Marketing work should be able to change, fail, and ship without putting the customer application at risk. Marketing Lab now lives at its own private domain and no longer shares Miracle's browser runtime, administration screen, database, migrations, AI cost ledger, or release matrix.
A real application boundary
- The complete campaign brief, six-draft generation flow, two recommendations, review queue, approval history, measured links, results dashboard, and AI metering now run in a standalone service.
- The Lab has its own PostgreSQL database, WorkOS application, owner-only session, Railway service, private GitHub repository, migration registry, health checks, tests, and versioned deployment identity.
- It reads a reviewed snapshot of public Miracle updates instead of reaching into Miracle customer data or the production database.
- Social publishing remains a deliberate owner action. The Lab does not hold X or LinkedIn credentials and does not publish automatically.
Miracle is smaller and safer
- The embedded Marketing Lab view, browser code, stylesheet, server routes, generation runtime, campaign tables, attribution reports, and owner controls have been removed from Miracle.
- A forward-only migration removes the retired empty campaign tables and refuses to run if any unexpected data exists.
- Miracle no longer loads or tests Marketing Lab screens during ordinary customer releases.
- The public API, OpenAPI document, MCP server, OAuth scopes, privacy inventory, and AI-processing documentation remain free of private marketing administration capabilities.
Only anonymous measurement crosses the line
- A short-lived Ed25519 ticket can hand three anonymous campaign identifiers from the Lab to Miracle through a hardened first-party cookie.
- Pricing, checkout, trial, activation, and paid facts return through a separately signed, content-free event channel.
- No email, WorkOS user id, Stripe identifier, task, note, journal entry, prompt, model response, access token, or customer content crosses this boundary.
- Measurement is bounded and fail-open. If Marketing Lab is unavailable, Miracle pricing, checkout, billing, and app startup continue normally.