Phase 1: subscription-ready account foundation

[Bukassi600104]

What this phase does

• adds a migration-safe 5 lifetime scan trial and canonical entitlement record
• keeps production in legacy mode until migration and rollout are approved
• removes the inactive Stripe integration and standardizes billing on Paystack
• makes Paystack checkout credential-gated, with monthly and annual plans
• adds secure website sessions, account dashboard, billing management, and idempotent webhooks
• synchronizes extension popup and side-panel enforcement with backend account state

Safety

• GUARDSCOPE_ACCESS_MODE=legacy remains the default
• PAYMENTS_ENABLED=false remains the default
• no Paystack credential is required to build or run the current live behavior
• no production deployment or database migration is performed by this PR

Verification

• backend: 40/40 tests pass
• backend production build passes
• extension: 8/8 tests pass
• extension production build passes
• repository contains no guardscope-update references

Next phase

Premium website and side-panel redesign, removal of launch-era promo/free surfaces, and browser-level review.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
guard-scope	Ready	Preview	Aug 11, 2026 6:51pm