fix(arch): Externer Architektur-Audit — 13 Backend-Fixes, Phase Q geplant #370
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Audit-Verifikation
Alle 17 Findings des externen Audits (2026-09-13) gegen den Code geprüft — ALLE BESTÄTIGT.
Umgesetzt (Commit
4a25ac1, tests/test_audit_architecture_fixes.py 17/17)P1: list_workspaces Module-Bug · active-manifests Tenant-Filter · uninstall Lifecycle · ContractRegistry DB-Guard · Field-Definitions Lifecycle · 12 Permission-Keys · Contact-Felddefinitionen ins Plugin
P2: contact_folder Ownership · fail-closed Fallback · forgejo is_core=False · DMS is_core=True (ADR-020) · Worker-Entkopplung · DSGVO-Dedup · false-green Tests
Geplant als Phase Q (Roadmap)
Q1 statische Plugin-Routen · Q2 Settings-Routen · Q3 STATIC_COMPONENT_MAP · Q4 widgetRegistry
Verifikation: AST-Scan Permission-Katalog 146/0 fehlend; Cross-Plugin-Checker 497 Dateien/0 Imports; Combo-Order-Test 35/35.