For Andrea Kuch and Dennis Flemming
One month in, airatae.com and app.airatae.com are live on your domain. People can find a need, connect, take on a job and, since 29 September, organize as a team. This is how we got here, what’s left to close Sprint 1, and what we build next: proving the work got done.
Read the story Open the app (opens in a new tab)
Sprint 1 · – · Prepared by Britt Givens, Axle Operations
Andrea, Dennis,
Those were the three promises of Sprint 1 when you signed on at the end of August. This page is the full record of how it went, in the order it happened, with nothing rounded up.
The short version: the build is done and live. airatae.com tells the story, app.airatae.com is the product, the 17 security findings are closed and checked, with a two-account test that can be re-run at any time, and the code, the database and the domain are yours.
We also went further than the plan. People can connect with each other and take on individual jobs, and now they can organize as a team and see who’s doing what. The team workspace is early groundwork for Sprint 2, built because the foundation was ready for it.
What’s left of Sprint 1 we do together: a walkthrough on your own phones, a refreshed security sign-off, Privacy and Terms brought up to date, real stories and a final read for the website, and your written OK. After that comes the part that makes Airatae whole: finishing work with photos, and showing everyone what changed.
Thank you for trusting me with it.
Britt Givens
The idea was clear and the foundations were right: your own database, your own Google sign-in, your own code. Almost everything on top needed work. This is the honest picture from the proposal, next to where each part stands today.
56,000
lines of code, and 44% of them never ran
Counted by file, 166 of the 354 files behind the app’s screens were never loaded.
17
security findings
5 critical, 5 high, 4 medium, 3 low.
49
database change files that couldn’t rebuild the database
None matched the live history by version number, and four live tables had no file at all.
The August bars are the proposal’s own estimate of how far along each part was. Today is described in words, not a new percentage.
| Part | August | Today |
|---|---|---|
| Explore & post Map, location, create flow | 62% | Live: the Explore map and a list view, for everyone, your network or just your own; a centered Create button that starts with “I need help” or “I’m offering help”; and claim, start and finish for helpers. Grouped pins, and the final action lists for four of the five categories, are Sprint 2. |
| Organize & complete Collaboration, tasks, roles, photo completion | 14% | Organizing is live: teams with invitations, roles, tasks and progress. Completing work with a photo is Sprint 2. |
| Outcomes & profile The record of what happened, and who took part | 18% | Profiles show your impact: what you’ve done, what you’re doing, what you posted and your teams. The outcome record, and outcomes on profiles, are Sprint 3. |
| Security & privacy Who can see and change what | 28% | All 17 findings closed, one more privacy fix added, 54 of 54 checks passing. |
| Phone experience Layout, tap targets, installable | 22% | Installs from a link, phone-first layouts, and keeps people signed in on weak connections. The walkthrough on your own phones is the last check. |
| Ownership & hosting Your repo, your database, previews, rollback | 45% | Off Lovable. Your GitHub, a private preview link for every code change, a way back from every release, and a database that rebuilds from one baseline plus the small changes since. |
Three sprints, with a retainer running alongside. You signed on for Sprint 1 and the retainer; Sprints 2 and 3 are proposed, and yours to decide.
: Sprint 1 built, close-out next.
We took the keys first, made it safe before building anything new on top, then made it a real app. Changes to the code were built separately and, as a rule, checked on a private preview link before they went live.
Moved Airatae off Lovable: the code now maintained directly in your GitHub, hosting on Vercel, and airatae.com served from the new setup the same evening. Lovable’s branding came out and the Airatae mark went in.
Closed the critical, high and medium security findings. Moved keys out of the code, rotated and restricted the map key, capped uploads by size and type, upgraded the database engine (Postgres) to version 17, and wrote Privacy and Terms pages.
Closed the last low findings: database rules and indexes tidied, real page titles and descriptions, a branded “page not found” page, and public Privacy and Terms pages. Also fixed the homepage video, which had never played on the live site.
A two-account test that re-checks 14 of the 17 findings against the live app (53 checks then, 54 now); the other three were confirmed from the project’s own settings and health checks. Then a one-page security sign-off, and the unused prototypes and dead code retired.
Replaced 49 out-of-date database change files with one clean starting file, built a fresh database from it, and checked it matched the live one.
One palette, one type scale, and real Pill and Glass components (the rounded buttons and see-through panels) across the app, fixing problems with keyboard use, contrast and phones set to reduce motion on the way.
