- Ya
- 25 Agosti 2026, 21:16 UTC
- Mwandishi
- kamo
- Ahadi ya
- b2624a0
Ten tasks, TDD throughout, with the severity restated to what was actually verified: the Stripe fail-open is latent (the secret is present in prod, 38 bytes) and the two retail fail-opens are unreachable today (0 rows in **************** but the retail endpoint is genuinely public and unauthenticated and arms on the first configured provider. Also records two defects the spec did not name: the controller returns 400 with the exception message to an unauthenticated caller, and a non-2xx on invoice.created stalls finalization for up to 72 hours.