What actually goes wrong

Paid post paywall renders below the fold on iOS Safari

The paywall block appears after the full post body on iOS Safari, so the whole article is readable for free.

Rapid submit creates duplicate records

Double-clicking the save button creates two records because the control is not disabled while the request is in flight.

Two-factor reset email never arrives on custom domains

Users on a company domain with a strict DMARC policy do not receive the 2FA reset email. Support had to reset manually.

Two-factor reset loops on some domains

The 2FA reset link returns to the login screen instead of completing, affecting users on domains with a strict mail policy.

Attachment upload fails above 25MB

Uploads over 25MB fail near completion with a generic error rather than being rejected up front with the limit stated.

Sorting differs between the list and the export

The exported file does not preserve the sort order shown on screen, so the two disagree when compared side by side.

CSV export times out on large accounts

Exporting more than about 50,000 rows returns a gateway timeout. Smaller exports complete normally.

Email notifications stop after an SSO change

Switching the workspace to SSO silently unsubscribes existing members from all notification email until they re-save preferences.

Audit log omits deletions

Created and updated events are recorded but deletions are not, which leaves a gap in the trail during a compliance review.

Filters reset when navigating back

Opening a record and pressing back clears every applied filter, so working through a filtered list means reapplying filters each time.

Email notifications stop after an SSO change

Switching the workspace to SSO silently unsubscribes existing members from all notification email until they re-save preferences.

Rapid submit creates duplicate records

Double-clicking the save button creates two records because the control is not disabled while the request is in flight.

Permissions do not apply to nested items

Restricting a parent container leaves items nested inside it readable by anyone with a direct link.

Bulk actions silently skip archived records

Selecting all and applying a bulk action reports success but quietly excludes archived records, with no indication in the result.

API responses omit rate-limit headers

There is no way to see remaining quota before being throttled, so clients can only back off after a 429.

Bulk actions silently skip archived records

Selecting all and applying a bulk action reports success but quietly excludes archived records, with no indication in the result.

Rapid submit creates duplicate records

Double-clicking the save button creates two records because the control is not disabled while the request is in flight.

Bulk actions silently skip archived records

Selecting all and applying a bulk action reports success but quietly excludes archived records, with no indication in the result.

Two-factor reset loops on some domains

The 2FA reset link returns to the login screen instead of completing, affecting users on domains with a strict mail policy.