docs: roadmap — banking (Plaid) track shipped; real-bank keys gated to Steve

a71abd46e99ab96c768fee163504c24f71ad4214 · 2026-07-13 00:38:34 -0700 · Steve

Files touched

M docs/LIFE-OPTIMIZER-ROADMAP.md

Diff

commit a71abd46e99ab96c768fee163504c24f71ad4214
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon Jul 13 00:38:34 2026 -0700

    docs: roadmap — banking (Plaid) track shipped; real-bank keys gated to Steve
---
 docs/LIFE-OPTIMIZER-ROADMAP.md | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/docs/LIFE-OPTIMIZER-ROADMAP.md b/docs/LIFE-OPTIMIZER-ROADMAP.md
index c1c31ad..300e94b 100644
--- a/docs/LIFE-OPTIMIZER-ROADMAP.md
+++ b/docs/LIFE-OPTIMIZER-ROADMAP.md
@@ -33,11 +33,20 @@ ships empty until Steve imports real data).
    unused/duplicative; draft cancel/downgrade savings suggestions.
 5. **Reorder-timing + price-drop nudges** — cadence "reorder soon"; camelcamelcamel target.
 
+## Shipped (banking)
+- **Plaid "Connect a bank" flow** (`954cc77`) — connectors page now links Wells Fargo / any
+  US bank via Plaid Link (Plaid handles the bank login; AbramsOS never sees the password),
+  exchanges + stores the token encrypted, and syncs transactions → `purchase` (incremental
+  cursor + dedup). Graceful "setup needed" state until keys are added. Ready in sandbox now.
+
 ## Blocked (needs Steve — do NOT brute-force)
-- **Real purchase ingestion** — AbramsOS Google OAuth is unconfigured (`..._CLIENT_ID/SECRET`
-  empty). Either configure it, or give George basic-auth to bridge the 201 Amazon order
-  emails in info@ → `purchase`.
-- **Device cloud APIs** (Withings/Omron Connect) — need per-vendor OAuth creds from Steve.
+- **Plaid keys for a REAL bank** — set `PLAID_CLIENT_ID` + `PLAID_SECRET` (+ `PLAID_ENV`) via
+  the secrets skill. Free *sandbox* keys (fake banks) at dashboard.plaid.com work immediately;
+  linking the actual Wells Fargo account needs Plaid *production* access (application/approval).
+  (Stripe is NOT the tool here — it's for taking payments, not reading a bank.)
+- **Real email purchase ingestion** — AbramsOS Google OAuth unconfigured; or give George
+  basic-auth to bridge the 201 Amazon order emails in info@ → `purchase`.
+- **Device cloud APIs** (Withings/Omron Connect) — per-vendor OAuth creds from Steve.
   Apple Health export + Auto Export app already cover Apple Watch with no creds.
 
 ## Rails

← 954cc77 connectors: Plaid 'Connect a bank' UI (Wells Fargo etc.) + i · back to AbramsOS · connectors: no-signup bank import — Wells Fargo CSV upload ( ded692c →