Internal Audit built an invoice matcher

“We'll tell Security once it works.”— Ravi, Internal Audit

Reason:

Because the workaround has onboarding documentation. Copied to production via floppy disks.

Built by:

Ravi, a controller

Build time:

an afternoon, mostly

Built with:

Airtable plus four Zapier zaps

Database:

a Postgres database called production-final-really-final containing 6 years of production data

Authentication:

the webhook secret is "secret"

Deployment:

running on a VM with 4 GB of free disk space

Responsible:

a vendor whose support contract expired 3 months ago

Documentation:

a README describing a version that no longer exists

Security situation:

the admin URL contains the word secret

Future disaster:

It will overwrite the official data with yesterday's export.

Age: 79 days · originally expected to last 3 weeks · 1 owner so far · survived 1 reorganisation · last meaningful change 19 days ago

Rated common mostly because: €159k per year, alive 4x longer than intended, 2 users.