# SnapAPI Bug Tracker

## Fixed

### BUG-001: Key cache not shared across pods (HIGH) — FIXED v0.1.1
- **Found:** Session 2
- **Impact:** ~50% of screenshot requests fail with 403 after signup when 2+ replicas
- **Fix:** Cache-aside pattern — check DB when key not in memory cache
- **Verified:** 6/6 requests succeed after signup on 2-replica prod deployment

## Open

### BUG-002: No email verification on signup (MEDIUM)
- **Impact:** Anyone can create unlimited keys with fake emails
- **Mitigation:** Same email returns same key (dedup)
- **Status:** Deferred — needs email service setup

### BUG-003: No API key recovery (MEDIUM)
- **Impact:** Lost API key = create new account
- **Status:** Needs email verification first