Crussell

adversarial_attack_test.go

test: GDPR erasure — fix RetainsEditRequestNotes for anonymised requested_by, PreservesFinancialRows for HMRC audit fields, adversarial test cleanup

2026-08-22 00:34:51 +01:00

charge_helpers_test.go

fix: till saved-card SCA/consent + ownership invariant (F1/F5), money-F4 top-up expiry gate, 2FA-enforced 402 tests

2026-08-22 00:34:50 +01:00

charge_helpers.go

fix: payments money-safety round-2 — webhook booking gate + M2 stranded-charge refund, sync-path status guards, gift-card cancel re-issue reconcile, till-sweep clawback lock, sweep VAT rescue, refund credit routing

2026-08-22 00:34:51 +01:00

completion_idempotency_test.go

feat: SCA-only saved-card charges — 2FA charge fallback removed (C6), versioned consent fields, token provenance

2026-08-22 00:34:50 +01:00

completion_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

completion.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

concurrency_test.go

fix: review-loop A — discount credit on admin payments, campaign over-credit cap, sweep replay window, dedup refund revalidation, duplication/modularisation, GBP pence naming

2026-08-22 00:34:50 +01:00

discount_preview_test.go

fix: review-loop B — adversarial findings (sweep auto-refund, admin clamp, 2FA real challenge, opaque refresh tokens, gated client IP, GBP pence)

2026-08-22 00:34:50 +01:00

discounts.go

fix: restart-loop-A findings — pending sweep refunds, tip carve on discounts, TOCTOU redemption, single-use 2FA code + mint endpoint, refresh-token family revocation, admin 2FA code UX

2026-08-22 00:34:50 +01:00

dst_timezone_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

errors_extra_test.go

test: payment coverage — gift card daily caps, buildSplitRecords, ValidateAmount edge cases, SquareRefundStatusToLocal

2026-08-22 00:34:51 +01:00

errors_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

errors.go

feat: SCA-only saved-card charges — 2FA charge fallback removed (C6), versioned consent fields, token provenance

2026-08-22 00:34:50 +01:00

float64_validity_round2_test.go

fix: pre-launch review — security, money safety, privacy, legal, code quality

2026-08-22 00:34:51 +01:00

float64_validity_round3_test.go

fix: pre-launch review — security, money safety, privacy, legal, code quality

2026-08-22 00:34:51 +01:00

float64_validity_test.go

fix: pre-launch review — security, money safety, privacy, legal, code quality

2026-08-22 00:34:51 +01:00

giftcard_clawback_test.go

fix: gift-card money fixes — partial clawback surfaces CRITICAL (M6), per-admin daily-cap lock (M7), DB-clock expiry

2026-08-22 00:34:50 +01:00

giftcard_clawback.go

fix: gift-card money fixes — partial clawback surfaces CRITICAL (M6), per-admin daily-cap lock (M7), DB-clock expiry

2026-08-22 00:34:50 +01:00

giftcard_limits_test.go

test: payment coverage — gift card daily caps, buildSplitRecords, ValidateAmount edge cases, SquareRefundStatusToLocal

2026-08-22 00:34:51 +01:00

giftcard_limits.go

fix: loop-A fresh review (503c326 baseline) — overflow-guard bypass, discounted-deposit retry, GDPR audit scrub, till cap, sweep rescue, 2FA reissue + SCA retry, consolidation round

2026-08-22 00:34:50 +01:00

giftcard_redeem_touctoc_test.go

fix: gift-card money fixes — partial clawback surfaces CRITICAL (M6), per-admin daily-cap lock (M7), DB-clock expiry

2026-08-22 00:34:50 +01:00

giftcards_round10_adversarial_test.go

test: round-9/10 adversarial suites — sync-path vs webhook completion, gift-card double-refund, sweep VAT, till lock, account lockout + erasure

2026-08-22 00:34:51 +01:00

giftcards_test.go

test: payments round-2 — webhook gate/M2 refund, gift-card cancel re-issue, till lock contention, sweep VAT rescue coverage

2026-08-22 00:34:51 +01:00

giftcards.go

fix: gift card safety — fail-closed expiry check on refund, source-card expiry gate on transfer, oldest-first rate limiter eviction

2026-08-22 00:34:51 +01:00

guest_payment_block_test.go

Block guest-role tokens from online payment routes (RequireNonGuest middleware)

