Known limitations
A dated record of material limits that are supported by source evidence. It is not a deployment attestation, legal advice, or a substitute for your own evaluation.
Each entry below is source-evidenced. Source evidence cannot prove a live configuration, delivery outcome, entitlement, contract, or independent review.
No source-attested contractual availability SLA
The source policy record does not establish a contractual availability SLA or service credits. Do not treat the service as carrying a contractual availability commitment unless a separately signed agreement says so.
Source-review record only; it is not a contract attestation.
Evidence record
Source reference: internal-docs/platform-readiness/p1-38-legal-owner-review-packet.md · Reviewed: 13 October 2026
Regional quorum is not attested here
The source supports multi-region monitor policies, but this page does not verify an active quorum configuration for any monitor. Do not assume a majority check: review the monitor policy before relying on regional confirmation.
Source evidence only; live configuration and monitor entitlement are not verified.
Evidence record
Source reference: api/internal/services/incident.go · Reviewed: 13 October 2026
Customer status pages share the application stack
Tenant pages at /status-page/[slug] depend on the HowlOps web, API and database stack, so they are not an independent outage channel. The separate platform edge view at status.howlops.com is a different surface, but it still shares Cloudflare.
Source architecture evidence only; live endpoint and provider resilience are not attested here.
Evidence record
Source reference: internal-docs/platform-readiness/web-a-status-page.md · Reviewed: 13 October 2026
Automatic DPA conclusion is not attested
The source legal packet records a countersignature condition and does not establish that a DPA is automatically concluded during registration. The public DPA route must not be treated as available unless it publishes a reviewed document.
Source-review record only; published legal availability and contract execution are not verified.
Evidence record
Source reference: internal-docs/platform-readiness/p1-38-legal-owner-review-packet.md · Reviewed: 13 October 2026
SMS and voice are controlled-preview channels
SMS and voice paging are not part of the free preview program. The public channel catalog and product documentation require manual approval, consent, and a funded delivery path before a workspace can activate them.
Source evidence only; this record does not attest to a workspace entitlement or a live provider path.
Evidence record
Source reference: web/app/(marketing)/notification-channels/page.tsx · Reviewed: 13 October 2026
SMS and voice copy has a limited locale set
Generated SMS and voice copy currently has English and Czech variants. A recipient language outside the supported set falls back to English; this page does not claim broader telecom-language coverage.
Source-code and test evidence only; provider speech quality and every message template are not independently attested here.
Evidence record
Source reference: api/internal/services/notification_localization_test.go · Reviewed: 13 October 2026
Screenshot sandboxing remains default-off
The screenshot-prober sandbox has an open proof gap and the source readiness record keeps SCREENSHOT_SANDBOX=off as the safe default. Do not infer that screenshot capture is running inside an enabled Chromium sandbox from source configuration alone.
Source-review record only; this page does not attest to a live sandbox-enabled deployment.
Evidence record
Source reference: internal-docs/platform-readiness/pilot1-screenshot-sandbox-causal-design-2026-10-09.md · Reviewed: 13 October 2026
Automated accessibility checks have a bounded scope
The default browser release gate runs axe-core across every static marketing, authentication, platform and administration route with no serious or critical baseline exception. Keyboard-only use and screen-reader announcement quality still require human review.
Automated axe-core evidence is not an accessibility certification or a claim that every user journey conforms.
Evidence record
Source reference: playwright.config.ts · Reviewed: 15 October 2026