Engineering
- MCP key only in server env (no
VITE_/ client env) - Browser never calls Daven APIs with the key
- App works on HTTPS (or localhost for local checks)
- Generation flow: quote → create → poll → preview/download
- Waiting and error UI are clear (no crashes)
Submit
- Playground checklist passed
- Submit to Daven completed
Security
- No MCP / Daven secrets in the frontend
- No full secrets in logs or error UI
Classroom UX
- EN / KO (or target locales) labels
- AI never overwrites student text without an explicit action
- Preview / download / regenerate paths
- Usable on laptop and phone