Flashback Challenges Technical Debt

Small persistent list of known product/technical compromises accepted for MVP or near-term delivery.

ID	Area	Debt / compromise	Status	Intended follow-up
CH-DEBT-001	Challenge access control	Community Leader MVP uses password-protected challenges as the only non-public access mode. This is soft access control, not strong private access: passwords can be forwarded, cannot be revoked per user, and provide limited auditability.	Accepted for MVP	Replace or supplement with stronger access models such as invite links, allowlists, Clerk org/group access, or host approval flow.