Source-derived document; review findings and open questions with the application owner.

prsd-iws: Open Questions and Review Backlog

In this document

These are review questions, not proof of absent source evidence. Priorities describe investigation importance, not execution failures.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-001

Question: What does the available evidence establish about this application concern: End-to-end runtime behavior is not fully demonstrated across controllers, handlers, repositories, persistence, transactions, state transitions, deployment composition, and external integrations?

Review priority: material
Recorded uncertainty: End-to-end runtime behavior is not fully demonstrated across controllers, handlers, repositories, persistence, transactions, state transitions, deployment composition, and external integrations.
Supporting evidence: E0001, E0005, E0006, E0008, E0017, E0045, E0053, E0054, E0061, E0083, E0086, E0093, E0110, E0118, E0125, E0164, E0173, E0186, E0240, E0244, E0254, E0305, E0329, E0352, E0377, E0401, E0404, E0489, E0494
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-002

Question: What does the available evidence establish about this application concern: Authorization and ownership enforcement are not fully established for all request, repository, controller, mutation, deletion, sharing, download, API, and client-supplied-identifier paths?

Review priority: material
Recorded uncertainty: Authorization and ownership enforcement are not fully established for all request, repository, controller, mutation, deletion, sharing, download, API, and client-supplied-identifier paths.
Supporting evidence: E0008, E0011, E0017, E0041, E0045, E0061, E0083, E0092, E0125, E0127, E0158, E0164, E0240, E0257, E0262, E0265, E0273, E0358, E0383, E0414, E0489
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-003

Question: What does the available evidence establish about this application concern: The complete notification, assessment, movement, shipment, and status state machines remain unresolved; supplied tests and source examples cover selected transitions but not every lifecycle guard or invalid combination?

Review priority: material
Recorded uncertainty: The complete notification, assessment, movement, shipment, and status state machines remain unresolved; supplied tests and source examples cover selected transitions but not every lifecycle guard or invalid combination.
Supporting evidence: E0006, E0013, E0015, E0053, E0093, E0096, E0196, E0269, E0279, E0287, E0289, E0305, E0311, E0372, E0377, E0439
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-004

Question: What does the available evidence establish about this application concern: Database deployment, migration execution, rollback, post-migration validation, schema integrity, uniqueness, referential integrity, concurrency, and multi-statement transaction behavior are not fully established?

Review priority: material
Recorded uncertainty: Database deployment, migration execution, rollback, post-migration validation, schema integrity, uniqueness, referential integrity, concurrency, and multi-statement transaction behavior are not fully established.
Supporting evidence: E0006, E0007, E0053, E0062, E0078, E0093, E0173, E0182, E0329, E0414, E0453
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-005

Question: What does the available evidence establish about this application concern: Validation completeness and error semantics remain uncertain for identifiers, dates, quantities, strings, collections, byte arrays, cross-entity relationships, dimensions, precision boundaries, overflow cases, and malformed inputs?

Review priority: material
Recorded uncertainty: Validation completeness and error semantics remain uncertain for identifiers, dates, quantities, strings, collections, byte arrays, cross-entity relationships, dimensions, precision boundaries, overflow cases, and malformed inputs.
Supporting evidence: E0006, E0015, E0053, E0056, E0068, E0093, E0096, E0145, E0158, E0177, E0254, E0269, E0273, E0279, E0287, E0304, E0311, E0351, E0404
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-006

Question: What does the available evidence establish about this application concern: Test reliability and coverage are not fully established. The supplied evidence does not consistently prove successful execution, exact state transitions, persistence outcomes, real database behavior, concurrency, failure handling, or complete integration coverage?

Review priority: material
Recorded uncertainty: Test reliability and coverage are not fully established. The supplied evidence does not consistently prove successful execution, exact state transitions, persistence outcomes, real database behavior, concurrency, failure handling, or complete integration coverage.
Supporting evidence: E0020, E0078, E0118, E0123, E0130, E0190, E0212, E0326, E0352, E0388, E0401, E0408, E0437, E0444, E0453, E0477, E0494, E0507
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-007

Question: What does the available evidence establish about this application concern: Document-generation, virus-scanning, email, maintenance, and tooling behavior depends on omitted implementations, configuration, templates, registrations, deployment settings, or operational procedures?

Review priority: material
Recorded uncertainty: Document-generation, virus-scanning, email, maintenance, and tooling behavior depends on omitted implementations, configuration, templates, registrations, deployment settings, or operational procedures.
Supporting evidence: E0004, E0050, E0149, E0150, E0180, E0193, E0256, E0300, E0334, E0347, E0405, E0409, E0412, E0457
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::APP-GAP-008

Question: What does the available evidence establish about this application concern: Build, deployment, framework compatibility, runtime composition, effective API surface, dependency registration, and production configuration are not conclusively established from the supplied source?

Review priority: material
Recorded uncertainty: Build, deployment, framework compatibility, runtime composition, effective API surface, dependency registration, and production configuration are not conclusively established from the supplied source.
Supporting evidence: E0005, E0008, E0010, E0011, E0047, E0060, E0092, E0230, E0273, E0312, E0358, E0485
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::EMAIL-TRANSPORT-FAILURE-SEMANTICS

Question: What does the available evidence establish about this application concern: The email evidence supports template rendering, message construction, and asynchronous sending through a sender component, but does not establish transport configuration, SMTP failure handling, retry behavior, or whether a false result represents durable delivery failure?

Review priority: material
Recorded uncertainty: The email evidence supports template rendering, message construction, and asynchronous sending through a sender component, but does not establish transport configuration, SMTP failure handling, retry behavior, or whether a false result represents durable delivery failure.
Supporting evidence: E0022
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::SHIPMENT-MIGRATION-EXECUTION

Question: What does the available evidence establish about this application concern: The reported Shipment migration ends with a trailing comma before the closing parenthesis of CREATE TABLE. If the supplied text matches the executable file, the migration may fail under ordinary SQL Server syntax; execution, rollback, and resulting schema state were not demonstrated?

Review priority: material
Recorded uncertainty: The reported Shipment migration ends with a trailing comma before the closing parenthesis of CREATE TABLE. If the supplied text matches the executable file, the migration may fail under ordinary SQL Server syntax; execution, rollback, and resulting schema state were not demonstrated.
Supporting evidence: E0007
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-001

Question: What does the available evidence establish about this application concern: The supplied material does not establish the application's complete business domain, API endpoints, data models, waste-shipment validation rules, or broader controller behavior?

Review priority: material
Recorded uncertainty: The supplied material does not establish the application's complete business domain, API endpoints, data models, waste-shipment validation rules, or broader controller behavior.
Supporting evidence: E0209, E0360
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-002

Question: What does the available evidence establish about this application concern: Deployment architecture, hosting environment, production configuration, persistence details, external integrations, and operational monitoring are not established by the supplied material?

Review priority: material
Recorded uncertainty: Deployment architecture, hosting environment, production configuration, persistence details, external integrations, and operational monitoring are not established by the supplied material.
Supporting evidence: E0159, E0280, E0360, E0504
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-003

Question: What does the available evidence establish about this application concern: Database integration remains incomplete: the IwsContext implementation and schema, ELMAH database configuration, exact database-operation semantics, migration or idempotence behavior, and external-process failure handling are not established?

Review priority: material
Recorded uncertainty: Database integration remains incomplete: the IwsContext implementation and schema, ELMAH database configuration, exact database-operation semantics, migration or idempotence behavior, and external-process failure handling are not established.
Supporting evidence: E0084, E0209, E0513
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-004

Question: What does the available evidence establish about this application concern: Event-dispatching, mediation, and dependency-registration details are incomplete. The supplied evidence does not identify all concrete event, handler, request, and response types or establish missing-handler behavior for the mediator?

Review priority: material
Recorded uncertainty: Event-dispatching, mediation, and dependency-registration details are incomplete. The supplied evidence does not identify all concrete event, handler, request, and response types or establish missing-handler behavior for the mediator.
Supporting evidence: E0094, E0159, E0260
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-005

Question: What does the available evidence establish about this application concern: Email behavior is only partially evidenced. Complete domain-event coverage, sender and SMTP failure semantics, template-resolution behavior, configuration values, and the authoritative telephone number remain unresolved?

Review priority: material
Recorded uncertainty: Email behavior is only partially evidenced. Complete domain-event coverage, sender and SMTP failure semantics, template-resolution behavior, configuration values, and the authoritative telephone number remain unresolved.
Supporting evidence: E0022, E0247
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-006

Question: What does the available evidence establish about this application concern: Scanner runtime behavior and deployment are not fully established. Base URLs, certificate paths, timeout defaults, endpoint behavior, dependency wiring, external service requirements, and production error handling remain unresolved?

Review priority: material
Recorded uncertainty: Scanner runtime behavior and deployment are not fully established. Base URLs, certificate paths, timeout defaults, endpoint behavior, dependency wiring, external service requirements, and production error handling remain unresolved.
Supporting evidence: E0179, E0280, E0504
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-007

Question: What does the available evidence establish about this application concern: Successful runtime operation and compatibility with external authorization, API, and persistence services are not demonstrated. Token-bearing client lifetime and security behavior, malformed-response handling, base-URL normalization, and downstream token-claim controls remain unconfirmed?

Review priority: material
Recorded uncertainty: Successful runtime operation and compatibility with external authorization, API, and persistence services are not demonstrated. Token-bearing client lifetime and security behavior, malformed-response handling, base-URL normalization, and downstream token-claim controls remain unconfirmed.
Supporting evidence: E0378, E0403
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0002-cba7f9acf83a4290::gap::APP-GAP-008

Question: What does the available evidence establish about this application concern: The supplied test evidence does not independently establish build or test success, complete MVC property-name semantics, actual CSS/class generation, or the behavior of the database integration executable?

Review priority: material
Recorded uncertainty: The supplied test evidence does not independently establish build or test success, complete MVC property-name semantics, actual CSS/class generation, or the behavior of the database integration executable.
Supporting evidence: E0084, E0242, E0272, E0493, E0513
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::ANONYMOUS-WASTE-GENERATION-PATH

Question: What does the available evidence establish about this business_rules concern: WasteGenerationProcessController.Index(Guid id) is reported as AllowAnonymous despite controller-level authorization. The supplied evidence does not include the NotificationReadOnlyFilter implementation or routing context, so the effective exposure and intended authorization of this GET action remain unresolved?

Review priority: material
Recorded uncertainty: WasteGenerationProcessController.Index(Guid id) is reported as AllowAnonymous despite controller-level authorization. The supplied evidence does not include the NotificationReadOnlyFilter implementation or routing context, so the effective exposure and intended authorization of this GET action remain unresolved.
Supporting evidence: E0017
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::BR-GAP-001

Question: What does the available evidence establish about this business_rules concern: The evidence identifies notification statuses and movement transitions, but does not establish the complete permitted transition graph, whether numeric status order has business meaning, or whether all guards are consistently applied across external, internal, handler, and persistence paths?

Review priority: material
Recorded uncertainty: The evidence identifies notification statuses and movement transitions, but does not establish the complete permitted transition graph, whether numeric status order has business meaning, or whether all guards are consistently applied across external, internal, handler, and persistence paths.
Supporting evidence: E0006, E0013, E0020
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::BR-GAP-002

Question: What does the available evidence establish about this business_rules concern: Authorization declarations and controller attributes are present, but effective ownership, competent-authority, and permission enforcement is not demonstrated for every request, mutation, deletion, sharing, download, and anonymous-access path?

Review priority: material
Recorded uncertainty: Authorization declarations and controller attributes are present, but effective ownership, competent-authority, and permission enforcement is not demonstrated for every request, mutation, deletion, sharing, download, and anonymous-access path.
Supporting evidence: E0001, E0011, E0017
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::JOURNEY-ASSESSMENT-RULES

Question: What does the available evidence establish about this business_rules concern: The supplied consent and financial-guarantee handlers demonstrate selected calls and persistence, but do not establish the complete decision rules, authorization conditions, valid state transitions, or failure semantics for the assessment journey?

Review priority: material
Recorded uncertainty: The supplied consent and financial-guarantee handlers demonstrate selected calls and persistence, but do not establish the complete decision rules, authorization conditions, valid state transitions, or failure semantics for the assessment journey.
Supporting evidence: E0008, E0010
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::JOURNEY-MOVEMENT-ACTOR-RULES

Question: What does the available evidence establish about this business_rules concern: Movement receipt and completion handlers or domain methods are evidenced, but the initiating actor, effective authorization, and complete cross-layer guard enforcement are not established?

Review priority: material
Recorded uncertainty: Movement receipt and completion handlers or domain methods are evidenced, but the initiating actor, effective authorization, and complete cross-layer guard enforcement are not established.
Supporting evidence: E0013, E0017
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::API-AUTHORIZATION-SEMANTICS

Question: What does the available evidence establish about this semantic concern concern: The API startup configures bearer validation with RequiredScopes set to api1 and api3, but the supplied evidence does not establish whether both scopes, either scope, or another library-defined condition is required. Controllers and endpoint registrations are also incomplete, so the effective authorization surface remains unresolved?

Review priority: material
Recorded uncertainty: The API startup configures bearer validation with RequiredScopes set to api1 and api3, but the supplied evidence does not establish whether both scopes, either scope, or another library-defined condition is required. Controllers and endpoint registrations are also incomplete, so the effective authorization surface remains unresolved.
Supporting evidence: E0011, E0017
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

LRG-02-0001-781f4f335c5c1c9b::gap::JOURNEY-STATE-DECISION-SEMANTICS

Question: What does the available evidence establish about this semantic concern concern: The supplied evidence now connects the two journeys to observed state and decision artifacts, but it still does not establish complete transition graphs, actor authorization, failure semantics, or consistent enforcement across handlers, domain methods, repositories, and persistence?

Review priority: material
Recorded uncertainty: The supplied evidence now connects the two journeys to observed state and decision artifacts, but it still does not establish complete transition graphs, actor authorization, failure semantics, or consistent enforcement across handlers, domain methods, repositories, and persistence.
Supporting evidence: E0006, E0008, E0010, E0013
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

GAP-UNSUPPORTED-620f240cbf2fb4edb8a75c7a

Question: What does the available evidence establish about this unsupported model inference concern: Claim not accepted: unknown evidence references: LEV-139-ea-iws-requesthandlers?

Review priority: material
Recorded uncertainty: Claim not accepted: unknown evidence references: LEV-139-ea-iws-requesthandlers
Supporting evidence: E0001, E0002, E0003, E0004, E0005, E0006, E0007, E0008
Status: open for human review; not an execution failure.
Next investigation: inspect related artifacts and assigned source before deciding whether evidence is unavailable.

Unresolved statements in completed second opinions

Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): The conclusions below distinguish directly observed source evidence from inferences and unresolved questions.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): This module scans its assembly for types whose namespace contains "Mappings" and registers their implemented interfaces. This is material because a broad statement that “mapping is registered” obscures the fact that two mapping-related modules are reportedly involved. The consequences of overlapping registrations are not established by the supplied evidence.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): The route uses MapLowercaseDashedRoute, but that helper’s implementation is not present. Consequently, the exact treatment of the literal "Address-Book" and other route segments is unresolved.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): The method manually serializes JSON and sets content type to "application/json". No explicit anti-forgery protection is visible on this GET endpoint. Whether that is a security issue depends on intended exposure, authentication, response sensitivity, and client usage; those facts are not established here.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): The visible edit POST action constructs an EditAddressBookEntry using bound AddressBookRecordId, Type, and nested data. The supplied evidence does not show an independent server-side reload, ownership check, or comparison against the current user before submission. Such checks may exist inside the mediator request or [AuthorizeActivity], but that is unresolved.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): ## Specific unresolved risks and questions
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): It is therefore unresolved whether the POST URL or another binding mechanism preserves the required type. The supplied evidence supports a potential binding gap, but does not prove that deletion always receives an incorrect or missing type.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): Thus, if model validation is bypassed and BusinessType is null, conversion silently uses the enum’s default value rather than throwing. This is an inference from the supplied implementation; whether downstream code rejects that value is unresolved.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): ## Potential issues and unresolved questions
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): DeleteController’s POST accepts AddressRecordType type, but src/EA.Iws.Web/Areas/AddressBook/Views/Delete/Index.cshtml visibly emits only a hidden Id; ViewBag.Type is used for display and the cancel link, not as a hidden input. It is unresolved whether the current form URL preserves the type query parameter or whether the POST can receive the correct type reliably.
Unknown — Harten review [WU-001-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f87364f9ec35fa8b081cba78593bf0c/second-opinion/opinion.md): The first jQuery bundle includes jQuery 1.11.0, while the jquery-3 bundle includes jQuery 3.6.0. The comments say jQuery 3 is used for “all other browsers,” but the browser-selection mechanism is not in this chunk. Therefore, the actual browser-to-bundle mapping is unresolved.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - AddressBook MVC/Razor setup: src/EA.Iws.Web/Areas/AddressBook/Views/web.config declares Razor 3.0.0.0, MVC 5.2.3.0, relevant namespaces, and a BlockViewHandler mapping * to System.Web.HttpNotFoundHandler in integrated mode. The latter supports an interpretation involving prevention of direct view-file access, but broader request-pipeline effects are not established.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - Smoke-test endpoint: SmokeTestController.cs is [AllowAnonymous], sends SmokeTest, and returns JSON with AllowGet. The sensitivity of the returned data is unresolved.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): 4. The AddressBook business-type view has unresolved structural and model questions. In src/EA.Iws.Web/Areas/AddressBook/Views/Edit/_BusinessType.cshtml, the <fieldset> appears to contain only the <legend>, with radio-button <div> elements after the closing tag. It is unclear whether this is intentional, corrected by client-side behavior, or an accessibility defect. Further, Edit/Index.cshtml declares EditAddressViewModel, while _BusinessType.cshtml declares AddAddressViewModel. Without the view-model definitions, compatibility cannot be established.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - Archive trust boundary: Archive() sends session-derived NotificationArchiveSummaryData to ArchiveNotifications. The handler and persistence layer are absent, leaving server-side revalidation, authorization, and protection against tampered or stale summary data unresolved.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - GET deletion semantics: src/EA.Iws.Web/Areas/AddressBook/Views/Home/Index.cshtml renders a Delete action link. The delete implementation is not supplied, so it is unknown whether GET only displays confirmation or performs mutation.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - Registration email result: RegistrationController.Register(...) assigns the result of SendEmailVerificationAsync(...) to emailSent without an evident branch on that value. Whether failures throw, return false, or are handled elsewhere is unresolved.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): The strongest unresolved questions concern the archive handler and persistence rules, the effective authorization implementation behind menu checks, the delete request semantics, the compatibility of the AddressBook view models, and the behavior of external mediator/API calls. These cannot be resolved from source bytes [0, 95169) alone.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - BlockViewHandler — Supported by src/EA.Iws.Web/Areas/AddressBook/Views/web.config. The handler configuration maps * to System.Web.HttpNotFoundHandler in integrated mode. The document’s wording “prevent direct access to view files” is a reasonable interpretation, although broader request-pipeline behavior is not established by this file alone.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - Archive() sends the session-derived list to ArchiveNotifications, but the handler and persistence rules are absent. Whether posted summary data is trusted, revalidated, or authorized server-side remains unresolved.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): However, the corresponding partial markup and all authorization implementations are not supplied, so the final rendered navigation and effective authorization behavior remain unresolved.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): This may be valid if the edit model is compatible with the partial’s expected type, but the relevant view-model definitions are absent. It should remain an unresolved compatibility question rather than being inferred as correct.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): - SmokeTestController.Index() is explicitly anonymous and returns mediator output as JSON. The sensitivity of SmokeTest output cannot be determined from the supplied range.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): 1. GET deletion semantics — AddressBook home renders a Delete action link using GET in Home/Index.cshtml. The delete controller/view implementation is not supplied, so it is unresolved whether GET performs mutation or only displays confirmation.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): 2. Archive posted-data trust — ArchiveNotificationController stores posted NotificationArchiveSummaryData in session and later archives that list. The archive request handler is absent; server-side revalidation and authorization are unknown.
Unknown — Harten review [WU-002-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cf7ade746e95e2686f2e46991393bca/second-opinion/opinion.md): 4. Registration email result — RegistrationController.Register(...) assigns the result of SendEmailVerificationAsync(...) to emailSent but does not branch on that value in the registration path. Whether the API throws on failure or returns false is unresolved from this source.
Unknown — Harten review [WU-003-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/32b6fa9ac60f5b4a8669c28b8c9d6a43/second-opinion/opinion.md): ### 1. Virus-scan security claim is not established
Unknown — Harten review [WU-003-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/32b6fa9ac60f5b4a8669c28b8c9d6a43/second-opinion/opinion.md): An ID exactly equal to 500 is treated as eligible for export parsing and also as eligible for import parsing after subtraction. Whether that is a functional defect depends on the notification-status enum values and the intended allocation of IDs, neither of which is established in the supplied range. This should remain an unresolved boundary-condition question rather than a confirmed defect.
Unknown — Harten review [WU-003-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/32b6fa9ac60f5b4a8669c28b8c9d6a43/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-003-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/32b6fa9ac60f5b4a8669c28b8c9d6a43/second-opinion/opinion.md): ### 2. Delete-notification “mechanism” is not established by this range
Unknown — Harten review [WU-003-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/32b6fa9ac60f5b4a8669c28b8c9d6a43/second-opinion/opinion.md): Whether this is a real defect depends on the enum values and intended ID allocation, which are not present here. It is an unresolved question, not a confirmed functional failure.
Unknown — Harten review [WU-003-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/32b6fa9ac60f5b4a8669c28b8c9d6a43/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): This demonstrates an intended required-date and future-date rule. However, OptionalDateInputViewModel.AsDateTime() and RequiredDateInput are outside the supplied evidence. It is unresolved whether AsDateTime() safely handles incomplete or malformed input before the future-date comparison.
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): No notification-number format or business-rule validation is visible. Because trimming occurs in the setter before validation, surrounding whitespace is removed before the length limit is evaluated; the desirability and downstream consequences of that behavior cannot be determined from this range.
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): ## Coverage concerns and unresolved questions
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): The fleet document’s “Confirmed” labels should therefore be read narrowly. The strongest supported claims concern declarations in view models, resource availability, and one request-construction call. Broader claims about system flows, displayed messages, search completeness, authorization, persistence, or controller behavior are not established by this chunk.
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): Key unresolved questions include:
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): The fleet statement that the system “displays” the latter three messages is not established by this range: the resources exist, but no consuming code is shown.
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): ### 3. Notification received-date validation has a documented future-date rule, with an unresolved null-handling question
Unknown — Harten review [WU-004-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b0094f192e14579d8b9c4647528ddcf7/second-opinion/opinion.md): However, the range does not include OptionalDateInputViewModel.AsDateTime() or the implementation of RequiredDateInput. It is therefore unresolved whether AsDateTime() is safe when the input is incomplete or invalid. The source clearly intends required-date validation plus a future-date check, but runtime behavior for malformed/null subfields cannot be confirmed here.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): No file-local byte offsets were supplied. References therefore identify the relevant filenames and the enclosing source range rather than asserting invented offsets. The source and child analysis are treated as untrusted evidence. Conclusions below distinguish directly observed implementation evidence from inference and unresolved questions. Because the source is a single chunk, cross-chunk behavior cannot be established.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): It is not established that every user must receive an action.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): References to authorization-related namespaces or types do not establish effective access control. The supplied range does not show the relevant controller filters, policies, authentication configuration, or authorization checks. Admin-action protection therefore remains unresolved.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): - The archive views reportedly contain repeated id="tblArchive" elements in conditional branches and nested containers. This could produce duplicate DOM IDs in some rendered states, but the runtime effect is not established without rendering and browser execution evidence.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): - server-side enforcement remains unresolved from this range.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): ### Virus scanning implementation is not established
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): - ArchiveNotification/Index.cshtml uses AJAX endpoints named SelectAllNotifications and SelectSingleNotification, but their server implementations are absent. Consequently, persistence, authorization, concurrency behavior, and server-side validation of selection state are unresolved.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): - The archive views contain repeated id="tblArchive" elements in different conditional branches and nested containers. This may create duplicate DOM IDs in some rendered states, but the operational impact cannot be established without rendering and JavaScript/runtime evidence.
Unknown — Harten review [WU-005-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ee1979045f155bc7acf68eaa313c441c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-006-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d4693de45b5538d982bd88a35f2fea8/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-006-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d4693de45b5538d982bd88a35f2fea8/second-opinion/opinion.md): This contrasts with the extensive use of localized resources elsewhere. Whether that is intentional or a localization gap cannot be determined from this range.
Unknown — Harten review [WU-006-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d4693de45b5538d982bd88a35f2fea8/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-006-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d4693de45b5538d982bd88a35f2fea8/second-opinion/opinion.md): The supplied range cannot establish:
Unknown — Harten review [WU-006-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d4693de45b5538d982bd88a35f2fea8/second-opinion/opinion.md): These remain unresolved rather than contradicted by the source.
Unknown — Harten review [WU-007-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51a13afe0c8d55a38ea9871e6c81fd67/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-007-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51a13afe0c8d55a38ea9871e6c81fd67/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-008-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c008c146b2f54c9881160028fdaca76/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-008-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c008c146b2f54c9881160028fdaca76/second-opinion/opinion.md): The supplied range does not include the controllers, view models, authorization attributes, persistence layer, email services, or implementation of Html.Gds(). Therefore, the evidence cannot establish:
Unknown — Harten review [WU-008-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c008c146b2f54c9881160028fdaca76/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-008-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c008c146b2f54c9881160028fdaca76/second-opinion/opinion.md): The supplied range does not include controllers, view models, authorization attributes, persistence code, email services, or the implementation of Html.Gds(). Consequently, it cannot establish:
Unknown — Harten review [WU-009-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aedb1090598c58d2ad0781d3838fbb68/second-opinion/opinion.md): This is a directly observable inconsistency. Its runtime effect is unresolved: route defaults or controller state might compensate, or the payment path might lose notification context or fail to resolve the expected resource.
Unknown — Harten review [WU-009-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aedb1090598c58d2ad0781d3838fbb68/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-009-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aedb1090598c58d2ad0781d3838fbb68/second-opinion/opinion.md): This may lose the notification context or result in a route/action mismatch, depending on routing and controller defaults. The discrepancy is directly evidenced; runtime impact is unresolved.
Unknown — Harten review [WU-009-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aedb1090598c58d2ad0781d3838fbb68/second-opinion/opinion.md): CommentsController.cs parses stored filter values with DateTime.Parse and int.Parse. If TempData contains malformed or stale values, these paths can throw rather than returning a validation response. Whether TempData can be externally manipulated or corrupted is not established.
Unknown — Harten review [WU-009-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aedb1090598c58d2ad0781d3838fbb68/second-opinion/opinion.md): ## Additional unresolved questions
Unknown — Harten review [WU-010-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bd63728a62b5571b90a5c55f6fb88f0d/second-opinion/opinion.md): On the supplied evidence, an invocation reaching this method will throw rather than perform a search. Whether the method is reachable through production routing is not established here.
Unknown — Harten review [WU-010-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bd63728a62b5571b90a5c55f6fb88f0d/second-opinion/opinion.md): If NotificationDecisionDateEntered can be posted as Command, this is an apparent failure path. It remains possible that the value is display-only or handled elsewhere; reachability is unresolved.
Unknown — Harten review [WU-010-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bd63728a62b5571b90a5c55f6fb88f0d/second-opinion/opinion.md): These redirects may rely on ambient route values or custom routing. The supplied source does not establish whether id is preserved. If it is not, a redirected action could receive an empty/default Guid and perform an incorrect lookup or fail. This is an unresolved routing concern, not a confirmed defect.
Unknown — Harten review [WU-010-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bd63728a62b5571b90a5c55f6fb88f0d/second-opinion/opinion.md): ### Additional risks and unresolved questions
Unknown — Harten review [WU-010-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bd63728a62b5571b90a5c55f6fb88f0d/second-opinion/opinion.md): Assessment: these may depend on ambient route values or custom route conventions. The supplied source does not establish that those routes will preserve id. If not, the redirected action may receive an empty/default Guid, causing incorrect notification lookup or failure. This is an unresolved routing issue, not conclusively a defect from this chunk alone.
