https://shipreadyai.dev/glossary > Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt # Glossary 44 terms from a Launch Risk Check result, in plain English. - [Anon key](https://shipreadyai.dev/glossary/anon-key.md): The public browser key. Safe to publish, useless without rules behind it. - [Batch prompt](https://shipreadyai.dev/glossary/batch-prompt.md): One instruction that fixes several findings in a single pass. - [Claim token](https://shipreadyai.dev/glossary/claim-token.md): The unguessable string that lets you attach an anonymous result to your account later. - [Content-Security-Policy](https://shipreadyai.dev/glossary/content-security-policy.md): The header that tells the browser which code it is allowed to run. - [Cookie flags](https://shipreadyai.dev/glossary/cookie-flags.md): The three settings that decide how safely a cookie travels. - [Cost cap](https://shipreadyai.dev/glossary/cost-cap.md): The ceiling that stops one visitor spending your month's budget in an hour. - [Could not check](https://shipreadyai.dev/glossary/could-not-check.md): The request failed, so there is no result for that item. - [Cross origin rules](https://shipreadyai.dev/glossary/cross-origin-rules.md): The header that decides which other sites may read your responses. - [Declared](https://shipreadyai.dev/glossary/declared.md): Something you told us, recorded as your statement rather than our finding. - [Detected](https://shipreadyai.dev/glossary/detected.md): Something the check worked out about your app without being told. - [DMARC](https://shipreadyai.dev/glossary/dmarc.md): The record that tells receiving servers what to do when mail fails your checks. - [Domain expiry](https://shipreadyai.dev/glossary/domain-expiry.md): The date your domain registration runs out, published in the registry. - [Entitlement](https://shipreadyai.dev/glossary/entitlement.md): The record that says this account paid for this thing. - [Evidence](https://shipreadyai.dev/glossary/evidence.md): The line of raw observation behind a finding. - [Exposed path](https://shipreadyai.dev/glossary/exposed-path.md): An address that answers when it should not. - [Fingerprint](https://shipreadyai.dev/glossary/fingerprint.md): What your app quietly tells the internet about how it was built. - [Fix prompt](https://shipreadyai.dev/glossary/fix-prompt.md): A ready instruction for the tool that built your app. - [frame-ancestors](https://shipreadyai.dev/glossary/frame-ancestors.md): The rule that stops another site putting your app inside an invisible frame. - [Hardening Sprint](https://shipreadyai.dev/glossary/hardening-sprint.md): The $1,750 engagement that takes the top items from needs fix to fixed and re-verified. - [HSTS](https://shipreadyai.dev/glossary/hsts.md): The header that tells browsers to never speak to your site over plain HTTP again. - [Idempotency](https://shipreadyai.dev/glossary/idempotency.md): Doing the same thing twice has the same effect as doing it once. - [Launch Review](https://shipreadyai.dev/glossary/launch-review.md): The $199 review where a named person looks at what a URL cannot see. - [Launch Risk Statement](https://shipreadyai.dev/glossary/launch-risk-statement.md): A dated page saying what was observed, what was declared, and what nobody verified. - [Mixed content](https://shipreadyai.dev/glossary/mixed-content.md): A secure page loading something over plain HTTP. - [Not verified](https://shipreadyai.dev/glossary/not-verified.md): Named items nobody checked, listed rather than quietly dropped. - [Observed](https://shipreadyai.dev/glossary/observed.md): Something a check actually read from your published app, with the evidence attached. - [Open signup](https://shipreadyai.dev/glossary/open-signup.md): Whether anyone can create an account, and whether the address has to be proved. - [Prompt injection](https://shipreadyai.dev/glossary/prompt-injection.md): Text your app feeds to a model that the model treats as instructions. - [Publishable key](https://shipreadyai.dev/glossary/publishable-key.md): The newer name for a public client key. Same rule: public by design, not a permission. - [Rate limit](https://shipreadyai.dev/glossary/rate-limit.md): The rule that slows down whoever is asking too often. - [Release Assurance](https://shipreadyai.dev/glossary/release-assurance.md): The monthly option that keeps a current statement for teams shipping every week. - [Release Gate](https://shipreadyai.dev/glossary/release-gate.md): The $49 package that hands you the checklist and the guardrails to fix things yourself. - [Rollback](https://shipreadyai.dev/glossary/rollback.md): Putting the previous version back, quickly, when the new one is wrong. - [Row level security](https://shipreadyai.dev/glossary/row-level-security.md): The rule that decides which rows of a table an account may read or change. - [Security definer](https://shipreadyai.dev/glossary/security-definer.md): A database function that runs with its author's permissions rather than the caller's. - [Service role key](https://shipreadyai.dev/glossary/service-role-key.md): The key that ignores every access rule. It belongs on a server and nowhere else. - [Slopsquatting](https://shipreadyai.dev/glossary/slopsquatting.md): Registering the package names AI tools invent, and waiting. - [Source map](https://shipreadyai.dev/glossary/source-map.md): The file that turns your shipped bundle back into readable source. - [SPF](https://shipreadyai.dev/glossary/spf.md): The DNS record naming who is allowed to send email as your domain. - [Staleness](https://shipreadyai.dev/glossary/staleness.md): How out of date an observation is, stated rather than hidden. - [Storage bucket](https://shipreadyai.dev/glossary/storage-bucket.md): The place uploaded files live, and the setting that decides who can read them. - [Tenant isolation](https://shipreadyai.dev/glossary/tenant-isolation.md): One customer's data staying entirely out of another customer's account. - [Trust Center](https://shipreadyai.dev/glossary/trust-center.md): A published page that answers the security questions buyers ask. - [Webhook signature](https://shipreadyai.dev/glossary/webhook-signature.md): Proof that the message really came from the service that claims to have sent it.