Findings Queue
96 open Β· 3 resolved. Sorted by severity then age. Click any row to inspect the underlying evidence record + Merkle root.
critical
27
open
high
64
open
medium
5
open
low
0
open
Open
| Severity | Control | Detail | Assignee / due | Action | |
|---|---|---|---|---|---|
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 0m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 0m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 1m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 1m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 2m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 2m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 3m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 3m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 4m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 4m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 5m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 5m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| critical | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | unassigned 6m ago | βΆ | |
| critical | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | unassigned 6m ago | βΆ | |
| critical | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| criticalurgent | UKGC.LCCP.SR.3.5.1 | GAMSTOP sync stale β last successful sync 31 hours ago (threshold 24h). 2 newly-listed customers may have placed bets between the missed sync and now. affected: P-018372, P-021554 | ACAna Costa due 08/06/2026 | βΆ | |
| criticalurgent | BR.SPA.AML.COAF.1 | Acceptance criterion failed: "filed_at <= 24h after MLRO decision" β 1/1 rows fail affected: EV-001 | DMDavid MΓΌller due 07/06/2026 | βΆ | |
| criticalurgent | MGA.PPD.AGE.1 | Acceptance criterion failed: "no successful deposits before dob_verified_at" β expected empty set; got 1 rows affected: P-0001 | ACAna Costa due 05/06/2026 | βΆ | |
| criticalurgent | CA.ON.AGCO.STD.LOCATION.1 | Acceptance criterion failed: "in_on = true for 100% of wagers" β no evidence rows returned by connector | ACAna Costa due 06/06/2026 | βΆ | |
| criticalurgent | MGA.GAME.RNG.1 | RNG certificate expired for 2 games in production: slot-thunder-zeus-v2 (eCOGRA cert expired 2026-04-12), slot-aphrodite-fortune (GLI cert expired 2026-05-08). MGA System Audit (Q4 2025) flagged this category in section 5.2. affected: slot-thunder-zeus-v2, slot-aphrodite-fortune | ACAna Costa due 05/06/2026 | βΆ | |
| criticalurgent | SPORTSBOOK.PAYMENT.CREDIT.UKGC.1 | Acceptance criterion failed: "no deposit_id has funding_type=credit_card with status=accepted" β expected empty set; got 1 rows affected: {"note":"mock rows for query=deposit_funding_audit"} | TWTom Whitfield due 08/06/2026 | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 0m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 0m ago | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 1m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 1m ago | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 2m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 2m ago | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 3m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 3m ago | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 4m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 4m ago | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 5m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 5m ago | βΆ | |
| high | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | unassigned 6m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| high | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| high | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| high | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| high | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| high | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | unassigned 6m ago | βΆ | |
| highhigh | BR.SPA.PIX.PAYMENT.1 | Acceptance criterion failed: "matched = true for 100% of accepted transactions" β no evidence rows returned by connector | ACAna Costa due 16/06/2026 | βΆ | |
| highhigh | DE.GLUSTV.LIMIT.1 | Limitdatei API timeout rate increased to 1.8% over last 24h (threshold: 0.5%). 4 deposits succeeded without verified cross-operator total β exposure approx β¬1,200. affected: P-022001, P-022017, P-022034, P-022048 | ACAna Costa due 12/06/2026 | βΆ | |
| highhigh | UKGC.LCCP.AFFORDABILITY.1 | Affordability check not performed within 24h for 1 customer who crossed Β£500 net-loss threshold 31 hours ago. Customer P-019887 has continued to deposit since trigger. affected: P-019887 | ACAna Costa due 14/06/2026 | βΆ | |
