Status

Partial degradation

A subsystem is reporting issues. See below.

Frontend

Rendering

Operational

API

Checking…

Database

Checking…

Last checked —. Auto-refreshes every 30 seconds.

Incident history

2026-04-22 · ≈ 45 minMajor
pennscan.com 401'd due to stale SITE_PASSWORD gate
A SITE_PASSWORD env var set on the Vercel project during pre-launch hardening remained after the gate should have been lifted. The frontend middleware returned 401 on every request. Resolved by deleting the env var and redeploying; proxy matcher now exempts metadata + /api routes so the gate can't break these standard paths if re-enabled.
2026-04-21 · ≈ 30 minPartial
Authenticated API calls 500 from /db-query secret drift
Every authenticated Vercel API call surfaced 500 (db-query 401: unauthorized). Root cause: the DB_PROXY_SECRET env var wasn't propagating to the Supabase edge function on redeploy. Moved the secret into the public.pn_edge_config table so the function loads it from the DB on first use (no env drift). Cached per warm isolate.

Incidents are hand-curated. Detailed postmortems land on /changelog tagged security or fix.