2026-08-22 00:34:49 +01:00

handlers_round9_fixes_test.go

test: round-9/10 adversarial suites — sync-path vs webhook completion, gift-card double-refund, sweep VAT, till lock, account lockout + erasure

2026-08-22 00:34:51 +01:00

handlers_round10_adversarial_test.go

test: round-9/10 adversarial suites — sync-path vs webhook completion, gift-card double-refund, sweep VAT, till lock, account lockout + erasure

2026-08-22 00:34:51 +01:00

handlers_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

handlers.go

fix: payment validation — tip cap ValidateAmount, RefundRequest gt=0 tag, float64 pence conversion docs

2026-08-22 00:34:51 +01:00

idempotency_helpers_test.go

fix: round-3 — tip gate asymmetry, webhook VAT align + 503 notifications, cash-tip campaign overcharge, lockout DoS, erasure durability, S3 retry cap, env parsing, per-user rate limiters, consume dead code, frontend 2FA remnants

2026-08-22 00:34:51 +01:00

idempotency_helpers.go

fix: round-3 — tip gate asymmetry, webhook VAT align + 503 notifications, cash-tip campaign overcharge, lockout DoS, erasure durability, S3 retry cap, env parsing, per-user rate limiters, consume dead code, frontend 2FA remnants

2026-08-22 00:34:51 +01:00

locks_test.go

Add bounded advisory-lock helper; convert loyalty redemption to try-lock

2026-08-22 00:34:49 +01:00

locks.go

fix: payments review rounds — money-safety, GDPR, security, gift-card cancel, modal stacking

2026-08-22 00:34:50 +01:00

loop_a_money_fixes_test.go

fix: round-2 loop-B adversarial (503c326 baseline) — B1 webhook race, APPROVED refund semantics, notification cap single-source, 2FA cooldown/StateFor hardening, register bcrypt semaphore

2026-08-22 00:34:50 +01:00

loop_b_fixes_test.go

fix: review round — B1 clock-skew tolerance + re-poll escalation, refresh-token access-token revocation, shared 2FA composable, per-package-DB test alignment

2026-08-22 00:34:50 +01:00

loop_b_money_fixes_round2_test.go

fix: round-2 loop-B adversarial (503c326 baseline) — B1 webhook race, APPROVED refund semantics, notification cap single-source, 2FA cooldown/StateFor hardening, register bcrypt semaphore

2026-08-22 00:34:50 +01:00

loop_b_money_fixes_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

loyalty_test.go

fix: review-loop B — adversarial findings (sweep auto-refund, admin clamp, 2FA real challenge, opaque refresh tokens, gated client IP, GBP pence)

2026-08-22 00:34:50 +01:00

loyalty.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

m4_tip_refund_redesign_test.go

fix: review round — B1 clock-skew tolerance + re-poll escalation, refresh-token access-token revocation, shared 2FA composable, per-package-DB test alignment

2026-08-22 00:34:50 +01:00

m5_fully_paid_completion_test.go

fix: tip double-count, fully-paid auto-completion, discount-refund hardening

2026-08-22 00:34:49 +01:00

max_online_tip_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

money_edge_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

money_safety_fixes_test.go

fix: round-3 — tip gate asymmetry, webhook VAT align + 503 notifications, cash-tip campaign overcharge, lockout DoS, erasure durability, S3 retry cap, env parsing, per-user rate limiters, consume dead code, frontend 2FA remnants

2026-08-22 00:34:51 +01:00

p14_payment_fixes_test.go

fix: review-loop B — adversarial findings (sweep auto-refund, admin clamp, 2FA real challenge, opaque refresh tokens, gated client IP, GBP pence)

2026-08-22 00:34:50 +01:00

payment_status_test.go

Expand payment remediation test coverage

2026-08-22 00:34:49 +01:00

payments_fixes_test.go

test: payments round-2 — webhook gate/M2 refund, gift-card cancel re-issue, till lock contention, sweep VAT rescue coverage

2026-08-22 00:34:51 +01:00

payments_r6_review_test.go

fix: review round 7 — fresh-eyes audit fixes (6 agents) + full test suites for every backend change

2026-08-22 00:34:49 +01:00

payments_review_fixes_test.go

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

payments_round7_test.go

fix: review round 7 — fresh-eyes audit fixes (6 agents) + full test suites for every backend change

