Wave 7 — full security & correctness remediation + AI multi-provider layer#3

Open

kimhons wants to merge 194 commits into

feat/asset-system-regenfrom

remediation/wave-7-foundation

Commits on May 16, 2026

Commits on May 17, 2026

Commits on May 18, 2026

docs(plan): Track M — money correctness implementation plan
kimhons
committed
docs(plan): revise Track M plan per critic review
kimhons
committed
docs(plan): apply Track M review-2 SHOULD-FIX items
kimhons
committed
fix: TASK-MNY-01 Stripe payout cents conversion (FND-024)
kimhons
committed
docs(plan): fold FND-024 unit sweep into MNY-4
kimhons
committed
fix: TASK-MNY-05 persist affiliate revenue events to revenue_events table (FND-025)
kimhons
committed
fix: TASK-MNY-05 await async revenue-tracker callers + surface insert errors
kimhons
committed
fix: TASK-MNY-02/03 referral_codes migration + atomic increment + self-referral guard (FND-027)
kimhons
committed
fix: TASK-MNY-04 Stripe idempotency keys + single payout codepath + FND-024 unit sweep (FND-026)
kimhons
committed
fix: TASK-MNY-04 harmonize TrueLayer test fixture + exact idempotency-key assertions
kimhons
committed
fix: TASK-MNY-07 server-side commission recalculation in affiliate webhook (FND-028)
kimhons
committed
polish: TASK-MNY-07 document conversion->purchase mapping + pin recomputed commission in conversion test
kimhons
committed
feat: TASK-MNY-06 Money/Cents type + integer-cents commission aggregation (FND-029)
kimhons
committed
polish: TASK-MNY-06 fromDollars rejects non-finite input
kimhons
committed
docs(plan): Track C — compliance & AI hygiene implementation plan
kimhons
committed
docs(plan): revise Track C plan per critic review
kimhons
committed
docs(plan): apply Track C review-2 SHOULD-FIX items
kimhons
committed
fix: TASK-CMP-01 history-preserving consent persistence (FND-057)
kimhons
committed
fix: TASK-CMP-01 maybeSingle for consent reads + genuine cold-start/regrant tests
kimhons
committed
fix: TASK-CMP-02 wire breach notification to Resend + breach_notifications table (FND-056)
kimhons
committed
fix: TASK-CMP-02 per-user breach-notify isolation + HTML escaping + config guard
kimhons
committed
fix: TASK-CMP-03 expand delete_user_data_cascade to all user-linked tables (FND-058)
kimhons
committed
fix: TASK-CMP-03 erasure cascade — include strategy_library/ml_models/bill_* + complete audit-log anonymisation
kimhons
committed
feat: TASK-CMP-04a ModelRouter execution method — AIMLService boundary (FND-061)
kimhons
committed
fix: TASK-CMP-04b migrate financial + credit engines to ModelRouter (FND-061)
kimhons
committed
fix: TASK-CMP-04b migrate final AI engines + no-direct-aiml-service lint rule (FND-061)
kimhons
committed
fix: TASK-CMP-04c remove client model selection + voice TTS model whitelist (FND-059/060)
kimhons
committed
test: TASK-CMP-04c assert TTS service not called on whitelist rejection
kimhons
committed
fix: TASK-CMP-05 PII sanitisation + prompt-injection guard before AI calls (FND-062/063)
kimhons
committed
docs(plan): Track N — notifications & admin implementation plan
kimhons
committed
docs(plan): revise Track N plan per critic review
kimhons
committed
docs(plan): apply Track N review-2 notes
kimhons
committed
test: TASK-NTF-01 verify + lock session-scoped identity on notification routes (FND-041..044)
kimhons
committed
fix: TASK-IDR-04 user_id ownership filter on DB notification service mark-read/delete (FND-046)
kimhons
committed
fix: TASK-NTF-03 persist in-app notifications via the DB service + reconcile NotificationType (FND-047)
kimhons
committed
fix: TASK-NTF-03b notification_preferences table + durable preference persistence (FND-048)
kimhons
committed
polish: TASK-NTF-03b notification_preferences migration REVOKE/GRANT + PUT validation
kimhons
committed
fix: TASK-NTF-02 escape user input in transactional email templates (FND-045)
kimhons
committed
fix: TASK-NTF-02 sanitize shareUrl href + escape senderName in subject (FND-045)
kimhons
committed
fix: TASK-ADM-02 field whitelist on admin dispute PATCH — kill mass-assignment (FND-051/054)
kimhons
committed
polish: TASK-ADM-02 complete dispute status/outcome enums + validate date fields
kimhons
committed
fix: TASK-MOK-01 real DB-backed admin analytics + honest metrics — remove fabricated data (FND-052/053)
kimhons
committed
fix: TASK-ADM-03 clamp admin query limit/page + verify audit/subscription role gates (FND-055/049/050)
kimhons
committed
fix: repair Next.js production build — lazy Supabase/Resend clients + force-dynamic pages
kimhons
committed

Commits on May 25, 2026