Installable from a link, with an offline page and a one-time install guide after first sign-in. Password reset got a real page (every reset used to end on a “page not found” error), and new accounts stopped hitting dead ends.
Rebuilt the website around the map, with new photography and a hero film. Hid contact details on needs from anyone not signed in.
Installed apps now survive updates, people stay signed in through weak connections, and the map stops draining batteries. The code every app screen shares got 84% smaller.
airatae.com for the story and app.airatae.com for the product, with sign-in links that keep people on the right one. The new website went live the same night.
Explore, Create and Dashboard, with Create in the center. A muted dusk map, tidier profiles and settings, mutual connections, and helpers who can claim, start and finish a job. Sprint 1’s build was complete.
A sharper hero film with a proper ending, a phone that zooms from the world into the app icon, and a real layout for phones held sideways.
, morning
The team workspace: public or private teams, invitations, roles, tasks and progress, team updates and notifications. Released after a full review pass and its fixes.
, afternoon
Explore can show everyone, your network or just your own, as pins or as a list. The dashboard opens on your impact and what needs you, profiles show the work you’ve done, and posting starts with “I need help” or “I’m offering help”. Who took on a job is now visible only to that person, whoever posted it and the taker’s connections.
Next: prove it got done
These are the proposal’s Sprint 1 lines, word for word, next to what was built. Ten are delivered and live, five with a small follow-up we finish at close-out. The eleventh is the walkthrough we do together.
“Fix all 17 security findings, then prove it with a two-account test”
Delivered
All 17 closed. A two-account test re-checks 14 of them against the live app and can be re-run at any time; the other three were confirmed from the project’s own settings and health checks.
Follow-up Refresh the written sign-off to cover everything added since 8 September.
“Rotate exposed keys, lock down file storage, real page titles and legal links”
Delivered
Keys moved out of the code, the map key rotated and limited to your domains, uploads capped by size and type, real page titles, public Privacy and Terms pages.
Follow-up Update the Privacy and Terms wording to match today’s features.
“Move off Lovable: your GitHub, Vercel hosting, private preview links”
Delivered
The code is kept directly in GitHub now, and your repository there is the official copy. The site and app run on Vercel, every code change gets its own private preview link, and every release keeps the version before it ready to switch back to.
Note: hosting sits under Axle’s Vercel team for now, with a documented path to move it into an account of your own.
“Split airatae.com from app.airatae.com, both on your domain”
Live since 23 Sep
The website on airatae.com and the app at the root of app.airatae.com, with sign-in links that always land on the right one.
“Database baseline rebuilt so it can be reproduced and safely changed”
Delivered
The 49 out-of-date database change files became one clean starting file, the baseline. A fresh database built from it matched the live one across a 2,967-line comparison of its structure. New features now add small changes on top, each easy to check.
“Retire the 44% of code that never runs, and the prototypes that mislead”
Delivered
The unused prototypes and dead code are gone, and seven leftover server functions were switched off, so the product only claims what it does.
“The app shell: installable, bottom tab bar, center Post button, phone-first layouts”
Delivered
Installs from a link, with an offline page and a one-time install guide. Three tabs, Explore, Create and Dashboard, with Create in the center. Phone-first layouts that respect notches and home bars.
Follow-up Install and notch checks on your own iPhone and Android at the walkthrough.
“Sign in fixed end to end: password reset, Google, onboarding, no dead ends”
Delivered
Password reset has a real page, an interrupted Google sign-in recovers, and new accounts land on setup instead of dead ends.
Follow-up Repeat reset and Google sign-in on app.airatae.com at the walkthrough.
“Design system tidy-up: one palette, one type scale, real glass and pill components”
Delivered
One palette, one type scale, and real Pill and Glass components across the app, with keyboard and tap-target problems fixed along the way.
“New marketing website: story, proof, one clear call to action”
Live
A continuous story told by one pin: hero film, photography, the real app on a phone, and one clear way in. The proof section waits for your real stories.
Follow-up Add real stories or testimonials as the proof, show teams as live and photo proof as coming, and give the copy a final read.
“You’ll see: the new site and the new app shell on preview links, on your phone, plus a one-page security sign-off you can keep.”
With you
Both are past preview and live on your domain. The sign-off exists; a refreshed, re-dated version is next.
Walk through on your phones, hand over the refreshed sign-off, confirm Sprint 1 in writing.
airatae.com explains the idea and invites people in. app.airatae.com is where people find needs, connect and get to work.
