{
  "feature_id": "POS-005",
  "agent": "security",
  "stage": "security_gate",
  "verdict": "APPROVED",
  "summary": "All queries parameterized. Admin routes require admin role. Product routes require pos role.",
  "checks": [
    {"item": "SQL injection prevention", "ok": true, "evidence": "All DB queries use $1, $2... placeholders; q trimmed before use"},
    {"item": "Authentication", "ok": true, "evidence": "requireRole admin for admin routes; requireAnyRole for product routes"}
  ],
  "issues": []
}