Nubo · app.eatnubo.com

Go-Live Certification

Build nubo-live.js?v=99402a6f7950 · 2026-07-23 · Claude backend/QA lane · verified against live OPG dkimatpquvxzawksnwrq

Backend + money-path: certified UI/native: 10 defects to fix

Payment, Petpooja push, coupon enforcement, reward redemption and pricing are production-grade and mirror eatnubo.com's hardened flow. Blocking go-live: a batch of UI/native defects (spec'd for Codex) and catalog data gaps. Promo codes are per-account gated (verified live). One completed real payment per outlet still owed — owner will place it.

Cert scorecard

131

active products · all priced & taxed

6/6

money-path guards pass (server-authoritative)

UI/native defects → Codex

✓

promo codes per-account gated (verified)

49%

nutrition rows with zero macros

completed app payments ever

Track B — backend / money-path (Claude, certified)

Surface	Status	Evidence
Razorpay checkout	solid	Server recomputes canonical total & charges that — client amount informational only. Signature verify server-side. Native SDK = "faster Razorpay".
Payment recovery	solid	verify-fail / dismiss / 409 → `pollRecovery` → confirm or "auto-reverses 3–5 days". Pending order never deleted.
Petpooja push	structural	Fires inside `verify-razorpay-payment` — same proven website path.
Reward redemption	solid	`fn_redeem_reward`: tier gate fail-closed, atomic balance decrement (race-safe), dedup, dual-ledger.
Coupon enforcement	solid	Live-probed: expiry by date ✓, account/allowlist gating ✓. Table red-flags mitigated.
Pricing integrity	clean	131/131 priced+taxed, base always set, 0 low/zero anomalies. Watch: `gst_type` MRP-inclusive trap.
Macros math	clean	Where present, 4/4/9 reconciles (0 mismatches).
OTP login	healthy	send→verify→session works end-to-end on fresh token.

Track A — UI / native defects (Codex to fix)

ID	Defect	Sev	Where / root
D1	Menu search tab-scoped + substring-only — no fuzzy/synonym/typo	high	`live 6605` catOk gates before q
D2	Home search should filter items inline	med	`live 6620` opens menu instead
D3	Selected-ingredient ✓ not showing	high	`live 1441–1455` chip active-state / CSS
D4	Sign-out → move to burger; verify it clears session	high	`live 8100` signOut placement
D5	Tracking: missing token# + view-bill/reorder/help (track.eatnubo parity)	high	`live 2532` track-data render
D6	Native login page: broken links / eatnubo.com links → burger	high	native shell (web modal clean)
D7	Swipe L/R = back/forward	med	native gesture nav
D8	Stuck on Shreya session; can't switch	blocker	native session persistence (backend healthy)
D9	Scroll-up doesn't restore header	med	native scroll container
D10	OTP "couldn't send" on native	high	client rate-limit / stale endpoint (backend OK)

Fix before public launch

Native session blocker (D8) + OTP client (D10) — nobody can switch accounts or reliably log in on the device. Highest priority; app is unusable to new users until fixed.
Backend proven healthy — both are native-shell bugs.
Promo codes per-account gated — no open-code risk (finding retracted). Live-probed: COMEBACK25/MISSYOU20/etc. reject even a 0-use account ("not available for this account"). Eligibility (segment/phone) enforced inside validate-coupon, not visible in coupons.eligible_phones. per_user_limit confirmed (MISSYOU20 blocked at 1 use).
Optional hardening only: cap max_discount as defense-in-depth. usage_count column is cosmetic (enforcement uses coupon_usage).
Catalog data gaps — allergens missing on 43 items, ingredients on 55, macros blank on ~half. Fill from a verified source (allergens = safety, never guessed).
Claude will hand the exact gap list; write held for owner sign-off + source.
Free-item rewards have no product_id link — fulfilled by name→counter-coupon. Confirm each resolves to the right Petpooja item.
Deactivate ZZTEST50 — currently account-gated (not customer-exposed) but clean it up.

Standing gates (owner)

One completed real payment per outlet on v2 (capture→verify→Petpooja→KDS→tracking token) — owner will place. Money path untested end-to-end only because no app order has ever completed payment.
Delivery stays gated (app_config.delivery_enabled='0') until its own cert. Address book is delivery-gated (correctly absent now).

Verified read-only against live OPG + live edge-fn probes. No nubo-live.js edits (Codex lane). No live order placed. Coupon codes probed validate-only. Full Codex spec: db/test-harness/CODEX-golive-defects.md.