[gothicscientist]

Deploys the static frontend to Cloudflare Pages and a full R-enabled API/queue runtime to Azure Consumption, backed by a separate Supabase project. The assistant accepts request-local OpenAI or Anthropic keys without persisting them. The final image verifies that cleanup has preserved working R/ADMIXTOOLS tools.

Adds a spending-limit guard, bounded event-driven workers, a least-privilege queue scaler, Supabase function/extension hardening, immutable source revision in report provenance, deployment instructions, and a synthetic live verifier. Browser validation also found and fixed QC treating a coverage fraction as a SNP count, plus long provenance text overflowing the report layout.

Validation: production web build, typecheck, and 53 web tests passed. Linux image suite passed 570 tests with one expected skip; its 700k-row timing assertion failed under concurrent build load and passed in isolation. Live Azure checks passed all six analysis types, all four consumer-format fixtures, ZIP/gzip, VCF, cancellation, hashed reports, comparisons, deletion, and owner isolation. Browser tests covered raw upload, queued PCA, axis selection, workspace persistence, HTML/JSON downloads, and mobile assistant layout. Supabase security advisor returned no lints.

The requested https://stratalab.cc domain is active with SSL enabled, loads the reference library and guest workspace, and returns HTTPS 200. The www redirect preserves paths and queries. api.stratalab.cc health is healthy. A real OpenAI tool call passed: population search and nearest-population tools completed, all 10 distances passed grounding checks, and persisted responses contain no credential pattern.

Remaining validation: the owner must submit the new sending-only Resend credential in the prepared Supabase SMTP form, then complete real inbox/magic-link sign-in testing. Hosting retains the protected student-credit limit and free service plans; reference-panel coverage limits remain visible.