What we have shipped and what is next.

End-to-end account creation with three login paths and a guided first-run experience. New users are dropped into a 5-step Welcome wizard that captures their Four S stage, picks a starting Enterprise Ladder, and seeds their rung progress before the dashboard renders — so the first screen is already personalised. Recent cycle also fixed the magic-link dead-end and unresponsive social sign-in buttons.

• Email/password registration and login
• Magic-link login (dead-end fixed)
• Google social sign-in (wired end-to-end)
• Welcome wizard (5-step profile + ladder picker)
• Onboarding checklist on dashboard
• Auto-seeded rung progress and Four S badge on first login

Full 50-indicator household assessment adapted from the Fundación Paraguaya methodology. Each indicator scores red / yellow / green, progress persists locally so users can leave and return, and the three highest-risk reds are surfaced as personalised Priority Action cards on the dashboard — each linking into UCan Match, Learn or Opportunities with a [doc-slug] citation back to the source framework.

• 50-indicator self-assessment wizard
• Local-storage progress persistence
• Priority action cards on dashboard
• Full 50-indicator reference grid at /app/stoplight50
• Doc-slug citations linking back to the source framework

Swipe-based 17-card discovery assessment that maps the user across the Four S dimensions — Struggle, Stable, Successful, Significant — and derives a stage badge plus role recommendations. Written into the profile as four_s_stage so downstream modules (Match, Ladders, Priority Actions) can personalise off it. Retake flow lets users re-score without losing history.

• 17-card swipe-based discovery assessment
• Four S dimension scoring engine
• Results screen with role recommendations
• Retake flow (retake button bug fixed) and profile badge
• four_s_stage written back to profile for cross-module personalisation

33 micro-enterprise ladders (spaza, packhouse, mushroom, honey, poultry, tailoring, hairdressing, tuck-shop, spekboom and more) each with a 4-tier rung model. Every rung captures capex, opex, expected margin and next-step conditions, so users can see the exact path from Struggle to Significant with real unit economics. 132 rungs seeded and searchable, cross-referenced against the 10-image ladder audit and the client's zip archive.

• 33 searchable micro-enterprise ladders
• 4-tier rung model (Struggle → Significant)
• Ladder detail pages with unit economics
• Inline PDF previews and card images
• Database seed with 132 rungs
• Cross-referenced against client zip + image audit

35+ crop profiles covering agronomy, seasonality, packhouse handling and target off-takers. Filterable by ladder context so a Starter Farmer sees crops appropriate to their tier, and searchable by name so the Buy In staff tool can reference the correct crop record during field purchasing.

• 35+ crop profiles with agronomy data
• Search and filtering
• Ladder-context filtering (e.g. Starter Farmer → crops)
• Referenced by Buy In tool for canonical crop names

NQF 2–3 aligned learning track focused on Food Safety & Packhouse operations, seeded from the client's Welcome to UCanGrow onboarding letter and the 5 canonical training videos. Server-side quiz grading means correct-answer keys never ship to the client — a security posture we hardened this cycle after the scanner flagged the exposure. Lesson progress persists per user.

• NQF 2–3 aligned Food Safety & Packhouse track
• Lesson viewer with embedded videos
• Quizzes with server-side grading (correct keys never leave the server)
• Persistent lesson progress

Swipe-based opportunity discovery. The v1 recommender takes the user's Four S stage, active ladder and Stoplight priorities into account, then surfaces matching off-takers, buyers, training and funding calls. Swipes are persisted so saved matches survive across devices, and the Discover mode is wired directly into the Opportunities backend.

• Swipe stack for opportunities
• Interactions persisted to backend
• Saved matches tab
• Four S-aware recommendations (v1)
• Linked to Opportunities table (no mock data)

Full commercial onboarding wizard modelled on the IGS Basil / Pesto Princess SPEC/100/002 worked example. Off-takers move through Supplier Information Form → Product Information Form → Certificate of Conformance, with inline readiness checks (allergens, micro limits, packaging, accept/reject criteria). A progress timeline shows submission and expiry dates, and the overview dashboard flags expiring certificates before they lapse.

• SIF → PIF → Certificate wizard
• Inline readiness checks (allergens, micro, packaging)
• Progress timeline with dates
• Overview dashboard with expiry tracking
• Contact data locked down under admin-scoped RLS

New-hub site readiness flow built off the TUCC Starter Checklist (country, area, business model, farmer roster, DC linkage, current practices, opportunities). Once captured, the tool auto-generates a Pack Shed fit-out plan sized to the correct tier — Shack, Shed or House — with a room-by-room requirements list and a farmer-progression ladder linked to the 5 canonical off-takers.

