Security Gate readiness cliente
El tablero consolida evidencia sandbox certificada, go-live bloqueado, compliance, tenant isolation, roles y configuracion proveedor. No aprueba produccion, live credentials, callbacks publicos ni custodia.
- CLIENT_SECURITY_GATE_READINESS_BOARD_READY_LOCAL_ONLY
- LOCAL_ONLY_SECURITY_GATE_READINESS_REVIEW
- SECURITY_GATE_REVIEW_BLOCKED_LOCAL_ONLY
- SECURITY_GATE_REVIEW_BLOCKED_LOCAL_ONLY
- LOCAL_ONLY_SECURITY_GATE_READINESS_REVIEW
- NO_CUSTODY_OF_FUNDS
- BLOCKED_BY_SECURITY_GATE
Controles Security Gate
| Control | Estado | Evidencia | Destino |
|---|---|---|---|
| Sandbox evidence certification | ACTION_REQUIRED_LOCAL_ONLY | client_sandbox_certification_suite_company_client_demo_brand_demo_store | sandbox_certification |
| RLS tenant isolation validation | BLOCKING_PRODUCTION | tenant_isolation_review_company_client_demo_brand_demo_store | rls_tenant_isolation |
| Vault-backed credential references | BLOCKING_PRODUCTION | provider_configuration_workbench_company_client_demo_brand_demo_store | vault_backed_credentials |
| Webhook signature validation and public callback design | BLOCKING_PRODUCTION | provider_configuration_workbench_company_client_demo_brand_demo_store | webhook_signature_validation |
| Idempotency for orders, callbacks and retries | BLOCKING_PRODUCTION | go_live_readiness_review_company_client_demo_brand_demo_store | idempotency_controls |
| Legal/compliance review before production | REQUIRED_BEFORE_PRODUCTION | legal_compliance_pack_company_client_demo_brand_demo_store | legal_compliance_review |
Artefactos fuente Security Gate
| Artefacto | Estado | Destino |
|---|---|---|
| client_sandbox_certification_suite_company_client_demo_brand_demo_store | CLIENT_SANDBOX_CERTIFICATION_SUITE_READY_LOCAL_ONLY | sandboxCertificationSuite |
| go_live_readiness_review_company_client_demo_brand_demo_store | GO_LIVE_READINESS_BLOCKED_LOCAL_ONLY | goLiveReadinessReview |
| legal_compliance_pack_company_client_demo_brand_demo_store | LEGAL_COMPLIANCE_PACK_READY_LOCAL_ONLY | legalCompliancePack |
| tenant_isolation_review_company_client_demo_brand_demo_store | TENANT_ISOLATION_REVIEW_READY_LOCAL_ONLY | tenantIsolationReview |
| client_role_access_matrix_pack_company_client_demo_brand_demo_store | CLIENT_ROLE_ACCESS_MATRIX_PACK_READY_LOCAL_ONLY | clientRoleAccessMatrixPack |
| provider_configuration_workbench_company_client_demo_brand_demo_store | PROVIDER_CONFIGURATION_WORKBENCH_READY_LOCAL_ONLY | providerConfigurationWorkbench |
Acciones Security Gate
| Accion | Estado | Destino |
|---|---|---|
| Ejecutar Security Gate Preflight local | REQUIRED_BEFORE_PRODUCTION | run_security_preflight |
| Validar RLS y aislamiento multiempresa | REQUIRED_BEFORE_PRODUCTION | review_rls_evidence |
| Revisar Legal Compliance Pack | REQUIRED_BEFORE_PRODUCTION | review_legal_compliance |
| Mantener produccion bloqueada | BLOCKED_BY_SECURITY_GATE | keep_production_blocked |
Bloqueos Security Gate
| Accion bloqueada | Estado |
|---|---|
| Aprobar go-live productivo | BLOCKED_BY_SECURITY_GATE |
| Habilitar credenciales live | PROHIBITED_LOCAL_ONLY |
| Publicar callbacks sin firmas, idempotencia y tunnel/public URL aprobada | BLOCKED_BY_SECURITY_GATE |
| Declarar pasarela propia, custodia o proveedor financiero regulado | PROHIBITED |