Self-service onboarding progress

Progress rollup for issue #760. This report shows what is implemented, what has production proof, and what remains blocked on an operator-controlled fresh Gmail Claude.ai run.

Generated 2026-07-06 Production Tegy proof passed Fresh Claude signup still human-gated No secrets or magic-link tokens included

Current Verdict

Area	Status	Evidence
Public self-service signup	Verified in production	Disposable inbox received a real `login@app.tegy.io` magic link and landed in a personal workspace.
Free tier entry	Verified in production	Created `org_self_*` workspace, role `owner`, billing `free`, active `false`.
Upgrade reminders	Implemented and verified	Free plan reminder appears in app chrome and opens Billing upgrade surface.
Usage limits	Implemented and verified	Settings Usage shows Free plan, current session, weekly limits. Current production limits are `$0.25` session and `$1` weekly all-models.
Rest of app after signup	Smoke verified	Fresh Free user submitted a production chat turn and received assistant text: `self-service smoke ok`.
Fresh Gmail Claude side-by-side	Still operator-gated	Clean Claude signup from automation can hit human verification. The verifier is ready, but a human must complete this final run.

What Shipped

Self-service auth accepts valid public emails and Gmail plus aliases.
First login provisions a personal Free workspace instead of invite-only gating.
Explicit invites still route users into the invited workspace.
Free plan reminder and Billing upgrade surface are visible on Free workspaces.
Settings Usage exposes current-session and weekly usage limits.
Production verifier checks signup, APIs, Billing, Usage, and optional real chat smoke.
Side-by-side verifier now creates an HTML audit matrix for the six operator checks.