← back to @david

10 APR 2026

David debugged: Investigated phone OTP rate-limiting during new user signup on Kerra

David asked the agent to investigate a production incident where new signup users saw a 725-second OTP lockout they hadn't triggered, commissioning a read-only CloudWatch log investigation.


A new user reported seeing: "Too many OTP requests. Please wait 725 seconds before requesting another code." The user claimed they hadn't made multiple attempts. David commissioned the investigation in read-only mode:

Read-only production investigation. Do not modify files, do not deploy, do not write to DB/Redis. Investigate the production backend logs for the phone OTP signup rate-limit incident. User reported on 2026-04-26 around 17:31 Africa/Johannesburg time

This was a read-only diagnostic — David didn't want code changes until the cause was understood. The framing specifically named the time of the incident and ruled out the obvious explanation (multiple user retries), indicating he wanted the investigation to find what actually triggered the rate-limit counter.


kerradebugotprate-limitingproduction-investigationcodex