One pin carries the story, from a need on the map to the app on your phone.
App screens show sample data, not real members.
Five things went beyond the Sprint 1 list. The team workspace and the new Explore are also Sprint 2 groundwork, built early because the foundation was ready for it. All of it is live in the app today.
Send a request, accept or decline, cancel or remove. You see which requests are pending and who’s mutual, and hear about it in the app when it matters. Only the two people involved can see a connection.
Live since 24 Sep, refined 29 Sep
Helpers can claim a need, start it and mark it finished. Owners can release or reopen it, finished work shows on the dashboard, and two people can’t claim the same job at once. Marking it finished is a simple status for now; finishing with a photo as proof comes next.
Live since 24 Sep
Start a public or private team (in the app, a “collaboration”) around a goal. Invite people, give them roles (organizer, co-organizer, member), add actions and tasks, assign them, and follow progress, team updates and notifications in one People, Tasks and Activity workspace.
Live since 29 Sep
Explore shows everyone, your network or just your own, on the map or as a list, and each pin says whose it is and how far along it is. The dashboard opens on your impact and what needs you, My work shows who took on each thing you posted, and your network’s activity is one tab away.
Live since 29 Sep
Contact details on needs are hidden from anyone who isn’t signed in, a privacy fix beyond the original 17. Since 29 September, who took on a job is visible only to that person, whoever posted it and the taker’s connections; everyone else sees “a community member”.
Live since 15 Sep, extended 29 Sep
Still to build: finishing a task with a photo and rolling completion up from task to action to the whole job, which is the heart of Sprint 2; named roles like Builder or Planter; task history on profiles, part of Sprint 3’s profile work; and turning an existing post into a team, which no sprint covers yet. We’ll place that when we agree Sprint 2.
The everyday details also went deeper than Sprint 1 asked, bringing forward some of Sprint 3’s accessibility work.
71
small controls made big enough for a thumb
45
controls repaired for keyboard use
84%
less shared app code for a phone to load first
135.5 kB to 21.6 kB (kilobytes, compressed)
86
places now built from one shared set of buttons and panels
The build is complete. Acceptance is yours to give, once you’ve tried it yourselves.
Install the app on an iPhone and an Android, open it from the home screen, and check notches and one-handed use. We’ll repeat Google sign-in and a password reset on app.airatae.com while we’re at it.
Owner: Together
Updated for the leftover server functions we switched off, the later privacy work and the new features, then re-checked against the app as it is today and dated.
Owner: Britt
Bring Privacy and Terms in line with today’s features, show teams as live and photo proof as coming on airatae.com, add real stories or testimonials to the website, and give the copy a final read.
Owners: Britt and Andrea
A short written OK that Sprint 1 is accepted.
Owners: Andrea and Dennis
“Prove it got done” is the line that makes Airatae different. Anyone can post a need; Airatae shows it was met. Seeing a need and gathering the people are live. Proving it got done is what we propose to build next.
Opportunity
Post a need
Live
One person or a team
Take it on alone or together
Live
Turning an existing post into a team: not built yet
Actions
Break the work into actions
Live in teams
Action lists: Animal Welfare’s final list is in, four more to come
Tasks, people and roles
Who does what
Live in teams
Named roles, like Builder or Planter: next
You are here
Photo
Finish a task with a photo
Next
Complete
Completion rolls up: task, action, job
Next
Tasks and single jobs can be marked done today, without a photo
Outcome
A visible record of what changed
Later
A note on words: in the app, a need, a post and an opportunity are the same thing, a pin on the map, and an offer of help is one too. A job is a need someone has taken on, and a team is what the app also calls a collaboration.
Next
As proposed: weeks 5–9, $6,240. Post it, organize it, complete it with a photo.
Because the team workspace, the list view and the new way of posting are already live, Sprint 2 starts further along. Before you decide, we’ll go through this list together and agree what’s left and the dates.
Later
As proposed: weeks 10–13, $2,810.
Some groundwork is already done: the app’s own domain, installation, legal pages, accessibility fixes, and profiles that show the work people have done.
Build and check
Shape what people see
Check the model
docs/collaborations.md. It also lists what isn’t built yet.Review and decide
Next meeting: a live walkthrough on your phones, the team workspace and its data model, and decisions together.
Book the walkthrough Open app.airatae.com (opens in a new tab)
Bring an iPhone and an Android if you have them. If the button doesn’t open your email, write to britt@axleoperations.com.