{"asOf":"2026-10-03","doesNotChangeDepotPicks":true,"doesNotChangePriceSort":true,"doesNotChangeFreeIndex":true,"note":"Classification and failure modes are mechanisms. Case studies are included only when the source URL was fetched on 2026-10-03. A capability ceiling is not a company incident. Vendor figures are labeled as that vendor's report.","count":1,"catalogCount":27,"refused":["Replit agent database story (July 2025): The Register URL returned HTTP 403 and no first-party engineering postmortem was fetched. Not indexed.","CanLII HTML for 2024 BCCRT 149 returned a client-side block. The Civil Resolution Tribunal document was fetched instead and is the indexed source.","Cursor agent best-practices post loaded and is a product guide, not a postmortem. Not indexed as an incident. The University of Chicago study it mentions was not fetched.","Cognition 'Introducing Devin' (published 2024-03-12) duplicates the SWE-bench technical report. The report is indexed; the launch post is not a second study.","Anthropic many-shot jailbreaking research page loaded. It is an attack writeup, so it is not indexed and no procedure is stored.","OWASP LLM01:2025 was fetched and is cited on the prompt-injection failure mode only. Attack examples from that page are not copied into a case study.","Calder Lab and similar unsourced production-metric blogs were not fetched and are not indexed.","Google Research abstract for Data Cascades in High-Stakes AI loaded on 2026-10-03 (the abstract says 92% prevalence). Not indexed for data-etl: it is an interview study of ML data practice, not a pipeline job failure. The indexed data-etl study is the dbt Cloud status page."],"studies":[{"id":"ftc-verkada-can-spam-2024","title":"FTC press release: Verkada commercial email and the CAN-SPAM Act","year":2024,"studyKind":"regulatory_writeup","classIds":["sales-outreach"],"failureModeIds":["confirmation-skip"],"lesson":"The FTC's August 30, 2024 press release says a Department of Justice complaint, filed on referral from the FTC, alleged that Verkada violated the CAN-SPAM Act by flooding prospective customers with commercial emails and failing to include an unsubscribe or opt-out, honor opt-out requests, and provide a physical postal address. The release says the complaint alleges more than 30 million commercial emails over three years, and that those emails violated the Act in four ways, including not honoring unsubscribe requests. It does not name the other three ways in that sentence. It says a proposed order, which a federal judge still had to approve, would require a $2.95 million penalty, called the largest penalty the FTC had obtained for a CAN-SPAM violation, and would prohibit further violations of the Act. The release states allegations and a proposed order. It does not say an outreach agent sent the mail. A sender that omits an opt-out or ignores one has not completed a lawful commercial send under the allegations on this page.","sourceUrl":"https://www.ftc.gov/news-events/news/press-releases/2024/08/ftc-takes-action-against-security-camera-firm-verkada-over-charges-it-failed-secure-videos-other","asOf":"2026-10-03","notes":"Fetched the FTC press release dated August 30, 2024. The same page also alleges security failures and undisclosed reviews. Those allegations are not the outreach lesson. The signed court order was not the source used here, so this row does not say the order was entered."}]}