defiQUG
a2dc194a49
- Add Gitea Actions workflow; point README to gitea.d-bis.org/Sankofa_Phoenix/SMOA - Expand .gitignore for Spring H2 data, secrets, Kotlin .kotlin/, tooling - Track docs/api/generated ReDoc bundle; refresh api docs README - Android: network/auth/sync, UI shell, tests; backend credentials/integrity APIs - Docs, scripts (generate-api-docs), modules and core updates Made-with: Cursor
1.5 KiB
1.5 KiB
Gaps and inconsistencies (cross-cutting audit)
Last reviewed: 2026-03-23
Most previously tracked gaps are implemented. This file lists only long-horizon or compliance items.
Implemented (recent)
| Topic | Where |
|---|---|
| Shared OkHttp + Retrofit refresh | SyncRetrofitHolder, NetworkModule, BackendSyncAPI / BackendPullAPI lambdas |
| Non-blocking hosted config | ClientConfigRefreshCoordinator.scheduleNonBlockingInitialLoad |
| Browser VPN policy flag | BuildConfig.SMOA_BROWSER_VPN_ENFORCED / -Psmoa.browser.vpnEnforced=true, VPNManager.setBrowserVpnEnforced |
| Room credential cache | credential_cache + CredentialCacheDatabaseModule |
| OpenAPI drift process | docs/development/OPENAPI-SYNCHRONIZATION.md, scripts/export-openapi-local.sh |
Remaining (long-term)
| Topic | Notes |
|---|---|
| Strong multi-tenant isolation | API key + X-Unit are not RLS; see docs/security/TENANT-THREAT-MODEL.md. |
| AAMVA / ICAO production compliance | Encoders need jurisdiction QA and official test vectors. |
| Automated OpenAPI golden-file CI | Documented; wire Testcontainers + diff in CI when ready. |
| Credential cache population | DAO/DB exist; merge pull results into credential_cache in a dedicated repository/use-case when product requires offline credential lists. |
Related
docs/reference/IDENTITY-TEMPLATE-ALIGNMENT.mddocs/schemas/backend/docs/BACKEND-GAPS-AND-ROADMAP.md