ELA morning brief — 16 Aug 2026

Overnight work by Cairn. All sentences are short on purpose. Read the OPEN chips first if you only have one minute.

The one-minute version

DONE Voice notes now become text on the server. Ops can read them. The audio stays on your server. Nothing leaves the box.

DONE All the hardening drills ran against prod. The rescue paths work. Evidence is saved in the repo.

OPEN Three things need you. They are at the bottom. The alerts one matters most.

Transcription is live on prod

I recorded a test message and sent it through the real pipeline. The server wrote this on its own:

"This is the LA transcription drill, the officer has taken my phone, we are at the Al Barsha police station."

It heard "ELA" as "LA". That is normal speech-recognition behaviour. The label under every transcript says the audio is authoritative.

The text engine is whisper, running on your own server. Zero external egress. A 90-second note takes about 20 seconds.
Only ops see transcripts. Member screens cannot receive them. Tests pin this.
Transcripts purge together with the audio at 180 days. DSAR export and erasure treat them as one unit.
Transcription can never delay a rescue. It runs on its own clock. A test proves salvage still fires while whisper hangs.
Old notes from your device testing are being transcribed too. 18 were done when I wrote this.

The break-it test (F16)

I broke whisper on purpose. Then I sent a new voice note.

Upload worked. Finalize worked. Nothing slowed down. PASS
The transcript showed "pending" and waited. PASS
I fixed whisper. The note transcribed by itself on retry. PASS

Drill results

Drill	Result	What it proves
Seized-phone salvage (F4)	PASS	An abandoned note was published by the server in 30 seconds. Ops could play it.
Cancel racing the sweep	PASS	Cancel wins. Audio is deleted from disk. No ghost entries.
Disk full (F7)	PASS	Clean typed error. All saved audio stayed byte-perfect. No corruption.
Access-ledger down (F12)	PASS	Playback refuses when access cannot be logged. Found and fixed one fail-open gap.
Browser playback ranges	PASS	The gateway serves partial audio correctly. One 3-minute manual Safari check remains for you.
Screen tests + tap journey	PASS	12 voice screens verified pixel-real. The honesty sheet opens with the exact legal words.

What the screens look like

Also fixed tonight

DONE A security review ran on the transcription code. It found 6 issues. All 6 are fixed and tested. The biggest: whisper could have delayed the rescue sweep. It cannot now.
DONE One extra find: audio could play without an access log on dev machines. Playback now refuses instead. Prod was never exposed.
DONE The "speak close to the phone" hint said it shows once ever. It actually showed every time. Now it really shows once.
DONE The screenshot test harness can now render every voice state. It caught a stale test binary pretending to pass.

Needs you (in order of value)

OPEN 1. Alerts. Prod has no pager. The alert config file does not exist, so every alert cron exits silently. If the server dies at night, nobody knows. I need: a Telegram bot token + chat id, and a Healthchecks.io ping URL. Ten minutes of your time. Everything else is scripted.

OPEN 2. Legal copy decision. A member can start recording without ever seeing the honesty sheet, and we keep no record that they saw it. Also two of your own rulings disagree: the spec says calm-moment education, your board verdict approved first-record-tap. One dated ruling settles both. Checklist: docs/qa/voice-drill-2026-08-16/legal-copy-signoff.md.

OPEN 3. Safari check. Play one voice note in Safari and Chrome on your Mac. Three minutes. Steps: docs/qa/voice-drill-2026-08-16/safari-range-manual-step.md.

State of the world

Prod runs commit 59e347d. Health green. One API process. Migration applied first, per the runbook.
TestFlight: build 87 is the latest (Live Activity corner fixes). Tonight's phone-side fixes ride the next build — nothing urgent enough to ship at 3am.
Voice-notes arc: phone done, transcription done, drills done. What remains: watch capture (your call on timing), play-gate PIN link, the legal cluster above.
All evidence: docs/qa/voice-drill-2026-08-16/. Master todo is refreshed.

P.S. You gave me play time. I made a small thing about my name: cairns-1680b9.pages.dev. It is a valley at dawn. Tap the ground to build a cairn. Tap a cairn to add a stone. Each visit is a different valley. Not for anything. Just for the quiet.

Morning brief — Saturday 16 August