# Insights authority status — owner action pack

**Board:** [92-WAVE70-NON-DOMAIN-P1.md](./92-WAVE70-NON-DOMAIN-P1.md) · [91-WAVE69-APEX-HTTPS-REGISTRAR.md](./91-WAVE69-APEX-HTTPS-REGISTRAR.md) · [90-WAVE68-AUDIT-P1-CLOSURE.md](./90-WAVE68-AUDIT-P1-CLOSURE.md) · [89-WAVE67-OWNER-HTML-CHECKLIST.md](./89-WAVE67-OWNER-HTML-CHECKLIST.md)  
**DNS Stage 1:** [90-DNS-STAGE1-CLOUDFLARE-ZONE.md](./90-DNS-STAGE1-CLOUDFLARE-ZONE.md) · zone export [92-WAVE70-DNS-ZONE-EXPORT.json](./92-WAVE70-DNS-ZONE-EXPORT.json) · BIND [`../dns/zatra.co.stage1.bind`](../dns/zatra.co.stage1.bind)  
**GTM detail:** [84-WAVE62-AI-REFERRAL-GTM-OWNER.md](./84-WAVE62-AI-REFERRAL-GTM-OWNER.md)  
**HTML surface (preferred):** [/tools/ai-referral-check/#owner-next](https://www.zatra.co/tools/ai-referral-check/#owner-next)

## Authority rails (code complete)

| Rail | Count |
|---|---|
| Live posts | 62 |
| FAQ / evidence / speakable / focus | 62/62 |
| HowTo | 45/62 (17 soft agri/opportunity/reviews skipped on purpose) |
| Next-step rails | 62/62 |
| VERIFY_REQUIRED | 0 |
| AI Check tool | Live — `/tools/ai-referral-check/` (+ HTML **Do these 4 things next**) |
| AI events | **Mode A** (dataLayer + direct `gtag` via `GA4_DIRECT_EVENTS`) |
| Caching | **Wave 68 bake** — HTML short TTL; assets immutable; deploy to clear live `no-store` |
| Automation | **Paused** on Insights HTML; Wave 68 = cache/NAP/reviews honesty only |

---

## Do these 3 things next (non-domain)

Domain / Wix→Cloudflare NS transfer is **owned by other agents** — use [DNS zone export](./92-WAVE70-DNS-ZONE-EXPORT.json). This chat will not touch apex DNS.

1. **Confirm mode A in GA4 DebugView** (~5 min)  
   Private window → [AI Check with ChatGPT UTM](https://www.zatra.co/tools/ai-referral-check/?utm_source=chatgpt.com) → Accept cookies if prompted → page shows **AI referral WOULD fire** with `session_already_sent: false`.  
   In GA4 DebugView for `G-0THQS9MDZS`, confirm **exactly one** `ai_referral` and **exactly one** `generative_search_landing`. Reload same session → neither fires again.  
   Also spot-check: `whatsapp_click`, `phone_click`, `form_start`, `generate_lead`, `pricing_view` — one route only.

2. **Optional — cut over to GTM mode B** (~15 min + one deploy)  
   Only when ready. Follow [docs/84](./84-WAVE62-AI-REFERRAL-GTM-OWNER.md): draft GTM Event tags → **remove** AI keys from `GA4_DIRECT_EVENTS` and deploy → **then** publish GTM. Never dual-send.

3. **GBP / reviews honesty**  
   Refresh `assets/data/reviews.json` from the live Google profile **or** embed a verified Trustindex/Google widget. Do not invent AggregateRating schema from the manual snapshot. Spot-check fees on [pricing](https://www.zatra.co/pricing/#fee-calculator).

---

## Wave 69 — apex HTTPS (done)

| Check | Live |
|---|---|
| `https://zatra.co/` | **301 → `https://www.zatra.co/`** (Let’s Encrypt on Fly redirector) |
| Path / query | Preserved (`/insights`, `/pricing/?utm_…`) |
| `https://www.zatra.co/` | 200 Pages (`wave68cache1`) |
| MX / www CNAME | Intact (Google MX · `www` → `zatra-www.pages.dev`) |

Interim apex A/AAAA → `from-root-to-www` Fly IPs via Wix DNS. After NetSol recovery, optional NS → Cloudflare (`cruz`/`duke`) then Pages-native apex; remove Fly A/AAAA. Detail: [docs/91](./91-WAVE69-APEX-HTTPS-REGISTRAR.md).

---

## DNS Stage 1 (Cloudflare zone prep) — incomplete (import failed)

| Item | Status |
|---|---|
| Live DNS / Wix zone inventory | **Done** (Wix API + dig) |
| Registrar | **Network Solutions** (not Wix) — Stage 2b = NetSol unlock + EPP, not Wix “Transfer away” |
| CF zone `zatra.co` | Exists, **pending** (`cruz`/`duke`); NS still Wix |
| CF zone content (`dig @cruz`) | **Partial/stale**: Match MX/SPF/DMARC/s1/s2/wix-origin; **Mismatch** Pepyaka apex A + www→cdn1; **Missing** 21 (AAAA, DKIM TXT, Ascend, sg, languages…) |
| CF DNS records import | **FAIL** — Wrangler OAuth auth error on `/dns_records` + import; no local API token |
| Wix Studio Domains | Apex Wix “FAILED” propagation is **expected** — do **not** Try Again |
| Stage 2 (NS / transfer) | **Blocked** — no NS flip, no unlock/EPP started |

**Owner next:** Cloudflare DNS → replace stale Pepyaka/`cdn1` www → import [`zatra.co.stage1.bind`](../dns/zatra.co.stage1.bind) (www Proxied; rest DNS-only) → screenshot → “CF DNS imported”. Or grant Edit zone DNS API token. Detail: [docs/90-DNS-STAGE1](./90-DNS-STAGE1-CLOUDFLARE-ZONE.md).

---

## Explicitly paused (do not ask agent to “continue” schema)

- Soft HowTo expansion (17 posts)
- More FAQ/evidence/speakable/rails HTML polish
- GTM publish / removing `GA4_DIRECT_EVENTS` without owner-led mode B
- Homepage IA / CTA rewrite while Wave 24 consent CSS dirt is unsettled
- Git commits unless requested

**Wave 70 note:** Caching live on www. Apex interim 301 live. DNS zone exported for transfer agents. Legacy post WhatsApp NAP cleaned in bake (needs deploy). Owner gates left: DebugView QA, optional GTM Mode B, GBP/Trustindex.