FedM8 company

INS-FEDM8NET-1 fedm8.net /insights counts bots: curl POST /collect returns {ok:true}, page lacks the v64 drop statement Done Nov 8, 8:01 AM

BF-1 Cloudflare inline script blocked by CSP on every fedm8.com page Blocked Nov 11, 4:48 PM

BF-2 Status page meta CSP blocks Cloudflare Web Analytics beacon and inline scripts In review Nov 11, 6:30 AM

BF-3 Internal links point to .html URLs that 308-redirect on every click Not started Nov 8, 2:33 PM

BF-4 Open Graph tags missing on /contact, /support, /status and og:image missing on /about Done Nov 11, 11:30 AM

BF-5 robots.txt publishes a map of internal paths and file names In review Nov 11, 1:42 AM

BF-6 fedm8.com sign-in page takes about 19 seconds to load on phone Not started Nov 9, 5:56 AM

BF-7 Google One Tap uses prompt status methods that break when FedCM becomes mandatory In review Nov 11, 6:30 AM

BF-8 Open Graph tags missing on 16 more fedm8.com pages Done Nov 11, 11:30 AM

BF-14 'First year of Pro includes 250 credits a month' appears on Support and Features but not on Plans, where credits are 'when available' In review Nov 11, 1:28 AM

BF-23 About page sells 'VA Disability Navigation' while Support says FedM8 does not advise on VA disability claims Done Nov 11, 11:30 AM

BF-32 Bid Coach filter bar uses role=tablist on plain buttons Done Nov 11, 11:30 AM

BF-33 Bid Coach shows an empty checklist until auth resolves (no loading state) Done Nov 11, 11:30 AM

BF-31 Bid Coach steps cannot be opened with the keyboard Done Nov 11, 11:30 AM

BF-25 Capability statement and contact pages publish phone/email only as images with generic alt text In review Nov 11, 3:51 PM

BF-22 Compare page says FedM8 has 'No enterprise CRM' while Plans sells an Enterprise tier with a CRM Done Nov 11, 11:30 AM

BF-12 Footer 'Bid Coach' and 'Proposal Studio' both link to Win Kit, which says it is Pro-only, while Bid Coach is advertised in Basic Done Nov 11, 11:30 AM

BF-26 Guides hub 'After you submit' card opens the Get Certified checklist instead of the guide Done Nov 11, 3:20 PM

BF-15 Hero 'Ask Match|M8' box and suggestion chips never answer; they only replace the question text Done Nov 11, 11:30 AM

BF-18 Homepage head is render-blocking heavy: 14 stylesheets, 5 Google Font CSS requests, 3 sync scripts Not started Nov 10, 3:03 PM

BF-17 Homepage loads an unused Google One Tap script that creates a second Supabase client and extra auth probe Done Nov 11, 11:30 AM

BF-16 Homepage swipe deck: card details are display:none and unreachable by keyboard/screen readers; double-press saves the same card twice Done Nov 11, 11:30 AM

BF-30 Internal-audience lessons are hidden from the catalog but open by deep link and ship in public JS Done Nov 11, 11:30 AM

BF-29 Learn lesson 'Open the tool' links to INTEGRATIONS.md, which is not deployed (404) Done Nov 11, 3:20 PM

BF-28 Learn quizzes: 72 of 81 lessons use a generated question whose right answer is always the first option Done Nov 11, 11:30 AM

BF-19 Meta CSP on 57 pages allows the TEST worker and omits Cloudflare Insights, contradicting _headers Done Nov 11, 11:30 AM

BF-11 Plan copy contradicts itself on whether Free includes search and grants Done Nov 11, 11:30 AM

BF-27 Public /guides links force ?embed=1 (hidden site nav) and signed-in-only os.html routes Done Nov 11, 11:30 AM

BF-9 Public Formation Tracker exposes owner's DD-214/VA disability letter status, partner capital contribution and vendor bills Done Nov 11, 11:30 AM

BF-21 Release signup: launch-day script flips plan buttons to 'Subscribe to Basic/Pro' for anonymous visitors during an invite-only beta Done Nov 11, 11:30 AM

BF-13 Support FAQ says FedM8 never shows win probability, but Pro lists 'Pursue probability' and calibrated odds Done Nov 11, 11:30 AM

BF-20 Support community renderer uses esc() in attribute context; quotes in a question title break aria-label and can inject attributes Done Nov 11, 11:30 AM

BF-10 Trust Center and RFC-001 describe different grant terms than the marketing pages Blocked Nov 11, 3:51 PM

