Assumptions and Dependencies
| ID | Assumption / Dependency | Status |
|---|---|---|
| AD-001 | Backend APIs are the source of truth for authorization. | Confirmed |
| AD-002 | Frontend visibility does not replace backend authorization. | Confirmed |
| AD-003 | OpenAPI draft requires backend validation. | Needs Confirmation |
| AD-004 | Payment integrations must prevent duplicate financial impact. | Needs Confirmation |
| AD-005 | Backup and restore evidence must be attached before final approval. | Needs Evidence |