Repository navigation
CONFIG-001B1: enforce server-only commerce admission - #152
Merged
Merged
Conversation
✅ Deploy Preview for luminous-fox-7c393f ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Contributor
Author
|
Release gate passed for exact head c4d0912. Two independent exact-diff reviews approved. Hosted run 29250794633 passed Frontend lint/build (including 113 Jest + 10 SPA checks), Functions lint/tests (278 passed + 1 emulator-only skip), and the Java-backed Firestore Rules emulator suite. Netlify deploy preview 6a54dce9aaaa4e0008285a27 is ready. Main is still exact base 2c62b8d. This proves source/preview checks only, not Firebase deployment, runtime-control creation, Stripe/provider configuration, or live commerce behavior. |
This was referenced Jul 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #151
Outcome
Adds a fail-closed, non-cached server admission boundary for every current new race, shop, complimentary, late-registration, and incident-refund command. A false deployment ceiling stops new commerce before Firestore. Commands that pass it, plus every refund, read strict server-only runtime state fresh. Signed Stripe webhooks and confirmation mail remain independent.
The runtime control and event/product checkout flags are denied to anonymous, member, and browser-admin clients. Missing, malformed, extra, or disabled control data produces one fixed nonsecret failure before rate-limit, business, mail, audit, or Stripe side effects.
This is source enforcement only. The protected officer writer, audit history, staging drill, already-open Stripe-object recovery, and reconciliation remain CONFIG-001B2/PAY-002/PAY-004/PAY-005.
Verification
Continuity
Officer impact: New race, shop, comp, and late-registration work stops when the typed ceiling or server-only controls are absent/off. Incident refunds have a separate decision. Webhook reconciliation and confirmation mail continue. No usable officer switch exists yet.
Officer documentation: docs/officers/EMERGENCY_AND_RECOVERY.md and docs/officers/PUBLISH_AND_CHECK.md
Deployment evidence: Source and local tests only at PR creation. No website publication, Firebase Rules/Functions deployment, runtime-control creation, Stripe/provider change, production payment, email, or live behavior has been performed or verified. Hosted checks and every affected release surface must be recorded separately.