Skip to content

Fix site overclaims: fidelity panel shipped, protocol count, hosted protocols - #48

Merged
rclanan merged 2 commits into
mainfrom
site-audit-overclaim-fixes
Nov 7, 2026
Merged

rclanan merged 2 commits into
mainfrom
site-audit-overclaim-fixes

Conversation

@rclanan

@rclanan rclanan commented Nov 7, 2026

Copy link
Copy Markdown
Contributor

Scope: overclaims and wrong facts only, from the 2026-11-07 marketing audit (aether#1890). Edited src/pages/ and regenerated only the affected root pages (index, pricing).

Changes and evidence (SaaSy-Solutions/mockforge origin/main)

  1. Fidelity card: "fidelity panel ... in development" -> available now; heading drops "preview". Evidence: CHANGELOG.md ## [0.3.240] - 2026-11-03, lines 35 (Admin UI "Mock fidelity" panel in Contract Diff) and 37 (verify-mocks --mock-spec), both #849.
  2. "10+ protocols" -> "10" (homepage stat). Evidence: root Cargo.toml workspace has exactly 10 protocol crates: http, grpc, graphql, ws, amqp, ftp, kafka, mqtt, smtp, tcp.
  3. Team tier protocols ("All 10+ protocols ... FTP, TCP" in pricing card and comparison table) -> "All 9 hosted protocols (...TCP); FTP when self-hosted". Evidence: crates/mockforge-registry-core/src/models/hosted_mock.rs:107-120 (Protocol enum for hosted mocks has 9 variants, no FTP).
  4. Team SSO / RBAC: verified real, no change. SSO gated to Team in crates/mockforge-registry-server/src/handlers/oidc.rs:354-358 and handlers/sso.rs; Admin role gated to Team in handlers/organizations.rs:256-266 (comment: "marketed as SSO / RBAC on the Team tier"); FAQ handlers/faq.rs:152.

Needs owner confirmation (not changed)

  • Pricing Pro row says "HTTP + gRPC" and Free says "HTTP", but hosted_mock.rs tests put WebSocket and GraphQL on the free tier; copy may understate.
  • trust.html "tamper-evident audit logs" and "MFA": audit-log hash-chain verification exists (models/audit_log.rs:482), MFA not checked in this pass.

Checks

Page build via npm run build:pages -- --force for the two pages only (unrelated root drift in engineering-notes.html and rss.xml was reverted, not part of this PR). check:links needs a dist/ build, not run.

@codedig-ai

codedig-ai Bot commented Nov 7, 2026

Copy link
Copy Markdown

🟢 CodeDig PR Analysis — PASSED; analysis max severity: none; shown blockers: 0 (none); budget: 0/100 points consumed, 100 points remaining (green)

Budget status does not override the recorded gate verdict.

Summary

Metric Value
Files Changed 0
Total Findings 0
Critical 0
High 0
Public API Changes 0
New PII Flows 0
Complexity Spikes 0
Co-change Risks 0

Diff by kind

Kind Files + −
code 4 +10 −10
Total 4 +10 −10

Coverage data: not available.

🧪 Test Coverage Delta (no data)

Coverage data not available for this repo — enable via Settings → Coverage

→ View full report


Powered by CodeDig

@codedig-ai codedig-ai Bot added codedig/blast-low Blast radius low — ≤ 10 callers affected codedig/effort-1 Effort score 1/5 — minimal blast radius and complexity codedig/risk-green Risk budget < 50 % — safe to merge labels Nov 7, 2026
@rclanan

rclanan commented Nov 7, 2026

Copy link
Copy Markdown
Contributor Author

Verified 2026-11-07 against mockforge main: hosted protocol tiers come from Protocol::min_plan in hosted_mock.rs, enforced in handlers/hosted_mocks.rs. Free has HTTP, WebSocket and GraphQL; Pro adds gRPC; Team adds SMTP, MQTT, Kafka, AMQP and TCP (9 hosted). MFA is TOTP with backup codes (auth 2fa routes; login handler), with no WebAuthn yet. Copy updated to match.

@codedig-ai

codedig-ai Bot commented Nov 7, 2026

Copy link
Copy Markdown

🟢 CodeDig PR Analysis — PASSED; analysis max severity: none; shown blockers: 0 (none); budget: 0/100 points consumed, 100 points remaining (green)

Budget status does not override the recorded gate verdict.

Summary

Metric Value
Files Changed 0
Total Findings 0
Critical 0
High 0
Public API Changes 0
New PII Flows 0
Complexity Spikes 0
Co-change Risks 0

Diff by kind

Kind Files + −
code 6 +22 −22
Total 6 +22 −22

Coverage data: not available.

🧪 Test Coverage Delta (no data)

Coverage data not available for this repo — enable via Settings → Coverage

→ View full report


Powered by CodeDig

1 similar comment
@codedig-ai

codedig-ai Bot commented Nov 7, 2026

Copy link
Copy Markdown

🟢 CodeDig PR Analysis — PASSED; analysis max severity: none; shown blockers: 0 (none); budget: 0/100 points consumed, 100 points remaining (green)

Budget status does not override the recorded gate verdict.

Summary

Metric Value
Files Changed 0
Total Findings 0
Critical 0
High 0
Public API Changes 0
New PII Flows 0
Complexity Spikes 0
Co-change Risks 0

Diff by kind

Kind Files + −
code 6 +22 −22
Total 6 +22 −22

Coverage data: not available.

🧪 Test Coverage Delta (no data)

Coverage data not available for this repo — enable via Settings → Coverage

→ View full report


Powered by CodeDig

@codedig-ai codedig-ai Bot added codedig/blast-low Blast radius low — ≤ 10 callers affected codedig/effort-1 Effort score 1/5 — minimal blast radius and complexity codedig/risk-green Risk budget < 50 % — safe to merge and removed codedig/effort-1 Effort score 1/5 — minimal blast radius and complexity codedig/risk-green Risk budget < 50 % — safe to merge codedig/blast-low Blast radius low — ≤ 10 callers affected labels Nov 7, 2026
@rclanan
rclanan merged commit dfd41d7 into main Nov 7, 2026
2 checks passed
@rclanan
rclanan deleted the site-audit-overclaim-fixes branch November 7, 2026 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

codedig/blast-low Blast radius low — ≤ 10 callers affected codedig/effort-1 Effort score 1/5 — minimal blast radius and complexity codedig/risk-green Risk budget < 50 % — safe to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant