MPSoWaL + MPSoL 30/60/90-Day Plan

Plan Date: February 25, 2026

Scope: Reliability, security, conversion, SEO continuity, and business continuity for mpsowal.com and mps-ol.to.

Cadence: Weekly checkpoint review every Friday; monthly re-prioritization at day 30 and day 60.

Execution Status Against Current Repo

Audit basis: current files in this repository as reviewed on March 13, 2026. Status key is operational, not aspirational: Done means visible in repo now, Partial means some supporting work exists but the roadmap item is not complete, Missing means no implementation was found.

Partial
Checkout and fulfillment plumbing
Snipcart storefront wiring is present across the site, the Lulu webhook exists in netlify/functions/snipcart-lulu-webhook.js, and print manifest + Lulu package env mapping are now in place. This is configured infrastructure, but not yet proven by a real end-to-end paid order.
Partial
Monitoring and health visibility
A basic health endpoint exists in netlify/functions/health.js, but no uptime alerting configuration, no synthetic checks, and no alert routing were found in repo.
Missing
Synthetic test coverage
No automated browse, add-to-cart, checkout-session, or webhook-receive tests were found.
Missing
Incident runbook
No rollback/deploy incident runbook or operator procedure document was found. The closest evidence is a one-off verification note in docs/eod-verification-2026-02-25.md, which is not a runbook.
Missing
Security headers baseline
No repository-level CSP, HSTS, X-Content-Type-Options, or Referrer-Policy configuration was found in netlify.toml, _redirects, or function responses.
Partial
Secret inventory and rotation
Secrets and runtime env vars are clearly in use for Snipcart and Lulu, but no rotation schedule or secret-management procedure was found in repo.
Missing
Dependency audit
No dependency-audit output, package manifest, or remediation log was found for the current site code.
Missing
Funnel telemetry
No product-view, add-to-cart, checkout-start, or purchase-success analytics implementation was found. Snipcart is present, but conversion telemetry is not.
Missing
KPI dashboard
No dashboard definition, reporting script, or weekly KPI artifact was found in repo.
Partial
SEO metadata hygiene
Canonical URLs and JSON-LD are present on many product pages, and sitemap artifacts exist. However, no pre-deploy metadata validator or deploy gate was found, so this remains manually maintained.
Missing
A/B testing and abandonment flows
No A/B testing framework, experiment flags, or cart-abandonment workflow implementation was found.
Partial
Shipping and returns reassurance
A dedicated shipping.html page exists and product pages often link to it, but the reassurance pattern is not yet standardized as a required template block across the catalog.
Missing
Cost, backup, continuity, governance
No function-cost reporting, bandwidth alerts, backup automation, restore drill record, operator handoff doc, risk register, or release-quality-score framework was found in the current repo.

30 Days: Stabilize And Instrument

Reliability

Hardening

Set uptime alerts for both domains and checkout endpoints.
Add synthetic tests for browse, add-to-cart, checkout session, and webhook receive.
Create incident runbook with rollback/deploy procedures.

Security

Baseline

Apply strict security headers (CSP, HSTS, X-Content-Type-Options, Referrer-Policy).
Rotate API secrets and document rotation schedule.
Run dependency audit and patch critical/high findings.

Measurement

Funnel Telemetry

Track events: product view, add to cart, checkout start, purchase success.
Stand up weekly KPI dashboard.
Define baseline conversion by source channel.

Deliverable	Owner	Target	KPI
Monitoring + synthetic tests live	Ops	Day 10	<5 min alert latency
Security headers and secret rotation complete	Engineering	Day 14	0 critical misconfigurations
Funnel dashboard published	Growth	Day 21	Weekly trend visibility

60 Days: Optimize Conversion + Catalog Operations

Conversion

Revenue Lift

Run A/B tests on top product pages (hero copy, trust block, CTA copy).
Implement cart-abandonment email flow.
Add clear shipping/returns reassurance in product templates.

Content Ops

Publishing QA

Build pre-deploy metadata check for all product pages.
Fail deploy if required tags/schema/canonical are invalid.
Auto-generate sitemap delta report per deploy.

Cost Control

Performance Budget

Set image optimization policy and cache TTL standards.
Track function cold starts and invocation costs.
Create monthly bandwidth budget alerting.

Deliverable	Owner	Target	KPI
First conversion A/B test completed	Growth	Day 45	+10% add-to-cart on variant
Automated SEO metadata gate in deploy workflow	Engineering	Day 50	0 regressions shipped
Bandwidth and function-cost reporting live	Ops	Day 60	Monthly variance under control

90 Days: Defensibility + Continuity

Search Moat

Compounding SEO

Publish supporting pages (FAQ, policy clarifiers, topical explainers).
Quarterly schema refresh and internal linking audits.
Track rank and index coverage changes by priority query set.

Resilience

Business Continuity

Automated backup schedule for site content and config.
Quarterly restore drill with measured RTO/RPO.
Operator handoff documentation for single-point risks.

Governance

Operating Rhythm

Set monthly roadmap review with go/no-go criteria.
Maintain risk register and mitigation owner per item.
Adopt release quality score per deploy.

Deliverable	Owner	Target	KPI
Search moat content + linking cycle complete	Content + SEO	Day 75	Index coverage and CTR trending up
Backup + restore drill completed	Ops	Day 82	RTO and RPO documented
Release quality score framework in use	Engineering	Day 90	Fewer post-deploy hotfixes

Weekly Checkpoint Template

Wins: What shipped and what moved KPIs.
Misses: Blockers, incidents, and delayed items.
Risk Review: Top 3 current risks and mitigation status.
Next Week: Highest-impact 3 tasks only.

Rule: If a task is delayed twice, either de-scope it or explicitly re-justify it.