Closed by focused module matrix and contract coverage. Evidence:\n\n- scripts/check-module-matrix.sh runs backend module-system and access-contract tests, dependency boundary checks, core WebUI…
Closed by focused module matrix and contract coverage. Evidence:\n\n- scripts/check-module-matrix.sh runs backend module-system and access-contract tests, dependency boundary checks, core WebUI…
Closed by focused module matrix and contract coverage. Evidence:\n\n- scripts/check-module-matrix.sh runs backend module-system and access-contract tests, dependency boundary checks, core WebUI…
Closed by focused module matrix and contract coverage. Evidence:\n\n- scripts/check-module-matrix.sh runs backend module-system and access-contract tests, dependency boundary checks, core WebUI…
pip-audit
pip-audit
Closed as run-and-record, not remediated. Evidence: scripts/check-dependency-audits.sh ran python -m pip_audit --progress-spinner off; docs/audits/2026-07-09-dependency-audit.md records 24 Python…
npm audit --omit=dev
npm audit --omit=dev
Closed by running and recording the frontend production audit. Evidence: scripts/check-dependency-audits.sh runs npm audit --omit=dev in webui; the 2026-07-09 local run recorded in docs/audits/2026…
Closed by adding a reproducible dependency-audit workflow and local runner. Evidence: scripts/check-dependency-audits.sh, docs/DEPENDENCY_AUDITS.md, docs/audits/2026-07-09-dependency-audit.md, and…
Closed by the current split documentation and contract-test pass. Evidence:\n\n- docs/MODULE_ARCHITECTURE.md now documents stable kernel contracts, removed obsolete core access/admin re-export…
govoplan_core.access.* temporarily with deprecation warnings
Closed by the current split documentation and contract-test pass. Evidence:\n\n- docs/MODULE_ARCHITECTURE.md now documents stable kernel contracts, removed obsolete core access/admin re-export…
govoplan_core.access.* temporarily with deprecation warnings
Closed by the current split documentation and contract-test pass. Evidence:\n\n- docs/MODULE_ARCHITECTURE.md now documents stable kernel contracts, removed obsolete core access/admin re-export…