1.4 KiB
1.4 KiB
| 1 | method | route | source | declared_auth | control_observed | sensitive_asset_or_effect | candidate_test_suite | audit_execution |
|---|---|---|---|---|---|---|---|---|
| 2 | GET | /api/attachments/{jobId:int} | AttachmentsController.cs:87 | local scheme | job query before attachment listing; filter audit pending | attachment metadata | AttachmentsControllerTests | NOT RUN |
| 3 | GET | /api/attachments/download/{id:int} | AttachmentsController.cs:103 | local scheme | owned helper and managed path checks | attachment bytes | AttachmentsControllerTests | NOT RUN |
| 4 | PATCH | /api/attachments/{id:int} | AttachmentsController.cs:125 | local scheme | owned helper; mutation review pending | metadata and AI-use flag | AttachmentsControllerTests | NOT RUN |
| 5 | GET | /api/billing/status | BillingController.cs:42 | local scheme | method declares local authentication | entitlement status | BillingControllerTests | NOT RUN |
| 6 | POST | /api/billing/checkout | BillingController.cs:58 | local scheme | method declares local authentication; provider mocked only | checkout session | BillingControllerTests | NOT RUN |
| 7 | POST | /api/billing/portal | BillingController.cs:104 | local scheme | method declares local authentication; provider mocked only | billing portal | BillingControllerTests | NOT RUN |
| 8 | POST | /api/billing/webhook | BillingController.cs:132 | AllowAnonymous | signature verification and size limit; full binding audit pending | subscription entitlement | BillingControllerTests | NOT RUN |
| 9 | PUT | /api/users/{id}/roles | UsersController.cs:142 | Admin role at class | privilege transition review pending | account roles | UsersControllerTests | NOT RUN |