• TUCC starter checklist wizard
• Hub profile capture
• Auto-generated Pack Shed fit-out plan
• Shack / Shed / House tiering with off-taker linkage

Public staff-facing tool at /buyin for capturing community purchases in the field. No email sign-up — a 4-digit PIN (4321) unlocks the session and everything else runs on server-side writes via supabaseAdmin, so staff can share a single device on the ground. Camera opens directly to snap produce, GPS + timestamp are stamped automatically, and the refreshed 225-item June 2026 price list auto-prices each capture. End-shift lock protects the day's takings and the recent-captures list gives instant reconciliation.

• Public /buyin route — no email sign-up required
• 4-digit PIN gate (4321) for staff access
• Camera capture with GPS and timestamp
• June 2026 price list (225 SKUs: mushrooms, veg, fruit, honey)
• Server-side photo upload via supabaseAdmin (base64 pipeline)
• End-shift lock and recent captures list
• Readable PIN input (placeholder-clip fix)

Role-based admin console gated by a security-definer has_role() function, so no client-side privilege checks. Includes the War Room live alerts, the partner network pipeline and a Four S distribution analytics view that shows how the active user base is spread across Struggle → Significant. Admin RLS was hardened this cycle after a has_role permission bug briefly blocked page loads.

• Role-based admin access via has_role() security-definer
• War Room alerts
• Partner network pipeline
• Four S distribution analytics
• has_role() permission bug fixed

12 live marketing routes covering Vision, Model, Stack, Flywheel, Network, Group, Partnership, Manifesto, Four S Journey, Proof gallery, Press/media and the SASSA Social Impact Bond pitch route. Partner EOI form posts to a public API endpoint under /api/public/ with signature-verified handling. Head metadata (title/desc/og/twitter) is set per route with og:image scoped to leaf routes only — shared links now render correct previews.

• Vision, Model, Stack, Flywheel pages
• Network, Group, Partnership, Manifesto
• Proof gallery and press/media page
• SASSA SIB pitch route
• Partner EOI form with public API endpoint
• Per-route og:image + twitter:card (shared-link preview fix)

Two voice surfaces powered by Azure DeepSeek + Azure VoiceLive (no Lovable AI Gateway usage anywhere): the hero HeroVoiceAgent on the marketing landing and the floating VoiceAgentFAB inside the app shell. Both now carry the full UCan tutorial script, so users can literally ask "how do I use SMRT.BIO?" and get spoken step-by-step guidance. The PWA manifest is UCan-branded, install prompt is wired, and the shell is offline-ready.

• Voice-enabled AI assistant
• Voice live agent FAB
• Offline-ready PWA manifest
• Install prompt
• Full tutorial script wired into both voice surfaces
• Azure DeepSeek + Azure VoiceLive only (no LOVABLE_API_KEY)

New this cycle. A single tutorial source of truth (src/lib/ucan-tutorial.ts) feeds the chat API system prompt, both voice agents and a new HowToDialog modal. The hero section now exposes a "How UCan works" button alongside Get Started / Explore Ecosystem / HR Tinder / Meet UCan / Talk to UCan, so first-time visitors can self-serve a full product walkthrough with deep links into every module.

• src/lib/ucan-tutorial.ts — canonical tutorial schema per module
• HowToDialog modal walkthrough with deep-link CTAs
• "How UCan works" hero button
• Chat system prompt rebuilt on tutorial content
• HeroVoiceAgent + VoiceAgentFAB updated with spoken walkthrough

Full RLS + GRANT sweep across newer tables, with a Security Memory kept up to date so the scanner doesn't re-flag closed findings. Quiz correct-answer keys are now server-side only; scores can't be self-updated; off-taker contact data is admin-scoped; avatars and profiles are no longer readable by all authenticated users. The Buy In tool uses supabaseAdmin only inside verified handler bodies — never leaked to the client bundle.

• RLS/GRANT audit on newer tables
• Quiz answer protection (server-side grading)
• Off-taker contact data policies
• Score self-update restrictions
• Avatar storage privacy
• Profile read scoping
• SMRT.BIO silent-wipe bug fixed (state hydration hardening)

Portable digital identity for producers, staff and partners. A private certificate vault (ID, licenses, references) sits behind RLS with verification-status pills separating verified from self-declared credentials. Users pick a public_handle and toggle visibility on their public SMRT.BIO card at /id/<handle> — which now safely hydrates from real profile data (fixed a bug where an accidental Save could wipe an existing card). Six live digital scores feed UCan Match, and a full JSON export makes the identity truly portable.

• Certificate vault (ID, licenses, references) with RLS
• Verification status pills (verified vs self-declared)
• Public SMRT.BIO card at /id/<handle> with custom handle
• Public/private visibility toggle
• JSON identity export
• 6 live digital scores feeding Match
• State-hydration fix: existing cards no longer wipe on Save