## Problem and evidence ## Change ## Verification ## Risk and rollback - [ ] No credentials or restricted data are included. - [ ] GET endpoints remain read-only. - [ ] No frontend render triggers heavy computation. - [ ] Financial claims are evidence-bound. - [ ] Tests cover the changed behavior.