3 Commits

Author	SHA1	Message	Date
ben.stull	ba8b493a31	feat(slice-3): storefronts domain — create + membership + INV-4 guard (§6.5) ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 22:33:57 -07:00
ben.stull	95680c9960	feat(slice-2): accounts domain — request_code/verify/get_account (INV-2/INV-3/INV-6) ... Email-canonical get-or-create, peppered-hash one-time codes with 10-min TTL, single-use, 5-attempt cap, and 60s resend cooldown; uniform new-or-known (no enumeration, §6.6). All identity rules in the domain layer once (INV-6); scenario + invariant tests green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-10 10:31:32 -07:00
ben.stull	4acab40653	feat(slice-1): backend skeleton, deps, and import-linter layer contract ... Four-layer package (main > domains > platform) per SD-0001 §6.2; GraphQL api layer deferred. main.py is a stub so the top layer exists from the start (fleshed out in the /healthz task). lint-imports green on the skeleton. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-10 08:34:38 -07:00