# KBX v21 Validation Report

## Static governance performed in this package

- External dataset/source/provider-operation parity
- TS/C# generated external-data catalog Source SHA parity
- Strict/Stale-While-Revalidate/provider-defined policy validation
- KIS current-price stale fallback prohibition
- KRX universal TTL hallucination guard
- raw Provider payload persistence prohibition
- request descriptor secret-pattern guard
- external-data API/Permission/Screen/Component existence
- migration provenance column checks
- deterministic external-data scenarios
- all pre-existing KBX governance gates

## Host repository mandatory gates

이 Starter 환경에서는 실제 Host 실행을 통과했다고 주장하지 않는다. 실제 제품 Repository에서 다음을 수행한다.

1. .NET 10 restore/build/xUnit
2. DbUp migration 001~014 against ephemeral PostgreSQL
3. `KbxExternalDataFreshnessPolicyTests`
4. OPENDART synthetic/contract fixture normalization
5. KIS strict expired-cache + provider outage scenario
6. OPENDART stale-while-revalidate + Hangfire refresh scenario
7. KRX approved service마다 explicit normalizer/freshness policy 존재 여부
8. Vue typecheck/Vitest/Playwright `COMMON-DATA-001`
9. Secret scanning: AUTH_KEY/crtfc_key/appsecret/access token이 cache/request_descriptor/log/telemetry에 없는지 확인
10. 실제 운영 Telemetry로 Freshness TTL을 검토하되 공급자 공식 사실과 KBX 정책을 구분
