Every ticket as the root of its provenance graph — goal, patch, approval, runs and (as the ticket-class build lands) mandate, manifestations, guarantees, journey, artifacts and children. Rendered through the <<<TicketGraphList>>> tag.
BUG-01: SQL injection in CatalogDAO (raw $key interpolated)
goal
select_products_by_category/get_product_details/get_category_details validate $key into $itemKey then interpolate the RAW $key into SQL (category=$key etc). Fix: use $itemKey + guard isset($itemKey); malicious key -> validateNumericKey NULL -> no injectable query. [FIXED] CatalogDAO 3 methods now interpolate the validated $itemKey and guard isset($itemKey). Critical SQLi closed.
patch
none
approval
unapproved
runs
no runs recorded
mandate (clauses)
not yet recorded — lands with the ticket-class build
manifestations
not yet recorded — lands with the ticket-class build
guarantees
not yet recorded — lands with the ticket-class build
journey (blunders & successes)
not yet recorded — lands with the ticket-class build
artifacts (forge)
not yet recorded — lands with the ticket-class build