production_deployment/deployment/decisions/http_hardening.md

# SpaceCash Deployment Decision: Production HTTP Controls

- Decision ID: `http_hardening`
- Status: `not_reviewed`
- Owner:
- Reviewed at:

## Review Questions

- [ ] Which public routes are read-only, authenticated, rate-limited, and logged?
- [ ] What CORS, TLS, abuse, and write-route controls are required before launch?

## Evidence Reviewed

- Source hash:
- Release bundle SHA256:
- Related artifacts:

## Decision Notes

- Decision: `not_reviewed`
- Conditions:
- Operational-control changes:
- Launch-window restrictions: