Block a user
Connector interface:
revoke() is mandatory; surface provider-side revocation
Account deletion endpoint (
DELETE /me) — Phase 0
Modular-monolith packaging + import-boundary lint
Privacy: ToS/PP docs, consent capture, versioned per-user acceptance hash
Audit logging + token rotation + SOC2-lite controls
Kubernetes deploy + horizontal autoscaling
Orchestrated retrains (Prefect or Airflow)
Online experiments framework: A/B + multi-armed bandits as first-class
Cohort analysis + opt-in collaborative features
Phase 0 E2E: Playwright suite covering sign-in → connect Todoist → see a tip
Todoist sync via events (not on-demand fetch)
events: NATS JetStream ingress + normalized event schema