I rejected all optional categories but still see a third-party request in DevTools. How do I tell whether this is a real consent failure?
Identify the exact resource and check three separate things: the assigned OptinStack category, the current consent choices, and the type of network request. A resource classified as necessary is expected to remain available. A Google Consent Mode cookieless ping can also appear even when storage signals are denied, depending on the Google setup.
After await window.OptinStack.ready, inspect window.OptinStack.choices. You can also subscribe to script-blocked, iframe-blocked, storage-blocked, and cookie-blocked events. Test in a clean private session so an older stored choice or previously created storage does not confuse the result.
Documentation: JavaScript API consent state, Blocking events, and Google Consent Mode v2.