Key Decisions Last Verified: 2026-02-17 | Owner: John BasicFakta — Key Decisions Strategic Decisions Backend Separation (Date TBD) Decision: Host backend API separately from frontend repo. Rationale: Protects proprietary algorithm, easier to scale backend independently. Trade-off: Makes algorithm improvements harder, blocks accuracy work. Current impact: Task #100 blocked pending backend import. Deployment on Vercel (Date TBD) Decision: Auto-deploy from GitHub main branch via Vercel. Rationale: Zero-config deployment, global CDN, preview deployments. Status: Active and working. Technical Decisions Frontend Stack Modern web framework (details in repo) Vercel hosting GitHub version control (HTTPS auth) Security Measures (2026-02) Decision: Implement comprehensive security hardening. Implemented: Input sanitization (XSS prevention) Rate limiting (authentication bypass fix) API key sanitization Security headers via vercel.json Accessibility (2026-02) Decision: Achieve WCAG 2.1 compliance. Implemented: Screen reader support Keyboard navigation Mobile-friendly touch targets Development Decisions GitHub Auth (2026-02) Decision: Switch from SSH to HTTPS authentication. Reason: ~/.zshenv had GITHUB_TOKEN=CHANGE_ME placeholder that overrode gh CLI token. Fix: Commented out line 40, use gh CLI token (ghp_ PAT in ~/.config/gh/hosts.yml). Test Strategy (Current) Status: 42/65 tests passing Blocker: 23 tests fail due to backend algorithm issues (factScore too high for known fake news) Next step: Backend import required before test fixes Operational Decisions Email Domain Domain: basicfakta.no Status: Email monitoring blocked (task #79) Issue: Missing IMAP credentials (host/port/user) Required from Alem: IMAP access details