RAVEN. / status

Operational dependencies

Static disclosure of what Raven depends on and how it fails — not a live uptime page. Machine-readable: /status-policy.json.

The Launch Console is static (Vercel) — no backend, no keys in browser code. The hosted verifier runs on Render; /verify depends on its availability, /healthz reports it, /pubkey stays public for receipt verification. Solana RPC availability can affect checks — and is server-side only: user-supplied rpcUrl and issuerIdentity are rejected.

Fail behavior: verifier errors fail closed (502/503 — never an unsigned or guessed verdict); rate limits return 429 (back off). Graceful fallback: retry later, request access, or run MCP locally (npx -y raven-verify-mcp). No secret logging; no signatures, private keys, or API keys in logs.