Opus finding
recordEvent failure is swallowed without surfacing — audit row miss only recoverable via log scrape
lowdata-losshigh
- apps/web/app/api/opt-in/route.ts:105-119
The comment promises the miss can be backfilled, but no backfill mechanism is referenced or implemented in this PR — the only durable record is a `logWarn` line, which is fine if logs are retained and searchable but is an audit-trail gap if not. The flip itself is persisted (and idempotent), so this is not a correctness failure, but the comment's promise that this is recoverable is conditional on log retention practice that lives outside the slice.
Recommendation
Either (a) enqueue a retry (out of scope likely), (b) drop a row into a dead-letter table, or (c) at minimum, link to the operational runbook for reconciliation. The current comment overstates the recoverability.