Unknown — Harten review [WU-010-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bd63728a62b5571b90a5c55f6fb88f0d/second-opinion/opinion.md): Assessment: the fleet statement is too broad. Supported claim: the overview hides or disables selected operations based on permission and status. Not established: all backend mutations are status-enforced solely by this controller or consistently across all commands.
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): The reported length check is applied to the parsed integer’s string representation. Thus, an input such as 0000001 could parse to 1 and evade a nominal six-character limit. Whether leading zeros are valid or whether another layer validates the raw input is unresolved.
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): AddCommentsViewModel has [MaxLength(500)], but its custom validation reportedly rejects only Comment == null; empty-string handling is not established.
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): It also reports that ConfirmViewModel and SuccessViewModel participate in ownership or transaction workflows, while EditEwcCodeViewModel is a thin wrapper over BaseWasteCodeViewModel. These omissions mean the supplied evidence cannot establish end-to-end behavior from form submission through request handling and persistence.
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): The strongest defensible conclusion is therefore: the fleet summary is directionally accurate but overstates enforcement, conflates resource messages with active validation, and cannot establish end-to-end behavior without the omitted controller, request, domain, and persistence layers.
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): AddCommentsViewModel has a [MaxLength(500)] attribute but its custom validation only rejects Comment == null; an empty string is not rejected by that custom check. Whether empty comments are rejected elsewhere is unresolved.
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): ### Null-safety not established
Unknown — Harten review [WU-011-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f1492bbbbe1582d89dd280699e85b95/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): These are supported observations about the cited view models. However, OptionalDateInputViewModel is absent, so the behavior of IsCompleted and AsDateTime() for malformed, partial, or missing input remains unresolved. The source also appears to call AsDateTime() after completion checks in some paths, but not consistently; the runtime implications cannot be established from the supplied evidence.
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): Accordingly, controller/service enforcement remains unresolved. The fleet’s wording should be changed from confirmed validation to “the model exposes acceptable-status information.”
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): - treat date-update, shipment-confirmation, and key-date rules as unresolved where only data-shaping models are visible;
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): Important qualification: the source calls OptionalDateInputViewModel.AsDateTime() even after checking IsCompleted in some cases, but not in every date comparison. The implementation of OptionalDateInputViewModel is absent, so the behavior for incomplete or malformed dates remains unresolved.
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): Therefore, whether updates are actually blocked outside acceptable statuses is unresolved and likely depends on controller or service code not included in this range.
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): The fleet correctly marks the broader key-date business logic as missing. The model itself does not show ordering checks—for example, whether consent validity dates follow consent dates—or lifecycle restrictions. Those remain unresolved.
Unknown — Harten review [WU-012-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c8ea30a46f775401b7f97a2594aaa672/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): ## Risks, possible defects, and unresolved questions
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): The outcome for null or empty input cannot be determined without the extension implementation. It may throw, return zero, or apply another conversion. The ordering relative to required validation is also unresolved.
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): Whether upstream invariants guarantee these objects is not established.
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): Several operational conclusions remain conditional. In particular, null conversion behavior, refund-limit population, constructor invariants, actual Razor rendering, form security, controller behavior, and comment persistence cannot be established from the supplied range. The child analysis also indicates that any fleet or summary document claiming confirmed runtime, complete comment-editing behavior, or complete source coverage would overstate the evidence unless it addresses these gaps.
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): The main unresolved verification targets are:
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): Whether this throws for null, returns zero, or otherwise handles empty input cannot be determined without the implementation of ToMoneyDecimal(). Required validation may run separately, but the ordering and behavior are unresolved.
Unknown — Harten review [WU-013-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dbdfb46e2262560c808739e0574fb14b/second-opinion/opinion.md): and emits @openComments on <details>. This likely produces an attribute-shaped string, but the exact Razor output and browser behavior are not established here. A boolean HTML open attribute normally does not require = true.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): However, the comment textarea has no visible maxlength attribute. The shipment-number field does show @MaxLength = 6, but that does not demonstrate equivalent enforcement for comments. Backend validation is outside the supplied evidence. The defensible conclusion is therefore that the interface communicates a 500-character recommendation or requirement; enforcement remains unresolved.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): Views/Decision/_History.cshtml contains only the model declaration and no rendered history markup, while Decision/Index.cshtml invokes it with @Html.Partial("_History"). This supports the narrower conclusion that the partial is currently empty in the supplied range. Whether that is intentional, disabled, or incomplete cannot be determined.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): These are unresolved review questions, not confirmed vulnerabilities.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): - Comments/IndexResources.Designer.cs exposes DeleteText, while Comments/Delete.cshtml uses Model.ConfirmationText. This may be intentional, but the relationship is not established.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): ### 1. The claimed 500-character comment limit is not established
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): Decision/_Consent.cshtml applies form-group validation classes to ConsentedDate, .Day, and .Year, but not .Month. By contrast, _ConsentWithdraw.cshtml, _Object.cshtml, and _Withdraw.cshtml include Day, Month, and Year. This may be intentional or may be an omission; the model and validation templates are not supplied, so the effect cannot be determined.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): These are unresolved questions, not findings of vulnerability.
Unknown — Harten review [WU-015-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9509f601b38b540fa91d59774f51732f/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): However, the available evidence cannot establish that these are complete or correctly enforced end-to-end workflows. Claims about validation, authorisation, state transitions, persistence, or prevention of premature actions remain unverified. The fleet document is broadly consistent with the views, but appears to overstate some runtime conclusions and omits material parts of the supplied range.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): The child analysis appropriately treats telephone validation as unresolved.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): The view also emits both SelectedWasteCodes[i] hidden fields and SelectedCodesList[i].Id hidden fields. This may be intentional, but the corresponding model and binder behaviour are unavailable, so their relationship and precedence remain unresolved.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): A significant unresolved inconsistency is that statusToUse can display Approved when Model.Decision == Approved while the release link is controlled by the original Model.Status == Approved. The displayed status and available action could therefore diverge. This may be intentional, but the source does not explain it.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): The fleet document is broadly consistent with the supplied source, but its “Confirmed” statements sometimes infer runtime or business behaviour that cannot be established from these views alone.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): Additional observations, not established as definite defects:
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): - competentAuthority is interpolated into a JavaScript string using @Model.CompetentAuthority. If that value can contain attacker-controlled characters, the resulting script context could be unsafe. The supplied range does not show the type, validation, or encoding policy, so this is an unresolved security question rather than a confirmed vulnerability.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): This may be intentional for two separate model properties, but the corresponding view model and binder handling are absent, so the relationship is unresolved.
Unknown — Harten review [WU-016-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e8569053ff15efebeae1e7f51fe0b08/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-017-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0380e334f72756d5873619629ff6129a/second-opinion/opinion.md): ### Additional observations and unresolved issues
Unknown — Harten review [WU-017-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0380e334f72756d5873619629ff6129a/second-opinion/opinion.md): 1. Release semantics remain unresolved
Unknown — Harten review [WU-017-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0380e334f72756d5873619629ff6129a/second-opinion/opinion.md): 1. Financial guarantee release behavior is unresolved
Unknown — Harten review [WU-017-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0380e334f72756d5873619629ff6129a/second-opinion/opinion.md): - Unresolved: controller behavior, model validation, authorization, release semantics, charge calculation, child editor markup, and any behavior outside the supplied [0,146194) source range.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): Per-file byte offsets and complete repository context were not supplied. References below therefore identify the available file names or paths together with the supplied chunk range, rather than asserting file-local offsets. The source is treated as untrusted evidence. Behavior implemented outside this chunk—including controllers, services, validators, models, JavaScript, CSS, persistence, and payment workflows—remains unresolved.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): > The operation-code edit flow has a localized message and a validation-summary display point. Whether selecting at least one code is enforced, and whether enforcement is client-side, server-side, or both, remains unresolved.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): If completion can be true while any corresponding collection is empty, rendering could throw. The necessary model or controller guarantees are not present, so this is an unresolved robustness risk rather than a confirmed defect.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): Operation-code wording is resource-backed, creating an apparently inconsistent localization strategy. Whether this is intentional or acceptable for the application’s supported locales remains unresolved.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): - preserve the robustness, encoding, localization, and completion-semantics questions as unresolved pending broader source evidence.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): The supplied chunk covers byte range [0, 52066) of source digest b172140bc1e0e34cda7891ff0ebe0790fd85856225bad9bb2b457c204e424f0d. Per-file byte offsets are not provided, so citations below identify the file name plus the supplied chunk range, rather than claiming file-local offsets. The source is treated as evidence; behavior outside these views and resources remains unresolved.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): - Unresolved: whether the rule is enforced, and whether enforcement is client-side, server-side, or both.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): .../Sections/_OtherCodes.cshtml calls Model.OtherCodes.First(), NationExportCode.First(), NationImportCode.First(), and CustomCodes.First() whenever AreOtherCodesCompleted is true. If completion can ever be true while one collection is empty, rendering will throw. The model/controller validation is absent, so this is an unresolved robustness risk rather than a confirmed defect.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): _EwcCodes.cshtml uses nested div class="overview-block" elements for both the outer container and some incomplete/not-applicable states, while most neighboring files use overview-block-element. This may be harmless styling inconsistency, but its visual/accessibility effect cannot be determined without CSS and rendered output.
Unknown — Harten review [WU-018-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd5b7eae4c69526aa91a8c9885ecc733/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): Unresolved questions: What guarantees that the Has... flags imply exactly one matching producer or facility? Are duplicate matches prevented before rendering?
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): Whether that state is constructible is not established.
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): Unresolved question: Can IsProducerCompleted be true while Producers is empty?
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): The principal unresolved boundary is semantic: this chunk shows what the views attempt to render under particular model states, but not whether those states are valid, reachable, authorized, persisted, or correctly produced by the rest of the application.
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): Unresolved question: What guarantees that the Has... flags imply exactly one matching producer/facility?
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): Whether this is possible depends on model construction and is not established by the source.
Unknown — Harten review [WU-019-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11d77f5351b859b38df8d7049835c976/second-opinion/opinion.md): Unresolved question: Can IsProducerCompleted be true while Producers is empty?
Unknown — Harten review [WU-020-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a27679259c4e5c03b0d656727df703cf/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-020-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a27679259c4e5c03b0d656727df703cf/second-opinion/opinion.md): These strings differ. If BusinessType is a string containing the posted value, the Companies House panel will receive js-hidden on an initial server render even when LimitedCompany is selected. The page-load JavaScript in .../Views/Producer/Add.cshtml may correct visibility when JavaScript runs, but the non-JavaScript behavior and the initial HTML state are unresolved. This is an evidence-based inconsistency, not proof of a production defect, because the model type/binding behavior is absent.
Unknown — Harten review [WU-020-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a27679259c4e5c03b0d656727df703cf/second-opinion/opinion.md): It then replaces #editor and calls select2Init(). The source does not show the action, authorization, validation of countryId, or whether the returned partial is safe for all values. The fleet correctly identifies dynamic loading, but backend behavior remains unresolved.
Unknown — Harten review [WU-020-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a27679259c4e5c03b0d656727df703cf/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-021-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2e238789b2c5ab4bc73deeb0a0a3dc5/second-opinion/opinion.md): ## Second-opinion risks and unresolved questions
Unknown — Harten review [WU-021-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2e238789b2c5ab4bc73deeb0a0a3dc5/second-opinion/opinion.md): Unresolved question: Should the command use the route id, or at least verify that the posted notification ID and every selected or added movement belong to the requested notification?
Unknown — Harten review [WU-021-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2e238789b2c5ab4bc73deeb0a0a3dc5/second-opinion/opinion.md): Unresolved question: Is cancellation state isolated per notification, request flow, tab, or session, and does the backing TempData implementation prevent cross-workflow interference?
Unknown — Harten review [WU-021-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2e238789b2c5ab4bc73deeb0a0a3dc5/second-opinion/opinion.md): ASP.NET MVC may preserve ambient route values, but the supplied source does not demonstrate the generated URLs or provide route-generation tests. This is therefore an unresolved routing dependency, not a confirmed defect.
Unknown — Harten review [WU-021-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2e238789b2c5ab4bc73deeb0a0a3dc5/second-opinion/opinion.md): Unresolved question: Should the command use the route id, and should it verify that all selected/added movements belong to that notification?
Unknown — Harten review [WU-021-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2e238789b2c5ab4bc73deeb0a0a3dc5/second-opinion/opinion.md): ASP.NET MVC may preserve ambient route values, but that depends on route generation and the current route context. The source does not demonstrate the resulting URLs or tests. This should be treated as an unresolved routing dependency, not a confirmed defect.
Unknown — Harten review [WU-022-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3e06f76f01255065b1e0b124679aa2ee/second-opinion/opinion.md): Unresolved question
Unknown — Harten review [WU-022-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3e06f76f01255065b1e0b124679aa2ee/second-opinion/opinion.md): The child analysis notes that another view model, SelectMovementsViewModel, validates at least one selected submitted movement. That may provide an external invariant, but the connection to every SuccessViewModel construction site is outside the supplied evidence. The local defect is therefore confirmed as an insufficient constructor contract, while production reachability remains unresolved.
Unknown — Harten review [WU-022-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3e06f76f01255065b1e0b124679aa2ee/second-opinion/opinion.md): The executable validation permits dates up to 60 days after prenotification, while the user-facing message says the limit is 30 days. The property/resource name says “SixtyDays”, so the intended rule cannot be established from this range alone. This is a direct contradiction, not merely a wording issue.
Unknown — Harten review [WU-022-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3e06f76f01255065b1e0b124679aa2ee/second-opinion/opinion.md): Unresolved question
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): ### Risks and unresolved questions
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): - Views/CaptureMovement/Edit.cshtml posts hidden state fields including NotificationType, ShipmentNumber, IsReceived, IsOperationCompleted, IsRejected, and IsPartiallyRejected. It is unresolved whether the server validates or ignores tampered values.
