Risk Register
Risk Register
Section titled “Risk Register”Auto-generated from §6 of the master design. Source of truth lives at docs/superpowers/specs/2026-05-23-nowyourlink-master-design.md.
| Risk | Likelihood | Impact | Mitigation |
|---|---|---|---|
| 30 concurrent auctions overwhelm bidder UX | Mid | Mid | Calendar list with “recommended” filter; aggregated state at server |
| Lazy-KYC saved card expires before saga capture | Mid | Mid | Pre-close PM health-check; re-Setup if last_used > 90d; mid-saga SCA branch |
| Cascade SLA: runner-up also takes 24h → ad gap | Mid | High | Short 6h payment window before cascade; pre-warm runner-up SetupIntent confirmation in last hour; house-ad fallback always armed |
| 3-strike enforcement vs DSGVO Art. 17 | Low | High | Hashed-VAT-ID ban-list survives account deletion (legitimate-interest basis); user-data anonymised, strike row retained |
| Workflows is a newer primitive | Low | Mid | Mirror saga state in D1 for read-side observability + degraded-mode runbook |
| SetupIntent SCA challenge mid-first-bid | Mid | Mid | Inline 3DS during first-bid; saved card off-session for subsequent saga capture; surface requires_action properly |
| Conversion pixel ITP/CORS blocked | Mid | Low | First-party cdn.nowyourlink.com; no third-party cookies; anonymized hash visitor_id |
| Admin moderation backlog blocks Phase 1 | High (early) | High | Pre-loaded house-ad pool; 24h moderation SLA; auto-filter handles obvious cases |
| Stripe Invoicing limited for EU reverse-charge nuances | Mid | Mid | Custom invoice PDF generator queued as Phase 2 fallback; document Stripe Invoicing constraints in legal spec |
| WS DO costs creep at high traffic | Low at MVP | Mid | Hibernation API enabled; broadcast batching; cost-projection runbook |