AI Consumer Rights

Works today

Each line links to the scorecard row that backs it.

• Situation guides + rights by country (help pages)
• Dispute-kit letter (fill in, copy, mailto)
• Algorithm Decision Explorer (3 steps)
• Forum voting API + consensus across language groups
• Suggest a statement (140 chars) + automated precheck + report
• Admin review page
• Privacy page, sources page, how-it-works page
• 8 languages
• Live site reachable

Not finished

From the same scorecard, next to the claims.

1. Forum voting, suggesting and reporting ran on a throwaway local Postgres 17 on 2026-11-07, not against the real Neon DB or a real sign-in; the admin page is tested only against mocks/jsdom
2. The automated precheck call to OpenRouter was not exercised in any recorded run (key removed, proof/suggest-and-report.log), and no recorded run presses the dispute-kit mailto action
3. Numbers on the help pages were compared with archived copies of their sources on 2026-11-08: 29 of 30 passages found; the EU 12 months is not on its cited page (proof/help-numbers.log, exit 1). Not legal review
4. No signed Android release, and assetlinks.json still lacks the Play App Signing SHA; Play status unknown
5. Translations in all 8 languages are unreviewed by native speakers (README.md:39); legal content unreviewed
6. No TalkBack run. Chrome 157 runs on a local build (2026-11-07) traced the help tools and dispute kit (13 routes, 575 requests, none off-site, none carrying the typed text) and exercised the deadline tracker in 8 languages; the live site and the Android app were not traced (not yet traced)
7. Human moderation of suggested statements is a manual process, not exercised
8. Some of its pages still show an old contact email; they need to point to support@shipitworks.com.

What changed

Dated lines from the scorecard. The source code is private, so these lines are the public record.

• 2026-11-08: Rescored under the new feature rule: each of 10 features is worth 2.5 of 25. 2 count as proven by a logged run (Algorithm Decision Explorer; forum voting on a local Postgres 17, not the real database), 7 as built and tested with sample data, 1 not built. Score 78/100 on our own rubric (was 80/100 on the old rule). Ops line corrected: CHANGELOG.md exists. Tag v0.3.0 is on main.
• 2026-11-08: California help text now says the 45 days can reach 90 if the business tells you it needs longer, in 8 languages; new run npm run proof:help-numbers compares help-page numbers with their sources: 29 of 30 found, exit 1 (EU 12 months not on its cited page). PR #81, tag v0.3.0. CI moved to a self-hosted runner, PR #79.
• 2026-11-07: Recorded runs on a local production build, not the live site: the dispute-kit deadline tracker keeps its list on the device, survives a reload and clears (Chrome); the Algorithm Decision Explorer browser run in 8 languages; and the help tools made no off-site request, no write and no request carrying typed text (575 requests, 13 routes, Chrome 157). Each check also failed when a fault was planted.
• 2026-11-07: Forum: suggesting a statement, reporting it, and the forum_voter cookie behave as the privacy page says, on a throwaway local Postgres 17, not the real database. Release v0.2.0.