Cola remediacion Security Gate
La cola transforma los controles bloqueantes del readiness board en acciones con prioridad, owner y carril. No habilita produccion, live credentials, callbacks publicos ni custodia.
- CLIENT_SECURITY_GATE_REMEDIATION_QUEUE_READY_LOCAL_ONLY
- LOCAL_ONLY_SECURITY_GATE_REMEDIATION_QUEUE
- LOCAL_ONLY_SECURITY_GATE_REMEDIATION_QUEUE
- ACTION_REQUIRED_BEFORE_PRODUCTION
- NO_CUSTODY_OF_FUNDS
- BLOCKED_BY_SECURITY_GATE
Items remediacion Security Gate
| Item | Prioridad | Owner | Estado | Destino |
|---|---|---|---|---|
| Sandbox evidence certification | P0 | operations | ACTION_REQUIRED_BEFORE_PRODUCTION | sandbox_certification |
| RLS tenant isolation validation | P0 | security_engineering | ACTION_REQUIRED_BEFORE_PRODUCTION | rls_tenant_isolation |
| Vault-backed credential references | P0 | security_engineering | ACTION_REQUIRED_BEFORE_PRODUCTION | vault_backed_credentials |
| Webhook signature validation and public callback design | P0 | security_engineering | ACTION_REQUIRED_BEFORE_PRODUCTION | webhook_signature_validation |
| Idempotency for orders, callbacks and retries | P1 | security_engineering | ACTION_REQUIRED_BEFORE_PRODUCTION | idempotency_controls |
| Legal/compliance review before production | P1 | legal_compliance | ACTION_REQUIRED_BEFORE_PRODUCTION | legal_compliance_review |
Carriles remediacion
| Carril | Owner | Items |
|---|---|---|
| Carril tecnico Security Gate | security_engineering | 4 |
| Carril legal/compliance | legal_compliance | 1 |
| Carril evidencia sandbox | operations | 1 |
Bloqueos remediacion Security Gate
| Accion bloqueada | Estado |
|---|---|
| Aprobar go-live productivo desde la cola | BLOCKED_BY_SECURITY_GATE |
| Pegar o almacenar credenciales live en la cola | PROHIBITED |
| Declarar pasarela propia o custodia de fondos | PROHIBITED |