8000 Document accepted enrolled-device credit model by fabricekabongo · Pull Request #228 · congodevelopersclub/openpaycongo · GitHub
[go: up one dir, main page]

Skip to content

Document accepted enrolled-device credit model - #228

Open
fabricekabongo wants to merge 1 commit into
mainfrom
codex/trusted-device-credit-docs
Open

fabricekabongo wants to merge 1 commit into
mainfrom
codex/trusted-device-credit-docs

Conversation

@fabricekabongo
@fabricekabongo fabricekabongo commented Oct 5, 2026 •
Copy link
Copy Markdown
Collaborator

The developer guides previously required a settlement authority or provisional-balance hold before spending, while the maintainer has chosen the existing trusted enrolled-device model. This records that accepted decision consistently in EN/FR and the threat model.

  • Keep reported credit available under the current model; distinguish source/parser authentication from SMS origin or provider-settlement proof.
  • Separate a stolen locked phone from a compromised enrolled app/device or a stolen usable credential/key. Record the latter as accepted residual risk, while bypasses of enrollment, lock, revocation, encryption/authentication, tenant isolation, or replay controls remain defects.
  • Link existing control implementations and synthetic verification. Preserve prototype, physical-device acceptance, real-data, and deployment safeguards.

Documentation only: no runtime behavior, credit allocation rules, security permissions, API, or migration changes. Rollback is reverting this documentation commit.

Validation on exact head ae977eb:

PR227 merged as 2095d1a; all nine post-merge checks passed, including security-full: https://github.com/congodevelopersclub/openpaycongo/actions/runs/37277742660 .

No merge or deployment is requested.

@fabricekabongo
fabricekabongo marked this pull request as ready for review October 5, 2026 07:51
@chatgpt-codex-connector
chatgpt-codex-connector Bot commented Oct 5, 2026 •
Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-05T07:55:10.095294Z ae977eb Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0