690517:1449 204 and 302 refactor #03

2026-05-17 14:49:45 +07:00
parent 544bb30277
commit 50bffdf38a
53 changed files with 4026 additions and 617 deletions
@@ -1,4 +1,3 @@
-
 # Security Rules (Non-Negotiable)

 ## Mandatory Security Requirements
@@ -27,7 +26,9 @@
 - [ ] No SQL injection vulnerabilities
 - [ ] File upload validation (whitelist + ClamAV)
 - [ ] Rate limiting applied to auth endpoints
- [ ] AI boundary enforcement (ADR-018) - no direct DB/storage access
+- [ ] AI boundary enforcement (ADR-023) - no direct DB/storage access
 - [ ] AI audit logging implemented for AI interactions
+- [ ] AI outputs validated before use (human-in-the-loop)
 - [ ] Error handling follows ADR-007 layered classification
+- [ ] Cache invalidation when data modified
 - [ ] OWASP Top 10 review passed