Skip to main content

Customer Portal — Service Risk Register

Status: populated Owner: Product Engineering (Frontend) Last updated: 2026-04-18

1. Risk Register

IDRiskLikelihoodImpactMitigationOwner
CUST-R01Firebase Auth outage blocks all customer loginsLowCriticalMonitor Firebase status; plan email magic link fallback for v2Platform Eng
CUST-R02JWT secret rotation causes active session invalidationMediumHighZero-downtime key rotation via JWKS with next key pre-loaded; sessions refresh transparentlyAuth Service team
CUST-R03Raw API key leaked via browser console loggingLowCriticalESLint rule to block console.log on objects containing rawKey; no-store headers on responsesSecurity
CUST-R04XSS via user-controlled message body content rendered in logMediumHighAll user content HTML-escaped; DOMPurify for any rich content; CSP nonce-based script policyFrontend Eng
CUST-R05Kong gateway degradation causes blank portalMediumHighError boundaries on all data-fetching sections; meaningful degraded-state UIFrontend Eng
CUST-R06Large message log queries timeoutMediumMediumPagination enforced (max 100 per page); server component timeout set to 8s; show partial results with warningFrontend Eng
CUST-R07Next.js breaking change in minor updateLowMediumLock Next.js minor version in package.json; upgrade only on explicit sprint taskFrontend Eng
CUST-R08Customer portal serves stale billing dataLowLowCache-Control: no-store on all billing pages; no ISR on financial dataFrontend Eng

2. Accepted Risks

IDRiskReason Accepted
CUST-R09No offline / PWA supportNot required for MVP; browser network assumed available
CUST-R10Single-region deploymentCost/complexity trade-off for MVP; multi-region in roadmap