Siavash Sameni 32e1acc5ef docs: DB query & schema audit 2026-06-06 — 104 findings, 3 fixes landed (v2.9.13) ...

Full multi-agent audit of all Drizzle repos, service layer, and schema
files. 104 findings across critical/high/medium/low. Three fixes already
committed to backend in 2484150. Top open items: auth 1+3N rowToUser,
chat table-scan, GIN indexes, missing-transaction on money paths.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-06 19:41:01 +04:00

..

Mongo API Profiles/2026-05-31T14-26-19-969Z

docs: sync documentation with latest codebase state (merged)

2026-06-05 07:51:00 +04:00

Activity Log.md

docs: DB query & schema audit 2026-06-06 — 104 findings, 3 fixes landed (v2.9.13)

2026-06-06 19:41:01 +04:00

Audit Index - 2026-05-24.md

Add full system audit reports and Telegram Mini App debug handoff

2026-05-24 17:20:08 +04:00

Authorization Matrix - REST and Socket.IO.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

Backend Core Stack Decision Record - 2026-05-24.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

Backend Stack Security and Refactor Assessment - 2026-05-24.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

DB Migration Audit Report (2026-06-02).md

docs: sync documentation with latest codebase state (merged)

2026-06-05 07:51:00 +04:00

DB Query & Schema Audit - 2026-06-06.md

docs: DB query & schema audit 2026-06-06 — 104 findings, 3 fixes landed (v2.9.13)

2026-06-06 19:41:01 +04:00

Doc vs Code Audit Report - 2026-05-29.md

docs: add doc vs code audit report and comprehensive UAT test plan (2026-05-29)

2026-05-29 14:32:02 +04:00

Full Codebase Audit - 2026-05-30.md

audit: 2026-05-30 full-codebase audit — report, issues, docs, runbooks

2026-05-30 18:48:04 +04:00

Funds Ledger and Escrow State Machine Specification.md

docs(audit): align documentation with post-remediation backend reality

2026-05-24 11:16:29 +04:00

Logic Audit - 2026-05-24.md

Add full system audit reports and Telegram Mini App debug handoff

2026-05-24 17:20:08 +04:00

Payment Provider Adapter Spec.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

Performance Audit - 2026-05-24.md

Add full system audit reports and Telegram Mini App debug handoff

2026-05-24 17:20:08 +04:00

Platform Logical Audit - 2026-05-24.md

docs: add comprehensive logical audit report

2026-05-24 08:03:20 +04:00

Realtime Authorization Spec.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

Secure Build and Supply-Chain Policy.md

docs(audit): align documentation with post-remediation backend reality

2026-05-24 11:16:29 +04:00

Security Audit - 2026-05-24.md

Add full system audit reports and Telegram Mini App debug handoff

2026-05-24 17:20:08 +04:00

Security Ownership and Launch Decision Criteria.md

docs(audit): align documentation with post-remediation backend reality

2026-05-24 11:16:29 +04:00

Session and Authentication Architecture Decision.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

Task 4 Backend Security Architecture Verification Report.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

Task 5 Telegram-Native Verification Report.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.1 Telegram Product Surface and Flow Map.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.2 Telegram Identity Linking and Session Model.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.3 Telegram Bot Command and Notification Foundation.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.4 Telegram Mini App Shell Implementation.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.5 Telegram Payment and Wallet Strategy.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.6 Telegram Escrow Delivery Dispute Release Actions.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.7 Telegram Admin Support Surface.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.8 Telegram Security, Compliance, and Abuse Controls.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.9 QA Rollout Analytics and Launch Runbooks.md

Document telegram-native task 5 foundation

2026-05-24 13:19:54 +04:00

Task 5.10 Telegram First-Class Authentication.md

Update Telegram auth verification report

2026-05-24 16:15:40 +04:00

Threat Model - Amanat Escrow Platform.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00

UAT Comprehensive Test Plan - 2026-05-29.md

docs: add doc vs code audit report and comprehensive UAT test plan (2026-05-29)

2026-05-29 14:32:02 +04:00

Webhook Security Spec.md

Complete task 4 backend security architecture docs

2026-05-24 11:31:40 +04:00