# LAUNCH PREREQS — VERIFIED GREEN
Verified by Lane A for Mike (super admin) — Saturday 2026-06-27, ~2:56 pm CT.
Method: Composio against project mbnakfrkfwxinhxlisyq (/auth/v1/settings, SUPABASE_LIST_SECRETS, SUPABASE_LIST_FUNCTIONS).

We are FURTHER ALONG than the gating implied. The items below were treated as "to-do / waiting on Mike"
but are already DONE:

## Confirmed present
- ANTHROPIC_API_KEY  (+ ANTHROPIC_MODEL) — Poppy live-chat key is SET.
- Auth providers — email + google BOTH enabled (/auth/v1/settings).
- pure-mcp Edge Function — ACTIVE, verify_jwt=false, last deployed 2026-06-25.
- Deploy MODEL 2 ready — NETLIFY_TOKEN + NETLIFY_SITE_ID set (release.publish viable).
- Payments — STRIPE_SECRET / STRIPE_SECRET_KEY / STRIPE_WEBHOOK_SECRET set.
- SMS — TWILIO_ACCOUNT_SID / TWILIO_AUTH_TOKEN / TWILIO_FROM set (Katy's lane).
- Plus GITHUB_TOKEN, SB_SERVICE_ROLE_KEY, RESEND_API_KEY, MCP_TOKENS.

## What this changes (critical path is now EXECUTION, not waiting)
- L2 Poppy live: key is set -> Code deploys public chat.send + board.add into pure-mcp per
  CHAT-HANDLER-RUNBOOK.md (commit 8f155d7), preserving x-mcp-key tools + verify_jwt=false ->
  Lane A wires pure-chat.html. (GO sent.)
- L3 auth window: providers ON -> Design runs sign-in -> VERIFY staff can authenticate ->
  THEN t-rec-rls-readonly flips RLS -> MFA AAL2. Sequence guard prevents blanking staff. (GO sent.)
- Executor: v2 builds t-poppy-runner (POPPY-RUNNER-SPEC.md). (GO sent.)

## Note: chat.send not yet publicly reachable
pure-mcp answered an anon probe with 401 "unauthorized (x-mcp-key)" — i.e. tool calls are
key-gated (by design). The PUBLIC chat.send/board.add handlers from the runbook are the remaining
deploy step (Code). The Anthropic KEY itself is confirmed set independently of that deploy.