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): - _Comments.cshtml appears to show the statistics-marking selector by default for partially accepted or rejected shipments while hiding ordinary comment controls. The business meaning and corresponding server-side validation are not established.
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): Unresolved: controller/service business rules, authorization, date validation, movement uniqueness, deletion-versus-cancellation criteria, server-side enforcement of client-side state changes, and whether all displayed resource-backed text is localized.
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): - Not established: whether cancellation is persisted successfully, how duplicate movements are handled, or what authorization and business rules apply.
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): Status: unresolved question.
Unknown — Harten review [WU-023-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/da0bb2b521da506abb44a85385b777b7/second-opinion/opinion.md): - Unresolved: controller/service business rules, authorization, date validation, deletion-versus-cancellation criteria, movement uniqueness, and the exact effect of client-side-only UI state changes.
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): The supplied views do not show whether controllers reload authoritative data, verify shipment membership or ownership, or re-check deletion and movement eligibility. This is an unresolved integrity and authorization question, not confirmation of a vulnerability.
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): Possible explanations include an unused partial, an alternate flow, or duplicated logic. The supplied evidence cannot determine which implementation is active.
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): This may be intentional if routing, session state, or controller context supplies the notification. That behavior is not established by the supplied views, so context preservation and cross-notification access should be checked.
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): These values are user-modifiable in the request. The source does not show whether controllers reload authoritative state, verify notification ownership, validate shipment membership, or re-check deletion eligibility. This is an unresolved security and integrity question, not proof of a vulnerability.
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): This may be intentional if the area/controller stores context in route data or session state, but that cannot be established from the supplied views.
Unknown — Harten review [WU-024-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/194023ec5e7e5af9965918f3f04b37a5/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): - several possible defects or maintenance issues remain unresolved because model, handler, persistence, or routing evidence is outside the chunk.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): ReceiptResources.resx and ReceiptResources.Designer.cs both expose the misspelled identifier ShipmentAcceptedLable. The spelling issue is confirmed in the resource/API surface, but its runtime impact is not established; it may be a maintainability defect rather than a functional one.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): The controller also dereferences data.IsPreconsented.Value. Whether null is possible cannot be determined without the relevant model or response-type definitions.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): - The POST Index action accesses model.Transactions[commentId.GetValueOrDefault()]. The source does not establish whether commentId is intentionally a collection index or is semantically a transaction/comment identifier. This is an unresolved correctness question.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): - AddPayment redirects to AccountManagement/Index without explicitly passing the notification id, unlike some other redirects. It is unknown whether ambient route values or another mechanism supplies the identifier.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): - Inference: the intended rule may be missing, or the resource may be obsolete. The supplied range cannot establish which interpretation is correct.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): The controller also dereferences data.IsPreconsented.Value; whether this can be null is unresolved because the model/response type is outside the supplied evidence.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): ### 9. Account-management behavior has several unresolved or potentially fragile points
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): - AddPayment redirects to AccountManagement/Index without passing the notification id, unlike other redirects. Whether routing supplies the required ID is unresolved.
Unknown — Harten review [WU-025-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0b62565b5f0f57eabb64f3e2b0fd55c6/second-opinion/opinion.md): - Unresolved: whether ValidFromNotInFuture is an obsolete resource or evidence of a missing validation rule; whether comment IDs are intentionally used as list indexes; whether missing route IDs are supplied by ambient route values; and how mediator requests enforce persistence/business rules outside this chunk.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): The source and the referenced “FLEET DOCUMENT” are treated as untrusted evidence rather than authoritative descriptions. Because the chunk may omit cross-chunk context, observations below distinguish directly reported source behavior from hypotheses and unresolved questions.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): If the destination action requires the notification identifier, these redirects could lose context or display the wrong resource. However, route defaults, ambient route values, or destination-action behavior are not included. The defect therefore remains conditional and unresolved.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): Possible interpretations include obsolete resource content, a missing validation rule, or validation implemented elsewhere. The supplied range cannot determine which interpretation is correct.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): An overpayment would therefore produce a negative remaining amount. That could correctly represent a credit or overpayment, or it could conflict with UI/business expectations that the remaining amount cannot fall below zero. The intended accounting semantics are unresolved.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): The most consequential unresolved issues are:
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): Whether this is a defect depends on route defaults or controller/view behavior not included in the chunk. If the destination requires the notification identifier, the redirect may lose context or produce an incorrect page. This remains unresolved without routing definitions and the target actions.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): but the POST action only checks ModelState before sending UpdateInterimStatus (MarkAsInterimController.cs). The mediator or infrastructure may enforce authorization, but that evidence is absent. This is an unresolved security question, not proof of an authorization vulnerability.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): DecisionViewModel checks future dates for Object and Withdraw, but not for consent-related dates. The resource file contains WithdrawnDateNotBeforeReceived, yet the view model never uses it (DecisionViewModel.cs, DecisionViewModelResources.resx). This indicates either dead resource evidence or missing validation. The intended business rule cannot be established from this range.
Unknown — Harten review [WU-026-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb941766f6f450f6817801ab3638ac9b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): - behavior that remains unresolved because controllers, services, binders, helper implementations, or related models are outside the supplied evidence.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): However, the exact behavior for incomplete optional date inputs is unresolved. The view model initializes date properties with OptionalDateInputViewModel objects and checks conditions such as NotificationReceivedDate == null. Because the implementation of OptionalDateInputViewModel is not supplied, a missing date might be represented by null, by a non-null incomplete object, or by another state. The validation intent is supported; its runtime treatment of all incomplete inputs is not fully evidenced.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): but does not itself show a non-negative amount check or decimal-precision enforcement. Although PaymentDetailsViewModelResources.resx contains messages such as AmountCannotBeNegative and AmountDecimalPlaceError, the presence of resource strings does not prove that this model invokes those validations. Such rules may exist in another validator, binder, controller, or service, but that is unresolved.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): followed by comparison of the converted value with Limit. RefundAmount is marked [Required], but the implementation of ToMoneyDecimal() and the MVC validation pipeline are absent. Consequently, the intended validation rules are evidenced, while runtime behavior for null, malformed, or culture-specific input remains unresolved. This is not sufficient to conclude that an exception occurs.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): The form also emits hidden fields for NotificationId, Limit, and FirstPaymentReceivedDate [bytes 0–152331]. The view-model validation appears to rely on Limit and FirstPaymentReceivedDate. Since the relevant controller or command handler is absent, it is unknown whether these values are reloaded from trusted server-side state before processing. If they are trusted directly from the client, tampering could be possible; the supplied evidence does not establish whether that condition exists.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): These views evidence the UI contract only. The implementations or authoritative calculations for TotalCharge, TotalPaid, AmountRemaining, AddPayment, AddRefund, CanDeleteTransaction, and HasPayments are not present in the supplied range. Their correctness, authorization behavior, and persistence effects therefore remain unresolved.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): This appears intended to construct an index-specific anchor, possibly such as #comment-0. As written, it may instead render a literal + or otherwise produce an unintended href. The exact result cannot be established without executing Razor or inspecting rendered output. The accompanying JavaScript reportedly operates on IDs such as comment-0, which may not match the generated link target; this is a plausible presentation defect, not a confirmed one.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): The class does not itself check that the amount is non-negative or enforce decimal precision. Its Validate(...) method checks receipt-number and comment constraints, but no amount range or decimal-place rule. The resource file contains messages such as AmountCannotBeNegative and AmountDecimalPlaceError, but their presence does not prove that this model invokes them. Whether another binder, validator, or controller applies those rules is unresolved.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): - runtime behavior for null or invalid RefundAmount is unresolved from this chunk;
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): _RefundDetails.cshtml emits hidden fields for NotificationId, Limit, and FirstPaymentReceivedDate [bytes 0–152331]. The view-model validation trusts Limit and FirstPaymentReceivedDate supplied to the model. The controller or command handler is not included, so it is unresolved whether these values are reloaded and revalidated server-side. If not, a client could potentially alter the refund limit or payment date before submission.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): rather than checking whether the optional date is completed or has a value. The supplied source does not include OptionalDateInputViewModel, so it is unknown whether model binding can replace the property with null or whether an empty date remains a non-null object. Consequently, the fleet’s description of required previous dates is directionally supported, but the exact runtime behavior for incomplete date inputs is unresolved.
Unknown — Harten review [WU-027-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/38272b9681fe5f61ab7987ef9e0bbffa/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): 2. Comment length and requiredness are not established as enforced validation.
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): The evidence supports token emission in the forms visible in this source range. It cannot establish behavior for forms outside the range or confirm server-side validation across the application.
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): - Delete.cshtml and other retained files listed in the contract-gap material should be included in a complete inventory, although their relationship to the displayed views cannot be determined from the supplied excerpt alone.
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): Comments/Add.cshtml displays Resource.CommentLimitHint, whose value in Comments/IndexResources.resx is “Please limit your comment to 500 characters or less.” This proves a user-facing hint, not enforcement. The actual MaxLength attribute is visible on ShipmentNumberStr, but no maxlength is visible on the comment textarea. Requiredness and validation are delegated to model metadata/helpers and are not established by this range.
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): The source shows anti-forgery-token emission in the supplied forms, but cannot establish behavior for forms outside this range or server-side enforcement.
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): - Delete.cshtml and the other retained files listed in the contract gaps: these should be included in any complete source inventory, even where their relationship to the supplied views cannot be established from the excerpt alone.
Unknown — Harten review [WU-028-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a58d63da67cf555ca18669f38f0e6643/second-opinion/opinion.md): ## Important unresolved questions
Unknown — Harten review [WU-029-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a12201fbbe05c8694ef25e9c86e037f/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-029-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a12201fbbe05c8694ef25e9c86e037f/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): This creates a possible cross-notification contamination risk if workflows are interleaved. The exploitability and practical impact cannot be determined from the supplied range because session, navigation, and TempData lifecycle details are not shown.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): Thus, the warning-generation rules are visible in the supplied source. The unresolved issue is not what the code compares, but whether those comparisons correctly implement the intended business rules, including any date-only versus time-sensitive requirements.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): The source therefore permits an audit entry labelled Deleted even if the command returns false. It remains unresolved whether that false-return path can occur after GetImportMovementIdIfExists has returned an ID.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): Authorization attributes are evidenced on controllers including CancelController, CaptureController, DeleteController, DownloadController, HomeController, MovementOverrideController, RejectedMovementController, and ShipmentAuditController. The MarkAsInterim controller is absent from the supplied range, so its endpoint authorization is unresolved.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): The fleet statement that the view displays acceptable statuses is supported. However, the supplied range does not include the corresponding controller, so the end-to-end claim that the flow “enables authorized users” is only partially evidenced. The view enforces presentation branching; authorization of the endpoint is unresolved here.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): The exact rules are therefore visible in the supplied source, although their business correctness cannot be established without external requirements.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): Thus the source permits an audit record labelled Deleted even if the delete command returns false. Whether that result can occur in practice is unresolved.
Unknown — Harten review [WU-030-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/163859148e7a5b809b41fcd3e0be2379/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-031-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e9c5af8311f45e87b016590da4796705/second-opinion/opinion.md): The Fleet Document appears broadly consistent with the supplied ASP.NET MVC view-model evidence, but several claims are overstated or contradicted by the code and resources. The most material unresolved issue is whether the permitted interval between prenotification and actual shipment is 30 or 60 days. Other discrepancies concern received-date validation, rejected-quantity rules, cancellation-model initialization, download formatting, and status precedence.
Unknown — Harten review [WU-031-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e9c5af8311f45e87b016590da4796705/second-opinion/opinion.md): 1. Thirty-day versus sixty-day rule is unresolved.
Unknown — Harten review [WU-031-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e9c5af8311f45e87b016590da4796705/second-opinion/opinion.md): The Fleet Document’s statement that the flow validates a 60-day limit is therefore supported only as a description of the implementation, not as confirmation of the intended business rule. The effective rule remains unresolved from this range.
Unknown — Harten review [WU-031-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e9c5af8311f45e87b016590da4796705/second-opinion/opinion.md): - Therefore, the Fleet Document’s statement that the flow validates “not more than 60 days” is accurate for the code, but it omits the user-facing 30-day contradiction. The effective business rule is unresolved from this range: 30 or 60 days?
Unknown — Harten review [WU-031-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e9c5af8311f45e87b016590da4796705/second-opinion/opinion.md): - The database, controller, persistence, view, and JavaScript uncertainties are correctly identified and remain unresolved.
Unknown — Harten review [WU-031-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e9c5af8311f45e87b016590da4796705/second-opinion/opinion.md): The supplied range does contain files listed in CONTRACT GAPS, including Cancel/ConfirmViewModel.cs, SuccessViewModel.cs, RecoveryViewModel.cs, and several generated resource files. Therefore the gap list appears inconsistent with the actual evidence payload. It may refer to retained coverage outside this displayed chunk, but that cannot be determined from the provided metadata.
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): This leaves unresolved which state is authoritative and how disagreement is handled. Questions include:
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): ### 7. Date comparisons have unresolved timezone semantics
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): also leave an unresolved security question: whether the server revalidates movement identity, eligibility, and authorization rather than trusting posted values.
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): This may be deliberate domain terminology, but the source evidence does not explain whether prenotification cancellation and shipment cancellation are the same operation or distinct concepts. It should be recorded as an unresolved terminology/domain question rather than automatically classified as a functional defect.
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): ### 4. There is an unresolved acceptance-state inconsistency
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): The constructors convert source values using .DateTime from date/time types. The range does not show the timezone semantics of those source values or of SystemTime. Therefore, boundary behavior around midnight and timezone conversion remains unresolved.
