{
 "audited_commit": "288b6cea77c3aa8c77e314f0bbef48d7bf35828e",
 "branch": "main",
 "audit_date": "2026-10-18",
 "applications": [
  "apps/backend",
  "apps/erp",
  "apps/pos",
  "apps/b2b",
  "apps/nextreport"
 ],
 "packages": [
  "contracts",
  "permissions",
  "utils",
  "api-client",
  "ui"
 ],
 "database": {
  "tables": 92,
  "tables_from_migrations": 91,
  "columns": 1031,
  "fks": 181,
  "indexes": 269,
  "checks": 112,
  "unique": 56,
  "sequences": 82,
  "functions": 2,
  "triggers": 2,
  "views": 0,
  "enums": 0,
  "rls": 0
 },
 "api": {
  "operations_documented": 373,
  "handlefunc_routes_not_in_contract": 2,
  "permission_keys": 201,
  "route_gated_keys": 186,
  "unheld_keys": 76,
  "unheld_route_gated": 71
 },
 "tests": {
  "go_pass": 1176,
  "go_skip": 38,
  "go_fail": 0,
  "go_integration_pass": 88,
  "go_integration_skip": 1,
  "js_files": 84,
  "js_tests": 653,
  "js_fail": 0,
  "drift_check": "pass",
  "go_vet": "clean"
 },
 "runtime_checks": [
  "GET /health -> 200 {env,status}",
  "GET /ready -> degraded without Redis, connected with Redis",
  "POST /auth/login -> 200 token",
  "GET /products (anonymous) -> 200, purchase_price absent",
  "POST /inventory/stock-in -> 201 SM-20261018-0001",
  "POST /pos -> 201 SO+INV, stock 50->48",
  "replay same key -> 201 identical; different payload -> 409",
  "POST /pos without key -> 422",
  "GET /reports/render?template=pos-receipt -> 200 application/pdf 25869 bytes",
  "GM: reports/stores/distribution -> 403; products read -> 200",
  "store_manager: users/reports -> 403; stock/sales-orders/stores -> 200"
 ],
 "findings": 24,
 "diagrams": {
  "mermaid_sources": 27,
  "svg_sources": 3,
  "rendered_png": 31,
  "embedded_in_docx": 32
 },
 "pages": 238,
 "document": {
  "pages": 222,
  "chapters": 40,
  "appendices": 14,
  "figures": 32,
  "tables": 124,
  "words": 44424,
  "sections": 19
 },
 "toc": {
  "entries": 237,
  "page_numbers_verified": true,
  "broken_anchors": 0
 }
}