https://shipreadyai.dev/learn/verify

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# What we cannot see, and say so

The nine items no check of a public address can verify, with how to check each one yourself.

- [Rollback and recovery](https://shipreadyai.dev/learn/verify/rollback.md): Whether you can put the previous version back, and how long that takes.
- [Error monitoring](https://shipreadyai.dev/learn/verify/error-monitoring.md): Whether a failure in production reaches a human rather than sitting in a log nobody opens.
- [Sign in and account flows](https://shipreadyai.dev/learn/verify/auth-flows.md): Whether sign in, password or code reset, and session expiry behave under real use.
- [Rate limiting and abuse controls](https://shipreadyai.dev/learn/verify/rate-limiting.md): Whether a script can hammer your forms, sign up loop, or paid endpoints without being slowed down.
- [Key rotation](https://shipreadyai.dev/learn/verify/secret-rotation.md): Whether you can replace a leaked key quickly and know everywhere it is used.
- [Payment handling](https://shipreadyai.dev/learn/verify/payments.md): Whether payment events are verified, replay safe, and matched to the right customer record.
- [Customer data handling](https://shipreadyai.dev/learn/verify/customer-data.md): Whether stored personal details are limited, deletable on request, and out of your logs.
- [AI feature controls](https://shipreadyai.dev/learn/verify/ai-features.md): Whether prompts, spend, and model output are bounded so one visitor cannot run up the bill.
- [Database row rules](https://shipreadyai.dev/learn/verify/backend-rules.md): Whether the row rules behind the app actually stop one signed in account reading another's rows.
- [Certificate expiry date](https://shipreadyai.dev/learn/verify/certificate-expiry.md): Whether the certificate is close to expiring. A normal request proves the certificate is valid right now, and the runtime this check uses cannot read the expiry date from that request.
- [One account reading another account's data](https://shipreadyai.dev/learn/verify/cross-user-access.md): Whether a signed in account can reach another account's records by changing an id. ShipReady does not create accounts, sign in, or call your functions, so this cannot be answered from outside.