feat(api): production security, cors hardening, latency optimizations, postman artifacts & frontend documentation

2026-08-31 13:48:54 +05:30
parent 4e21d617ce
commit e91cdbae6e
48 changed files with 3742 additions and 65 deletions
@@ -0,0 +1,90 @@
+{
+  "endpoint_profiling": [
+    {
+      "endpoint": "GET /health",
+      "status": 200,
+      "latency_ms": 35.42,
+      "server_ms": null,
+      "classification": "GREEN (<2s)"
+    },
+    {
+      "endpoint": "POST /v1/onboarding/start",
+      "status": 200,
+      "latency_ms": 26.77,
+      "server_ms": null,
+      "classification": "GREEN (<2s)"
+    },
+    {
+      "endpoint": "POST /v1/onboarding/{session_id}/message",
+      "status": 200,
+      "latency_ms": 1880.24,
+      "server_ms": 1874.48,
+      "classification": "GREEN (<2s)"
+    },
+    {
+      "endpoint": "POST /v1/onboarding/{session_id}/complete",
+      "status": 200,
+      "latency_ms": 4079.46,
+      "server_ms": 4075.41,
+      "classification": "ACCEPTABLE"
+    },
+    {
+      "endpoint": "POST /v1/voice-onboarding/start",
+      "status": 200,
+      "latency_ms": 27.44,
+      "server_ms": 20.24,
+      "classification": "GREEN (<2s)"
+    },
+    {
+      "endpoint": "POST /v1/voice-onboarding/{session_id}/turn",
+      "status": 200,
+      "latency_ms": 1417.15,
+      "server_ms": 1412.37,
+      "classification": "GREEN (<2s)"
+    },
+    {
+      "endpoint": "POST /v1/voice-onboarding/{session_id}/complete",
+      "status": 200,
+      "latency_ms": 4159.15,
+      "server_ms": 4121.79,
+      "classification": "ACCEPTABLE"
+    }
+  ],
+  "completion_race_test": {
+    "session_id": "ONB-7AF4D5D9",
+    "status_codes": [
+      200,
+      200,
+      200,
+      200,
+      200
+    ],
+    "returned_statuses": [
+      "completed",
+      "completed",
+      "completed",
+      "completed",
+      "completed"
+    ],
+    "onboarding_completed_flags": [
+      true,
+      true,
+      true,
+      true,
+      true
+    ],
+    "no_500_errors": true,
+    "idempotent_pass": true
+  },
+  "response_time_contract": {
+    "response_time_ms": 1311.29,
+    "response_time_sec": 1.311,
+    "valid_numeric_types": true,
+    "consistent_seconds_calculation": true
+  },
+  "security_regression": {
+    "unauthenticated_401_pass": true,
+    "cross_patient_idor_403_pass": true,
+    "all_security_controls_intact": true
+  }
+}