| OQ-001 | Is credential replacement Admin-only or subject to another verification policy? | Technical Manager | Answered - Admin-only |
| OQ-002 | What is the approved RPO wording? | Technical Manager / Operations | Open |
| OQ-003 | Is payment idempotency implemented for payment, webhook, and job retry flows? | Backend / Payments | Answered by technical team; Evidence Pending |
| OQ-004 | Does API documentation exist, and is hosted Swagger UI required? | Backend | Answered - Postman exists; Swagger UI pending decision |
| OQ-005 | What evidence should be attached for scope/account isolation tests? | QA / Backend | Answered - test cases exist; attach screenshots or test output |