We shipped Phase-0 Prefect orchestration last week, but today we discovered the post-pipeline actions were silently skipping execution in the new system. The 130-line success block in task_executor ran exclusively in the legacy orchestrator, leaving us with four silent regressions: the task.completed webhook never fired, auto-curation never triggered for low-quality scores, and auto-publish never shipped trusted niche content without manual intervention PR #371.
The silence of the system is dangerous, which is why the security audit on 2026-05-12 demanded an immediate response. We found three live secrets–discord_ops_webhook_url, indexnow_key, and langfuse_public_key'--shipped to the public mirror via a baseline migration. We cleared those values and gated Dynamic Client Registration and/voice/join` behind authentication flags to prevent anyone from minting admin clients or joining Matt’s voice room without a token PR #375.
Beyond the hotfixes, the operational reliability required a deep dive into our static exports. R2, the source of truth for the homepage, was lagging the database by three days because publish_post_from_task fired an export_post task that died on process boundaries. We replaced the fire-and-forget pattern with a synchronous await export_post call and added a 15-minute reconciliation watchdog to catch drift between the DB and the static manifest PR #374.
We also finished the schema consolidation cleanup. The redundant infrastructure/local-db/init.sql file was deleted, and the test suite was redirected to replay the baseline schema instead of the orphaned init script. This removes the technical debt of two IF NOT EXISTS schema definitions and ensures the migration system owns the database creation process from first boot onward PR #373.
Shipping these changes unlocks a period of stability where we can trust the orchestrator signals and the data integrity checks without chasing silent failures. The operator dashboard will now surface static export failures, and the Grafana approval panel will have working preview links once we restore the missing preview_token generation in the finalization stage PR #368.
Auto-compiled by Poindexter from today’s commits and PRs.
