--- immediate (blocks revenue or production safety) ---
replace placeholder stripe-keys with real keys
trust + safety: content moderation for txt/pics (abuse reports, admin review)
alertmanager rules: service down, cert expiry, DB connection loss, reconciliation failures
add tests for enforcing plan limits per user level

--- next up ---
status.irc.now: deploy Upptime on GitHub Pages, monitors all endpoints
argocd: finish app-of-apps rollout
network management tab in account portal (Phase 4 portal integration)
custom domains: CNAME endpoint for user subdomains (not default router FQDN)

--- backlog (features) ---
log search add-on ($2/mo, full-text search across scrollback)
bots use irc.bot cloak / own bouncer
keep me logged into chat (session persistence)
fix text contrast dark grey on black
username + pw for irccloud migration: maybe use api key instead? also migration fails
async create bouncer
backup upsell
opensource operators + pastebin + pics

--- backlog (metrics ideas) ---
per-network message volume (which networks are most active across all bouncers)
peak concurrent downstream connections (soju connection count gauge)
onboarding funnel: signup -> bouncer create -> first message -> first week active
time-to-first-bouncer (latency from signup event to bouncer_create event)
feature adoption: % pro users with content_expires=false, % users who migrated from irccloud
error rates by service (HTTP 4xx/5xx split in Grafana)
storage growth rate prediction (linear extrapolation from timeseries)
bot execution metrics: script runs, errors, avg execution time (Phase 6)
retention by acquisition channel once attribution tracking exists

--- backlog (infrastructure) ---
faster builds
mTLS / secure connections service to service
email sending infra for transactional emails
2fa SSO
security audit

--- business/marketing (non-code) ---
imprint magickly llp uk
blog
support email
sticker ideas
merch shop (print-on-demand, stickers + apparel)
legal stuff
search console
promo ugc, reddit, tiktok etc
