Control Tower local-only
Security Preflight
Evidencia sanitizada del Security Gate local. No autoriza produccion.
Security Gate checks
Revision local-only de RLS, assets, Flow + PayPal sandbox, gates de proveedor y bloqueo de produccion. Los valores sensibles se resuelven solo en runtime y no se muestran.
RLS_PRESENT
RLS present on Control Tower tables
PASSEDControl Tower migration must enable RLS on exposed tables.NO_RAW_SECRETS
No raw secrets in tracked local files
PASSEDUse env: or secret-ref: values only.PAYMENTS_API_ALLOWLIST
Payments API restricted to approved sandbox intent routes
PASSEDOnly approved sandbox payment-intent routes may exist under payment API namespaces.AUDIT_EVENTS
Audit events modeled
PASSEDaudit_events table must exist.CONFIG_REFERENCES
Configs require references for sensitive values
PASSEDconfigs must reject raw secret-like values.BRAND_ASSETS_PUBLIC
Brand assets published for Next static serving
PASSEDbrand/ must be synced into public/brand before review.NPM_AUDIT
npm audit result captured or explicitly deferred
PASSEDnpm audit not executed by static preflight; run npm audit during Security Gate review.GROWTH_PLATFORM_READINESS_AUDIT
Growth Platform readiness audit is clean
PASSEDGrowth Platform readiness audit must have no missing pages or broken links.FLOW_REAL_CALL_GATE
Flow sandbox real calls are env-gated
PASSEDReal Flow sandbox calls require ALTIROPAY_FLOW_SANDBOX_REAL_CALLS=approved-local-only.FLOW_CALLBACK_READINESS
Flow callback tunnel is local/manual unless approved
PASSEDTemporary public callback tunnels require FLOW_SANDBOX_PUBLIC_CALLBACK_APPROVAL=approved-temporary-local-tunnel.FLOW_STATUS_LOOKUP_BLOCKED
Flow status lookup remains blocked
PASSEDFlow status lookup automation remains blocked until a dedicated Security Gate approval.PAYPAL_SANDBOX_REAL_CALL_GATE
PayPal sandbox real calls are env-gated
PASSEDReal PayPal sandbox calls require ALTIROPAY_PAYPAL_SANDBOX_REAL_CALLS=approved-local-only.PAYPAL_SANDBOX_RUNTIME_CONTROLS
PayPal sandbox runtime controls are implemented
PASSEDPayPal sandbox runtime must enforce env gate, OAuth runtime-only calls, idempotency, webhook verification and sanitized evidence.PAYPAL_LIVE_PROHIBITED
PayPal live endpoints remain prohibited
PASSEDPayPal live or production targets must stay blocked before any provider call.Provider sandbox preflight
Flow sandbox
ALTIROPAY_FLOW_SANDBOX_REAL_CALLS=approved-local-only- FLOW_REAL_CALL_GATE
- FLOW_CALLBACK_READINESS
- FLOW_STATUS_LOOKUP_BLOCKED
Provider sandbox preflight
PayPal sandbox runtime
ALTIROPAY_PAYPAL_SANDBOX_REAL_CALLS=approved-local-only- PAYPAL_SANDBOX_REAL_CALL_GATE
- PAYPAL_SANDBOX_RUNTIME_CONTROLS
- PAYPAL_LIVE_PROHIBITED
Evidence rows
| id | title | status | message |
|---|---|---|---|
| RLS_PRESENT | RLS present on Control Tower tables | PASSED | Control Tower migration must enable RLS on exposed tables. |
| NO_RAW_SECRETS | No raw secrets in tracked local files | PASSED | Use env: or secret-ref: values only. |
| PAYMENTS_API_ALLOWLIST | Payments API restricted to approved sandbox intent routes | PASSED | Only approved sandbox payment-intent routes may exist under payment API namespaces. |
| AUDIT_EVENTS | Audit events modeled | PASSED | audit_events table must exist. |
| CONFIG_REFERENCES | Configs require references for sensitive values | PASSED | configs must reject raw secret-like values. |
| BRAND_ASSETS_PUBLIC | Brand assets published for Next static serving | PASSED | brand/ must be synced into public/brand before review. |
| NPM_AUDIT | npm audit result captured or explicitly deferred | PASSED | npm audit not executed by static preflight; run npm audit during Security Gate review. |
| GROWTH_PLATFORM_READINESS_AUDIT | Growth Platform readiness audit is clean | PASSED | Growth Platform readiness audit must have no missing pages or broken links. |
| FLOW_REAL_CALL_GATE | Flow sandbox real calls are env-gated | PASSED | Real Flow sandbox calls require ALTIROPAY_FLOW_SANDBOX_REAL_CALLS=approved-local-only. |
| FLOW_CALLBACK_READINESS | Flow callback tunnel is local/manual unless approved | PASSED | Temporary public callback tunnels require FLOW_SANDBOX_PUBLIC_CALLBACK_APPROVAL=approved-temporary-local-tunnel. |
| FLOW_STATUS_LOOKUP_BLOCKED | Flow status lookup remains blocked | PASSED | Flow status lookup automation remains blocked until a dedicated Security Gate approval. |
| PAYPAL_SANDBOX_REAL_CALL_GATE | PayPal sandbox real calls are env-gated | PASSED | Real PayPal sandbox calls require ALTIROPAY_PAYPAL_SANDBOX_REAL_CALLS=approved-local-only. |
| PAYPAL_SANDBOX_RUNTIME_CONTROLS | PayPal sandbox runtime controls are implemented | PASSED | PayPal sandbox runtime must enforce env gate, OAuth runtime-only calls, idempotency, webhook verification and sanitized evidence. |
| PAYPAL_LIVE_PROHIBITED | PayPal live endpoints remain prohibited | PASSED | PayPal live or production targets must stay blocked before any provider call. |