Audit an Existing Node.js/Firebase IVR Codebase — Paid Diagnostic Only

I have an existing IVR-based audio-response collection platform, partially built — Node.js backend, Firebase/Firestore, React frontend, telephony via Exotel. Core auth and part of the campaign-creation flow exist; the outbound calling logic itself (call-flow endpoint, batch launch, recording ingest) is incomplete. I need a developer to audit the existing codebase against a specification I'll share after hiring, and deliver a written report: what's actually built, a percentage-complete estimate, a clear gap list, and any security concerns (exposed secrets, missing auth checks). This is a paid diagnostic only — not a build