ced4568
77fd1869db
New: PHASE9_1_STRIPE_TEST_VALIDATION.md — baseline verification, the exact Stripe-credential search performed (none found), the Stripe architecture review (dynamic price_data, unchanged), what was proven vs. blocked per the mission's own step list, and the live-mode readiness checklist. Updated: STRIPE_INTEGRATION_RUNBOOK.md and WINTER_BREAK_LAUNCH_CHECKLIST.md to point at the new opt-in test and the blocked status. PHASE9_COMMERCE_AND_LAUNCH.md gets a short addendum. No application code changed this phase — no genuine defect was exposed without real Stripe traffic, so no regression rerun was required.
82 lines
5.0 KiB
Markdown
82 lines
5.0 KiB
Markdown
# Winter Break Camp — Launch Checklist
|
|
|
|
The single go/no-go list for opening the Winter Break Linux & Systems Foundations Camp
|
|
(`docs/WINTER_BREAK_CAMP_CURRICULUM_OPTIONS.md` Option A) to real public registration. Combines
|
|
`docs/WINTER_BREAK_CAMP_OPERATIONS.md`'s operational sequence with Phase 9's commerce
|
|
requirements into one checklist Chase can walk top to bottom. Nothing on this list is invented by
|
|
the platform — every unchecked item is a real decision or asset that has to come from Chase, the
|
|
legal reviewer, or Stripe, not from more code.
|
|
|
|
## Platform readiness — done, verified, ready whenever the business inputs below land
|
|
|
|
- [x] Offering, capacity, registration lifecycle, agreements — built and tested (Phase 7/8).
|
|
- [x] Offering pricing field, payment-provider abstraction, hosted checkout, verified webhook,
|
|
refund recording, abandoned-reservation reaper — built and tested against the deterministic
|
|
test provider (Phase 9).
|
|
- [x] Website registration + checkout + agreement + status-lookup contract — documented and
|
|
tested (`docs/WEBSITE_REGISTRATION_AND_CHECKOUT.md`).
|
|
- [x] Admin UI for offering pricing and per-registration payment/refund status.
|
|
- [x] `GET /api/admin/offerings/:id/readiness` reflects real configuration state, including the
|
|
new `price` and `payment_provider` checks.
|
|
- [x] Full Winter Break commerce rehearsal green end to end against a real, freshly-built stack
|
|
(`infra/scripts/drills/test-phase9-winter-camp-commerce.js`, 13/13): admin configuration,
|
|
minor and adult registration, checkout, payment success, webhook, enrollment activation, a
|
|
real classroom session, a real Lab task, failed payment, duplicate webhook, abandoned
|
|
checkout, and a last-seat race.
|
|
|
|
## Business decisions — Chase's call, not invented by this phase
|
|
|
|
- [ ] Real camp dates and duration.
|
|
- [ ] Real venue/location (or confirm fully online/remote).
|
|
- [ ] Real capacity (seat count).
|
|
- [ ] Real price and currency.
|
|
- [ ] Whether registration opens ahead of, or alongside, a specific marketing push.
|
|
- [ ] Refund policy in plain terms (the platform can RECORD any refund decision; it does not
|
|
decide policy — see `docs/OFFERING_AND_REGISTRATION_MODEL.md`'s "Payment and the commerce
|
|
boundary" section for what "record, never auto-cascade" means operationally).
|
|
|
|
## Legal review — required before any real family sees the agreement
|
|
|
|
- [ ] The actual participation/media/liability agreement text, reviewed by a real attorney
|
|
(`agreement_definitions.body_summary` is currently a plain-language placeholder only — see
|
|
`docs/STUDENT_GUARDIAN_DATA_MODEL.md`'s legal-review list).
|
|
- [ ] Jurisdiction-specific minor-consent requirements confirmed.
|
|
- [ ] Data-retention/deletion policy decided and, if needed, reflected in the agreement text.
|
|
- [ ] A decision on whether emergency-contact fields need additional encryption at rest.
|
|
|
|
## Payments — pending real Stripe credentials
|
|
|
|
Phase 9.1 searched for Stripe TEST credentials specifically to run real validation and found
|
|
none available anywhere this session could reach — see `docs/
|
|
PHASE9_1_STRIPE_TEST_VALIDATION.md` for the exact search and what Chase needs to provide. A
|
|
permanent, opt-in test (`platform/test/stripe-integration-test.js`) is ready to run the real
|
|
TEST-mode proof the moment `STRIPE_SECRET_KEY`/`STRIPE_WEBHOOK_SECRET` exist.
|
|
|
|
- [ ] Real Stripe account created/available (live mode).
|
|
- [ ] `STRIPE_SECRET_KEY`/`STRIPE_WEBHOOK_SECRET` (live values) provisioned into production
|
|
configuration only — see `docs/STRIPE_INTEGRATION_RUNBOOK.md`'s "Going live" section.
|
|
- [ ] At least one real, small, refundable test transaction run end to end in production before
|
|
opening registration publicly, then refunded.
|
|
- [ ] Recommended (not required — the test provider already validates the application logic):
|
|
one full rehearsal against Stripe's own TEST mode (fake cards, no real money) before
|
|
flipping to live credentials, per `docs/STRIPE_INTEGRATION_RUNBOOK.md`'s test-mode section.
|
|
|
|
## Website (separate repo, not RootNode-owned)
|
|
|
|
- [ ] rootnodeacademy.com's own registration/checkout form built against
|
|
`docs/WEBSITE_REGISTRATION_AND_CHECKOUT.md`. Not tracked or built in this repository — if
|
|
that repo becomes available to RootNode's own engineering effort, say so explicitly before
|
|
any code changes are made against it.
|
|
- [ ] The website's `INTEGRATION_SHARED_SECRET` provisioned into its OWN backend configuration
|
|
(never browser-reachable) — see `docs/WEBSITE_ENROLLMENT_INTEGRATION.md`'s "Production
|
|
secret handling."
|
|
- [ ] The website's success page built against the status-lookup polling pattern in
|
|
`docs/WEBSITE_REGISTRATION_AND_CHECKOUT.md` §6 — never derived from the redirect URL alone.
|
|
|
|
## Final go/no-go
|
|
|
|
Registration should not open to the public until every box above is checked. The platform side
|
|
(first section) has been true since this phase shipped; everything else is a business, legal, or
|
|
external-team dependency this phase deliberately did not — and should not — invent on Chase's
|
|
behalf.
|