The signup form on my second site spent twelve days taking addresses and storing none of them. It did not show an error. It did not write a line in any log. Somebody typed an address, pressed the button, and the page reloaded and forgot — which is exactly what a page does when nothing at all is listening.
That is the whole crime. Nothing failed.
Every check I had was green, and every check was right
I check that site more carefully than most people check a side project. The code behind that form was correct in my repository on the day it went up, and it is still correct there today. Everything that inspected it reported green for twelve days, and every one of those reports was accurate — about the file it was reading.
The visitor was reading a different file. When the publishing system saves a page, it rewrites certain characters into a safer form. In the small piece of code that makes the form work, it rewrote one of them. Two characters became twelve. A browser that meets those twelve stops at the first one and refuses the entire script — not the line it is standing on: all of it, form included.
The number I will never have
I cannot tell you what this cost. Not one attempt was recorded, so there is nothing to count — and that is the part worth sitting with. The bill for this defect is not twelve days of lost signups. It is that the size of the loss is permanently unknowable, because the thing that would have measured it is the thing that was broken.
The repair itself took a few minutes and cost nothing.
What it would have talked me into
Left alone for another month, this would have produced a decision, and the decision would have been the expensive part. A signup count that sits at zero is not neutral information. It argues. It says the topic is too narrow, the writing is not good enough, the whole site was a bad idea. It looks like the market talking, and it is the kind of evidence a founder acts on, because acting on evidence is supposed to be the responsible thing.
It was not the market. It was one character, rewritten by a machine at the last step, in the one place none of my checks were looking. I would have rebuilt a strategy against a signal that had never once been connected to a person.
The cheap check
The thing that caught this reads the page as it is actually delivered, not as it was written, and it found the defect on its first run. That is a machine, and you do not need one. The version that costs nothing takes a minute a week, and any founder can do it on any site they own.
Once a week, use your own form. Type an address, press the button — and then go and check whether the address arrived. Not whether the page said thank you. Whether it arrived. The thank-you note is written by the same page that is supposed to be doing the work, and a page will happily thank you for nothing.
Treat a flat zero as an untested instrument, not as a result. Any number that has been exactly zero for more than a few days has earned one manual test before it earns a strategy meeting.
The honest end of this: the checker is not yet pointed at every page I own. Until it is, this exact class of mistake can happen again on a site I have not aimed it at, and I will not know for as long as nobody types an address. That is the next job, and when it is done it will say so here.
Dates, both strings and the twelve-day span come from the repair commit c987f7cc of 6 September 2026 and from the commit that introduced the form on 25 August. The verdict in the figure was measured again on 6 September by running a syntax check over both versions on this machine; the left one passes, the right one raises an error at the first rewritten character. How many people attempted to sign up during those twelve days is not measured and cannot be recovered.