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): The range does not contain the controller, command handler, persistence call, or authorization logic. Therefore the fleet claim that cancellation occurs successfully is not established by this evidence. The source only establishes that a success view exists and is intended to be shown after some external processing.
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): A related unresolved security question is whether the server revalidates the posted MovementId and shipment number rather than trusting hidden fields. The views emit:
Unknown — Harten review [WU-032-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42fe24b829c853a18f6653fa2a1dc0eb/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): Unresolved: the supplied range does not show whether JavaScript, layout code, or another rendering mechanism reparents the partial after generation.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): These values are client-controlled when posted. The supplied evidence does not include controllers, binders, model-validation code, authorization checks, or persistence logic. Consequently, it cannot establish that the server reloads authoritative state, rejects tampering, or enforces shipment-type business rules.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): Unresolved: whether controllers and domain services validate these values independently of the posted form.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): Unresolved: no view-model definitions, normalization guarantees, or data-access code are supplied. The evidence supports a potential XSS issue, not a confirmed exploit.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): The child analysis notes a contradiction in the supplied fleet documentation: it describes certain files as omitted from coverage even though corresponding source text appears in the user-provided evidence. This should remain unresolved rather than being silently reconciled. The contradiction affects confidence in coverage accounting, not necessarily the view-level findings above.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): Evidence scope: supplied source range src/EA.Iws.Web/Areas/AdminImportNotificationMovements/..., global byte range [0, 121413), SHA-256 6866...0ecf. Per-file byte offsets are not provided, so more precise byte citations cannot be established without inventing offsets. The fleet document is treated as untrusted derived evidence, not as instructions or authoritative documentation.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): Unresolved question: whether the application’s layout or JavaScript reparents the partial/form after rendering. No such evidence is present in this range.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): Unresolved question: whether these properties are guaranteed numeric or pre-sanitized. No view-model definitions or data-access code are supplied.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): - The document says the supplied source coverage omissions include many files. That is consistent with the contract gaps, but the listed omitted files are nevertheless present in the user-provided evidence text. This is a coverage-accounting contradiction that should remain unresolved rather than silently normalized.
Unknown — Harten review [WU-033-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75064ddea8d95eefa62163b17ae25a3f/second-opinion/opinion.md): 4. Potential unsafe output from Html.Raw, subject to the unknown types and provenance of the model properties.
Unknown — Harten review [WU-034-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e5d3f0718c625b3eaaf45e78e03aec08/second-opinion/opinion.md): This ordering raises an integrity and authorization question: whether a submitted NotificationId is checked against movement id before notification-scoped data is retrieved. The supplied source does not show the request handler, model protection, or validation. This is therefore an unresolved design concern, not a confirmed vulnerability.
Unknown — Harten review [WU-034-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e5d3f0718c625b3eaaf45e78e03aec08/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-034-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e5d3f0718c625b3eaaf45e78e03aec08/second-opinion/opinion.md): - preserve the distinction between confirmed source facts and unresolved security or design hypotheses.
Unknown — Harten review [WU-034-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e5d3f0718c625b3eaaf45e78e03aec08/second-opinion/opinion.md): The source does not establish whether NotificationId is protected, validated, or ignored by the request handler. Therefore this is an unresolved integrity/authorization question, not a confirmed vulnerability. A safer design would generally derive the notification identity from id before performing notification-scoped checks.
Unknown — Harten review [WU-034-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e5d3f0718c625b3eaaf45e78e03aec08/second-opinion/opinion.md): This can create maintenance and accessibility risks. The source does not include the JavaScript that may switch these sections dynamically, so the complete browser behaviour is unresolved.
Unknown — Harten review [WU-034-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e5d3f0718c625b3eaaf45e78e03aec08/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): ### 1. Duplicate-submission prevention is not established
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): It therefore remains unresolved whether a non-null, zero-byte rejection upload is rejected. The answer depends on the unshown implementation of RestrictToAllowedUploadTypes, model-binding behavior, and downstream processing.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): The absent controller and service code leave unresolved whether these values are reloaded and checked against current server-side state. The validation comparison involving MovementDate is therefore only as trustworthy as the server-side population and verification of that value.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): The route uses {Id}, while the shown view models use NotificationId and the route separately includes optional {entityId}. Without controller signatures or URL-generation code, it is unresolved whether Id consistently represents a notification, movement, or another entity.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): The button is disabled only when a file is selected. The handler does not return false, and the original click’s default submit action may still occur after the explicit form.submit() call. The code therefore provides an intended duplicate-submit mitigation, but the stronger fleet statement that it “prevents duplicate submissions” is not established by this source alone.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): Consequently, from this range alone it is unresolved whether a non-null zero-byte rejection upload is rejected. The behavior depends on the implementation of RestrictToAllowedUploadTypes, model-binding behavior, and downstream processing.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): The date-edit view posts NotificationId, the full DateEditHistory, and the warning view posts ShipmentDate as hidden fields. Hidden fields are client-modifiable. The absent controllers and services leave unresolved whether these values are treated as authoritative or cross-checked against server-side state.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): The registered route uses {Id}, whereas the view models shown use NotificationId, and entityId is a separate optional parameter. The supplied source does not show controller signatures or route-link generation, so it is unresolved whether Id binds consistently to a notification identifier or another entity.
Unknown — Harten review [WU-035-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/54fa5f6bb7475223a271d9147d3e0126/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-036-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5197c2e37c725f66a90df0d0381f2742/second-opinion/opinion.md): On the supplied evidence, document.getElementById("uploadForm") returns null, and form.submit() therefore raises a client-side exception. It is not established whether the browser’s ordinary button-submit behavior still submits the form despite the exception. This should be runtime-tested in the target browsers; it is nevertheless a concrete apparent implementation defect.
Unknown — Harten review [WU-036-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5197c2e37c725f66a90df0d0381f2742/second-opinion/opinion.md): The available evidence indicates that Submit.SuccessResources does not define a Continue resource. By contrast, the Reject success view uses Resource.ContinueButtonText. This suggests an inconsistency in localization, although the intended product decision—deliberate English text versus incomplete localization—is unresolved.
Unknown — Harten review [WU-036-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5197c2e37c725f66a90df0d0381f2742/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-036-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5197c2e37c725f66a90df0d0381f2742/second-opinion/opinion.md): On the supplied evidence, form will be null, so form.submit() raises a client-side exception. The button’s normal submit behavior may still occur depending on browser event handling, but successful explicit submission through this code is not established. This is a concrete implementation defect or at least an unresolved defect requiring runtime testing.
Unknown — Harten review [WU-036-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5197c2e37c725f66a90df0d0381f2742/second-opinion/opinion.md): The method removes a facility from draft data and persists the change. The supplied evidence therefore shows a state-changing operation available through GET. No anti-forgery protection is present on this action. Whether routing or authorization elsewhere mitigates the risk is unresolved, but the endpoint design is a security and HTTP-semantics concern.
Unknown — Harten review [WU-036-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5197c2e37c725f66a90df0d0381f2742/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): This is a confirmed controller behavior. A likely consequence is an incomplete or broken form after validation failure, but the views are not supplied, so the exact user-visible symptom remains unresolved.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): The source confirms that behavior. It likely discards user-entered values by re-fetching a fresh model. Whether validation messages survive the nested action call is framework-dependent and cannot be determined from the supplied evidence.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): The registered route requires {id}. Ambient route values might be reused by ASP.NET MVC, but that is not established here. The omission is therefore a routing risk requiring runtime or framework-specific verification.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): This could intentionally preserve prior data when no selection is made, or it could prevent users from clearing an existing selection. The intended semantics are unresolved.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): The method assumes a non-null collection containing exactly one matching country. Zero or multiple matches would throw. No caller or data guarantee is available, so invocation risk remains unresolved.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): | Notification is actually marked complete | Not established without the handler |
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): | Database storage mechanism | Unresolved |
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): | Competent-authority business rules | Unresolved |
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): | Authorization completeness | Unresolved |
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): This creates a likely UI failure or incomplete form on validation errors, depending on how the views handle null/empty collections. The source does not include the views, so the exact runtime symptom remains unresolved.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): Whether this is intentional, harmless because the view model has no validation, or a defect cannot be determined without the corresponding view-model definitions and handler behavior.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): If the collection contains zero or multiple matching entries, it throws. The method also assumes countries itself is non-null. No caller is included, so invocation and data guarantees are unresolved.
Unknown — Harten review [WU-037-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/446750c3753054b1bea9ca04fa7d092b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-038-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2cb9c75217b05a0dac8730f5199c0411/second-opinion/opinion.md): BusinessViewModel checks for "T/A" but splits on the exact separator " T/A " and then accesses the second element. A malformed or differently spaced value can therefore produce an index error; multiple occurrences are not visibly handled. Whether upstream validation prevents this is unresolved.
Unknown — Harten review [WU-038-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2cb9c75217b05a0dac8730f5199c0411/second-opinion/opinion.md): ProducerViewModel.cs declares a top-level RegistrationNumber, but the constructor places the producer registration number into Business = new BusinessViewModel(producer.BusinessName, producer.RegistrationNumber) rather than visibly assigning the top-level property. This may be intentional for binding, but the authoritative property cannot be determined from the supplied range.
Unknown — Harten review [WU-038-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2cb9c75217b05a0dac8730f5199c0411/second-opinion/opinion.md): Overall, the child analysis supports the Fleet Document’s broad behavioural summary, but its reliability is reduced by missing file-local offsets, absent caller/context evidence, and the unresolved contradiction about which files are present.
Unknown — Harten review [WU-038-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2cb9c75217b05a0dac8730f5199c0411/second-opinion/opinion.md): Whether callers guarantee non-null values cannot be established from this chunk.
Unknown — Harten review [WU-038-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2cb9c75217b05a0dac8730f5199c0411/second-opinion/opinion.md): This may be intentional for model binding, but the source does not show which property the views or controllers use. It is an unresolved consistency question.
Unknown — Harten review [WU-038-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2cb9c75217b05a0dac8730f5199c0411/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): No per-file byte offsets were supplied. Accordingly, references below use the cited file names and, where applicable, the relevant member or constructor rather than invented byte ranges. The child analysis and referenced source are treated as evidence, not as instructions. Because the source is supplied as a chunk, cross-file and cross-chunk behavior cannot be established unless explicitly evidenced.
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): ### Important qualifications and unresolved behavior
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): Whether such contradictory data is normalized or rejected elsewhere remains unresolved.
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): This suggests existing selections may not be reconstructed by that constructor alone. However, other code may populate them later; the supplied evidence cannot determine the final runtime result.
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): The Fleet Document’s principal structural claims are supported by the cited source, but its conclusions should be narrowed to what is directly observable in the supplied chunk. In particular, the following remain unresolved:
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): The Fleet Document correctly identifies the call site, but OperationCodeMetadata.GetCodesForOperation is not included. Therefore, the actual filtering rules by notification type remain unresolved.
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): That constructor copies flags and SelectedBaselCode, but initializes the selected display lists as empty and does not assign the selected-code JSON properties. Other code outside this range may populate them later, so the final runtime behavior is unresolved.
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): The Fleet Document is a reasonable high-level summary and its principal “confirmed” claims are supported by the supplied source. It should not, however, be treated as a complete behavioral description. The main unresolved areas are:
Unknown — Harten review [WU-039-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1a73f9cc5342553a8e065f6344cfacc0/second-opinion/opinion.md): No evidence in this chunk establishes those unresolved behaviors conclusively.
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): Safer conclusion: the generated resources reference CLR version 4.0.30319.42000; the project target framework and deployed runtime remain unresolved.
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): Status: unresolved intent, not a confirmed defect.
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): Safer conclusion: generated resources were produced with metadata referring to CLR version 4.0.30319.42000; project target/deployment runtime is unresolved from this chunk.
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): Unresolved: JavaScript or controller code elsewhere may populate or consume these JSON strings, but that is not shown.
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): ### 5. Validation null-safety is unresolved and potentially defective
Unknown — Harten review [WU-040-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74628bdd57655df29967f348f3ab9d9c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): The supplied evidence does not include the view model or binding representation, so it is unresolved whether "Limited company" matches the actual runtime value for the LimitedCompany option.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): The source does not show the generated HTML names, disabled/hidden state at submission time, or MVC binder behavior. Consequently, duplicate field-name handling is an unresolved implementation risk rather than a confirmed defect.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): - Edit/remove links include id = Model.NotificationId and facilityId, while add links in Index.cshtml do not explicitly include the notification ID. Whether routing supplies the missing value through ambient data is unresolved.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): Thus, the complete overview composition and its null/error behavior remain unresolved.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): The following should remain qualified or unresolved:
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): However, the source does not prove that the endpoint calls Companies House or any other external service. The Fleet wording “integrating with external data sources” is therefore an inference, not a confirmed fact. The endpoint implementation and external-service behaviour remain unresolved.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): This comparison depends on the runtime representation of BusinessType. The supplied range does not include the view model or binding logic, so it is unresolved whether "Limited company" is the correct value.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): The JavaScript hides one presentation depending on the selected business type, but both controls are generated server-side and appear to represent the same model property. The supplied source does not establish how duplicate form field names are handled by the MVC model binder. This is an unresolved implementation risk, not merely a styling detail.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): - The edit/remove action links include id = Model.NotificationId and facilityId, but the add links in Index.cshtml do not explicitly include the notification ID. Route or ambient-value behaviour is not visible here and remains unresolved.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): But the supplied range also shows unresolved assumptions:
