Repair workbench
Each failing check is planned into a side-effect-free repair, classified into one of the five ownership states. LaunchWired (automation / an authored PR) does the work; the tenant sees only approvals, status, guided steps, and evidence.
Failing checks → repair plans
| Tenant | Check | Remediation | Risk | Ownership | Execution path | Queue |
|---|---|---|---|---|---|---|
| sample-02 | cloudflare.nameservers ↳ verifies via cloudflare.nameservers | Guide the tenant to set Cloudflare nameservers at their registrar. | high | Guided manual | Guided manual step for the tenant; auto-verified by its check. | awaiting_approval |
| sample-03 | supabase.auth | Author the auth-bootstrap PR (sign-in, sign-up, reset). | low | LaunchWired PR | LaunchWired authors a PR; the tenant merges it. | queued |
| sample-03 | vercel.env_vars | Route the env var via the secrets broker (non-prod). | low | Automated | LaunchWired executes directly (low-risk, non-production). | queued |
| sample-02 | stripe.products | Create a test-mode product + price. | low | Tenant approval | Requires tenant approval before execution. | awaiting_approval |
Safe automated repairs queue immediately; tenant-gated and guided-manual repairs await approval. A guided-manual repair always names the check that will verify it.