Handoff — Pain-2-Profit Fable audit, fixes shipped, money-path audit system (2026-07-10)

What this session did (one line)

Ran a Fable-mode security audit on the LIVE Pain-2-Profit app, found + fixed 1 HIGH + 2 MEDIUM + 3 LOW holes, deployed + verified everything live, committed + pushed, proved the refund clawback by running it, and merged the learnings into the permanent money-path audit system.

Decisions locked

• "Fable test" = "Fable mode" = "Fable audit" = "run Fable on X" → all mean the fable-mode skill. Saved as memory feedback_fable_terms_are_synonyms.
• Fixes to the live money app were approved explicitly ("fix all no matter what", "close all leftovers", "commit + push").
• Fable-skill learnings go to ONE canonical home: reference/fable-mode-money-path-audit.md (the BookifAI tab built it; this tab merged P2P findings in). No parallel skill-file writes (clobber risk).

Shipped + verified LIVE (Supabase kgxwuhkvoyvrnifvlnqz, Stripe LIVE)

Commit fb355e3 on main → AmplifAI-Your-Business/pain2profit-engine (remote confirmed).

• HIGH — paywall forge hole CLOSED: dropped client INSERT policies on gameplans/research_runs (migration 0017). A user could fabricate a "complete" plan for 0 credits then buy the build prompt via retool-prompt for 3 instead of 15. Verified live: only SELECT policies remain.
• MED — rate limits added to research (40/day), generate-gameplan (30/day), retool-prompt (40/day). Blocks refund-abuse loops that drain the AI bill. (chat already capped 60/day.)
• MED — refund/chargeback clawback: stripe-webhook now handles charge.refunded+charge.dispute.created → clawback_credits RPC (migration 0017; service_role only, idempotent, floors at 0). Proven by running on a throwaway user (100→70 deduct, floor at 0, idempotent, one ledger row) — test user deleted, 0 leftovers.
• LOW ×3: capped all user LLM inputs (token-cost guard); dropped hardcoded localhost from prod CORS (verified live — localhost refused, prod allowed); captured credit_ledger in migration 0018 (no-op live, rebuild insurance); cosmetic /admin route guard.
• Deployed: all 12 edge functions + frontend rebuilt → Cloudflare Pages pain2profit-engine. Live site verified HTTP 200, new bundle.

Verified SAFE (audit cleared, checked live — not assumed)

Webhook signature verified; credits idempotent; spend_credits/add_credits revoked from anon/authenticated (0016 confirmed on live DB); admin server-gated; granular RLS + money columns server-write-only; no secrets in bundle. The agent's "credit_ledger leaks every user's history" claim was a FALSE alarm — live DB has RLS on + correct owner-only policy.

The ONE thing still open (yours — real money)

A real Stripe purchase + refund on pain2profitengine.com. Proves the last two unproven items in ONE 3-min pass: (a) the refund-clawback wiring (event → webhook → session lookup; the math is already proven), and (b) the purchase-confirmation email (built, never fired by a real checkout). Small purchase → confirm credits + receipt land → refund in Stripe → confirm credits vanish. After that, P2P is closed for good.

Money-path audit system (permanent)

• reference/fable-mode-money-path-audit.md — master checklist (now #1–14) + Findings Log. This session ADDED checklist #12 (refund-abuse loop), #13 (uncapped LLM input), #14 (SECURITY DEFINER grant drift — verify on live) + a full P2P deep-dive log entry incl. verification-discipline learnings (verify agent claims live, prove money logic on a throwaway user, the SELECT eval-order gotcha).
• Auto-fires via /app-safety-check Phase 2d on any money app/site (BookifAI tab wired this).
• Tiny cleanup: ~/.claude/skills/fable-mode/learnings-inbox/p2p-2026-07-10.md is now redundant (merged) — safe to delete manually (a rm was permission-blocked this session).

Key files

• App: PROJECTS/Pain-2-Profit Engine/app/ — functions in supabase/functions/, migrations 0017+0018.
• Audit system: reference/fable-mode-money-path-audit.md.
• Open items tracker: Sondra Brain/wiki/memory/open-questions.md (P2P entry updated + reconciled — the old "no git remote" note was stale; remote existed).

Context note

Session ended at ~265K tokens (past the 250K freshness line) — this handoff written for a clean restart.