We publish every incident, no matter how small. Each one includes a duration, what we changed, and whether a fan ever noticed.
A Frankfurt POP misrouted retries during a routine deploy. Live deliveries succeeded but retries queued. All backlogged webhooks were delivered in order once the route healed.
Apple's APNs latency spiked, delaying pass refreshes by 8-14 seconds for a subset of devices. Generation itself was unaffected and no fans were turned away at any gate.
A misconfigured circuit-breaker on our payments edge dropped roughly 4% of intent creations to a 504. Failed intents auto-retried and no charges were ever doubled.
Background scanner sync stopped reaching the upstream queue for one regional cluster. Door scanning continued offline — no fans were blocked from entry. Sync caught up automatically after the cluster recovered.
An expired internal cert broke session bootstrap for users without an active session. Active sessions were unaffected. Cert rotation is now automated end-to-end.
Apple Pay handoffs intermittently returned a generic error on iOS 17.2. We rolled back the merchant-token caching change that triggered it.
One email when an incident opens, one when it resolves. Nothing else — no marketing, no digests.