Files

rikrdo 1d4eebca54 feat(F-001): scaffold modular monolith skeleton with boundary checker

- TypeScript + Fastify skeleton under project/ (src/modules, shared, infrastructure, app)
- scripts/check-module-boundaries.mjs enforcing module public-API rules (tested with fixtures)
- GET /health endpoint, error envelope without stack leakage
- specs/F-001-scaffold (SPEC/DESIGN/TASKS/TESTS), spec/tech.md dependency justification
- 30-ticket MercadoDeVida roadmap in backlog/features.json, spec/roadmap.md
- All gates approved: reviewer, security, qa; verify.sh green

2026-08-14 21:46:54 +02:00

501 B

Raw Blame History

Security Policy

Gate de seguridad (obligatorio)

Cada feature debe tener work/artifacts/<feature_id>/security.json con:

verdict: APPROVED | CHANGES_REQUESTED
checks: secretos, dependencias, SAST básico, validación de inputs
findings: lista de hallazgos con severidad

Reglas

Si hay hallazgos críticos/altos sin mitigación: CHANGES_REQUESTED.
No se permite exponer credenciales ni secretos en repo/chat.
Dependencias nuevas requieren justificación en spec/tech.md.

501 B Raw Blame History

Security Policy

Gate de seguridad (obligatorio)

Reglas

501 B

Raw Blame History