Inside look · IQA

Welcome to Inside Sheesh's IQA

Where curiosity meets problem solving. Live trackers for every shipped product: findings, dev to-dos, regression checklists, and the questions that made us pull the thread.

Explore projects View source

The method

Three things, every time.

Every product gets the same treatment, because shipping fast and shipping right are the same problem dressed differently.

Curiosity first

The bug is rarely the bug. We start by asking what the system is actually doing, not what we wish it did. The good findings hide one layer past the obvious one.

Problem solving

Every finding ships with a path to fixing it: owner, role, severity, and a repro short enough that the engineer doesn't bounce. No bug report dies alone in a backlog.

Receipts kept

Every regression run leaves a trace: exportable JSON, copy-as- Markdown, persistent local state. The next person inheriting this work starts with context, not a clean slate.

Projects

Fourteen trackers, one fleet.

One tracker per Inside Sheesh product. Each is self-contained: state lives in your browser, exports as JSON or Markdown. Status badges reflect the last regression sweep (2026-05-29). Find a thing, file a thing, share a thing.

Treatment Adherence Platform

DR-TB adherence platform. As of 2026-08-04 both known hostnames are unreachable, medadher.com's nameservers were switched to WhoGoHost's parking-page nameservers around 2026-06-30 (domain itself isn't expired, valid to 2027). App confirmed alive on its raw IP, needs the nameservers pointed back at the real DNS host.

73 findings 66 to-dos 37 checklist items

Telehealth · doctor finder

Nuxt 3 SPA on dadin.interranetworks.com. First-pass regression turned up SPA fallback, headers, prerender, and login-form surprises. SEO hygiene needs a sweep.

17 findings 3 critical 7 high

USSD service hub

Telco-side gateway for short-code interactions. Was 500 across every route on the first pass; recovered by 2026-05-29. Outage findings now verified-resolved; the live SPA surface shows a permissive fallback and missing security headers.

12 findings 4 resolved 8 open

SMS dispatch · auth

Authentication dispatch service. Was HTTP 500 on every route as of 2026-05-29; public root now returns 200 with real content as of 2026-08-04 (curl-only re-check, no login yet). /smdispatch was shared over HTTP. Tracker also captures the HTTP-vs-HTTPS exposure and missing security headers.

11 findings 2 critical 500 today

Renewable energy MRV

Renewable Energy MRV platform. Admin console is live and fully walked as Organization Admin, including a to-do cross-check against the 262-item plan, as of 2026-08-04. Worst finding: no existing project can be opened, viewed, or edited from anywhere in the app. Settings page tab switcher is also broken (8 of 9 panels unreachable). Tracker carries 72 findings, 262 plan activities, and dedicated Outstanding and Completed tabs.

72 findings 262 plan items 7 critical

Election voting platform

Moved off mandate-frontend-seven.vercel.app; now served from dev.ourmandate.ng with real 404s and HSTS. Tracker holds the original 36-finding audit plus the domain-move note; prior findings need re-confirming on the new host.

37 findings 11 resolved domain moved

Aviation data · Nuxt + Express

Nigerian aviation databank. The API (ncaaapi.interranetworks.com) is up and correctly 401-gates /api, but the Nuxt front-end at ncaa-databank.vercel.app returns Vercel's DEPLOYMENT_NOT_FOUND, confirmed 2026-08-04: needs a fresh deploy, not a build fix. API also serves the same JSON for every path and ships no security headers.

7 findings 1 critical front-end down

Consumer complaints · legacy

Consumer Complaint Management System on ncaa.interranetworks.com. Legacy jQuery / DataTables / Google Charts stack. Serves the same page for every path (no real 404s), ships no security headers, and the title is the raw internal name.

7 findings 2 high legacy stack

CreateScape Digital

Creative agency · marketing

Agency marketing site on Vercel (the GalucyNiels build). Clean hosting baseline: real 404s, HSTS, fast edge TTFB. Gaps are SEO-side: no meta description and no OpenGraph cards, so its own social previews render blank.

5 findings 2 high (SEO) clean hosting

Doc viewer utility

Small Express utility on Vercel (bit-flip and document viewer). Healthy hosting; minor gaps: no page title, X-Powered-By disclosure, and a terse root with no landing or help page.

5 findings 2 medium utility

Supabase app · Vite React

cilia.vercel.app currently serves the unmodified "Vite + React" starter shell. The real Supabase-backed app is not deployed yet, so auth and data flows cannot be exercised. Tracker captures the placeholder-deploy blocker.

5 findings 1 critical placeholder deploy

NAMA aerodrome data · Next.js

National Digital Aerodrome Data Repository for NAMA: single-screen tower strip-board, agency portals for NCAA, FAAN and airlines. All 11 roles tested. RBAC is solid (verified), but it is served over plain HTTP and the live stream puts a JWT in the URL. UOI state-machine walk is the next wave. Traced to the FRD.

26 findings · 26 to-dos 10 verified re-tested 2026-06-21

GHG Vehicle Monitoring System

Nigeria GHG Vehicle Monitoring System for the Presidential Initiative on CNG and EV. M&E platform tracking conversions, deployments, emissions reductions, and actor registries across all programme states. TOR-traced UAT with 67 test cases.

12 findings 19 to-dos 37 checklist items

Pi-CNG Shortcode

USSD verification platform

USSD-based platform for tracking and verification of CNG and EV assets, integrated with NGVMS. Short code acquisition, MNO interconnection, stakeholder menus (FRSC, stations), toll-free service, and transaction reporting. 48 UAT test cases.

11 findings 15 to-dos 30 checklist items