Jump to handbook document Browse handbook… Design system (visual) Start here · Readme Product and features · Critical Path Product and features · Onboarding Antonios Product and features · Prd Stratify V2 Product and features · Product Design Product and features · V2.1 Roadmap Strategy mandates · Partners Group Directors’ Dealings Tracker (PGHN vs SMI) Strategy mandates · Pelosi Trade Tracker (PTR Backtest) Strategy mandates · Trump Trade Tracker ($TRUMP / DJT / Tariff) Strategy mandates · AI Arms Race Strategy mandates · Europe Defense Strategy mandates · Insider DACH Strategy mandates · Inverse Cramer Strategy mandates · Obesity Strategy mandates · Pelosi Tracker Strategy mandates · Super-Investors Mobile app · Mobile Screenshots (Light / Dark) Mobile app · Mobile Release Design system · Stratify Design System V1 Legal and compliance · Acceptable Use & Asset Management Policy Legal and compliance · Access Control & Identity Management Policy Legal and compliance · Asset & Information Classification Procedure Legal and compliance · Audit Trail Export Format Legal and compliance · B2B Partner Onboarding & Key Provisioning Procedure Legal and compliance · Backup & Restore Procedure Legal and compliance · Bearbeitungsreglement (VDSG Art. 5) Legal and compliance · Breach Notification — Regulatory Procedure Legal and compliance · Business Continuity & Disaster Recovery Test Procedure Legal and compliance · Business Continuity & ICT Resilience Policy Legal and compliance · Change & Release Management Procedure Legal and compliance · Closed Beta Sign Off Checklist Legal and compliance · Competence, Awareness & Training Plan Legal and compliance · Control of Documented Information Legal and compliance · Cryptography & Data Protection Policy Legal and compliance · Data Processing Agreement — Template Legal and compliance · Data Subject Access & Erasure Request Procedure Legal and compliance · Data Subject Rights — Regulatory Procedure Legal and compliance · DPIA / DSFA Screening — Core Product Legal and compliance · Dsgvo Data Flow Legal and compliance · Facts Legal and compliance · Fma Passporting Gate Legal and compliance · HR Security Policy Legal and compliance · Incident Management Policy Legal and compliance · Incident Response Procedure — Dual-Clock Decision Tree Legal and compliance · Information Security Framework Policy Legal and compliance · Information Security Policy Legal and compliance · Internal Audit Programme & Procedure Legal and compliance · ISMS Scope & Context Legal and compliance · Joiner / Mover / Leaver Procedure Legal and compliance · Logging & Monitoring Policy Legal and compliance · Logging, Monitoring & Alerting Procedure Legal and compliance · Management Review — Procedure & Record Template Legal and compliance · Nonconformity & Corrective Action Log Legal and compliance · Operations & Change Management Policy Legal and compliance · Penetration Test & Remediation Procedure Legal and compliance · Pentest Rfp Legal and compliance · Physical & Remote-Working Policy Legal and compliance · PLAN Legal and compliance · Privacy Notices — Inventory & Consistency Check Legal and compliance · Quarterly Access Review Procedure Legal and compliance · Records of Processing Activities — Controller Role Legal and compliance · Records of Processing Activities — Processor Role Legal and compliance · Regulatory Roadmap CH → EEA (Tippgeber → lizenzierter Vermögensverwalter) Legal and compliance · Retention & Deletion Schedule Legal and compliance · Risk Assessment & Treatment Methodology Legal and compliance · Risk Treatment Plan Legal and compliance · Roles, Responsibilities & Authorities (RACI) Legal and compliance · Schema Legal and compliance · Secrets & Key Management Procedure Legal and compliance · Secure Development Policy Legal and compliance · Secure SDLC & Code-Review Gate Procedure Legal and compliance · Security Awareness Training Delivery Procedure Legal and compliance · Security Objectives & Metrics Legal and compliance · Signalgeber Classification Legal and compliance · Statement of Applicability Legal and compliance · Sub-processor List Legal and compliance · Suitability Responsibility Matrix Legal and compliance · Supplier / Sub-Processor Onboarding & Review Procedure Legal and compliance · Supplier & Cloud Security Policy Legal and compliance · Technical and Organisational Measures (TOMs) Legal and compliance · Transfer Impact Assessment — Third-Country Transfers Legal and compliance · Vulnerability & Patch Management Procedure Engineering · Architecture Engineering · Cloudflare Access Engineering · Db Recovery Engineering · Deploy Engineering · Git Signing Engineering · Hetzner Cutover Engineering · Hetzner Power Schedule Engineering · Jenkins Engineering · Partner Order Mapping Engineering · Phase C Endpoints Engineering · Pre Launch Quality Engineering · Production Cutover Engineering · Production Env Engineering · Quickstart Internal ops · B2b Rate Limits Internal ops · Partner Runbook Internal ops · Postman And Screenshots Internal ops · Project Kickoff 2026 05 08 Investor narrative · Stratify Pitch Deck V1 More · 0000 Adr Template More · 0000 Plan Template More · 0001 Adopt Development Operating Standard More · 0002 Email Code Auth Instead Of Links More · Graphify Findings Cleanup
Handbook · Product and features Stratify v2.1 — Build Roadmap (post-scaffold) Status: [x] done, [/] partial (documented gap), [ ] not started.
