Risk Register

32 open findings

Defects, silent failures, compliance gaps and dead surface found while tracing every feature through the code. Each finding links to the features it affects; each affected feature shows it at the top of its note.

pie showData title Findings by severity
    "High" : 2
    "Medium" : 14
    "Low" : 12
    "Info" : 4

pie showData title Findings by category
    "bug" : 9
    "silent-failure" : 7
    "i18n" : 4
    "compliance" : 2
    "resilience" : 2
    "privacy" : 1
    "configuration" : 1
    "gap" : 1
    "accessibility" : 1
    "discoverability" : 1
    "copy" : 1
    "dead-code" : 1
    "consistency" : 1

🔴 High

ID	Finding	Category	Features
R01	Unsubscribe notice is fire-and-forget on customer deletion	compliance	Customer deletion with unsubscribe notice
R02	Rejected annual statement can leave the store uninformed	silent-failure	Annual sales statement

🟠 Medium

ID	Finding	Category	Features
R03	Missing unsubscribe link only warns	compliance	Email campaign builder (wizard, A-B test, scheduling)
R04	Export spinner never clears on failure	silent-failure	Customer CSV export with column picker, Data export engine (email delivery)
R05	AI filter prompt is not URL-encoded	bug	AI natural-language customer filter
R06	AI filter sends prompt text to Sentry	privacy	AI natural-language customer filter, Product analytics & error monitoring
R07	[[R07 · campaign canDelete compares a role to a status|campaign#canDelete compares a role to a status]]	bug	Activity list & duplication, Role & module permission layer
R08	Error handler crashes on payloads without status	bug	Activity editor (loyalty mechanics, rules & targeting), Proposal editor (content, coupon, push, AI images), Error presentation & API error mapping
R09	Unknown receipt reject reason breaks the moderation panel	bug	Receipt verification queue
R10	Activity amount validation throws without a base rule	bug	Activity editor (loyalty mechanics, rules & targeting)
R11	Dashboard component JSON is parsed unguarded	bug	Dashboard configuration
R12	Auto-logout silently disabled when minutes are unset	configuration	Idle auto-logout
R13	Missing centre cookie produces unscoped queries	bug	Staff login, Centre switching & multi-centre scoping
R14	Secondary-language content is not enforced	i18n	Multi-language content authoring, Proposal editor (content, coupon, push, AI images), Activity editor (loyalty mechanics, rules & targeting)
R15	19 translation keys used by the code do not exist	i18n	Multicentre proposals, Server incidents, SAFT-E - IntelliSales import, Intranet communications (threads, confirmations, authorisations) …
R32	Runtime config failure is a blank page	resilience	Runtime environment & white-label boot

🔵 Low

ID	Finding	Category	Features
R16	Segment refresh and save hide failures	silent-failure	Segment list, refresh & export, Segment builder with automatic tag actions, Filter & segment builder component
R17	CLI gives no feedback on network failure	silent-failure	Server command runner (CLI)
R18	Idle monitor cannot remove its listeners	bug	Idle auto-logout
R19	Froged identify flag never set	bug	In-app help & support chat (Froged)
R20	Portuguese string in the English bundle	i18n	CSV import engine, Back-office interface language
R21	Required-extra errors are untranslated	i18n	Store create & edit, Proposal editor (content, coupon, push, AI images), Extra attributes
R22	Push image size failure is swallowed	silent-failure	Push notification editor (scheduling, geofencing, deep links)
R23	Channels cannot be edited	gap	Channels
R24	Influence-zone load errors look like an empty list	silent-failure	Influence zones
R25	Accessibility statement has no PDF fallback	accessibility	Accessibility statement
R26	Realtime updates have no reconnect	resilience	Realtime updates (Pusher)
R27	Desktop receipts query has no catch	silent-failure	Desktop (home dashboard)

⚪ Info

ID	Finding	Category	Features
R28	Annual sales statement missing from the menu	discoverability	Annual sales statement
R29	Activity duplicate uses proposal wording	copy	Activity list & duplication
R30	Dormant and dead surface	dead-code	Customer action log (dormant)
R31	Intranet files accept an owner role the UI never offers	consistency	Files management