[Roadmap P0] Smoke test Release Day submissions end to end

[WalksWithASwagger]

Context

Release Day submissions are now implemented as a Vercel API path, but the May 7 roadmap marks the full browser to Notion moderation path as not yet proven.

Roadmap: https://github.com/WalksWithASwagger/cmvan-keynote/blob/main/docs/ROADMAP-2026-05-07.md#wave-1---release-day-live-operations

Scope

• Confirm Vercel env vars NOTION_TOKEN and NOTION_DB_ID in the relevant environments.
• Submit a valid item from /release-day in preview or production.
• Confirm a Notion row is created with Published: false and pending status.
• Test invalid name, URL, and what fields.
• Capture any production-only CORS, CSP, or error handling gaps.

Acceptance

• A valid browser submission creates a moderated Notion row.
• Invalid cases fail with clear user-visible behavior.
• The exact smoke-test date, environment, and result are documented in the issue or repo docs.

[WalksWithASwagger]

Status as of 2026-05-13 — code/runbook side is done, only the live run is outstanding.

Shipped:

• scripts/smoke-release-day.mjs (run via npm run smoke:release-day) covers, against a mocked Notion fetch: CORS preflight, GET with missing backend, POST with missing backend, all four validation errors (empty name/url/what, non-http(s) url), and a successful POST payload assertion (Published: false, Status: pending, IP from x-forwarded-for).
• docs/RELEASE-DAY-SUBMISSIONS-SMOKE-2026-05-08.md documents the local result and the operator curl runbook.
• docs/RELEASE-DAY-OPERATIONS.md lists the env vars (NOTION_TOKEN, NOTION_DB_ID) and the rollback path.

Remaining (human, blocks close):

1. Confirm NOTION_TOKEN + NOTION_DB_ID are set in the target Vercel env (preview and/or production).
2. Submit one valid test row from /release-day (or via the curl in docs/RELEASE-DAY-OPERATIONS.md).
3. Verify the Notion row is created with Published: false + Status: pending.
4. Test invalid name / url / what cases against the same env.
5. Record the date, env, and result in this issue and/or docs/RELEASE-DAY-SUBMISSIONS-SMOKE-2026-05-08.md, then close.

Leaving this issue open for that human run.

---

Generated by Claude Code

[WalksWithASwagger]

Documentation reliability closeout PR: #146

Live production smoke on 2026-05-25:

• GET https://www.punkrockai.com/api/submissions returned HTTP 200 with {"submissions":[]}.
• Invalid POST with missing name returned HTTP 400 with {"error":"name required"}.
• Valid POST reached Notion but failed with HTTP 404 because database 8b726851-21ce-499f-bd0b-4cceee9a0d52 is not accessible to the configured integration.

This issue should stay open. Next unblock: share the Notion database with the configured integration, redeploy if needed, rerun valid POST, and record the returned Notion page id.