BF-24 Try-search demo: only six canned notices, so almost every real query returns an empty, unexplained panel Done Nov 11, 11:30 AM

BF-35 'Clear my answers for this track' wipes progress with no confirmation and syncs the wipe to the account Done Nov 11, 11:30 AM

BF-55 AI assist "cheat links" set href straight from model output with no scheme check; legacy app page allows unsafe-inline Done Nov 11, 11:30 AM

BF-54 Account password panel is not a form and its result message has no live region In review Nov 11, 1:36 PM

BF-51 Auth dialog tabs declare role=tab but have no arrow-key navigation, roving tabindex or tabpanels In review Nov 11, 1:36 PM

BF-45 Certification funnel events tag every track as route_code vetcert_guide In review Nov 11, 7:58 AM

BF-34 Certification guide: picking an answer that changes the path jumps focus and scroll to the top Done Nov 11, 11:30 AM

BF-37 Classroom and guide: sync apply re-renders the page and resets a playing lesson video Done Nov 11, 11:30 AM

BF-36 Classroom marks an answer that says 'Stop here first / needs a fix' as Done and counts it in progress Done Nov 11, 3:20 PM

BF-46 Credential academy (cert-stepper) never retries after a failed load Done Nov 11, 11:30 AM

BF-44 Get Certified 'Email me a link' has no rejection handler; button can stick on 'Sending...' Done Nov 11, 3:20 PM

BF-43 Get Certified .ics export revokes the blob URL immediately and is not attached to the DOM Done Nov 11, 11:30 AM

BF-57 Insights page silently shows zeros when the metrics API fails Done Nov 11, 11:30 AM

BF-50 Internal model name "Jev" is shown to users in ~70 UI strings (Team Up, Find work, Win Kit, glossary) Done Nov 11, 11:30 AM

BF-42 Learn header progress counts 3 unreachable lessons in the denominator Done Nov 11, 11:30 AM

BF-40 Learn lessons open without focus management or history entry; Back leaves the page Done Nov 11, 11:30 AM

BF-41 Learn progress marks a lesson 'learned' after 45 seconds with the tab open, regardless of reading Done Nov 11, 11:30 AM

BF-39 Learn quiz results and question groups are not exposed to assistive tech Done Nov 11, 11:30 AM

BF-49 Learn search skips the 'Help with the product' notes, including the pricing lesson Done Nov 11, 11:30 AM

BF-56 Legacy app.html (8,205 lines) is still served, indexable and shows pricing copy that contradicts the invite-only beta Done Nov 11, 11:30 AM

BF-38 Lesson video captions track is not default-on and the SRT download is the only fallback Done Nov 11, 11:30 AM

BF-52 Route changes never update document.title or move focus; tab and history entries all read "FedM8 Tools" In review Nov 11, 1:36 PM

BF-58 Stub redirect pages drop query strings and hashes, losing deep links and auth params Done Nov 11, 11:30 AM

BF-48 learn.html loads 244 KB of supabase + tier scripts synchronously in <head> In review Nov 11, 1:36 PM

BF-47 notice-types.js is not loaded by any live page and maps common SAM notice types to 'could not map' Done Nov 11, 3:20 PM

BF-53 osToast styles every default message as an error and auto-dismisses a ~560-character notice after 8 seconds In review Nov 11, 1:36 PM

BF-78 404 beacon sends untruncated document.referrer to an anonymous Supabase RPC Done Nov 11, 3:20 PM

BF-69 404.html loads nav scripts by relative path, so the header and SDVOSB status vanish on any nested missing URL Done Nov 11, 11:30 AM

BF-76 Allura web font is requested on 10 pages but no CSS uses it Done Nov 11, 11:30 AM

BF-82 At 1024px the nav hides Sign in and Join behind the menu button Done Nov 11, 11:30 AM

BF-64 D3_PAGES object literal declares duplicate keys company and crm Done Nov 11, 11:30 AM

BF-79 Edge redirects use 301 for /signin /login /signup, and /grants drops the grants destination Done Nov 11, 11:30 AM

BF-68 Extensionless page URLs (/os, /plans, /about, /support ...) miss the no-store HTML cache rules Done Nov 11, 11:30 AM

BF-81 Grant paragraph repeats twice on homepage and plans page In review Nov 11, 3:51 PM

BF-80 Homepage confidence card overlaps the chat card at 1440px wide Done Nov 11, 11:30 AM