| highhigh | BR.SPA.REPORTING.1 | Acceptance criterion failed: "sent_at - occurred_at <= 30s for 99%" β no evidence rows returned by connector | ACAna Costa due 17/06/2026 | βΆ | |
| highhigh | BR.SPA.NO_CREDIT.1 | Acceptance criterion failed: "method not in [credit_card]" β no evidence rows returned by connector | ACAna Costa due 21/06/2026 | βΆ | |
| highhigh | BR.SPA.SIGAP.1 | SIGAP transmission latency P99 = 47s over last 24h (SLA: <30s). 0.3% of transactions queued >60s. Brazil SPA inspection flagged this in February. | ACAna Costa due 21/06/2026 | βΆ | |
| highhigh | BR.SPA.RG.LIMITS.1 | Acceptance criterion failed: "limits available in account preferences" β no evidence rows returned by connector | JOJames O'Brien due 13/06/2026 | βΆ | |
| highhigh | MGA.PPD.INTERACTION.1 | Markers-of-harm Zendesk auto-tickets disabled in production since 2026-05-22 (commit 8a3f44c). 12 RG-marker events have no matching interaction ticket in the last 72 hours. affected: P-019501, P-019502, P-019615, P-019702 | ACAna Costa due 16/06/2026 | βΆ | |
| highhigh | UKGC.LCCP.SR.3.4.1 | 5 high-severity safer-gambling markers triggered in last 30 days without documented customer interaction within the 24h SLA. Affected: P-014501 (chasing losses), P-016002 (late-night session 4h+), P-017889 (deposit velocity spike), P-018440 (cancelled withdrawal), P-019112 (3 deposit-limit increases in 7d). affected: P-014501, P-016002, P-017889, P-018440 +1 more | ACAna Costa due 23/06/2026 | βΆ | |
| highhigh | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "time_out_available = true" β no evidence rows returned by connector | JOJames O'Brien due 19/06/2026 | βΆ | |
| highhigh | CA.ON.AGCO.STD.3.RG.1 | Acceptance criterion failed: "deposit_limit_offered = true at registration" β no evidence rows returned by connector | JOJames O'Brien due 16/06/2026 | βΆ | |
| highhigh | MGA.PPD.DL.1 | Acceptance criterion failed: "limit_offered_at < first_deposit_at for 100% of players" β 1/1 rows fail affected: P-0001 | ACAna Costa due 18/06/2026 | βΆ | |
| highhigh | MGA.PPD.MARKETING.1 | Acceptance criterion failed: "0 sends to age_at_send < 18" β expected empty set; got 1 rows affected: P-0001 | ACAna Costa due 16/06/2026 | βΆ | |
| highhigh | MGA.PPD.MARKETING.1 | Acceptance criterion failed: "0 sends to self_excluded_at_send = true" β expected empty set; got 1 rows affected: P-0001 | ACAna Costa due 22/06/2026 | βΆ | |
| highhigh | MGA.OPS.AUDIT.SYS.1 | Acceptance criterion failed: "filed_at <= fiscal_year_end + 90 days" β 1/1 rows fail affected: {"fiscal_year":2025,"auditor":"FACT Technologies","filed_at" | MDMarc Dubois due 14/06/2026 | βΆ | |
| mediummedium | CA.ON.AGCO.STD.6.MARKETING.1 | Marketing creative C-2026-118 (Twitter campaign starting next Monday) features active NHL player β flagged by automated talent review but not yet legal-reviewed. affected: C-2026-118 | ACAna Costa due 29/06/2026 | βΆ | |
| mediummedium | BR.SPA.BONUS.1 | Acceptance criterion failed: "wagering_x and expiry_days disclosed" β no evidence rows returned by connector | ACAna Costa due 27/06/2026 | βΆ | |
| mediummedium | BR.SPA.BONUS.1 | Acceptance criterion failed: "additional_deposit_required = false" β no evidence rows returned by connector | ACAna Costa due 12/07/2026 | βΆ | |
| mediummedium | MGA.OPS.STAFF.AML_TRAINING.1 | 3 staff in scope-required roles overdue on annual AML training: 1 Payments analyst (last trained 14 months ago), 2 Customer Support seniors (15 months, 13 months). affected: E-0049, E-0114, E-0142 | DMDavid MΓΌller due 05/07/2026 | βΆ | |
| mediummedium | UKGC.LCCP.15 | Acceptance criterion failed: "filed_at <= deadline for every quarter" β 1/1 rows fail affected: {"period":"2026-Q1","filed_at":"2026-04-12T00:00:00Z","ggy_r | ACAna Costa due 01/07/2026 | βΆ |
Recently resolved
| Severity | Control | Detail | Assignee / due | Action | |
|---|---|---|---|---|---|
| highresolved | UKGC.RTS.14 | 3 slot games had autoplay enabled in UK lobby (RTS 14 prohibits): slot-poseidon-rage, slot-medusa-spin, slot-olympus-fortune. Disabled at PAM lobby level 2026-05-18. affected: slot-poseidon-rage, slot-medusa-spin, slot-olympus-fortune | 7d ago | βΆ | |
| highresolved | MGA.AML.SR.1 | STR filing delay: alert AML-2026-0192 raised 2026-05-12, FIAU goAML submission completed 2026-05-15 (72h SLA met, target 48h). affected: AML-2026-0192 | 5d ago | βΆ | |
| mediumresolved | UKGC.LCCP.SR.3.5.3 | Time-out option for 6-week duration was missing from account settings page (only 24h/7d/30d shown). Fixed in commit a91bd34. | 8d ago | βΆ |