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): - The page delegates most content to _SummaryTableContainer, which is not included in the supplied evidence. Therefore the complete overview composition cannot be established from this range alone.
Unknown — Harten review [WU-041-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1fb3bcc8c20f58e4b925286d17f82c85/second-opinion/opinion.md): - Important unresolved risks: duplicate registration-number controls, inconsistent Add/Edit markup and localization, the ineffective edit-page hintImpButtonMsg selector, missing AJAX failure handling, and possible duplicate anti-forgery/validation markup.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): - controller or business-rule validation, which remains unresolved.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): ### Potential inconsistencies and unresolved questions
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): Confirm.cshtml posts hidden values including CurrentCharge, NewCharge, NewNumberOfShipments, OldNumberOfShipments, CompetentAuthority, and NotificationStatus. The view alone cannot establish whether the server recalculates these values or trusts client-submitted values. This remains an unresolved security and business-integrity question requiring controller evidence.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): Confirm.cshtml also uses @Html.Raw(string.Format(...)) for AdditionalCharge, GuidanceNoIncrease, and GuidanceDecrease. The supplied resource values are described as plain text, but the view establishes raw HTML output. Whether this remains safe if localized resource content changes cannot be determined from the supplied range.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): The Fleet Document is broadly directionally supported for its descriptions of the summary views, pre-consent state, producer details, state/transit rendering, localization infrastructure, importer form, shipment pages, and pre-consent editor. However, claims concerning backend processing, confirmation finalization, server-side validation, persistence, and network-level AJAX failure handling should be narrowed or marked unresolved.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): Confirm.cshtml posts hidden values including CurrentCharge, NewCharge, NewNumberOfShipments, OldNumberOfShipments, CompetentAuthority, and NotificationStatus. The view alone cannot establish whether the server recalculates or trusts these values. This is an unresolved security/business-integrity question requiring controller evidence.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): Confirm.cshtml uses @Html.Raw(string.Format(...)) for AdditionalCharge, GuidanceNoIncrease, and GuidanceDecrease. The supplied resource values are plain text, but the view establishes raw HTML output. Whether this is safe under localization changes cannot be determined from this range alone.
Unknown — Harten review [WU-042-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be69169bf59d5129b87e4a50a9053392/second-opinion/opinion.md): The Fleet Document is broadly directionally correct, but its “Confirmed” labels should be narrowed where they describe backend processing, finalization, validation, or network-error handling. The supplied range is primarily Razor view, resource, and client-script evidence. It does not include controller actions, view-model definitions, validation attributes, route configuration, or service implementations. Consequently, those behaviors remain unresolved rather than confirmed.
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): The shown Shipment view contains fields and form-group markup but, within the supplied evidence, no model declaration or validation attributes and no explicit ValidationMessageFor calls. Shipment validation rules therefore remain unknown.
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): The same limitation applies to the apparent telephone guidance. Contact.cshtml displays Tel: + followed by prefix and telephone, while ContactViewModel.cshtml renders a literal +, a prefix input, and a telephone input, both with type="number". The visible markup does not enforce the resource text’s apparent “up to 3 digits” instruction; whether that rule exists server-side is unresolved.
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): ### Structural observations and unresolved questions
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): - unresolved server-side contracts.
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): The principal unresolved questions concern the missing Producer view/model, server endpoints and persistence behind the JavaScript callbacks, actual validation rules, full anti-forgery coverage, and the runtime/application configuration beyond generated resource metadata.
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): | Shipment validation rules are unknown | Supported uncertainty | The view renders fields and form-group classes but contains no model declarations or validation attributes in this range. There are also no explicit ValidationMessageFor calls in the shown Shipment view. |
Unknown — Harten review [WU-043-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/256c6ed0e5065c6eac76dcfc955a9c32/second-opinion/opinion.md): | Address/contact validation rules are unknown | Supported uncertainty | The supplied views show validation-message helpers but not the relevant view-model annotations, controller logic, or server-side validators. |
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): The intended partial name may be clear from context, but the exact source syntax and whether it compiles should remain an unresolved question unless the underlying bytes are inspected directly.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): The child analysis did not identify a State of Export Index.cshtml or generated designer file in the visible range. Consequently, the resource values and existence of the partial are supported, but a complete State of Export interface, controller flow, or end-to-end behavior is not established.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): This may result in duplicate posted values. Whether that creates binding, validation, or persistence problems cannot be determined without the receiving model and controller logic.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): Therefore the resource strings are confirmed, but a complete State of Export interface or flow is not established by this range.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): This creates a discrepancy between the browser/page title and the visible heading. The supplied source does not show whether a layout overrides or ignores ViewBag.Title, so the rendered impact is unresolved, but the inconsistency is directly present.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): This may produce duplicate posted fields. The source does not establish whether the model binder or controller tolerates this, so the operational consequence remains unresolved.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): This is an unresolved security and integrity question, not a confirmed defect.
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): ## Evidence gaps and unresolved questions
Unknown — Harten review [WU-044-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aa45bc5c27fb5c68a082e635053f76cc/second-opinion/opinion.md): The following cannot be determined from the supplied range:
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): These support a view-level description of waste-category, component, and type inputs. Their server-side meanings and persistence are not established.
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): This permits HTML to be emitted without normal Razor encoding. Whether it is exploitable depends on how CodeDisplay is constructed and sanitized, which is not shown. The finding is an important unresolved trust boundary, not proof of a confirmed vulnerability.
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): A comment is not the runtime resource value. Consequently, the complete validation page may render no completion guidance. Whether this is deliberate or accidental remains unresolved.
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): - “Security requirements” is too broad based on these files. An anti-forgery token is visible in Validate/Index.cshtml, but authentication, authorization, CSRF configuration, server-side input validation, and request handling are not established.
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): This is an explicit trust boundary. If CodeDisplay contains any untrusted or insufficiently sanitized content, it can produce HTML/script injection. The supplied source does not show how CodeDisplay is built or sanitized, so this remains an unresolved security question rather than a confirmed vulnerability.
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): These are unresolved questions, not confirmed defects from this range alone.
Unknown — Harten review [WU-045-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7372693a5e6f5d4b930ea5b68c7accf4/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): Several potentially significant defects or unresolved risks are visible in the controller code but are not reflected in the fleet summary. These should be treated as source-level concerns requiring confirmation, not as proven production failures.
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): The source therefore raises an unresolved question about whether id is preserved through ambient route values. The delete path similarly uses:
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): CheckForChangesInSecondScreen compares collection counts, but matches by ChemicalCompositionCategory and does not visibly handle duplicate categories. Whether duplicates are prohibited elsewhere remains unresolved.
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): The result is therefore dependent on an ordering guarantee that is not established by the supplied source. The visible algorithm may be incorrect if the mediator or data source does not preserve that ordering.
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): ## Important unresolved dependencies
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): This creates an unresolved routing concern: the notification ID may or may not be retained by ambient route values. The source alone does not establish whether the resulting URL has the required id.
Unknown — Harten review [WU-046-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20dd31af3cf552c8be527ccfd5c973c8/second-opinion/opinion.md): The fleet document is a useful high-level inventory, but it is incomplete and overconfident. The strongest source-supported conclusions concern MVC/Razor configuration, controller names, mediator usage, and broad workflow responsibilities. The source also exposes several unresolved or likely defects—particularly custom-code audit classification, chemical-composition null handling, customs-route null handling, annex redirects, the Facility edit country assignment, and synchronous blocking in _Navigation—none of which are represented in the fleet summary.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): These observations indicate risks and unresolved questions, not proven production defects.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): This action is marked [AllowAnonymous] despite controller-level [Authorize]. On the supplied evidence, the GET may be reachable without authentication. The effect remains unresolved because the implementation of NotificationReadOnlyFilter is not included.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): Other authorization hooks are visible but their semantics are not established:
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): - ReadOnlyController visibly has [Authorize] but not [NotificationReadOnlyFilter]; whether that is intentional is unknown.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): - comparison of disposalCost.Amount with Decimal.Parse(model.Amount) while persistence uses model.Amount.ToMoneyDecimal(). Equivalence of these conversions is not established.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): The base controller is therefore a material unresolved dependency.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): - the typo-like property NumberOfFilterdNotificationAudits, whose impact cannot be determined from the available evidence.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): This means the GET action can be reached without authentication unless another filter independently blocks it. The supplied source does not show the implementation of NotificationReadOnlyFilter, so the security impact is unresolved.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): - ReadOnlyController has only [Authorize]; it does not visibly use [NotificationReadOnlyFilter]. Whether that is intentional or a gap cannot be determined from this range.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): The GET action explicitly handles packagingData != null, so the POST-side assumption that existingPackagingData is non-null is not established by this source.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): These are unresolved until route generation and views are inspected.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): while saving with model.Amount.ToMoneyDecimal(). Whether those conversions are equivalent is not established.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): - The typo-like property name NumberOfFilterdNotificationAudits is source evidence of a model/API naming issue, but its impact cannot be determined here.
Unknown — Harten review [WU-047-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1065a63077c054c78027ca0e234cb3f0/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-048-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/85fb7b1b7f2453a78292ffca53b08018/second-opinion/opinion.md): If no composition entries contain both values, the comparison is 0 == 0, which yields a “data required” validation error. Whether rejection of an entirely empty submission is intentional remains unresolved.
Unknown — Harten review [WU-048-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/85fb7b1b7f2453a78292ffca53b08018/second-opinion/opinion.md): The analysis reports that constructors do not initialize OtherCodes, and the WasteComposition setter accepts a potentially null value. It is therefore unresolved whether controllers, model binding, or other code guarantees non-null collections.
Unknown — Harten review [WU-048-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/85fb7b1b7f2453a78292ffca53b08018/second-opinion/opinion.md): The supplied constructors do not initialize OtherCodes, and the property setter for WasteComposition accepts a potentially null value. Whether model binding or controller code guarantees non-null collections is unresolved from this chunk.
Unknown — Harten review [WU-048-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/85fb7b1b7f2453a78292ffca53b08018/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-049-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a79b5d11aaf4578c8f32b7ab54752077/second-opinion/opinion.md): RecoveryOperationViewModel.cs maps pre-consent information, operation codes, technology, and reason for export. Operation-code ordering changes when interimStatus.IsInterim is true. The property name PreconstedAnswer appears misspelled, but whether that is a defect cannot be determined without the external contract.
Unknown — Harten review [WU-049-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a79b5d11aaf4578c8f32b7ab54752077/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-049-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a79b5d11aaf4578c8f32b7ab54752077/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): ### 1. Shipment outcome classification is conservative, but precedence is unresolved
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): Unresolved question: the supplied evidence does not show whether that exclusivity is intentional, tested, or consistent with the underlying business requirement.
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): Unresolved validation issue: no evidence was supplied showing that the percentage is constrained to a valid range.
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): NotificationShareUserValidation(5, ...) applies to SelectedSharedUsers, while EmailAddress is separately validated. The implementation of NotificationShareUserValidation is not present, so it is unknown whether the maximum count includes the new address, existing users, duplicates, or only list entries.
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): This supports the source comment that newly captured or prenotified shipments should not automatically display as rejected. However, the precedence is an unresolved business-rule question: if a row has both IsReceived == true and IsPartialRejection == true, it is classified as accepted. The source does not establish whether those flags are mutually exclusive or whether partial rejection should take precedence.
Unknown — Harten review [WU-050-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4aa1817aa13f5aa3838fd3f416f40f29/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-051-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c5553da9249359ec9040ea5e0df7e1d6/second-opinion/opinion.md): Reference: TechnologyEmployedViewModel.cs, Validate; resource semantics unresolved.
Unknown — Harten review [WU-051-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c5553da9249359ec9040ea5e0df7e1d6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-051-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c5553da9249359ec9040ea5e0df7e1d6/second-opinion/opinion.md): Source: TechnologyEmployedViewModel.cs, Validate; unresolved resource semantics.
Unknown — Harten review [WU-051-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c5553da9249359ec9040ea5e0df7e1d6/second-opinion/opinion.md): These are potential runtime risks; whether callers guarantee non-null values is unresolved in this chunk.
Unknown — Harten review [WU-051-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c5553da9249359ec9040ea5e0df7e1d6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): The claim that the application uses .NET Framework 4.0 is not established. The generated files contain Runtime Version:4.0.30319.42000, and .resx headers reference version 4.0.0.0 assemblies. Those are generated-code/resource metadata and do not prove the project’s complete target framework.
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): The supplied range does not show whether controllers revalidate these values, disregard them in favor of server state, or accept them directly. This is an unresolved integrity question, not a confirmed vulnerability.
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): If a null model can reach the view, this could fail during link generation. Whether that state is reachable is unresolved because the relevant controller and view-model flow are absent.
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): The strongest defensible conclusion is that the source demonstrates relevant views, resource definitions, and some client-side behaviors, while leaving backend enforcement, trust-boundary handling, routing, runtime configuration, and test-confirmed behavior unresolved. Controllers, view models, validation services/attributes, project files, and tests are required to close those gaps.
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): ### Claims that are too strong or not established
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): This is an unresolved integrity question, not a confirmed vulnerability.
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): This depends on an exact, hard-coded ViewBag.Title value. The source does not show where that value is assigned, so the intended behavior and robustness are unresolved.
Unknown — Harten review [WU-052-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cba59df92e12553aad7602eb2c774004/second-opinion/opinion.md): The fleet document correctly identifies the principal UI areas, but it overstates confidence in runtime version, validation enforcement, and duplicate-upload prevention. It also omits multiple source files that are present in the exact supplied range. The main unresolved questions require the corresponding controllers, view models, validation attributes/services, project target framework, and tests.
