Current Security
- HTTP-only signed session cookies
- RBAC route gating for core APIs
- Login rate limiting + audit events
- Read-only DB enforcement
Alpha Rebuild
Secure, Read-Only Migration Runtime
Legacy report logic is being ported into a containerized app with hardened auth, scoped access, and parity-driven rollout.
Migration Status
- Core service layers active
- Batch-02 and Batch-03 report parity complete
- Batch-04 active: Taking Sheet, Takings Report, Group Spend
- Frontend report runner upgraded for financial tables