The seal standard: six checks, no shortcuts.

Open each check and read what I look at. Then switch one off and see what happens to the seal.

1. Code reviewEvery change is read end to end before it ships.

   Code that nobody understands, that hasn't been run, or that was copy-pasted goes back. If I can't explain what a line does, that line doesn't ship.

2. Security scanDependencies and known vulnerabilities are scanned.

   Every package is checked against known vulnerabilities. Secrets never live in the code and every input is validated. One finding stops the release.

3. Data and privacyNo unnecessary data is requested.

   For each data field I ask "do I really need this?" If not, it isn't collected. How collected data is handled goes into that product's privacy notice.

4. Speed testMeasured on a slow phone over a weak connection.

   Being fast on a fast computer is easy. First load and first tap response are measured on a mid-range phone with a weak connection.

5. AccessibilityUsable end to end with a keyboard and a screen reader.

   Put the mouse down and use only the keyboard. Try a screen reader, measure colour contrast, and make sure the layout survives bigger text.

6. Real device testTried on a phone in hand, not only an emulator.

   Finger taps, an on-screen keyboard covering the form: some problems only show up on a real device. Skip this step and no seal is stamped.