What does the 48-hour audit actually cover?

Six sections: (1) repo state and commit history quality, (2) authentication architecture, (3) data layer including RLS and migrations, (4) money handling and webhook safety, (5) secret hygiene, (6) observability. We score each section red/amber/green and call out the three highest-priority fixes. The report fits on one page so you can forward it to your co-founder or investor.