docs(02): defer SC5 admin-JWT/document-403 to Phase 3 per D-07; clean STATE.md

SC5 admin JWT on /api/documents/* returning 403 is explicitly deferred to
Phase 3 SC4 (D-07: existing doc endpoints stay public until Phase 3 auth
enforcement). ROADMAP updated. Duplicate Open Questions removed from STATE.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
curo1305
2026-05-22 20:28:55 +02:00
parent 80eb280233
commit f261c1a53b
2 changed files with 4 additions and 5 deletions
+2 -3
View File
@@ -3,7 +3,7 @@ gsd_state_version: 1.0
milestone: v1.0
milestone_name: milestone
current_phase: 2
status: in_progress
status: complete
last_updated: "2026-05-22T18:30:00Z"
progress:
total_phases: 5
@@ -89,8 +89,7 @@ progress:
- Celery + Redis vs pgqueuer for Phase 3 (depends on Redis availability in deployment target)
- Verify cloud SDK minor versions on PyPI before Phase 5 pinning
- Celery + Redis vs pgqueuer for Phase 3 (depends on Redis availability in deployment target)
- Verify cloud SDK minor versions on PyPI before Phase 5 pinning
- Phase 2 SC5 (admin JWT → 403 on /api/documents/*) deferred to Phase 3 SC4 per D-07
### Blockers