- Shipped
- 25 أغسطس 2026 في 9:16 م UTC
- صاحب البلاغ
- kamo
- Commit
- b2624a0
Ten tasks, TDD throughout, with the severity restated to what was actually verified: the Stripe fail-open is latent (the secret is present in prod, 38 bytes) and the two retail fail-opens are unreachable today (0 rows in **************** but the retail endpoint is genuinely public and unauthenticated and arms on the first configured provider. Also records two defects the spec did not name: the controller returns 400 with the exception message to an unauthenticated caller, and a non-2xx on invoice.created stalls finalization for up to 72 hours.