# sqc — operating card draft Review stage: machine-drafted; owner review pending. Static references are not verified operation. Source: webhostingdoo/sqc at 8270385c5e469730a571d27c9f8ad40772c1fac7. Scan result: scanned; inspected 136/136 eligible files. Source freshness: current-at-finish; deployment revision: unknown (not queried). Business job (dated canonical portfolio): Review search queries and prepare scoped keyword decisions. Recorded portfolio state: built; current use: unknown. ## Evidence sections ## Identity and native run routes - **Package script: audit:dependencies** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L15) - **Package script: audit:inputs** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L19) - **Package script: backup:local** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L18) - **Package script: build** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L17) - **Package script: corpus:install** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L12) - **Package script: dev:local** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L14) - **Package script: doctor** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L13) - **Package script: lint** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L24) - **Package script: start** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L20) - **Package script: test** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L21) - **Package script: test:browser** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L23) - **Package script: test:capacity** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L22) - **Package script: test:private** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L16) - **Package script: typecheck** — Declared command entry point. Command body omitted and never executed by this scanner. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L25) - **recovery guidance** — Documentation section present. Instructions were not executed; inspect the linked section for context. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L450) - **@clerk/nextjs** — dependencies: 7.9.2. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L33) - **@electric-sql/pglite** — dependencies: 0.5.8. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L31) - **@playwright/test** — devDependencies: 1.63.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L58) - **@radix-ui/react-dialog** — dependencies: 1.1.23. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L44) - **@sentry/nextjs** — dependencies: 10.74.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L36) - **@supabase/supabase-js** — dependencies: 2.116.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L34) - **@tailwindcss/postcss** — devDependencies: 4.3.3. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L54) - **@tanstack/react-table** — dependencies: 9.2.4. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L43) - **@types/node** — devDependencies: 22.20.2. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L50) - **@types/react** — devDependencies: 19.3.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L51) - **@types/react-dom** — devDependencies: 19.3.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L52) - **csv-parse** — dependencies: 7.0.2. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L39) - **csv-stringify** — dependencies: 6.8.3. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L40) - **decimal.js** — dependencies: 10.6.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L41) - **eslint** — devDependencies: 9.39.5. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L55) - **eslint-config-next** — devDependencies: 16.3.8. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L56) - **exceljs** — dependencies: 4.4.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L38) - **inngest** — dependencies: 4.20.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L35) - **lucide-react** — dependencies: 1.46.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L45) - **next** — dependencies: 16.3.8. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L28) - **node engine** — Declared compatibility: 24.x. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L6) - **npm engine** — Declared compatibility: 11.10.0. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L6) - **openai** — dependencies: 7.15.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L37) - **Package manager** — npm@11.10.0 (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L10) - **postgres** — dependencies: 3.4.9. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L32) - **Python source** — Python source is present. The required interpreter, installed packages and launch environment need confirmation. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.py#L1) - **react** — dependencies: 19.3.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L29) - **react-dom** — dependencies: 19.3.0. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L30) - **tailwindcss** — devDependencies: 4.3.3. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L53) - **tsx** — devDependencies: 4.23.13. Declaration only; installation is not checked. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L49) - 34 further findings are in the adjacent complete profile. ## Providers, APIs and possible writes - **GET /api/download** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/download/route.ts#L7) - **GET /api/inngest** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L7) - **OpenAI** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L19) - **POST /api/inngest** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L8) - **POST /api/rpc** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/rpc/route.ts#L8) - **POST /api/session** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/session/route.ts#L9) - **POST /api/storage-upload** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/storage-upload/route.ts#L5) - **POST /api/storage-upload/complete** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/storage-upload/complete/route.ts#L5) - **POST /api/upload** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/upload/route.ts#L7) - **PUT /api/inngest** — Source-declared HTTP handler. Reachability, access enforcement and side effects are not