2026-08-22 00:34:49 +01:00

payments_round8_test.go

fix: review-loop B — adversarial findings (sweep auto-refund, admin clamp, 2FA real challenge, opaque refresh tokens, gated client IP, GBP pence)

2026-08-22 00:34:50 +01:00

payments_round9_test.go

fix: review-loop B — adversarial findings (sweep auto-refund, admin clamp, 2FA real challenge, opaque refresh tokens, gated client IP, GBP pence)

2026-08-22 00:34:50 +01:00

payments_round10_test.go

fix: payments review rounds — money-safety, GDPR, security, gift-card cancel, modal stacking

2026-08-22 00:34:50 +01:00

payments_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

policy_ts_crosscheck_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

refund_exclude_test.go

…

refund_policy_boundary_test.go

feat: SCA-only saved-card charges — 2FA charge fallback removed (C6), versioned consent fields, token provenance

2026-08-22 00:34:50 +01:00

refund_policy.go

fix: pre-launch review — security, money safety, privacy, legal, code quality

2026-08-22 00:34:51 +01:00

refunds_round9_fixes_test.go

test: round-9/10 adversarial suites — sync-path vs webhook completion, gift-card double-refund, sweep VAT, till lock, account lockout + erasure

2026-08-22 00:34:51 +01:00

refunds_test.go

fix: refund sweep — manual-refund audit rows (admin_refund) + refund_failed flood cap

2026-08-22 00:34:50 +01:00

refunds.go

fix: gift card safety — fail-closed expiry check on refund, source-card expiry gate on transfer, oldest-first rate limiter eviction

2026-08-22 00:34:51 +01:00

save_card_verified_test.go

Block card saving for unverified accounts at the charge-handler level

2026-08-22 00:34:49 +01:00

sca_mock_parity_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

service_split_records_test.go

test: payment coverage — gift card daily caps, buildSplitRecords, ValidateAmount edge cases, SquareRefundStatusToLocal

2026-08-22 00:34:51 +01:00

service.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

sweep_boundary_test.go

test: payments round-2 — webhook gate/M2 refund, gift-card cancel re-issue, till lock contention, sweep VAT rescue coverage

2026-08-22 00:34:51 +01:00

sweep_round10_adversarial_test.go

test: round-9/10 adversarial suites — sync-path vs webhook completion, gift-card double-refund, sweep VAT, till lock, account lockout + erasure

2026-08-22 00:34:51 +01:00

sweep_test.go

test: payments round-2 — webhook gate/M2 refund, gift-card cancel re-issue, till lock contention, sweep VAT rescue coverage

2026-08-22 00:34:51 +01:00

sweep.go

fix: payment validation — tip cap ValidateAmount, RefundRequest gt=0 tag, float64 pence conversion docs

2026-08-22 00:34:51 +01:00

terminal_sca_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

testmain_test.go

fix: review round 7 — fresh-eyes audit fixes (6 agents) + full test suites for every backend change

2026-08-22 00:34:49 +01:00

till_round10_adversarial_test.go

test: round-9/10 adversarial suites — sync-path vs webhook completion, gift-card double-refund, sweep VAT, till lock, account lockout + erasure

2026-08-22 00:34:51 +01:00

till_test.go

test: payments round-2 — webhook gate/M2 refund, gift-card cancel re-issue, till lock contention, sweep VAT rescue coverage

2026-08-22 00:34:51 +01:00

till.go

fix: payment validation — tip cap ValidateAmount, RefundRequest gt=0 tag, float64 pence conversion docs

2026-08-22 00:34:51 +01:00

twofa_gate_consume_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

twofa_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

twofa.go

fix: round-3 — tip gate asymmetry, webhook VAT align + 503 notifications, cash-tip campaign overcharge, lockout DoS, erasure durability, S3 retry cap, env parsing, per-user rate limiters, consume dead code, frontend 2FA remnants

2026-08-22 00:34:51 +01:00

validators_extra_test.go

test: payment coverage — gift card daily caps, buildSplitRecords, ValidateAmount edge cases, SquareRefundStatusToLocal

2026-08-22 00:34:51 +01:00

validators_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

validators.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

vat_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

vat.go

fix: loop-A fresh review (503c326 baseline) — overflow-guard bypass, discounted-deposit retry, GDPR audit scrub, till cap, sweep rescue, 2FA reissue + SCA retry, consolidation round

2026-08-22 00:34:50 +01:00