Field guide
Does sign-up, sign-in, role handling, and recovery work outside the happy path?
Would you trust entitlement changes, payment failures, and webhook weirdness under pressure?
Can someone besides the original builder safely explain and ship the system?
If several of these feel shaky, you are probably not looking at a dramatic rewrite yet. You are looking at a missing diagnosis, missing guardrails, and missing confidence in the launch-critical path.