BF-66 Nav logo is a 275 KB 532px PNG shown at 32-44px on every page; optimized logo-28/56/112 files are unused Done Nov 11, 3:20 PM

BF-61 Page views are sent once per load; in-app route changes are never tracked Done Nov 11, 11:30 AM

BF-60 Proposal Studio gate copy tells users to subscribe now and refers to "founder" and Get Certified Done Nov 11, 3:20 PM

BF-72 Sitemap omits public /open-field; gated coach/proposal are indexable; robots.txt repeats Sitemap Done Nov 11, 11:30 AM

BF-74 Stray tracked files mine_ny.txt and mine_utc.txt are deployed to production Done Nov 11, 3:20 PM

BF-63 Unknown-case or trailing-slash hashes show "We could not find that page" Done Nov 11, 11:30 AM

BF-75 Unreferenced shipped files: 7 assets, 2 root scripts, hero-bg.svg and a duplicate image In review Nov 11, 3:35 AM

BF-65 Workspace (/os) loads 95 parser-blocking scripts, about 4.6 MB, most of it unminified Not started Nov 10, 10:20 PM

BF-67 _headers: /*.js and /*.css also match /assets/*, so assets get conflicting Cache-Control (and clarity.js gets three) Done Nov 11, 11:30 AM

BF-71 capability-statement and teaming og:image point to /og-fedm8.png, which does not exist Done Nov 11, 11:30 AM

BF-59 forum.html Twitter card title and description are copied from the homepage and contradict the page Done Nov 11, 11:30 AM

BF-62 os-found.js renders SAM link href from raw ui_link; other views validate it Done Nov 11, 11:30 AM

BF-70 require-auth.js, tier.js, docx-export.js and notice-types.js are referenced with no ?v=, so they inherit long caches Done Nov 11, 11:30 AM

BF-73 security.txt Canonical points at /security.txt instead of /.well-known/security.txt; Policy links a redirecting .html URL Done Nov 11, 11:30 AM

BF-77 test.fedm8.com (nginx) sends no-store only for files with an extension, so extensionless pages can be cached Done Nov 11, 11:30 AM

BF-100 Phone menu is one flat list of 13 links Not started Nov 11, 7:30 PM

BF-101 Site menu and app tabs use different names for the same areas Not started Nov 11, 7:30 PM

BF-102 Basic yearly price is never shown next to the $390 grant value Not started Nov 11, 7:30 PM

BF-103 App browser tab always reads 'FedM8 Tools' In review Nov 12, 8:17 AM

BF-104 Feedback button covers page content on phones Not started Nov 11, 7:30 PM

BF-105 Dead SBA links on fedm8.com /vets and /certifications In progress Nov 12, 8:17 AM

BF-83 /trust still advertises its private pages as public In review Nov 11, 6:16 AM

BF-84 /trust has two different sign-in links In review Nov 11, 1:15 PM

BF-85 Trust map marks RFC, Project Board, Formation and Identity as Live, but they now need board sign-in In review Nov 11, 1:42 AM

BF-86 fedm8.org board sign-ins drop on every deploy and reset emails only reach the server log Blocked Nov 11, 4:48 PM

BF-87 The /verify page Worker is not in the repo and agents cannot deploy it Blocked Nov 11, 6:28 AM

BF-88 Homepage email link returns 404 without JavaScript Done Nov 11, 3:20 PM

BF-89 "Join the Nov 11 beta" CTA goes stale after launch day In review Nov 11, 2:31 PM

BF-90 fedm8.com homepage and /plans create four separate Supabase auth clients Not started Nov 11, 5:58 AM

BF-91 fedm8.com /verify page has no canonical link Blocked Nov 11, 6:28 AM

BF-92 Waitlist form still offers 'here to support' and 'federal government' options Not started Nov 11, 7:30 PM

BF-93 '2 invites a week' line still shown in beta copy Not started Nov 11, 7:30 PM

BF-94 Waitlist dialog puts 85 words of grant terms above the email field Not started Nov 11, 7:30 PM

BF-95 Sign-up action has five names and three destinations Not started Nov 11, 7:30 PM

BF-96 Sign up link drops new visitors on the Chat screen Not started Nov 11, 7:30 PM

BF-97 Phone home screen has no sign-up button in view Not started Nov 11, 7:30 PM

BF-98 Learn page is 27 phone screens of open text Not started Nov 11, 7:30 PM

BF-99 Small text under 13px on support, try and certifications pages Not started Nov 11, 7:30 PM

Working now

Lanes