← Release Gate
Sanitized demonstration fixture · not a customer result

Expert Review sample report

This abbreviated sample demonstrates the structure and evidence standard of a Ratchet Release Gate report. Names, paths, and code are fictional.

Revision8f3a91c
StackNext.js / Node
Size38k lines
Reviewed2026-07-24
Demonstration only. This fixture does not represent a customer engagement, adoption claim, or guaranteed finding set.

01 / Executive decision

Hold paid launch for this revision

Two verified blockers cross billing and session boundaries. Resolve both close conditions, rerun the relevant tests, and review the resulting revision before enabling customer billing.

02 / Blocker register

Webhook replay can grant duplicate account credit

BLOCKER · BILLING
src/billing/webhook.ts:84–119 · fixture anchor

The handler writes account credit before recording the provider event ID. A retried delivery can repeat the credit mutation.

Impact
One paid event can create more than one credit grant.
Close condition
Persist and enforce provider event idempotency in the same transaction as the credit mutation; add a replay test.
Evidence
Fixture test replays the same signed event twice and observes two credit rows.

Session survives password reset

BLOCKER · AUTH
src/auth/reset.ts:51–73 · fixture anchor

The reset path updates the password hash without advancing the session version or revoking active refresh tokens.

Impact
A previously obtained session remains valid after the account owner resets the password.
Close condition
Advance session version, revoke refresh tokens, and add an integration test proving old sessions fail.
Evidence
Fixture test refreshes a pre-reset token after reset and receives a new access token.

03 / Remediation order

  1. Make billing credit mutation idempotent and test duplicate provider delivery.
  2. Invalidate active sessions during password reset and test the full refresh path.
  3. Rerun Ratchet, targeted integration tests, dependency checks, and the normal release suite on the new commit.
  4. Review the exact remediated revision before changing the proceed-or-hold recommendation.

04 / Limitations

Check pilot fit →