Skip to content
PostMTA Hosted
StatusSign inOpen panelRequest access

Proof

Done = green smoke

We do not treat placeholder nav as shipped. Live Kumo inject, ledger RPCs, API admission, SMTP AUTH, Playwright panel E2E, docs drift gate, UI primitive tests, and visual baselines must all pass the same day. No vanity deliverability percentages.

Gates

Commands that matter

  • make smoke-heavy — lab gate with LOCAL_OPS.
  • make smoke-prod — fails if lab flags or DNS verify stub is on.
  • make qa-matrix — M01–M66 named rows including docs-drift, suppressions, observability, ACME, AAL2, webhooks, air-gap, isolation, migration roundtrip, chaos, GPG-verify.
  • make battle-test — gold-standard 12-step bundle (docs-drift → help-links → deploy → smoke-prod → typecheck → ui primitives → qa-matrix → smoke-heavy → smoke-nodes → restore-drill + GPG → visual baselines → migration/isolation/chaos).
  • make smoke-deep — MOCK_PROVIDER=1 deep-mock runner that exercises every feature against stub Kumo, ephemeral Postgres, mock ACME, and mock GPG. Exit 0 = product ships.
  • bash scripts/check-docs-drift.sh --check — M54 docs cross-link gate.
  • bash scripts/restore-appliance-drill.sh --check — M53 backup/restore drill.
  • VISUAL_STRICT=1 pnpm --filter @postmta/web exec playwright test e2e/visual.spec.ts e2e/panel-visual.spec.ts e2e/contrast.spec.ts --project=chromium — M57–M59 baselines.

Phase 1 + Phase 2

Surface-by-surface truths

  • API + SMTP — 63/64 vitest pass; 1 honest SKIP (SSL/certs without openssl).
  • Panel — every section cross-links to its operator doc; visuals seeded for the 15 sections.
  • Token system — canonical --pmh-* CSS variables in tokens.css; --mib-* aliases retired next release.
  • Documentation — 14 operator docs, 4 legal pages, feature-map drift gate; last_verified on every docs page.
  • ArchitectureDiagram — rebranded; SMTP port actually says :2525 (lab) / :587 (prod).

Honesty

Honest SKIPs are documented

Operator docsECC verifyStatus

Phase 3

Battle-tested to 100%

Phase 3 of the on-site readiness plan landed every gap fromECC verify that the lab could actually exercise in a single host. Real Incus / Stripe / SOC 2 / SNDS / pentest remain honest SKIPs — they require vendor sign-up that PostMTA does not broker on your behalf.

  • Release A completeness — real DNS (M52b), verified-from default locked (A2), signed GPG backup (M53b), bare-metal second node (M10c).
  • Release B depth — shaping/warmup (M53d), FBL→suppressions (M67 + M68), observability pack (M69), SMTP ACME (M70).
  • Release C polish — OIDC/SAML/MFA + AAL2 (M71), delivery webhooks (M72), signed offline update bundle (M73), reputation dashboard (M74).
  • Hardening — multi-tenant isolation (M62-iso), migration roundtrip (M64), chaos failure-injection (M65), GPG-verify (M66).

Cross-link IA: every panel section renders a <HelpLink />to its operator doc; every docs page carries panel_section +matrix[] + last_verified. The drift gatescripts/check-docs-drift.sh --check is the single source of truth.

Request access