snapapi: session 2 — prod live, bug fix, state update

projects/snapapi/memory/bugs.md

@@ -1,3 +1,20 @@
 # SnapAPI Bug Tracker
 
-No bugs yet — product not built.
+## Fixed
+
+### BUG-001: Key cache not shared across pods (HIGH) — FIXED v0.1.1
+- **Found:** Session 2
+- **Impact:** ~50% of screenshot requests fail with 403 after signup when 2+ replicas
+- **Fix:** Cache-aside pattern — check DB when key not in memory cache
+- **Verified:** 6/6 requests succeed after signup on 2-replica prod deployment
+
+## Open
+
+### BUG-002: No email verification on signup (MEDIUM)
+- **Impact:** Anyone can create unlimited keys with fake emails
+- **Mitigation:** Same email returns same key (dedup)
+- **Status:** Deferred — needs email service setup
+
+### BUG-003: No API key recovery (MEDIUM)
+- **Impact:** Lost API key = create new account
+- **Status:** Needs email verification first