Concrete, verified breakages found in the audit (Settings contract mismatches, GDPR delete, retention, experiments, rate limiting).
Tracks (6):
- #99 — Bug: Alerts create fails — Settings form missing required name/condition
- #100 — Bug: Email Reports create fails — field name mismatch (frequency vs schedule)
- #101 — Bug: GDPR delete fails — method mismatch (UI DELETE vs route POST) + missing visitorId
- #102 — Bug: Retention is read-only in UI despite a working PUT endpoint
- #103 — Experiments: add statistical significance to A/B results
- #104 — API keys: enforce per-key rate limiting (currently a stub)
Part of the Fathom + Sentry product backlog. See #44 for the original roadmap.