How it was built: Base44 for the pages, data and hosting. Backend functions, schedules and the AI step written in code and synced through GitHub, with 1,000+ automated tests. Every round, independent reviewers tried to break it. One found that anyone could trigger the scheduled emails, and that was locked down before the first real run.