What this audit checks
Authentication & access
- Basic Auth on /user/ still issues a GeoSession JWT (no 401)
- GeoSession JWT cache hit-rate > 95% (re-auth churn signal)
- Geoclient (GEOAccountCode) identifier valid
- Sandbox vs production base URL flagged correctly
On-time delivery & Predict slot promise
- Carrier OTD < 95% rolling 30D (DPD contracted SLA breach)
- OTD trending down >5pp WoW (early degradation signal)
- Predict slot accuracy < 92% (the brand-promise window)
- Saturday / Sunday delivery success < 90% on premium services
- First-attempt delivery rate < 85%
Exceptions, claims & failed pickups
- Exception rate > 3% rolling 30D
- Open claims unresolved > 7 days (CS coverage gap)
- Open claims unresolved > 14 days (abandoned cash + churn risk)
- Failed pickup rate > 3% (carrier-side relationship decay)
- Refused-parcel rate > 1%
UK -> EU cross-border lanes (Brexit-specific)
- Cross-border (destination_country != GB) exception rate > 5%
- Customs-held parcels > 1% of cross-border volume
- EU mainland transit time > 5 days (cross-border lane stretch)
- Per-destination-country OTD < 90% (specific lane health)
Cost & service-mix economics
- Avg cost / shipment up >10% vs prior period
- Predict / Saturday premium uplift > 40% over standard NextDay
- Cross-border surcharge as % of revenue > 5% (post-Brexit margin pressure)
- Claim value as % of DPD revenue > 2% rolling 90D
Cross-channel: revenue at risk (the kill-shot area)
- Cross-channel: late shipments joined to commerce_sibling orders -> revenue at risk per channel
- Cross-channel: 3PL-vs-carrier delay attribution (ShipBob vs DPD in-transit)
- Cross-channel: open claims with no Jira tracker_item -> CS coverage gap
- Cross-channel: late-delivery refund-propensity * sibling.order.total -> $ exposed to chargeback this week
- Cross-channel: customs-held cross-border parcels -> proactive merchant-IOSS-fix candidates
Severity thresholds
| Signal | Warn | Critical |
|---|---|---|
on_time_delivery_rate | 95 | 90 |
predict_slot_accuracy | 95 | 92 |
first_attempt_delivery | 90 | 85 |
exception_rate | 2 | 3 |
open_claims_age_days | 7 | 14 |
failed_pickup_rate_pct | 2 | 3 |
cross_border_exception_pct | 3 | 5 |
customs_held_pct | 0.5 | 1 |
shipping_cost_per_order_change_pct | 5 | 10 |
premium_uplift_pct | 30 | 40 |
claim_value_pct_of_revenue | 1 | 2 |
region_otd_pct | 92 | 90 |
auth_token_failures_24h | 1 | 5 |
Data sources
GET TBD - pending CloudHub C# backend URL extraction- Auth probe + GeoSession JWT issuanceGET TBD - pending CloudHub C# backend URL extraction- Shipment list + status (OTD, transit time)GET TBD - pending CloudHub C# backend URL extraction- Tracking events for late / exception detectionGET TBD - pending CloudHub C# backend URL extraction- Claims (open / settled list + age / value)