Local code gates
Implemented
Architecture without theatre
This is a code-status document, not a live status page. CoQuest does not currently publish an uptime SLA, discovery-latency guarantee, edge-region benchmark, or production capacity number.
Production proof
Pending
Public SLA
Not offered
Present in the codebase
- Next.js App Router with TypeScript and server-side authorization boundaries
- PostgreSQL access through Prisma with tenant-scoped application queries
- Clerk session authentication for interactive product routes
- Stripe Checkout and signed webhook processing behind disabled-by-default launch switches
- Webhook inbox, idempotent credit ledger, entitlement checks, and SSRF-resistant CRM delivery
Blocks production claims
- Production database backup and restore rehearsal
- Signed Stripe sandbox replay against the deployed preview
- Published uptime and latency objectives backed by monitoring data
- Runtime rate limiting, durable operational alerting, and dead-letter response
- Verified end-to-end account deletion across application, Clerk, Stripe, backups, and logs
Current trust boundaries
Identity
Clerk session plus server-side tenant checks.
State
PostgreSQL is the source of truth for product and billing state.
Providers
Optional provider failures return unavailable or empty results, not demo records.