Active, not invasive.

Prodward orchestrates your production lifecycle by reading what exists, creating what's missing, and configuring what's drifting.

It never deletes resources, never modifies billing, never requests admin scope. We sit in the second seat, not the cockpit.

READCREATECONFIGURE

NEVER DELETENEVER MODIFY BILLINGNEVER REQUEST ADMIN

01 / Allowed & forbidden

READProject structure · environment variables · deployment history · usage metrics

CREATEBranches · preview deployments · staging databases · cache instances

CONFIGUREBuild settings · alert thresholds · branch protection · cost ceilings

NEVERDelete · billing modify · admin transfer · API key rotation · production data writes you didn't ask for

02 / Scope matrix · 12 vendors

every scope · every vendor

Vendor	Category	Scopes requested
GitHub Source hosting, pull requests, and CI checks. affiliate	Source Control	`read:useruser:emailread:repowrite:repo_hookwrite:checkwrite:pull_request`
Vercel Frontend hosting with edge functions and previews. affiliate	Hosting	`read:projectswrite:projectsread:deploymentswrite:deploymentsread:envwrite:envread:domains`
Supabase Postgres database, auth, and storage. affiliate	Database	`read:projectscreate:projectsread:db_keysread:functionswrite:functions`
Neon Serverless Postgres with branching — instant databases. affiliate	Database	`read:projectswrite:projectsread:connection_uri`
Upstash Serverless Redis and Kafka over HTTP. affiliate	Cache	`read:databasescreate:databasesread:keysread:teams`
Cloudflare R2 S3-compatible object storage at Cloudflare edge — zero egress fees. affiliate	Database	`Workers R2 Storage:EditAccount Settings:Read`
Sentry Error tracking with stack traces and breadcrumbs. affiliate	Observability	`read:projectwrite:projectread:eventevent:writeread:releasewrite:release`
Resend Transactional email API for developers. affiliate	Email	`read:domainswrite:domainssend:emailsread:api_keys`
PostHog Product analytics, session replay, and feature flags. affiliate	Analytics	`read:projectread:event_definitionswrite:event_definitionsread:insightswrite:insightsread:feature_flagswrite:feature_flags`
OpenAI GPT models, embeddings, and fine-tuning. affiliate	AI	`read:usageread:api_keysread:modelswrite:fine_tunesread:fine_tunes`
Anthropic Claude models for chat, tool use, and long context. affiliate	AI	`read:usageread:api_keysread:modelsread:workspaces`
Stripe Payments, subscriptions, and checkout sessions. affiliate	Payment	`read:customersread:chargesread:subscriptionsread:productsread:priceswrite:checkout_sessions`

GitHub
Source hosting, pull requests, and CI checks.
affiliate
Source Control
read:useruser:emailread:repowrite:repo_hookwrite:checkwrite:pull_request
Vercel
Frontend hosting with edge functions and previews.
affiliate
Hosting
read:projectswrite:projectsread:deploymentswrite:deploymentsread:envwrite:envread:domains
Supabase
Postgres database, auth, and storage.
affiliate
Database
read:projectscreate:projectsread:db_keysread:functionswrite:functions
Neon
Serverless Postgres with branching — instant databases.
affiliate
Database
read:projectswrite:projectsread:connection_uri
Upstash
Serverless Redis and Kafka over HTTP.
affiliate
Cache
read:databasescreate:databasesread:keysread:teams
Cloudflare R2
S3-compatible object storage at Cloudflare edge — zero egress fees.
affiliate
Database
Workers R2 Storage:EditAccount Settings:Read
Sentry
Error tracking with stack traces and breadcrumbs.
affiliate
Observability
read:projectwrite:projectread:eventevent:writeread:releasewrite:release
Resend
Transactional email API for developers.
affiliate
Email
read:domainswrite:domainssend:emailsread:api_keys
PostHog
Product analytics, session replay, and feature flags.
affiliate
Analytics
read:projectread:event_definitionswrite:event_definitionsread:insightswrite:insightsread:feature_flagswrite:feature_flags
OpenAI
GPT models, embeddings, and fine-tuning.
affiliate
AI
read:usageread:api_keysread:modelswrite:fine_tunesread:fine_tunes
Anthropic
Claude models for chat, tool use, and long context.
affiliate
AI
read:usageread:api_keysread:modelsread:workspaces
Stripe
Payments, subscriptions, and checkout sessions.
affiliate
Payment
read:customersread:chargesread:subscriptionsread:productsread:priceswrite:checkout_sessions

03 / Why this matters

Vibecoded apps break in production.

Junior LLM-generated code doesn't know prod hygiene — no rollback path, no cost ceiling, no env separation. Prodward backfills the senior judgment without touching the keyboard you sit at.

But you don't trust me with delete.

Right. So we wrote it out of the API surface. Nothing in our codebase can delete your stuff. Read the source.

Audit trail, immutable.

Every action Prodward takes lands in audit_events. Service-role only; even our own admins can't tamper with it.

v0.1 · phase-a · the only orchestrator that explicitly cannot fire you← Sign in