svc-tenders Auth Surface Map

Purpose

This note documents the route-cluster auth and gate surfaces in the densest svc-tenders route modules after Cleanup Sprint 39.

Focus:

• public/read-only boundaries
• shell requireServiceAuth boundaries
• broader visibility gates
• stricter mutation gates
• ingress/signature gates
• ingress/KYC+signature gates

Labels used here:

• VERIFIED
• REAL
• TRANSITIONAL

registerTenderDeclarationRoutes.ts

Route module:

• services/svc-tenders/src/routes/registerTenderDeclarationRoutes.ts