Audit Run 17 · May 9, 2026 · Auditor: Automated (Claude) · Tester account: [email protected]

Summary

12 carried bugs all still open. 0 fully fixed since May 8. 1 partial improvement on NEW-022 (marketing nav). 1 partial improvement on contact page title (no longer has em dash). Marketing blog grew further from 100+ (May 8) to 129 articles. Mobile slateup.ai perf stable at 46. Desktop slateup.ai roughly stable (71 to 72). app.slateup.ai shows perf regression on both mobile (45 to 43) and desktop (74 to 63). app.slateup.ai TBT regressed sharply on both form factors.

Bugs Open Status (12 carried)

High Severity

ID Bug Status
BUG-002 Slide 9 (Transformer Block) image still rendered as transparent yellow placeholder for several seconds before fading in. Confirmed again on fresh course "How AI Actually Thinks" via embedded preview AND full classroom view. 🟡 Intermittent (still recurring)
NEW-003 Homepage demo widget still stuck on "Loading demo...". <video> element confirmed at readyState: 0, networkState: 2, duration: null. Source slate-demo.mp4 (preload="metadata"). No change in 4 audits. 🔴 Open
NEW-012 Brand new account [email protected] shows 74 courses in My Courses (Apr 30: 70, May 4: 70, May 5: 72, May 6: 73, May 8: 74, May 9: 74). Trend held flat this run but still 74 pre-seeded courses + 2 GROUPS for a fresh account. 🔴 Open (held flat vs last run)
NEW-013 /how-it-works still renders the homepage hero, sections, and <title>. SPA falls through to homepage. JS check confirms body.innerText.includes('Your AI-powered interactive classroom') returns true. 🔴 Open
NEW-014 /ncert still renders a fully blank white page. body.innerText.length = 0. No content, no nav, no error. 🔴 Open
NEW-033 AI course generator still leaks template placeholder text into student-facing slides. Slide 1 of "How AI Actually Thinks" stock cover image still contains literal strings "PRESENTATION BY [YOUR NAME/COMPANY]" and "(e.g., QUANTUM TECH)". Verified again via zoom inspection on a brand new account's first course generation. 🔴 Open (carried from May 8)

Medium Severity

ID Bug Status
NEW-007 Onboarding "How did you find us?" tile: "Somewhere else" still word-breaks as "Somewhe / re else". Same tile width forces the break. 🔴 Open
NEW-019 "50% off your first month, just $10 to start" promo banner still appears on the Yearly tab on marketing /pricing. Confirmed via screenshot after switching tabs. 🔴 Open
NEW-020 Plan feature wording still inconsistent: marketing /pricing shows "All AI Mates" (verified via JS query). In-app onboarding pricing shows "All 4 Mates". 🔴 Open
NEW-021 Course-building screen 3-way mismatch confirmed again on "How AI Actually Thinks": badge "TECHNOLOGY · 6 LESSONS · 18 MIN", "Drafting the outline" subtext "Picking the best 5 lessons for you", live classroom shows 13 slides (9/13 on the player and 13 visible slides in side panel). 6 vs 5 vs 13 mismatch unchanged. 🔴 Open
NEW-022 Marketing nav still inconsistent across pages, but partial improvement detected. Homepage = CBSE/NCERT + Pricing + Demo + Contact. /pricing = CBSE/NCERT + Demo + Blogs + Contact (no Pricing in nav, has Blogs). /blogs and /contact now have footer links Home/Blogs/Pricing (was "Back to Home" only on May 8 for /blogs, and "Try Now" only for /contact). Top-level header still inconsistent though. 🟡 Open (partial improvement)
NEW-028 Classmate name mismatch between marketing and product. Marketing homepage uses Professor Sage, Noti, Deepa, Chuckle, Curio. In-app onboarding sidekick step uses Note Taker, Deep Thinker, Class Clown, Curious Mind. No change in 3 audits. 🔴 Open
NEW-029 Recommended-courses step does not honour topics or pace selected during onboarding. Selected AI & ML, Coding, Math + 30 min/day; got Technology, History, Psychology, Business, Art, Science with copy "hand-picked for a 15-20 min first run". No change. 🔴 Open
NEW-032 Achievements leaderboard still exposes real user names. Top 10 viewed today: Radhika Kolachina, Chalk Labs, Student (#3), Rahil Jain, Jelle Langen, Jinesh Lalan, palak vikas, Student (#8), Shreyas Tyagi (new this run), Sarthak Agarwal. Partial pseudonymization to "Student" continues for some accounts (#3, #8, #11, #12) but real names still exposed for many. New test account hello+test9may placed at #41 immediately. 🔴 Open (partial fix)
NEW-034 Popover state not managed. Carried over - not re-verified this run as new bug NEW-038 took priority. 🟡 Carried (untested)

Low / Polish

ID Bug Status
NEW-023 Em dashes still throughout marketing copy. Confirmed today: homepage demo ("live, interactive lesson — slides, narration and AI classmates included"), contact page ("or just have a question — we'd love to hear from you"), /blogs excerpts (em dash count = 72 across 129 articles). Project rule violated. 🔴 Open
NEW-025 Welcome screen still says "Takes about 90 seconds. 7-day free trial, no charge today." Marketing pricing Starter says "Start free, no card required". Mixed messaging. 🔴 Open
NEW-026 Achievements page grammar: "1 days" current streak with "Best: 1 days". Should be singular "1 day". Visible immediately on a brand new account. 🔴 Open
NEW-027 Achievements card subtitle "50 total learners" sits under "COURSES COMPLETED 0". The 50 is a global stat but placement reads as if it describes the user. Count grew from 48 (May 8) to 50 today. 🔴 Open
NEW-031 Page <title> tags still use em dashes: "Slate — AI-powered Interactive Classroom", "Pricing — Start Free, Upgrade Anytime Slate", "Blog — AI Learning, NCERT Guides & EdTech Insights
NEW-035 Typo in Transformer Block diagram caption. Slide 9 image legend still reads "Use the originar architecture" — should be "original". Stock-image content with embedded typo unchanged. 🔴 Open
NEW-036 Em dash leakage into structured data. JSON-LD schema.org block on homepage still contains em dashes in plan descriptions. 🔴 Open

New This Run

ID Bug Status
NEW-037 Auth login form pre-fills email field with stale email from a prior session. On /auth/login, after sign-out, the email input was pre-populated with [email protected] (an old test alias from a much earlier audit). Sign Up tab inherits the same value. Indicates either form autocomplete persisted across logout or cached state in the SPA. Privacy/UX concern: a returning user on a shared device could see the previous user's email. 🔴 New (Medium · privacy)
NEW-038 **app.slateup.ai desktop performance regressed sharply.** PageSpeed Desktop Performance score dropped from 74 (May 8) to 63 today. Mobile dropped 45 to 43. TBT regressed both: mobile 1,110ms to 1,820ms, desktop 410ms to 790ms. LCP mobile 9.7s to 9.9s. Likely a recent deploy introduced more main-thread work in the SPA bundle. 🔴 New (High · perf)
NEW-039 Sign Up form has no password confirmation field and no minimum password strength requirement. "Hello123" was accepted as a brand new password with zero validation. There is also no email verification step before the account is created and the user is dropped straight into onboarding. Together this is an account-quality and security gap (no email ownership proof, weak passwords accepted). 🔴 New (Medium · security)

Fixed / No New Regressions vs Prior Audit

Coverage