What I need from you

Website move: add the new domain to the Supabase and Google allow-lists

1. Supabase → Authentication → URL Configuration → Redirect URLs: add the URL below. Keep the .site entry. Leave the Site URL as it is for now.
2. Google Cloud → the OAuth client: add the JavaScript origin below.
3. Google Cloud → OAuth consent screen: add populardemand.market as an authorized domain. Verify it with the Search Console TXT record at the registrar.

Unblocks: condi-30 can set the Vercel variables and deploy the website move (runbook steps 4–5).

security.txt: choose the contact and enter two values

1. Pick a mailbox you already read. .market doesn't receive mail yet; our sending domains are on .site. Use an address that works today, and change it after the email move.
2. Enter both values in Vercel → Settings → Environment Variables, Production only. Enter the same values in Doppler prd; Doppler doesn't sync to Vercel.
3. Tell condi-30. It redeploys and runs the preflight.

Unblocks: P0-6. Claude's directory terms require a security contact. Until then /.well-known/security.txt returns 404.

OpenAI domain verification token

1. In the OpenAI platform's Apps section, start domain verification for mcp.populardemand.market and copy the token.
2. Enter it as OPENAI_APPS_CHALLENGE_TOKEN in Vercel Production and Doppler prd.
3. Tell condi-30 to redeploy. Once the URL serves the token, press Verify in OpenAI.

Unblocks: P0-2, the domain proof for the ChatGPT submission. If OpenAI asks you to verify a personal or business identity first, stop there. That choice depends on the company, so it's out of scope here.

Retire the old get_purchase_plans tool now?

It's a duplicate of get_purchase_offers left over from the Plan→Offer rename. Directory reviewers test every tool, and a duplicate looks padded. The release rule asks for log evidence and a date from you. The logs can't tell the two names apart, so it was taken out of #466 and deferred.

Reply: retire get_purchase_plans now

May an email Offer read include the Offer page link?

Holds now happen only on the Offer page. MCP Offer reads return its link. The email channel has a rule that it never links to data or payment pages, so an email agent is told to send the person to the Offer page without a link.

Reply: allow the Offer page link in email reads

Read the DECISIONS draft and say "ok" or what to change

#468 records your 22 October decisions: holds on the Offer page, a guarantee-led launch with no fee at first, no merchant quote experiment, full-scope readiness, the website move, and company formation soon. Check two lines:

• It states the launch-pricing wording, which you wanted to discuss later.
• It says no P1 item is cut. That matches "full readiness".

Unblocks: condi-30 merging it, so every session works from the same rules.

Switch the Supabase Site URL

Do this right after condi-30 confirms the deploy. Supabase → Authentication → URL Configuration → Site URL. That moves the sign-in consent page to the new domain. Agent sign-ins keep working either way, because the old address redirects.

Point outside systems at .market, then OK the Ora scan

Edit each existing registration, one at a time, so signing secrets stay the same. Confirm one delivery after each.

1. Stripe webhook endpoint (test mode).
2. Resend inbound webhook.
3. Google consent-screen homepage, privacy and terms URLs.
4. Search Console: the change-of-address tool from .site.
5. Leave the Shopify and BigCommerce apps on .site.

Then reply: run the Ora scan on populardemand.market. Sending the URL to Ora needs your go; we're checking for the score to recover from 77.

Run us in Claude, ChatGPT, Grok Bot and Muse as a custom connector

The scripts are in OWNER_RUNS.md (#469): sign-in, the reviewer prompts, the Offer page hand-off, revoke and reconnect, and screenshots. Record ChatGPT for the OpenAI demo video. Capture the 3–5 Claude carousel screenshots. In Muse and Duet, try buying a test deal with Link or Shop Pay to test the guarantee path.

Unblocks: P1-7, the ChatGPT demo, the Grok attestation, the Claude carousel and the submissions themselves.