The longer story, if you want it
The brief. A master PRD; every feature, status and rule comes from it. Twelve milestones, each on its own branch, shown live and approved before the next. In a trust-poor category, verification outranks cosmetics.
The money. Ten percent on top for the buyer, ten from the manufacturer's payout, both itemised. No price lock: the manufacturer's live rate wins at the moment of order.
The day it went dark. The registrar's panel silently overwrote DNS for a domain with a website attached. Later a domain-level redirect that ran before the app's own routing looped the apex. Both are written down as traps now.
"I bought getpharm.in." One repo, one project, one database. The design system was measured first: 1,788 role-token usages against 26 brand-named, so the second palette is a block of CSS and the marketplace changed domain without moving a file.
Found by accident. The public schema was writable by anyone with the anon key: thirty-five tables, full grants, no row policies. The data API was switched off; row security is on everywhere.
Nirmalkaya is a venture of the same firm, and has its own board.