feat(F-080): completed feature

2026-08-20 05:59:47 +02:00
parent 60206d88eb
commit 506dfd0cce
10 changed files with 209 additions and 42 deletions
--- a/work/artifacts/F-080/security.json
+++ b/work/artifacts/F-080/security.json
@@ -0,0 +1,15 @@
+{
+  "feature_id": "F-080",
+  "verdict": "APPROVED",
+  "checks": [
+    { "name": "XSS surface", "result": "PASS", "notes": "Inputs are plain text; values are sanitised by existing eurToCents parser." },
+    { "name": "Auth chain unchanged", "result": "PASS", "notes": "Same pricingApi.setVariantPrice endpoint, still gated." },
+    { "name": "No new dependencies", "result": "PASS", "notes": "No new packages." }
+  ],
+  "sast": "PASS",
+  "dependency_review": "PASS",
+  "secret_scan": "PASS",
+  "verdict_reason": "Pure UX fix; no new attack surface.",
+  "reviewer": "security",
+  "reviewed_at": "2026-08-20T04:01:30Z"
+}