Four surfaces switched off until they work end to end
- Marketplace stays dark · selling user-generated models needs a seller agreement, a takedown flow and moderation capacity first.
- Referral programme off · attribution worked, but no account could obtain a code, nothing marked an earning paid, and a refund did not claw the commission back.
- Outbound webhooks off · every delivery queued onto a queue no worker consumes, so a registered endpoint never heard anything.
- Enterprise SSO off, and an OIDC hole closed on the way: the callback took the email from the identity provider without checking the domain belonged to that connection.
- Every page that advertised one of these now follows its flag · the comparison table, the FAQ, the about page, the roadmap and the help centre.