Unknown — Harten review [WU-053-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2541bb1f82665283ba89d6c76e9f0e8c/second-opinion/opinion.md): This is an unresolved server-side integrity issue, especially because category and type values may determine how concentration data are interpreted.
Unknown — Harten review [WU-053-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2541bb1f82665283ba89d6c76e9f0e8c/second-opinion/opinion.md): - Step indicators are shown to users → Step labels exist in resources; rendering is not established.
Unknown — Harten review [WU-053-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2541bb1f82665283ba89d6c76e9f0e8c/second-opinion/opinion.md): The fleet’s uncertainty concerning the energy formula and enum/model option lists should remain unresolved.
Unknown — Harten review [WU-053-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2541bb1f82665283ba89d6c76e9f0e8c/second-opinion/opinion.md): These values are client-modifiable. The source does not establish whether POST handlers ignore, reconcile, or validate them against server-side state. This is an unresolved integrity question, particularly because category/type values influence how submitted concentration data are identified.
Unknown — Harten review [WU-053-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2541bb1f82665283ba89d6c76e9f0e8c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): The conditional UI flow is supported. The underlying rule determining when customs details are required is not established. In particular, the views do not show whether the server rejects inconsistent or omitted values when CustomsOfficeRequired is false.
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): twice. This appears redundant, but its practical effect cannot be determined without the consuming editor template.
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): The accessibility and localisation implications depend on project conventions and requirements not supplied here. The external-link security impact likewise depends on browser policy and surrounding controls. The child analysis also raises an unresolved question about whether external European Commission links are intentionally HTTP rather than HTTPS; the relevant link targets should be checked directly in the guidance partials.
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): Exporter/Index.cshtml delegates business/address/contact rendering to editor templates. The exact fields and validation behaviour cannot be established from this view alone.
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): 8. External link security is unresolved.
Unknown — Harten review [WU-054-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ba24f069f755b07b943088c1094c5e6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): Thus, the view presents facility selection and indicates an existing selection. Persistence, tamper resistance, and authoritative server-side acceptance remain unresolved.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): The duplicate id attribute is a concrete markup defect ([0, 106333)). Its effect on browser parsing, DOM access, JavaScript selectors, and tooling may vary. It is unresolved whether this is a source defect or a transformation artefact.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): This is not sufficient to conclude a vulnerability. However, the provenance, encoding, and sanitization of these values are not available. _ChemicalComposition.cshtml is therefore an unresolved security review point; the resource-formatting path in Remove.cshtml should also be verified rather than assumed safe.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): - Interim/non-interim validation: confirmed as view controls and validation-display helpers; backend validation unresolved.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): - Actual facility selection: confirmed as rendered radio selection with a checked indicator; persistence and server-side authority unresolved.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): - “.NET Framework 4.0”: generated-resource runtime metadata is present; project target framework is not established.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): The fleet document should therefore retain its high-level structure but downgrade several “Confirmed” statements, explicitly include the omitted overview partials, record the duplicate id defect, and flag the Html.Raw usage and customs-office ordering as unresolved review items.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): The fleet’s technology observations are broadly accurate, but the claim that the application “uses .NET Framework 4.0” is not established solely by the generated comment Runtime Version:4.0.30319.42000. That comment is evidence about the generator/runtime metadata in those files, not conclusive evidence of the complete application target framework.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): The first is potentially safe if the resource template and FacilityName are properly encoded by the formatting/rendering path, but the exact encoding semantics should be verified. The second explicitly applies Html.Raw to model-derived or model-dependent text (Constituent, ConstituentTitle). This is not enough to conclude there is a vulnerability, because the provenance and sanitization of those values are absent, but it is an unresolved security review point.
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): The following should be downgraded from fully confirmed system behaviour to confirmed view behaviour / backend unresolved:
Unknown — Harten review [WU-055-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6cdedf31906c561cb7e5a007f8cd1e7e/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): The supplied range does not include the view-model validation or population logic. Consequently, it is unresolved whether these assumptions are guaranteed or can produce runtime failures.
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): _PreconsentStatus.cshtml references Model.PreconstedAnswer (_PreconsentStatus.cshtml, line 7). The spelling may be intentional or may indicate a mismatch with the model. No corresponding model definition is available, so this remains unresolved.
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): Accordingly, this weave supports a conclusion of material incompleteness in the fleet document, while leaving runtime safety, model validity, and downstream rendering behavior unresolved.
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): The following are directly visible assumptions, but their runtime validity cannot be established from this range:
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): The source does not establish whether these values are restricted to safe, non-HTML data. It is therefore unresolved whether raw rendering is safe in all cases; this cannot be classified as an actual vulnerability from this range alone.
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): _PreconsentStatus.cshtml renders Model.PreconstedAnswer (_PreconsentStatus.cshtml, line 7). The apparent spelling may be intentional or may be a model-property typo. No corresponding view model is supplied, so this remains unresolved.
Unknown — Harten review [WU-056-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00406445566a5378b1446bc2ef2ba971/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-057-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef45c51435225eeeb509fd383d89bc72/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-057-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef45c51435225eeeb509fd383d89bc72/second-opinion/opinion.md): - The fleet says the application “supports localized strings.” That is supported for the resource-backed text, but several supplied views also contain hard-coded user-facing strings, including "Submit notification", "Section incomplete", "Amounts and dates", "Notification overview", and "Continue". Therefore, localization coverage is incomplete or at least not established from this range.
Unknown — Harten review [WU-057-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef45c51435225eeeb509fd383d89bc72/second-opinion/opinion.md): ResubmissionSuccess.cshtml applies Html.Raw to a formatted resource string after replacing spaces in Model.NotificationNumber with  . This may be intentional for non-breaking formatting, but the safety of the result depends on the trust and validation of NotificationNumber and the resource content; that cannot be established here.
Unknown — Harten review [WU-057-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef45c51435225eeeb509fd383d89bc72/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): This supports a packaging flow involving multiple packaging selections and an optional “Other” description. Resource strings such as ChoosePackagingType and OtherDescriptionRequired indicate validation messaging, but the complete enforcement rules are not established without the associated model and validator code.
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): This supports the existence of an “Other” selection path. The editor template and model validators are outside the identified evidence, so the complete rendering and validation semantics remain unresolved.
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): 2. External Companies House integration is unresolved.
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): No regular expression, validator, controller, or model-validation implementation is present in the supplied means-of-transport files. The fleet document’s uncertainty on the exact validation rules is therefore appropriate. Its stronger wording that the interface “validates” transport methods is not established by this evidence alone.
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): The source only shows a relative GetCompanyName URL. The endpoint may call Company House server-side, but that is unresolved.
Unknown — Harten review [WU-058-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20b0beaf807755bbb8b60fb9f67f0692/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): This inconsistency is confirmed. Its functional effect remains unresolved because the declaration and conversion semantics of BusinessType are not present. A stored value of "LimitedCompany" could fail the server-side "Limited company" comparison, potentially suppressing the company-registration panel even if client-side code later changes visibility.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): This is an unresolved authorization requirement, not a confirmed vulnerability. Controllers and command handlers needed to assess ownership and authorization are absent from the chunk.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): - Validation helpers and resource text are visible, but required-field and registration-number rules are not established without models, attributes, controllers, or handlers.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): Authorization of hidden identifiers, upstream email validation, persistence, endpoint behavior, exact model conversions, and the rule governing transition to read-only remain unresolved. The evidence supports identifying these as review targets, but not treating them as confirmed backend defects.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): Assessment: Confirmed unsafe rendering pattern; exploitability remains unresolved because upstream validation is missing from the chunk.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): Assessment: Confirmed inconsistency and unresolved risk. A limited-company model may fail to render the registration panel server-side if its stored value is "LimitedCompany" rather than "Limited company", although the JavaScript may subsequently alter the display on page load.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): Assessment: Not a confirmed vulnerability from this chunk alone. It is an unresolved authorization requirement: backend handlers must verify that the current user may remove the specified producer/shared user from the specified notification.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): Assessment: Client-side/UI limit is confirmed; server-side enforcement is unresolved. The fleet document’s “captures ... limited to 70 characters” overstates what this exact view proves.
Unknown — Harten review [WU-059-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/445cae777dee5e128db208fc93196011/second-opinion/opinion.md): Backend authorization, persistence, validation, and notification read-only transition rules remain unresolved because the relevant controllers, view models, and domain services are outside the supplied range.
Unknown — Harten review [WU-060-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb76316d2e955258a5f8555ff8a5a0b6/second-opinion/opinion.md): These are unresolved security questions, not confirmed vulnerabilities. The relevant evidence is limited to the client-rendered fields and controls in ShareNotification.cshtml; controller and service implementations are not present.
Unknown — Harten review [WU-060-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb76316d2e955258a5f8555ff8a5a0b6/second-opinion/opinion.md): If SelectedSharedUsers and SharedUsersList become inconsistent, Single will throw rather than producing a validation response. Whether the controller guarantees this invariant is unknown.
Unknown — Harten review [WU-060-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb76316d2e955258a5f8555ff8a5a0b6/second-opinion/opinion.md): This is an unresolved security question, not a confirmed vulnerability. The relevant evidence is the client-rendered hidden fields and submit values in ShareNotification.cshtml; controller and service code are absent.
Unknown — Harten review [WU-060-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb76316d2e955258a5f8555ff8a5a0b6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): If there are zero or multiple matching records, rendering would throw. However, the supplied range does not include the view-model definitions or data-population rules, so this is a conditional robustness risk, not a confirmed defect. It remains unresolved whether the boolean flags guarantee exactly one matching item and whether the collections are guaranteed non-null.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): despite labeling Quantity. This may be intentional, but the supplied resource contents are incomplete. It cannot be determined whether NumberHint is a suitable quantity hint or a copy/paste error.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): The spelling is unusual, but no corresponding model definition is available. It should be recorded as an unresolved naming question rather than labeled a confirmed typo or defect.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): while they render EndDay, EndMonth, and EndYear inputs. This is directly visible in the supplied source and may impair label association and accessibility. It could also affect client-side scripts that rely on IDs. The exact validation or JavaScript consequences cannot be established from this range.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): even though it labels Quantity. This may be intentional, but the supplied resource definitions are incomplete, so it is unresolved whether NumberHint is an appropriate quantity hint or a copy/paste error.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): The spelling “Preconsted” appears unusual. It may be the actual model property name, but no corresponding view-model definition is supplied. This should be treated as an unresolved question rather than a confirmed typo.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): - Validation behavior for shipment dates is not established by the view alone. The HTML min/max attributes provide browser-side constraints for day/month and a minimum year, but server-side validation and cross-field date validation remain unseen.
Unknown — Harten review [WU-061-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/08db425cba945ade82ce95c6c28cccee/second-opinion/opinion.md): ### 5. Additional unresolved questions
Unknown — Harten review [WU-062-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9d7da205c95751c881765ec8a4eefa6e/second-opinion/opinion.md): These remain unresolved questions rather than confirmed defects or confirmed capabilities.
Unknown — Harten review [WU-062-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9d7da205c95751c881765ec8a4eefa6e/second-opinion/opinion.md): Therefore, claims about complete business validation or submission behaviour are not established by this range.
Unknown — Harten review [WU-062-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9d7da205c95751c881765ec8a4eefa6e/second-opinion/opinion.md): Not established by this range:
Unknown — Harten review [WU-063-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8de7eaf2718852a785816a2b75a3d6a2/second-opinion/opinion.md): The supplied chunk does not show model population, sanitization, encoding policy, or trust boundaries. Exploitability is therefore unresolved, not established.
Unknown — Harten review [WU-063-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8de7eaf2718852a785816a2b75a3d6a2/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-063-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8de7eaf2718852a785816a2b75a3d6a2/second-opinion/opinion.md): TransitStatesSummary.cshtml uses Html.Raw for OrdinalPosition, country name, competent-authority code/name, and entry/exit names. Unlike the state-of-import partial’s DisplayFor, these values are inserted without normal MVC HTML encoding. If any of these model properties can contain user-controlled or insufficiently sanitized data, this creates a possible XSS risk. The supplied range does not show the model population or sanitization, so exploitability is unresolved.
Unknown — Harten review [WU-063-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8de7eaf2718852a785816a2b75a3d6a2/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-064-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3046905f14b259f885e371c656240174/second-opinion/opinion.md): This is a direct evidence-level contradiction. It could produce a browser title and visible heading referring to different fractions. Whether this is intentional, a localization defect, or a view/resource-mapping error is unresolved. The fleet document reportedly does not identify this issue.
Unknown — Harten review [WU-064-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3046905f14b259f885e371c656240174/second-opinion/opinion.md): The restriction is also client-side only in the observed evidence. The source does not establish that the server rejects or ignores FurtherDetails when AnnexProvided is true. The use of readonly, rather than disabled, suggests the field would normally remain in form submission, but the handling of that submitted value is unknown.
Unknown — Harten review [WU-064-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3046905f14b259f885e371c656240174/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-064-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3046905f14b259f885e371c656240174/second-opinion/opinion.md): The readonly restriction is also only client-side. The source does not show server-side enforcement that FurtherDetails must be empty when AnnexProvided is true. That enforcement remains unresolved because the ViewModel and controller are missing.
Unknown — Harten review [WU-064-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3046905f14b259f885e371c656240174/second-opinion/opinion.md): The views prove these values are emitted into HTML, but hidden inputs are user-modifiable. Whether the server revalidates them or derives them from persisted state cannot be determined from this chunk. Any security or integrity conclusion requires the missing controller and service code.
Unknown — Harten review [WU-064-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3046905f14b259f885e371c656240174/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): PostageLabel.cshtml uses four independent if statements to select an authority address partial and has no corresponding default or exception branch. On the evidence available, an unsupported or null authority could result in no address being rendered while the surrounding instructions and continuation link remain visible. Whether such a state is impossible by model invariant is unresolved.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): ### 6. Payment details and authority-specific text are model-driven, but their provenance is unknown
