[luannn010]

Summary

• Qualify the invite-only, encrypted single-browser beta; add production browser tests and staging/rollback/invite instructions.
• Depends on feat(notes): add encrypted beta data and account foundation #7 and feat(notes): add the beta workspace and rich editor #8; merge third. Package extraction starts only after all three merge.
• Risk: high; account/storage integration and CI. Undo: revert before release; never clear browser data as rollback.

Testing

• Type-check, 73 unit tests, engine hashes, build and 18 metadata tests pass.
• Actual-engine signup/email, 1,000-note offline library, tags/trash/export, durable sign-out, sign-in and browser restart pass on the committed candidate; cached-shell Chromium LCP588ms/CLS0.
• Separate source review closes reported findings; hosted fork workflows require maintainer approval before merge.
• Reviewed tree: 1f8f31861c43efcf39287ebc6d57e0f8144e14b4 (commit 9718cb4).
• Actual-engine account test passes separately (1/1, no skip), including pending-device denial and wrong-password retention.
• Not tested: production deployment/delivery, macOS, full second-factor/paired-device HTTP ceremonies.

Co-authors

none

AI usage

• Written by hand, with no AI
• Harness and version: Codex CLI 0.160.0 through Codex desktop; PowerShell, Node/npm, Git/gh, Vitest, Playwright Chromium, WSL task-local Rust/PostgreSQL and synthetic TLS SMTP; no Claude.
• Models: gpt-6.1-sol (parallel implementation, design, coordination, tests and separate review).
• Effort: medium.
• Human role: approved the beta plan, isolated dependencies, PR preparation and conditional CI handoff; retains review, merge, invitations and deployment.
• Sources: orbyn-engine and unchanged generated artifacts, MIT OR Apache-2.0, notices retained. Owner-provided private designs (private links withheld). No Planner application source copied. Dependencies pinned by lockfile.

Checklist

• Works on Windows, macOS and Linux (Windows/WSL checked; hosted Linux pending)
• Architecture and staging instructions updated
• No secrets, credentials, personal data or AI attribution in commits/title/branch