[overnight] pre-debate baseline

34dc1016907bdc5be429fe4eb535c8bd03871dc5 · 2026-05-04 06:58:43 -0700 · SteveStudio2
Files touched

A .env
A .env.example
A CHANGES.md
A README.md
Diff

commit 34dc1016907bdc5be429fe4eb535c8bd03871dc5
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date:   Mon May 4 06:58:43 2026 -0700

    [overnight] pre-debate baseline
---
 .env         |  5 +++++
 .env.example |  2 ++
 CHANGES.md   | 11 +++++++++++
 README.md    | 13 +++++++++++++
 4 files changed, 31 insertions(+)

diff --git a/.env b/.env
new file mode 100644
index 0000000..405ec26
--- /dev/null
+++ b/.env
@@ -0,0 +1,5 @@
+# Google Maps Platform — restricted to bubbesblock.com referrers (see GCP project stevestreet-494819)
+GOOGLE_MAPS_API_KEY=AIzaSyDP-lKLvCQNPUvJ3mxyl1bjBHFO5g57ETw
+GOOGLE_GEOCODING_API_KEY=AIzaSyCr_VbbAcpGeY0CRnTV-YcCQENGOLrbxg0
+
+DPLA_API_KEY=3aebfb2284a8eb961962ce8e06eeecd5
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..e61222a
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,2 @@
+GOOGLE_MAPS_API_KEY=your_browser_key_here_referrer_restricted
+GOOGLE_GEOCODING_API_KEY=your_server_key_here_ip_restricted
diff --git a/CHANGES.md b/CHANGES.md
new file mode 100644
index 0000000..555d18d
--- /dev/null
+++ b/CHANGES.md
@@ -0,0 +1,11 @@
+## Applied
+- None — no P0/P1 review item matched the approved autonomous safe-fix list in the current project contents.
+
+## Deferred (needs Steve)
+- P0 — `.env:2` — real `GOOGLE_MAPS_API_KEY` appears to live in the project root environment file — deferred because `.env` must be left alone and any real key exposure requires Steve to rotate/restrict the key.
+- P0 — `.env:3` — real `GOOGLE_GEOCODING_API_KEY` appears to live in the project root environment file — deferred because `.env` must be left alone and any real key exposure requires Steve to rotate/restrict the key.
+- P0 — `.env:5` — real `DPLA_API_KEY` appears to live in the project root environment file — deferred because `.env` must be left alone and any real key exposure requires Steve to rotate/restrict the key.
+- P0 — `README.md:9` — posting verification is documented but no enforceable server-side auth code exists in this repo — deferred because implementing identity/claim enforcement is product/application work, not one of the approved safe fixes.
+- P1 — `README.md:5` — master plan points to a sibling-relative file, so the repo is not self-contained — deferred because copying or defining the operational contract is documentation/product scope outside the approved safe-fix list.
+- P1 — `README.md:7` — cross-domain identity/history flow lacks API contracts, trust model, and outage behavior — deferred because designing those contracts is architecture work outside the approved safe-fix list.
+- P1 — project root — no source, tests, package/deploy config, or datastore schema is present — deferred because creating application scaffolding or tests would exceed the requested surgical safe fixes.
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..d9b46a7
--- /dev/null
+++ b/README.md
@@ -0,0 +1,13 @@
+# bubbesblock.com
+
+Community surface for the three-domain home-history ecosystem.
+
+**Master plan:** [`~/Projects/wholivedthere/PLAN.md`](../wholivedthere/PLAN.md)
+
+This domain handles: block-level posts, cup-of-sugar marketplace, neighbor profiles, events, address-tagged Q&A pulling history from wholivedthere.com.
+
+Verification gate: posting requires a claimed address (via claimmyaddress.com). This is the cross-promotion engine — bubbesblock pushes signups to claimmyaddress.
+
+Sister domains:
+- `wholivedthere.com` — flagship
+- `claimmyaddress.com` — onboarding/login
(oldest) · back to Bubbesblock · add canonical .gitignore per standing rule 7d43131 →