chore(frontend): add eslint quality gate

2026-08-30 00:19:51 +02:00
parent 7318b02e11
commit a74daa7aa4
21 changed files with 3729 additions and 82 deletions
@@ -11,13 +11,6 @@ Updated: 2026-08-15
 - **Current access check:** Production has test-mode secret and webhook values, but `STRIPE_PRICE_PREMIUM` currently contains a `prod_...` Product ID. Checkout requires the recurring `price_...` Price ID; the server now treats the wrong identifier type as disabled rather than calling Stripe. The publishable key is not used by hosted Checkout. Local fake-gateway coverage proves active → expired → canceled/replayed role transitions without losing non-AI data (V-185).
 - **Runbook:** Follow `docs/operations/stripe-activation.md`, completing test mode before creating or installing live-mode values.

-## Document parser dependency and isolation
-
- **Blocked:** SEC-006 dependency remediation and the dependent SEC-007 parser-isolation package.
- **Why:** The repository contains reachable parser advisories. Resolving compatible fixed versions and proving the new environment requires package-index access, which repository policy does not authorize implicitly. SEC-007 deliberately follows that compatibility update so isolation is tested against the actual fixed stack.
- **Required:** Explicitly authorize package-index/internet access for the parser dependency resolution. No production data or malicious sample is required.
- **Recommended:** Resolve and hash compatible versions first, run the benign extraction corpus and audit, then implement bounded child-process/container isolation against that exact environment.
-
 ## Public registration verification

 - **Blocked:** Completing a real-browser production signup check.