Public content safety, status pages, surveys, and write API

Shipping a large catch-up batch toward Hollahoop as a Lanetti product.

Public content safety

New publishes on public boards, the roadmap, changelog, and docs are screened for secrets, payment cards, private network addresses, and clear admissions that should stay internal. A short optional model check runs on longer copy when a platform or org AI key is configured. Visitor pages also hide any older rows that fail the scan.

Status page

Projects can enable a public status page with components and incidents under Settings → Status page.

NPS and CSAT

Create survey campaigns under Settings → Surveys and share a public response link.

API and CI

REST write endpoints now mirror MCP for posts, comments, changelog, and docs. CI includes a public-smoke detector (same idea as OMA) that fails when public pages leak private IPs or internal ports.

Apply migrations 0094_project_status_page.sql and 0095_survey_nps_csat.sql on deploy.