ConcernCurrent evidenceNext production step
SecretsTMDB and Gemini calls are server-sideSound boundary
ResilienceCache policy, normalized failures, partial enrichment, AI fallbackAdd timeouts and retry budgets
AuthorizationSession middleware protects account pages; interests write verifies identityDerive identity on every interaction API
Data integritySupabase persists preferences and interactionsEnforce RLS, unique constraints, atomic upserts
QualityFocused UI tests cover loading, failure, pagination, and favorite behaviorAdd route contracts and planner tests
OperationsDeployable Next.js applicationAdd telemetry, rate limits, SLOs, and runbooks
I intentionally present SceneIt as a product prototype, not a production system. The senior-level work is
visible in the boundaries already chosen and in identifying the controls required before serving real users
at scale.