V13-FE-006: consolidate approved UI and contract hardening

2026-08-13 02:41:00 +09:00
parent d79edae546
commit 3f293d8aa8
1278 changed files with 14384 additions and 1664 deletions
@@ -0,0 +1,26 @@
+# AEG-VS-29 — Reconciliation replay-safety boundary
+
+## Source / Assumption / Unknown / Decision Required
+
+- Source: `PortfolioReconciliation/Endpoints.cs`, `ReconcileTradeHandler.cs`, v60 permission/idempotency guidance, and `AEG-X-005_RECONCILIATION_AUTH_DECISION_REQUIRED.md`.
+- Assumption: the client must reuse the same `Idempotency-Key` for retries of one reconciliation command.
+- Unknown: approved reconciliation role/policy, durable request/result binding schema, and production database migration owner.
+- Decision Required: approve endpoint authority and JobRun/request deduplication storage before production registration.
+
+## Implemented
+
+- Reconciliation POST rejects a missing or whitespace-only idempotency key with HTTP 400.
+- The handler defensively rejects a missing key when invoked outside HTTP boundary.
+- The previous random fallback key was removed; supplied key is propagated unchanged to the outbox event.
+- No role was invented and no automatic order/KIS capability was enabled.
+
+## Evidence
+
+Command: `dotnet test tests/KArtSell.ModelOperations.UnitTests/KArtSell.ModelOperations.UnitTests.csproj --no-restore -c Release --filter FullyQualifiedName~ReconciliationRequestValidatorTests`
+
+- Actual result: 1 test file / 2 tests passed.
+- `git diff --check`: passed; repository emitted only existing LF/CRLF normalization warnings.
+
+## Outstanding
+
+Durable request/result deduplication, database-backed replay integration, fresh/upgrade/re-run/failure migration rehearsal, approved authorization, and negative endpoint authorization evidence remain outstanding. This note does not claim full Reconciliation WBS completion.