Developer Offshore research

Feature-Flag Exposure Missingness Research

A source-backed protocol testing whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. Published October 12, 2026.

Use this report with the Research library and related developer guides to turn evidence into a bounded work brief.

Feature-Flag Exposure Missingness Research

Key stats

  • 10 authoritative HTTPS sources
  • One frozen observation window
  • Two reviewers for a planned subset

Key takeaways

  • Keep missing and late evidence visible.
  • Separate measurement work from owner decisions.
  • State only conclusions supported by the frozen population.

Pre-register the decision and observation window

Feature-Flag Exposure Missingness Research stage 1 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 1 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 1 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Define the eligible population

Feature-Flag Exposure Missingness Research stage 2 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 2 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 2 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Preserve source lineage

Feature-Flag Exposure Missingness Research stage 3 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 3 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 3 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Measure missing and late evidence

Feature-Flag Exposure Missingness Research stage 4 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 4 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 4 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Blind a stratified review subset

Feature-Flag Exposure Missingness Research stage 5 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 5 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 5 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Test alternative classifications

Feature-Flag Exposure Missingness Research stage 6 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 6 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 6 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Quantify uncertainty without hiding counts

Feature-Flag Exposure Missingness Research stage 7 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 7 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 7 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Audit access and privacy boundaries

Feature-Flag Exposure Missingness Research stage 8 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 8 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 8 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Route contradictions to accountable owners

Feature-Flag Exposure Missingness Research stage 9 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 9 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 9 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Reproduce and publish a bounded conclusion

Feature-Flag Exposure Missingness Research stage 10 tests whether missing exposure events are concentrated in browsers, regions, or failure paths relevant to a decision. The eligible population is flag evaluations, exposure events, outcomes, clients, regions, and collection failures. Freeze the decision rule, time window, inclusion criteria, exclusions, unit of analysis, and owner before inspecting outcomes. Retain stable identifiers for source events and transformations so reviewers can distinguish a real absence from collection loss, late arrival, or a changed definition. This protocol supports a bounded engineering decision; it does not certify a platform, vendor, team, or control.

Feature-Flag Exposure Missingness Research stage 10 reports eligible, observed, excluded, unavailable, late, conflicting, and unresolved counts separately. Stratify by service, risk, environment, client, region, and outcome only where those fields were defined before analysis. Compare retained and missing records, repeat a planned subset with an independent reviewer, and publish disagreements rather than forcing consensus. Any correction appends a versioned note and preserves the earlier result.

Feature-Flag Exposure Missingness Research stage 10 protects secrets and personal or customer data through approved references, minimum fields, role-based access, retention limits, and synthetic fixtures where possible. Developers may implement queries and evidence tooling, while data, security, service, and release owners approve access and action. The conclusion states the exact versions, window, limitations, and next verification; causal or population-wide language is prohibited unless the design actually supports it.

Evidence table

Signals, inspection points, and accountable owners
SignalWhat to inspectOwner
OutcomeAcceptance evidence for the bounded taskTask reviewer
ControlAccess, test, and approval boundaryInternal owner
HandoffOpen risks and next decisionNext owner
Good distributed work is observable at the handoff: the result, evidence, limitations, and next owner are explicit.

Frequently asked questions

What is the unit of analysis?

A pre-registered record from flag evaluations, exposure events, outcomes, clients, regions, and collection failures.

Does a pass establish compliance?

No. It supports only the bounded decision for the recorded method, versions, and observation window.

Sources

  1. NIST Secure Software Development Framework
  2. NIST SP 800-53 Rev. 5
  3. CISA Secure by Design
  4. OWASP ASVS
  5. SLSA Specification
  6. OpenSSF Scorecard
  7. IETF RFC 9110 HTTP Semantics
  8. W3C Trace Context
  9. OpenTelemetry Specification
  10. CNCF Cloud Native Security Whitepaper

Related research

Build the evidence packet

Define the decision, freeze the population, and assign accountable owners before collecting outcomes.

Discuss developer support