fix(arch): Externer Architektur-Audit — 13 Backend-Fixes, Phase Q geplant #370

Closed
opened 2026-09-13 00:25:20 +00:00 by Leopoldadmin · 0 comments
Owner

Audit-Verifikation

Alle 17 Findings des externen Audits (2026-09-13) gegen den Code geprüft — ALLE BESTÄTIGT.

Umgesetzt (Commit 4a25ac1, tests/test_audit_architecture_fixes.py 17/17)

P1: list_workspaces Module-Bug · active-manifests Tenant-Filter · uninstall Lifecycle · ContractRegistry DB-Guard · Field-Definitions Lifecycle · 12 Permission-Keys · Contact-Felddefinitionen ins Plugin
P2: contact_folder Ownership · fail-closed Fallback · forgejo is_core=False · DMS is_core=True (ADR-020) · Worker-Entkopplung · DSGVO-Dedup · false-green Tests

Geplant als Phase Q (Roadmap)

Q1 statische Plugin-Routen · Q2 Settings-Routen · Q3 STATIC_COMPONENT_MAP · Q4 widgetRegistry

Verifikation: AST-Scan Permission-Katalog 146/0 fehlend; Cross-Plugin-Checker 497 Dateien/0 Imports; Combo-Order-Test 35/35.

## Audit-Verifikation Alle 17 Findings des externen Audits (2026-09-13) gegen den Code geprüft — ALLE BESTÄTIGT. ## Umgesetzt (Commit 4a25ac1, tests/test_audit_architecture_fixes.py 17/17) P1: list_workspaces Module-Bug · active-manifests Tenant-Filter · uninstall Lifecycle · ContractRegistry DB-Guard · Field-Definitions Lifecycle · 12 Permission-Keys · Contact-Felddefinitionen ins Plugin P2: contact_folder Ownership · fail-closed Fallback · forgejo is_core=False · DMS is_core=True (ADR-020) · Worker-Entkopplung · DSGVO-Dedup · false-green Tests ## Geplant als Phase Q (Roadmap) Q1 statische Plugin-Routen · Q2 Settings-Routen · Q3 STATIC_COMPONENT_MAP · Q4 widgetRegistry Verifikation: AST-Scan Permission-Katalog 146/0 fehlend; Cross-Plugin-Checker 497 Dateien/0 Imports; Combo-Order-Test 35/35.
Leopoldadmin added the task label 2026-09-13 00:25:29 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Leopoldadmin/leocrm#370