Area: Admin deep-dive (commerce/config) (audit p15b) · Surface: /admin/editorial, /admin/site-pages (AdminEditorialController, AdminSitePageController) · Dimension: competitor-gap · Severity: minor
Every CMS and the content tooling in Circle/Skool supports scheduling a post to go live at a future time and previewing a draft before it publishes. Our editorial guides/comparisons and the editable About page publish the instant Save is pressed, with no scheduled-publish and no 'preview as it will look' step — so a content team cannot stage a launch post or review copy on the real template before it goes public.
Evidence
AdminEditorialController::store/update (AdminEditorialController.php:83-172) upserts immediately live; grep 'publish_at|scheduled|publish_date' over EditorialContent.php returned nothing. Content is live the instant it is saved (redirect goes straight to the public URL, line 116). AdminSitePageController::update (AdminSitePageController.php:73-112) saves straight to the live page with no draft/preview step.
Suggested fix. Add a status (draft/scheduled/published) + publish_at column to editorial_content and site_pages, gate the public reader on status='published' AND publish_at<=NOW(), and add a tokenized preview URL so admins can view a draft on the real template.
Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus