What gets built, in order

Because it makes every valuation on the site better at once.

The valuation runs in three stages: work out what the thing is, look up what comparable ones sold for, turn that into a range. The middle stage has no feed connected, so today a range comes from what the model already knows about a market. Connecting it narrows every band and lets confidence rise above medium. Nothing else on this list changes as many screens.

Because it removes the last reason a swap fails to happen.

Six people in one place have far more ways of matching up than two people do. It is the feature most likely to make somebody's first swap succeed rather than stall, and there is no code behind it today.

Because arranging where to meet is where two people give up and move to another app.

What exists is four fixed kinds of place with a sentence written for each. What this builds is a places feed — open now, staffed, busy at this hour, near transit — charged per lookup. It never calls a place safe; it states what is true and lets people judge.

Because there is no way to email anybody today, and that shows.

No mail server means no self-service password reset, no reply when you report something, and no notification when somebody offers for your item. An administrator can reset a password by hand and that is the whole of it.

Because seven days of backups currently sit on the machine they protect.

Nightly backups run, are integrity-checked, and have been restored from — a real file was deleted and came back byte-identical. The copies are all in one place. Losing the machine would lose the accounts, the items, the photographs and every backup of them at the same moment.