docs(dnn): #445 §3 e-shop Stripe-native capability scoping (read-only) - #625
Merged
Conversation
TERTIAIRE of ai-01 deep-queue supersede #3 (msg-...v95b6l): scoping for the e-shop Stripe-native implementation, extending UPGRADE-ASSESSMENT.md §5 (jsboige decision Option 2 Stripe Native, 2026-06-07) with a detailed capability map for the five #445 §3 requirements. Capability matrix (NATIVE / PARTIAL / NOT-native): - 3.1 reseller account NATIVE (Stripe Connect) or direct+offline - 3.2 zonal shipping NATIVE (Checkout dynamic shipping / EasyPost / Shippo) - 3.3 multi-currency NATIVE (135+ presentment currencies, Adaptive Pricing) - 3.4 stock PARTIAL (not a WMS; external sync or reseller-owned) - 3.5 fulfillment NATIVE events / not a 3PL (webhook -> partner dispatch) Conclusion: 4/5 native. The one open architecture fork is Connect (platform routes money to resellers) vs direct+offline (each reseller owns their local sale) -> a jsboige call, surfaced not decided. Genuine build work concentrated in stock (3.4) + fulfillment webhook dispatch (3.5), both modest. CVE rationale (RazorEngine 3.10.0 -> CVE-2021-46703, used only by NBrightBuy) stands independently of that fork. Out of scope (BD/human outreach, not code): #445 §1 fabrication quotes, §2 distribution-partner mapping. Cross-link added to UPGRADE-ASSESSMENT.md §5. docs-only: 0 write Cards/, 0 AssetConverter code change. Base d0856aa. Relates to #445, #131, #444, #458. Co-Authored-By: Claude-Code <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
TERTIAIRE of ai-01 deep-queue supersede #3 (
msg-…v95b6l): read-only capability scoping for the e-shop Stripe-native implementation (#445 §3). ExtendsUPGRADE-ASSESSMENT.md§5 (jsboige decision Option 2 — Stripe Native, 2026-06-07) with a detailed capability map. No decision, no code — research only.Context (what is already decided — not re-litigated)
RazorEngine 3.10.0→ CVE-2021-46703 (unfixable sandbox escape), used only by NBrightBuy; (2) modernization —Stripe.net 41.8.0.0already inbin/.Capability matrix — the five §3 requirements
What the scoping concludes (no business decision made)
Out of scope (BD / human outreach, not code)
#445 §1 fabrication cost/quotes and §2 distribution-partner mapping — these require real-world outreach (imprimeurs UE/FR, partner negotiation), not code scoping.
Safety / scope
docs/dnn/only — scoping doc + cross-link inUPGRADE-ASSESSMENT.md§5. 0 writeCards/, 0 AssetConverter code change (pre-tag safe). Based0856aa4.Relates to #445, #131, #444, #458.