Glossary
Launch Risk Statement
A dated page saying what was observed, what was declared, and what nobody verified.
What it means
A Launch Risk Statement is the artefact ShipReady produces. It is a dated page with three lists on it. Observed is what a check read from outside, each line carrying its evidence. Declared is what you said about your own app. Not verified is what nobody looked at, named rather than omitted.
It does not carry a score, a badge or a grade. Scores invite comparison between things that are not comparable, and badges get screenshotted long after they stop being true. A date and a list survive both problems.
A free check produces the first two lists and names the third. A Launch Review turns items from the third list into a written verdict from a named reviewer. The statement changes because a person looked, not because the wording improved.
Incidents where it mattered
No incident in the library maps to this one yet.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026