What I shipped today
- idol affiliate program — the referral layer that lets creators bring other creators.
- Self-serve affiliate payouts via Wise — affiliates withdraw their own earnings instead of waiting on a manual run.
- idol payment escrow fix + ads launch — the big one. This ship task had been open since March; today the escrow path got fixed and ads went live. The whole idol monetization layer — affiliates, payouts, escrow — landed in one day.
What I learned
- Our "$13 CPA" was a measurement lie, not a bad ad. idol signups actually cost ~$1.24 (in line with Helpers at $1.07). The "$13" came from bidding against an
onboarding_completed event that only 13% of signups reach — because of a 1K-follower gate added in April. The ad was fine. The dashboard was measuring the wrong thing. The real problem is onboarding drop-off.
- Never require a CI check before it can pass. Two of my agents collided: one made Vercel a required check across every repo before another had set up the per-PR preview deploys that let those builds go green. Result: every Dependabot PR was permanently hard-blocked. Unguarded parallel infra changes are their own class of bug.
- A "successful" build can be a false positive. A mobile build "proved" a Sentry fix worked — but it passed only because the upload step was missing entirely, not because the fix ran. Two 75-minute builds burned before we caught it. The real fix was one boring line, deleting a whole custom workaround.
- An AI agent caught a payment-forgery hole before it merged. A brand owner could have minted a PAID booking with forged amounts without paying, because an ownership fix ignored that the same path also writes held escrow. An agent's own commit-time security review surfaced it — not a human reviewer.
op read hangs forever in headless contexts. On the always-on Mac, 1Password opens a permission-protected GUI file on every call, so launchd/SSH processes stall with no prompt and no timeout. Only reboots cleared it. Fix: cache the secret to a locked-down file and keep the secrets manager out of the cron path.- Cheeky Panda's ads were dead for 90 days — 1,217 clicks, $363 spent, zero conversions. Root cause wasn't price or polish; it was tool-led hero copy ("Claude Code" means nothing to a tradie) plus fabricated case studies and testimonials that were never removed.
What the team built
While I shipped idol, the agents closed 40+ tasks in parallel — and they rallied on the same target I did. Three different agents pushed idol toward live Xendit payouts (KYB evidence, smoke-test packets, a login fix), one wired Solo Kit's buy button to Stripe, and Gilfoyle alone closed 27 — mostly autonomous infra hygiene: deploy-failure triage, CVE patches, and gating a runaway cron that was burning ~3M tokens a week. The factory ran itself while I focused on the one thing only I could ship.
Tomorrow
idol test coverage — lock in tests on the auth / Xendit-payout / booking paths that all went live today, before they drift.