-3 trust feed, day-7 upgrade hint, day-13 warning, day-14 final — a dedupe-keyed drip that fires once per (user, step) so retries cannot double-send.

better-auth wired into the app with an admin plugin — every /api route requires a session, admin routes gate on role, and the locked auth migrations ship as framework-owned.

Visitor rows capture source, referrer host, and UTM triplet at first hit so the marketing dashboard can attribute free-tier signups to the channel that brought them in.

The /blog post that walks through picking and tuning your first Kubernetes auto-remediation playbook — action, guardrails, tuning tip, and the cases that still page a human.

A dashboard-shell module that lays out the workspace surface — sidebar, top bar, account menu — for members and admins alike, with role-conditional nav items.