A — Foundational publish path [x] A1. Pilot editor — /pilot/strategy/new, /pilot/signals [x] A2. Admin 4-eyes — /approvals + subscriber_roles (migration 0005) [x] A3. B2C account — /account/* (unsubscribe uses email form; token auth deferred) [x] A4. Stripe Checkout — /upgrade + /upgrade/success + /upgrade/cancel [x] A5. Web push prompt — first signal tap on /feed [x] A6. Email+password signup — /sign-in (web + mobile), code-confirmed per ADR-0002; real lean Phase-A onboarding — /onboarding/mandate-select + /onboarding/notifications (was previously only reachable via the Phase-C KYC/bank/deposit stub, now moved to /onboarding/phase-c, preview-only)
B — Demand validation [x] B1. Landing polish — OG, icon, sitemap, robots, JSON-LD [x] B2. Weekly digest — weekly-digest.tsx + digest-weekly cron [x] B3. Insights — /insights/[slug] markdown essays [x] B4. Pricing — /pricing → /upgrade [x] B5. Referral — cookie + checkout attribution + post-paid audit on Stripe webhook C — B2B-API readiness [x] C1. Partner sandbox — /partners/sandbox + welcome email [x] C2. Partner console — /partners/console + replay [x] C3. Postman — pnpm api:postman (drift gate intentionally off in Jenkins) [x] C4. MCP server — apps/mcp/ stdio tools for B2B routes D — Mobile parity [x] D1. Account screens — apps/mobile/app/account/* [x] D2. Expo push registration — first feed tap [x] D3. Expo push delivery — drain-expo-push cron [x] D4. Deep links — stratify://signal/<id> [x] D5. EAS Build — eas.json + Jenkins stage on mobile-v* tags E — Compliance + ops [/] E1. Rechtsgutachten draft — signalgeber-classification.md (counsel review pending) [x] E2. DSGVO data-flow map — dsgvo-data-flow.md [x] E3. Pen-test RFP — pentest-rfp.md [/] E4. DB recovery runbook — db-recovery.md (PITR drill TBD) [x] E5. Signal corrections — migration + publishCorrection() + admin registry F — Differentiating [x] F1. Mandate composer — /pilot/strategy/composer + PilotStrategyDraft zod [x] F2. AI signal drafting — /api/ai/draft-signal [x] F3. Backtest preview — @stratify/shared/backtest [x] F4. Investor dashboard — /insights (30d retention funnel) G — Admin console (G1–G30) See phase plans in docs/superpowers/plans/2026-05-23-admin-console-phase*.md.
Phases 1–6: G1–G25 complete.
Phase 7 plan: `2026-05-23-admin-console-phase7.md`
[x] G26. Investor metrics — /insights [x] G27. Runbooks hub — /runbooks [x] G28. Observability links — /system [x] G29. Bulk delivery retry — /deliveries [x] G30. Chain break → incident CTA — /compliance Cross-cutting [x] zod in packages/shared for shared schemas (incl. PilotStrategyDraft) [x] Mutations audit-logged [x] RLS on new tables [ ] Lighthouse ≥ 90 per public page (manual gate) [x] pnpm test + pnpm typecheck in CI Stratify · wait, what. · Zürich Pre-license phase — research publication, not investment advice.