- Shipped
- 25 ஆகஸ்ட், 2026 அன்று 9:16 PM UTC
- Author
- kamo
- Commit
- b2624a0
Ten tasks, TDD throughout, with the severity restated to what was actually verified: the Stripe fail-open is latent (the secret is present in prod, 38 bytes) and the two retail fail-opens are unreachable today (0 rows in **************** but the retail endpoint is genuinely public and unauthenticated and arms on the first configured provider. Also records two defects the spec did not name: the controller returns 400 with the exception message to an unauthenticated caller, and a non-2xx on invoice.created stalls finalization for up to 72 hours.