Issues

• Threat model (G15): pin that the served console answers 404 for traversal-shaped asset paths

  qorpe/goldpath#454 · Filter by author omercelikdev opened on Oct 25, 2026

• Threat model (G15): a bulk batch does not record who uploaded it, so self-approval cannot be detected

  qorpe/goldpath#453 · Filter by author omercelikdev opened on Oct 25, 2026

• Threat model (G15): admin verbs carry no CSRF defence when the floor is a gateway cookie

  qorpe/goldpath#452 · Filter by author omercelikdev opened on Oct 25, 2026

• G12 Telco 11/11: ship the bundle-first deploy story with its runbook, and close the Telco column and the variant rows

  qorpe/goldpath#437 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 10/11: age rated usage into rollups, purge only summarized detail, and archive invoices legal-grade (Archival ✅)

  qorpe/goldpath#436 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 9/11: notify each invoice once and run a CRM-triggered win-back campaign over deactivated subscriptions (Notification + Campaign, the card-triggered set)

  qorpe/goldpath#435 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 8/11: settle each payment-gateway callback once across N out-of-order deliveries, and field the breaker on callback chaos (Idempotency ✅)

  qorpe/goldpath#434 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 7/11: run the monthly billing cycle in competing chunks across instances, never re-bill, and issue InvoiceIssued (Jobs + Locking + Outbox ✅)

  qorpe/goldpath#433 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 6/11: ingest usage records in a dedup-ON queue worker, rate them through UsageRecorded, and mask traffic/location data (Worker + DataProtection ✅)

  qorpe/goldpath#432 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 5/11: serialize port-in transitions on the redis lock and keep deactivated subscriptions readable for win-back (Locking part + SoftDelete ✅)

  qorpe/goldpath#431 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 4/11: serve the plan/campaign catalog and balance reads from cache, and audit tariff and subscriber state changes (Caching + AuditTrail ✅)

  qorpe/goldpath#430 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 3/11: fence each dealer by subdomain and gate the billing-cycle verbs to the billing-ops client (MultiTenancy + Auth ✅)

  qorpe/goldpath#429 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 2/11: generate the telco app on sqlserver with the wizard, switch to the redis lock and subdomain tenancy, and prove the activation skeleton nightly

  qorpe/goldpath#428 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Telco 1/11: turn the telco card into the variant sample's build plan, and record how apikey and subdomain tenancy coexist

  qorpe/goldpath#427 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2
  3

• G12 Insurance 11/11: close the Insurance column — every core cell ✅, NFR proofs mapped, tour written, nightly green

  qorpe/goldpath#426 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 10/11: archive closed claim files as whole graphs, honor litigation holds, and compose erasure with retention (Archival ✅)

  qorpe/goldpath#425 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 9/11: send one renewal notice per renewed policy, with evidence (add feature notification, the card-triggered module)

  qorpe/goldpath#424 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 8/11: run nightly renewals as a singleton that chains the payment run and pins its tariff version (Jobs ✅, Locking ✅)

  qorpe/goldpath#423 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 7/11: let only an adjuster decide a claim, one at a time, and disburse ClaimApproved once (Auth + claim-finalize lock + Outbox ✅)

  qorpe/goldpath#422 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 6/11: birth the bus with add feature outbox, publish PolicyIssued, and consume partner FNOL in a queue worker (Worker ✅)

  qorpe/goldpath#421 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 5/11: take FNOL by API so a retried submission files one claim and health data never leaks (Idempotency + DataProtection)

  qorpe/goldpath#420 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 4/11: endorse and cancel a policy with audit evidence and queryable history (AuditTrail + SoftDelete, one toggle through the manifest skill)

  qorpe/goldpath#419 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 3/11: fence each agency's book and cache the tariff catalog on the quote path (add feature multitenancy + caching)

  qorpe/goldpath#418 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 2/11: generate the insurance app LEAN with the wizard, ship the quote-to-issue walking skeleton, and prove it nightly on the published train

  qorpe/goldpath#417 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2

• G12 Insurance 1/11: turn the insurance card into the sample's build plan (cells to slices, lean birth, card-triggered set)

  qorpe/goldpath#416 · Filter by author omercelikdev opened on Oct 24, 2026 · 1.0.0-rc.2
  1