Updated 14 days ago
Verification Log#
Last updated: 2026-03-04
How to read this log#
Every factual claim in SpringBoard that references external standards, regulations, tool capabilities, or industry practices is logged here. Each entry records: what was claimed, where it appears, how it was verified, the source URL, and the verification date.
To cross-verify: Click any source link and confirm the claim matches the source. If a source is outdated or contradicts the claim, flag it for the next verification cycle.
Regulations and Compliance (R-xxx)#
| ID | Claim | Document | Method | Source | Status | Date | Notes |
|---|---|---|---|---|---|---|---|
| R-002 | GDPR Article 8 sets age thresholds between 13-16 depending on EU country | security.md, red-protected-build.md | official-docs | gdpr-info.eu/art-8 | Verified | 2026-03-04 | Default is 16; member states may lower to 13. Range confirmed across EU. |
| R-003 | NCSC recommends "three random words" over complex passwords | security.md | official-docs | NCSC Password Guidance | Updated | 2026-03-10 | Replaced NIST (US) with NCSC (UK). No forced complexity, no forced rotation, lockout after 10 attempts, encourage MFA and password managers. |
Tool Capabilities (T-xxx)#
| ID | Claim | Document | Method | Source | Status | Date | Notes |
|---|---|---|---|---|---|---|---|
| T-001 | Lovable, Bolt, v0 are No-Code AI app builders | tool-selection.md | official-docs | lovable.dev, bolt.new, v0.app | Verified | 2026-03-04 | All active. Lovable and Bolt now offer code export; categorisation as No-Code still appropriate for target audience. |
| T-002 | Replit Agent is a Low-Code AI development environment | tool-selection.md | official-docs | replit.com | Verified | 2026-03-04 | Agent 3 launched Sep 2025. Includes deployments, databases, 30+ integrations. |
| T-003 | Cursor and Claude Code are Pro Tools | tool-selection.md | official-docs | cursor.com, claude.com/product/claude-code | Verified | 2026-03-04 | Both active and widely adopted. |
| T-004 | Vercel and Netlify provide HTTPS automatically | security.md | official-docs | vercel.com/docs/domains, docs.netlify.com | Verified | 2026-03-04 | Free SSL via Let's Encrypt, auto-provisioned. |
| T-005 | Supabase, Firebase, AWS RDS encrypt at rest by default | security.md, orange-reviewed-build.md | official-docs | supabase.com/security, cloud.google.com/docs/security/encryption, docs.aws.amazon.com/AmazonRDS | Verified | 2026-03-04 | Supabase and Firebase: yes by default. AWS RDS: Aurora clusters default-encrypted; standard RDS may require opt-in. Document says "Confirm this is enabled" which is appropriately cautious. |
Security Practices (S-xxx)#
| ID | Claim | Document | Method | Source | Status | Date | Notes |
|---|---|---|---|---|---|---|---|
| S-001 | Use "three random words" method, block compromised passwords | security.md | official-docs | NCSC Password Guidance | Updated | 2026-03-10 | Replaced NIST (US) with NCSC (UK). Three random words for user passwords. Block breached passwords via deny lists. No forced rotation. Lock after 10 failed attempts. |
Accessibility Standards (A-xxx)#
| ID | Claim | Document | Method | Source | Status | Date | Notes |
|---|---|---|---|---|---|---|---|
| A-001 | WAVE is a free accessibility checker at wave.webaim.org | quality.md, orange-reviewed-build.md | official-docs | wave.webaim.org | Verified | 2026-03-04 | Free online checker and browser extensions. API-based batch testing is paid. |
| A-002 | WCAG AA minimum contrast ratio is 4.5:1 for normal text | prompt-library.md | official-docs | w3.org/WAI/WCAG21/Understanding/contrast-minimum | Verified | 2026-03-04 | Large text (18pt+ or 14pt+ bold) threshold is 3:1. |
| A-003 | Lighthouse accessibility audit in Chrome DevTools | quality.md | official-docs | developer.chrome.com/docs/lighthouse | Verified | 2026-03-04 | Built into Chrome and Edge DevTools. Uses axe-core library. |
Verification Schedule#
| Document | Risk Level | Verify Every | Next Due |
|---|---|---|---|
| security.md | High | 90 days | 2026-06-04 |
| red-protected-build.md | High | 90 days | 2026-06-04 |
| red-checklist.md | High | 90 days | 2026-06-04 |
| tool-selection.md | High | 60 days (tools change fast) | 2026-05-04 |
| prompts.md | Medium-High | 90 days | 2026-06-04 |
| prompt-library.md | Medium-High | 90 days | 2026-06-04 |
| orange-reviewed-build.md | Medium | 90 days | 2026-06-04 |
| orange-checklist.md | Medium | 90 days | 2026-06-04 |
| quality.md | Low | 180 days | 2026-09-04 |
| branding.md | Low | On client change only | N/A |
| green-checklist.md | Low | 180 days | 2026-09-04 |
| green-quick-build.md | Low | 180 days | 2026-09-04 |
| yellow-checklist.md | Low-Medium | 180 days | 2026-09-04 |
| yellow-standard-build.md | Low-Medium | 180 days | 2026-09-04 |
Was this page helpful?