verified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/api/inngest/route.ts#L9) - **Clerk** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L33) - **Inngest** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L15) - **OpenAI** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L19) - **Sentry** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L36) - **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L9) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L18) - **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-review.ts#L84) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L18) - **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/cleanup-hosted-rules.ts#L91) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_fetch.py#L39) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_fetch.py#L71) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/provider_catalog_lookup.py#L31) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/test_provider_catalog.py#L66) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-private.ts#L17) - **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/denied/page.tsx#L1) - **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/page.tsx#L1) - **Web-page entry** — Page source exists; route reachability and access controls remain unverified. This is not classified as an API endpoint. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/app/sign-in/%5B%5B...sign-in%5D%5D/page.tsx#L1) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/negative-keywords.tsx#L28) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/components/negative-keywords.tsx#L30) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/exports.ts#L160) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/domain/recognition.ts#L7) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/imports/parsers.ts#L11) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/brand-knowledge.ts#L23) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/brand-knowledge.ts#L27) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L88) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L92) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L132) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/corpus.ts#L135) - **Write-call candidate: remove** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/hosted-upload.ts#L27) - **Write-call candidate: delete** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/negative-service.ts#L79) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/positive-service.ts#L22) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/recommendations.ts#L16) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-service.ts#L18) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/rule-service.ts#L126) - **Write-call candidate: update** — Method-name signal only; this may be a local collection or optional path. Review the receiver, destination, payload and guard before classifying an external write. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/session-auth.ts#L37) - 10 further findings are in the adjacent complete profile. ## Configuration, access and data - **Clerk** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L33) - **Supabase** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L9) - **CLERK\_SECRET\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L23) - **DATABASE\_URL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L28) - **DEBUG** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L40) - **INNGEST\_EVENT\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L31) - **INNGEST\_SIGNING\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L32) - **NEXT\_PUBLIC\_CLERK\_PUBLISHABLE\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L22) - **NEXT\_PUBLIC\_CLERK\_SIGN\_IN\_URL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L24) - **NEXT\_PUBLIC\_SUPABASE\_PUBLISHABLE\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L26) - **NEXT\_PUBLIC\_SUPABASE\_URL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L25) - **NEXT\_RUNTIME** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/instrumentation.ts#L1) - **NODE\_ENV** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/import-service.ts#L43) - **OPENAI\_API\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L35) - **PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/local.ts#L5) - **PWDEBUG** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L40) - **RESEARCH\_AUTOMATION\_POLICY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L38) - **RESEARCH\_BUDGET\_USD** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L39) - **RESEARCH\_CONCURRENCY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L44) - **RESEARCH\_ENABLED** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L37) - **RESEARCH\_INPUT\_USD\_PER\_MILLION** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L47) - **RESEARCH\_MAX\_INPUT\_TOKENS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L42) - **RESEARCH\_MAX\_OUTPUT\_TOKENS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L43) - **RESEARCH\_MAX\_REQUESTS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L40) - **RESEARCH\_MAX\_TOTAL\_TOKENS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L41) - **RESEARCH\_MAX\_WEB\_SEARCH\_CALLS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L45) - **RESEARCH\_MODEL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L36) - **RESEARCH\_OUTPUT\_USD\_PER\_MILLION** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L48) - **RESEARCH\_PRICE\_SOURCE** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L50) - **RESEARCH\_PRICE\_VERIFIED\_AT** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L51) - **RESEARCH\_TIMEOUT\_MS** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L46) - **RESEARCH\_WEB\_SEARCH\_USD\_PER\_CALL** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L49) - **SENTRY\_DSN** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L33) - **SQC\_ACCESS\_CODE\_HASH** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L18) - **SQC\_ACCESS\_OPERATOR\_ID** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L17) - **SQC\_APP\_ORIGIN** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L9) - **SQC\_AUTH\_MODE** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L12) - **SQC\_BIND\_HOST** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/backup.ts#L2) - **SQC\_BROWSER\_EXECUTABLE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L12) - **SQC\_BROWSER\_PORT** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L3) - **SQC\_BROWSER\_URL** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/playwright.config.ts#L4) - **SQC\_CAPACITY\_ROWS** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/capacity.ts#L11) - **SQC\_DATA\_DIR** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/doctor.ts#L9) - **SQC\_DOWNLOAD\_SIGNING\_KEY** — Declared in an environment template. Value discarded; provisioning and required/optional status are unverified. (direct; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L30) - **SQC\_HOSTED\_SMOKE\_ACCESS\_CODE\_FILE** — Configuration name referenced; actual value, required/optional status and provisioning are unverified. (direct; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L43) - 98 further findings are in the adjacent complete profile. ## Jobs, monitoring, hosting and devices - **Browser automation** — Browser automation signal; browser binaries, host and permissions may be required. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.vercelignore#L9) - **Clipboard** — Clipboard access is referenced; permission and user gesture requirements need review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L127) - **Local filesystem access** — Filesystem reference; approved paths, read/write scope and operating identity need confirmation. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.py#L14) - **Local process access** — Source starts or inspects local processes. Commands, execution owner and machine access need review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L1) - **Application error logging** — Error logging call exists; destination, alerting, retention and redaction are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/audit-inputs.ts#L10) - **Sentry** — Integration signal in source. Account ownership, provisioning and live connectivity are unverified. (inferred; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/package.json#L36) - **Test sources present** — Test paths found in the tree; their contents and outcomes are not inferred from existence. (inferred; declared-config). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/test_provider_catalog.py#L1) - **In-process timer** — Timer reference; this does not establish a durable or currently running job. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/capacity.ts#L17) - **Inngest** — Mentioned in source documentation; implementation and account access need confirmation. (inferred; source-reported). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L15) - **Guard-name candidate: RESEARCH\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/.env.example#L37) - **Guard-name candidate: UNSELECTED\_PHRASE\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L104) - **Guard-name candidate: PAID\_RESEARCH\_BUTTON\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-review.ts#L115) - **Guard-name candidate: UNSELECTED\_PHRASE\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L110) - **Guard-name candidate: PAID\_RESEARCH\_BUTTON\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/scripts/verify-hosted-rules.ts#L121) - **Function declaration: sqc-durable-job-sweep** — Background-function configuration candidate. Trigger, retries, concurrency, deployment and enabled state require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L7) - **Trigger candidate: cron** — Source-declared cron value: \* \* \* \* \*. Parent job and activation need confirmation. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L7) - **Concurrency declaration** — Literal configuration value: 1. Which job/process it limits and whether it is active require review. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/inngest.ts#L7) - **Guard-name candidate: RESEARCH\_ENABLED** — A flag name appears in source; its default, scope and enforcement on jobs or writes are unverified. (inferred; observed-code). [Evidence](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/src/lib/server/research-adapter.ts#L104) ## Documentation to interpret - [AGENTS.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/AGENTS.md#L1) — repository instructions (evidence only); 35 lines. Body remains at the source. - [docs/ARCHITECTURE.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/ARCHITECTURE.md#L1) — design and decisions; 54 lines. Body remains at the source. - [docs/archive/README.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/archive/README.md#L1) — setup and operations; 18 lines. Body remains at the source. - [docs/DECISIONS.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/DECISIONS.md#L1) — design and decisions; 454 lines. Body remains at the source. - [docs/OPERATIONS.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/OPERATIONS.md#L1) — setup and operations; 64 lines. Body remains at the source. - [docs/RECOVERY\_PLAN.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/docs/RECOVERY_PLAN.md#L1) — setup and operations; 46 lines. Body remains at the source. - [README.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/README.md#L1) — setup and operations; 41 lines. Body remains at the source. - [STATE.md](https://github.com/webhostingdoo/sqc/blob/8270385c5e469730a571d27c9f8ad40772c1fac7/STATE.md#L1) — state or handoff; 34 lines. Body remains at the source. ## Questions requiring source interpretation or owner evidence - Which declared commands actually form setup, run, check and recovery? Review the command definitions and operator procedure. - Which configuration names are required, optional or obsolete? Trace use/defaults and obtain provisioning evidence without values. - Which write candidates reach external systems, and which guards protect them? Trace receiver/call paths and review approval boundaries. - Which accounts, devices, permissions and schedules are active? Obtain dated owner/service evidence under a separate authorized check. - Does the deployed source match this revision? Obtain deployment/source metadata; source inspection does not establish it. - Are repeated tracking fingerprints intended? Confirm destination ownership; repetition alone does not establish an incorrect clone. - Owner, last-used date, review verdict, unattended eligibility and approved dependencies remain unknown until explicitly supplied. ## Coverage limitations - Static inspection does not verify runtime health, current use, provisioning, live schedules, service account access or deployed/source alignment. - Only bounded source/configuration files are inspected. Secret files, data exports, binaries, history and raw source text are excluded from results. - Unknown or dynamically constructed integrations and configuration names may not be detected. Human review is still needed. - Deep scan: more source and candidate detectors, with an adjacent versioned receipt. Candidate calls and tracking matches still require interpretation.