Onboarding — Antonios (Compliance + Product)

Pre-Seed preview test plan. ~30 minutes. Web only — mobile builds come later.

Access

Item	Value
Preview URL	https://app.stratifyinvest.com (behind Cloudflare Access — Toby whitelists your email, then you get a one-time PIN)
Sign-in	Demo / password login is the reliable path. Magic-link may not work yet (no SMTP wired) — if your link never arrives, use demo/password login.
GitHub repo (read-only)	https://github.com/thoughtful-toby/stratify
Stripe	Test mode. Card `4242 4242 4242 4242`, any future expiry, any 3-digit CVC. No real money moves.

What you have access to

Toby grants you all four roles via SQL after you sign in once. Once granted you can hit:

/approvals — 4-eyes pilot approval queue
/ops — funnel + ops metrics
/subscribers — account search + status/mandate overrides
/signals — signal registry + link to corrections
/deliveries — failed/pending delivery queue + retry
/roles — staff role grants (admin only)
/audit — chain-verified audit log w/ filters
/partners — partner status flip + key rotation
/pilot/strategy/new — composer with backtest preview + AI drafting
/pilot/signals — published + draft history
/signals/{id}/correct — issue correction (typo / factual / allocation / withdrawal)
everything subscriber + partner-side too

30-minute test plan

1. Audit & disclaimer (10 min)

Open in this order:

/ — confirm landing disclaimer
/walkthrough/pelosi-tracker-plus — confirm:
Disclaimer block at bottom ("Research-Publikation … keine Anlageberatung")
"Demo-Performance · fiktiv" label is visible
/feed (sign in first) — confirm disclaimer on the feed footer

2. Publish a test signal (5 min)

Go to /pilot/strategy/new
Pick any mandate
Type a title + body (use the Draft with AI button if you want to see the AI assist; it drafts in toby-voice)
Add 2–3 legs (e.g. SAP 0.18, AIR 0.12, Cash auto-pads to 100%)
Watch the live backtest preview render below
Click Publizieren + Fan-out

Expected:

"Publiziert: 1 Email, 1 In-App, 0 Push, 0 Webhook" toast (1 = you)
Email in your inbox — disclaimer in footer + working unsubscribe link
Signal appears in /feed within 1–2 seconds (Supabase Realtime)

3. Audit replay (5 min)

/audit
Confirm the green "chain ok · N rows" banner at top
Filter by event_type = signal.published — find your test signal
Check the prev_hash chain is unbroken across rows

4. Correction flow (5 min)

From /audit, copy your test signal's id (or find it via /pilot/signals)
Visit /signals/{id}/correct
Pick "factual", give a reason ("falscher Rebalance-Zeitpunkt"), correct title + body
Click Korrektur publizieren

Expected:

Separate email arrives with subject [Correction] Mandat ...
The correction email uses a distinct template (red accent, "Bezug auf:" block citing the original)
/feed shows both the original and the correction
/audit shows a new signal.corrected event linking the two signal ids

5. Compliance docs (5 min)

These are the deliverables you'll brief counsel from. Skim and flag anything wrong:

`docs/compliance/signalgeber-classification.md` — Phase A positioning memo. Owner: you. Decision needed: which counsel firm to brief.
`docs/compliance/dsgvo-data-flow.md` — ROPA-ready processor map.
`docs/compliance/audit-trail-export-format.md` — Format for FMA / partner exports.
`docs/compliance/pentest-rfp.md` — Vendor shortlist: Cure53 / Securitum / Cobalt / Securify. Pick one.

What you can't yet test

Area	Why	When
iOS / Android app	EAS Build not yet run	Sprint 0 once Apple Developer + Google Play accounts wired
Real partner integration	Needs a real partner endpoint	When first partner is contracted (Philipp)
Native push notifications	Mobile only	With iOS / Android above
Live Stripe payouts	Phase A is research-publication, no Connect	Phase C (FMA license grant)
Real KYC	Phase A doesn't run KYC	Phase C

Reporting back

Drop findings into a Notion page (or just reply by email). Tag bugs with P0 (compliance-critical), P1 (UX), P2 (cosmetic). Toby ships fixes within 24h on P0/P1.

For the Signalgeber memo specifically: I want your sign-off that the positioning is briefable to counsel. If you'd change anything, edit the memo directly and open a PR.

Reminder

Stratify is in Phase A — pre-license, research publication. Every surface you'll touch carries the non-advice disclaimer. If you see a screen without one, that's a P0.

— Toby