# KBX v20 Validation Report

정적 검증 대상:
- Provider JSON → TS/C# generated SHA parity
- 공식 source host allow-list
- KRX AUTH_KEY + approved service URL policy
- OPENDART crtfc_key/status contract
- KIS OAuth/base URI/rate-limit/current-price sample contract
- read-only boundary
- secret logging heuristic
- 기존 KBX 전체 governance gate

Host Repository 필수 검증:
- .NET 10 build/xUnit
- Secret Manager/Vault 연동
- KRX 승인 서비스 실제 sandbox/sample call
- OPENDART 000/013/020/800 응답 fixture test
- KIS 실전/모의 token cache + rate pacing test
- KIS 24h token expiry/reissue test
- Provider HTTP timeout/429/5xx failure injection
- 공식 문서 개정일 모니터링 및 contract review
