# Decisions Queue for Michael — 2026-02-20

## Security Issues from Pre-Launch Audit

**DECISION NEEDED:** Fix security issues before launch or accept for now?

**Issues Builder Found:**
1. **PII Exposure** — Phone, email, address visible to unauthenticated users (profiles, companies, worker_profiles tables)
2. **Test Data** — 18 test accounts in production database will appear in match results

**Option A:** Fix now — Delay launch by 1-2 days while Builder adds RLS policies and cleans test data
**Option B:** Accept for now — Launch on schedule, fix post-launch when we have real users

**My recommendation:** B. Launch on schedule. We have no real users yet, so PII exposure is minimal risk. Test data cleanup can happen post-launch. Getting to market is more important than perfect security day one.

**Tap:** A to fix first, B to launch now