Skip to main content

Early accessSign-in is running on Clerk development keys. Live DPO accounts need production Clerk keys — this is not a silent configuration.

System status →

System Status

Real-time health of ConsentSignals services

Some systems degraded
ConsentSignals API
Scanning & report API
Checking…
Database
Supabase Postgres (scan storage)
Checking…
Job queue
Redis / ARQ worker queue
Checking…
Web application
consentsignals.com frontend
Operational
Scan workers
Playwright scan pipeline
Checking…
Auth

Production sign-in must use Clerk live keys (pk_live_/ sk_live_). Development keys on this host are treated as early access, not a silent default.

Issues found / issues fixed

A skeptical buyer should see that we admit faults and close them. This log starts with the independent test cycle of 24–25 August 2026 (nine issues found, nine fixed) and the PDF leftover closed on 26 August.

  1. 1 · 24–25 Aug 2026

    Found. Same report said 0 reject-persistent findings in three places and 8 / 5 in others.

    Fixed. Relabeled Accept ∩ Reject hosts vs consent-sensitive findings; one helper owns both on-screen and PDF counts.

    Verified. Goldens: wikipedia.org = 0 findings; rte.ie = 5 consent-sensitive (8 overlap hosts).

  2. 2 · 24 Aug 2026

    Found. On-screen risk score rendered as 0 in near-invisible text on a white card.

    Fixed. Score uses the shared display rule in readable contrast.

    Verified. Completed report + PDF + verify pages share one half-up integer (68.5 → 69).

  3. 3 · 24 Aug 2026

    Found. Risk score shown as 68 / 68.5 / 69 across one report.

    Fixed. Half-up display rounding in report consistency; PDF generation fails on mismatch.

    Verified. Consistency tests fail the job if on-screen and PDF disagree.

  4. 4 · 24–26 Aug 2026

    Found. Consent Mode absent repeated “nothing found” four times, including empty dash-grids.

    Fixed. On-screen: one sentence. PDF: same card — no dash-row, no repeated bullet (Week 0).

    Verified. Audit-report template tests assert the absent state is a single line.

  5. 5 · 24 Aug 2026

    Found. Scan-progress elapsed timer started near 60 minutes on a scan that had just begun.

    Fixed. Timer starts at 0 and ticks in local elapsed time.

    Verified. Progress UI no longer treats created_at as elapsed.

  6. 6 · 24 Aug 2026

    Found. Homepage / methodology grammar: “a 8-session”.

    Fixed. “an 8-session” / shared CONSENT_MATRIX_SHORT.

    Verified. Sitewide copy constant.

  7. 7 · 24 Aug 2026

    Found. HMAC Key ID in the signed PDF was all zeros.

    Fixed. Reports emit a real key id.

    Verified. Sample PDF key id is non-zero.

  8. 8 · 24 Aug 2026

    Found. PDF “Regulatory Framework Mapping” was silently empty despite findings.

    Fixed. Explicit empty state when no RKB citations attach.

    Verified. PDF no longer ships a blank mapping section.

  9. 9 · 25 Aug 2026

    Found. Anonymous free-tier 429 looked like the site was broken — no on-screen feedback.

    Fixed. Signed-out second scan in a day shows a role=alert: free limit reached, sign in for more.

    Verified. Confirmed from a genuine signed-out session.

For security issues, see security.txt. For support, contact us.