rikrdo/mercadodevida
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(F-088): completed feature

Browse Source
This commit is contained in:
chattie
2026-08-20 21:29:14 +02:00
parent 63fdc775d9
commit 699c01ade5
40 changed files with 996 additions and 381 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
work/artifacts/F-087/security.json
View File

@@ -2,14 +2,27 @@
"feature_id": "F-087",
"verdict": "APPROVED",
"checks": [
{ "name": "No new attack surface", "result": "PASS", "notes": "Same inventory check used elsewhere; no new deps." },
{ "name": "Error messages do not leak sensitive data", "result": "PASS", "notes": "Message exposes only variantId, requested, availableQuantity — all already known to the UI." },
{ "name": "Auth chain unchanged", "result": "PASS", "notes": "Same cart routes; new error path goes through existing auth." }
{
"name": "No new attack surface",
"result": "PASS",
"notes": "Same inventory check used elsewhere; no new deps."
},
{
"name": "Error messages do not leak sensitive data",
"result": "PASS",
"notes": "Message exposes only variantId, requested, availableQuantity — all already known to the UI."
},
{
"name": "Auth chain unchanged",
"result": "PASS",
"notes": "Same cart routes; new error path goes through existing auth."
}
],
"sast": "PASS",
"dependency_review": "PASS",
"secret_scan": "PASS",
"verdict_reason": "Server-side validation strengthened; UI enforces the same cap.",
"reviewer": "security",
"reviewed_at": "2026-08-20T04:17:30Z"
}
"reviewed_at": "2026-08-20T04:17:30Z",
"agent": "security"
}