# Week 1 MVP Release Checklist

## Done

- Time tracking start/stop API and desktop controls
- Heartbeat ingestion endpoint
- Screenshot capture/upload flow with real preview URLs
- Team and user admin flows
- Basic dashboard views for activity and screenshot timeline with image preview rendering
- Legal/privacy baseline requirements documented
- Monorepo scaffolded (Electron desktop, NestJS API, Next.js web, shared package)
- SQLite persistence added for teams/users/time entries/screenshots
- Static file serving for screenshot previews (`/uploads/screenshots/*`)
- Screenshot interval configured to 5 minutes in desktop tracker

## Pending (Launch Board)

### Must-Do Before External Release

- Validate desktop runtime stability and continuous 5-minute auto-capture in a real user session
- Enforce auth guards/RBAC middleware on protected API routes
- Add automated test coverage (API + web + desktop smoke)
- Add CI pipeline (build + test + lint gates)
- Run legal counsel review per target market and capture sign-off

### Production Hardening (Next Phase)

- Move from SQLite/local uploads to production stack (PostgreSQL + Redis + object storage)
- Add robust retry/backoff and health alerting for desktop screenshot uploads
- Add retention jobs and DSAR workflows wired to persisted data
- Add installer packaging/signing and release channels for macOS + Windows