Description
We are building the private backend foundation for a WordPress-based AI video production service. The public website, customer order form, uploads, checkout, and payment flow are handled separately in WordPress, Gravity Forms, and WooCommerce. This backend begins after payment, when WordPress sends a signed paid-order webhook to the private backend. This is Phase 1 only. This phase does not include Grok, OpenAI, ElevenLabs, automatic Director Module automation, AI/video generation, final assembly, final video delivery, or customer portal features. The goal is to build the secure private foundation that real paid customer orders will pass through before production. We need a backend that can: receive a paid order from WordPress verify the order really came from our site reject forged, replayed, duplicate, or invalid requests validate the payload field by field store order/customer/script/selection data in structured records rehost customer uploads into private storage create production jobs and script segment records provide an operator/admin view with permitted non-secret fields only protect private/proprietary production content from public, WordPress, and operator access prepare clean connection points for later AI/video-generation modules Core requirements: Backend structure Separate backend service outside WordPress Own backend database Own private file storage Backend must not be a WordPress plugin WordPress should not query the private backend directly WordPress sends a