16 lines
705 B
JSON
16 lines
705 B
JSON
{
|
|
"feature_id": "F-115",
|
|
"agent": "security",
|
|
"stage": "security_gate",
|
|
"verdict": "APPROVED",
|
|
"reviewed_at": "2026-08-21",
|
|
"summary": "Removing endpoints and shrinking the public surface; no new attack surface.",
|
|
"checks": [
|
|
{ "item": "Removed endpoint /products/sku:generate (POST admin) was well-guarded; its removal reduces public surface", "ok": true },
|
|
{ "item": "listAllSkus removed; no SSRF-style data leak", "ok": true },
|
|
{ "item": "SKU generation uses the safe template literal SKU-MV-${id} (uuid)", "ok": true },
|
|
{ "item": "PATCH /products/:id/variants/:variantId still admin-only and validates SKU via the existing zod schema", "ok": true }
|
|
],
|
|
"issues": []
|
|
}
|