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): PrintResources.resx contains ReferenceAnnexesDisclosureText, but Print.cshtml does not appear to render it. Instead, _Block17Disclosure.cshtml supplies disclosure text directly, including notifier/original-producer signing language and an additional instruction for cases where the producer is unknown.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): They may be consumed by omitted files, but that cannot be established from the supplied chunk.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): ## Material contradictions and unresolved questions
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): 4. Authority handling differs by view: FinancialGuarantee.cshtml rejects unknown authorities; PostageLabel.cshtml appears to omit an address silently.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): 9. End-to-end behavior is unresolved: no evidence in this chunk establishes routing, authorization, persistence, request handling, model invariants, document generation, or actual enforcement.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): Therefore the stronger, source-supported statement is: the application has localized strings intended for those validation scenarios; enforcement is unresolved in this chunk.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): The source also does not guard against AmountPaid > Charge; in that case due would be negative. Whether that state is impossible by domain invariant is unresolved.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): The partial includes the same notifier/original-producer signing text and an additional paragraph stating that, if the producer is unknown, the person controlling the waste should also sign.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): Some may be consumed by omitted partials or other views, but that cannot be established from this range. The source therefore demonstrates resource declaration, not complete resource usage.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): Whether the model guarantees a valid authority is not shown. This is a potential unresolved behavior difference between two pages handling the same enum.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): ## Contradictions and unresolved questions
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): 4. Authority handling: financial guarantee rejects unknown authorities; postage-label rendering silently produces no address.
Unknown — Harten review [WU-065-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6aaaaa2b8d8c5eaabdeb54a9d6201d06/second-opinion/opinion.md): 7. Chunk limitation: no controller, model, routing, authorization, persistence, PDF-generation, or partial-view implementations are included, so end-to-end behavior cannot be established.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): - where the producer is unknown, the person in possession or control of the waste should sign.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): - EA: original or new producer; possessor/controller if the producer is unknown; practicability may depend on national legislation.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): - NRW: producer, new producer, or collector is, where practicable, also to sign and date; the holder should sign if the producer is unknown.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): The fleet document’s focus on the EA component therefore should not be read as describing all authorities. Whether these variants are intentionally different, internally inconsistent, or aligned with external law remains unresolved.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): These are unresolved questions, not confirmed defects. Conversely, the presence of an anti-forgery token should not be taken as proof of complete request validation or business-rule enforcement.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): - If the producer is unknown, the person in possession or control of the waste should sign.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): - EA: original or new producer; possessor/controller if producer unknown; practicability may be defined in national legislation.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): - NRW: producer, new producer, or collector is, where practicable, also to sign and date; holder should sign if producer is unknown.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): The fleet document mentions only the EA component and therefore misses potentially important authority-specific differences. Whether these texts are legally current or internally consistent with external legislation cannot be determined from this source range.
Unknown — Harten review [WU-066-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/208cab67a21051988bfb25244d739013/second-opinion/opinion.md): Those are unresolved questions, not confirmed defects.
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): throw new InvalidOperationException("Unknown rule view");
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): for an unrecognized state. It is unresolved whether every valid MovementRules result is covered.
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): ### 6. Notification scoping of generated documents is not established
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): This blocks synchronously while invoking asynchronous work. It is inconsistent with the asynchronous actions elsewhere and may create thread-pool pressure or deadlock depending on the mediator implementation and synchronization context. The supplied range cannot determine the actual runtime impact.
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): Without the TempData provider and concurrency configuration, the evidence cannot determine behaviour under:
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): 5. Can any valid MovementRules result reach GetRuleErrorView’s "Unknown rule view" exception?
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): throw new InvalidOperationException("Unknown rule view");
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): The source does not show the configured TempData provider or concurrency policy. Consequently, multi-tab behaviour, replay behaviour, and loss of state cannot be determined from this chunk.
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-067-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/470da1bcef945b1a9dbb8e4210eb30dc/second-opinion/opinion.md): 5. Are all possible MovementRules values represented in GetRuleErrorView, or can valid rule results reach the Unknown rule view exception?
Unknown — Harten review [WU-068-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6769907eb104521e84726fafdb325ec1/second-opinion/opinion.md): Consequently, both boundary values are rejected, including exactly 999999999999999999 and the corresponding negative boundary. Whether this is a defect depends on the intended inclusive/exclusive business rule, which is not established by the supplied source.
Unknown — Harten review [WU-068-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6769907eb104521e84726fafdb325ec1/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-068-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6769907eb104521e84726fafdb325ec1/second-opinion/opinion.md): Those methods rely on the [IsValidNumber] attribute having already rejected malformed input, but IValidatableObject execution order and model-validation behavior are not established by this source range. A malformed or null quantity could therefore produce an exception rather than a validation result.
Unknown — Harten review [WU-068-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6769907eb104521e84726fafdb325ec1/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-069-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3f2416c1f8335c3c88fdc669a67b35fd/second-opinion/opinion.md): This assessment is based solely on child artifact c0, covering source chunk byte range [0, 76224) with supplied SHA-256 781a2c51748ae181b093af92e97147329d0c3ab8672a4a1ed0a314229f0d7ddd. The evidence identifies filenames and quoted source text but does not provide per-file byte offsets; therefore, file-level byte ranges cannot be established.
Unknown — Harten review [WU-069-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3f2416c1f8335c3c88fdc669a67b35fd/second-opinion/opinion.md): However, the visible Validate() logic only checks whether File is null or empty. It is unresolved whether this model creates those failed-rule collections or whether the count drives user-facing behavior.
Unknown — Harten review [WU-069-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3f2416c1f8335c3c88fdc669a67b35fd/second-opinion/opinion.md): ## Additional risks and unresolved behavior
Unknown — Harten review [WU-069-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3f2416c1f8335c3c88fdc669a67b35fd/second-opinion/opinion.md): NoMovementsToList reportedly checks whether Shipments == null, but Validate() directly invokes Shipments.Any(...). If validation occurs while Shipments is null, the method may throw rather than return a validation result. Whether MVC binding or another lifecycle step always initializes the collection is unresolved.
Unknown — Harten review [WU-069-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3f2416c1f8335c3c88fdc669a67b35fd/second-opinion/opinion.md): > The supplied evidence confirms portions of the receipt/recovery, upload, shipment-selection, cancellation, and template-navigation workflows at the view and view-model layers. Backend association, persistence, processing order, business-rule enforcement, template generation, runtime localization, and cross-workflow consistency remain unproven or unresolved.
Unknown — Harten review [WU-069-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3f2416c1f8335c3c88fdc669a67b35fd/second-opinion/opinion.md): ShipmentMovementDocumentsViewModel initializes Shipments, but WarningChoiceViewModel() does not initialize WarningChoices; only its parameterized constructor calls CreateFromEnum<WarningChoicesList>(). UploadChoiceViewModel() also leaves Shipments unset. This may be intentional for MVC binding, but the behavior is unresolved from this range.
Unknown — Harten review [WU-070-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b550aa4dc78e5631a3df8fd2d9b8efbe/second-opinion/opinion.md): - Model.CarriersList.Single(c => c.Value == Model.SelectedCarriers[i].Id.ToString()) can throw if a selected carrier is missing from the current list. Whether that state is impossible is unresolved.
Unknown — Harten review [WU-070-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b550aa4dc78e5631a3df8fd2d9b8efbe/second-opinion/opinion.md): No anchor helper or URL is visible in the supplied view. Therefore, the evidence supports an actual application link for the non-Scotland branch, but only textual references to SEPA templates for Scotland. It remains unresolved whether another layout, helper, or rendering layer transforms those strings into links.
Unknown — Harten review [WU-070-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b550aa4dc78e5631a3df8fd2d9b8efbe/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-070-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b550aa4dc78e5631a3df8fd2d9b8efbe/second-opinion/opinion.md): - Model.CarriersList.Single(c => c.Value == Model.SelectedCarriers[i].Id.ToString()) will throw if a selected carrier is absent from the current list. Whether that state is impossible is unresolved.
Unknown — Harten review [WU-070-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b550aa4dc78e5631a3df8fd2d9b8efbe/second-opinion/opinion.md): No anchor helpers or URLs are present in the supplied view. Consequently, the fleet description that the page provides “links to download templates” is only partially supported: an actual application link exists for non-Scotland, while the Scotland branch merely states template names and says they can be viewed/downloaded from the SEPA website. Whether those resource strings are transformed into links by a layout or custom rendering mechanism is unresolved; nothing in this view shows such transformation.
Unknown — Harten review [WU-070-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b550aa4dc78e5631a3df8fd2d9b8efbe/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-071-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea06ae67db125c3589e09d996106b66c/second-opinion/opinion.md): Accordingly, “users can download IWS movement documents” is supported only as a UI/linkage observation. Availability, correctness, and authorization remain unresolved.
Unknown — Harten review [WU-071-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea06ae67db125c3589e09d996106b66c/second-opinion/opinion.md): A specific unresolved edge case is that an absent or unexpected value appears to fall into the else branch, which displays disposal terminology. It is not possible from this evidence to determine whether that state is reachable or safely constrained.
Unknown — Harten review [WU-071-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea06ae67db125c3589e09d996106b66c/second-opinion/opinion.md): 3. Carrier workflow semantics are unresolved
Unknown — Harten review [WU-071-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea06ae67db125c3589e09d996106b66c/second-opinion/opinion.md): Therefore, the stronger claim that downloads are available and correctly authorized is unresolved.
Unknown — Harten review [WU-071-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea06ae67db125c3589e09d996106b66c/second-opinion/opinion.md): This is a concrete unresolved robustness question.
Unknown — Harten review [WU-072-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9a6661d9e2651b49c3a2ca0c22ad4b6/second-opinion/opinion.md): These are textual observations. They do not by themselves prove functional defects. The duplicated expiration wording is an unresolved question because it could be intentional, stale copy, or context-dependent composition.
Unknown — Harten review [WU-072-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9a6661d9e2651b49c3a2ca0c22ad4b6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-072-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9a6661d9e2651b49c3a2ca0c22ad4b6/second-opinion/opinion.md): The fleet’s broad description of the visible upload and outcome journeys is substantially supported by the supplied views and resources. Its stronger claims about controller identity, backend validation, limit enforcement, persistence, transactionality, and prevention of further generation are not established by this evidence and should be stated as assumptions or hypotheses. The most significant technical follow-up areas are the use of Html.Raw, the custom upload submission logic, the absence of backend implementation evidence, and the apparent inconsistencies in localized resource text.
Unknown — Harten review [WU-072-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9a6661d9e2651b49c3a2ca0c22ad4b6/second-opinion/opinion.md): Analysed source node c0, byte range [0, 114218), SHA-256 10908f...ae760c. The supplied evidence contains multiple files concatenated together, but does not provide per-file byte offsets; therefore exact file-local byte ranges cannot be determined without inventing positions. Citations below use the supplied file names and exact source constructs/text.
Unknown — Harten review [WU-072-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9a6661d9e2651b49c3a2ca0c22ad4b6/second-opinion/opinion.md): The fleet correctly identifies missing backend evidence. The range contains views, generated resource wrappers, and resource files, but no controllers, services, validators, models’ implementations, or persistence code. Consequently, the following remain unresolved:
Unknown — Harten review [WU-072-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9a6661d9e2651b49c3a2ca0c22ad4b6/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-073-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82246dcec0d95900870f5307ce4c5c6c/second-opinion/opinion.md): in ReceiptRecoveryBulkUpload/Errors.cshtml. This is safe only if the value is fixed, trusted, or sanitized before rendering. The supplied range does not establish that rule.ErrorMessage, ShipmentNumber, or other interpolated values are application-controlled. This should be treated as an unresolved injection risk rather than a confirmed vulnerability.
Unknown — Harten review [WU-073-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82246dcec0d95900870f5307ce4c5c6c/second-opinion/opinion.md): ### Unresolved questions requiring source outside this chunk
Unknown — Harten review [WU-073-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82246dcec0d95900870f5307ce4c5c6c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): ## Qualifications and unresolved interpretations
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): The upload page also contains a pageshow handler that reloads when event.persisted is true. The source comments suggest browser back/forward-cache mitigation, but effectiveness across browsers is not established.
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): - ExportMovementsController adds one day to the submitted end date before requesting the report and constructing the filename. The rationale and intended date-boundary semantics are unresolved.
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): The source supports a qualified account of the application’s view structure, upload form presentation, report-controller patterns, anti-forgery usage, and workbook generation. It does not support definitive claims about end-to-end upload success, server-side duplicate prevention, handler behavior in all deployments, or the semantics of omitted controllers and mediator handlers. Those points remain unresolved rather than contradicted.
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): 3. “Mediator command” is not established for the compliance flow.
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): 4. The layout description omits an important unresolved reference.
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): - The upload page includes a pageshow handler that reloads when event.persisted is true, apparently to address browser back/forward-cache state ([Upload/Index.cshtml]). The intent is commented in the source; effectiveness in all browsers is not established here.
Unknown — Harten review [WU-074-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d06f61fcbe45f6493f60d8ad1232ce1/second-opinion/opinion.md): ## Retained gaps and unresolved questions
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): The conclusions below distinguish directly observed source evidence from inferences and unresolved dependencies. They do not establish lossless semantic understanding of the complete application.
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): The safety of .Value cannot be determined from this evidence. It depends on the validation rules and AsDateTime() implementation, neither of which is included in the supplied material.
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): There is an unresolved binding question because the POST-to-GET transfer uses differently cased or named properties in places, including SearchText/searchText and TextSearch/textSearch. MVC binding is commonly case-insensitive, but that behavior is not demonstrated by the supplied files. The effect of columnsToHide likewise depends on the unseen XlsxActionResult implementation.
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): - XLSX generation: XlsxActionResult is referenced, but its implementation is absent; actual workbook generation, column hiding, and failure behavior remain unknown.
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): Important unresolved dependency: the safety of .Value depends on model validation and the behavior of AsDateTime(). The implementation of both is outside the supplied evidence.
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): - XLSX generation: the result class is referenced but not supplied, so file-generation behavior remains unknown.
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): ## Coverage and unresolved questions
Unknown — Harten review [WU-075-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9882e1a8fa3a505c9e6fb702bc346517/second-opinion/opinion.md): Unresolved from this range:
Unknown — Harten review [WU-076-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9589a6462c6b5606834dcf8f13d70716/second-opinion/opinion.md): Both models call From.AsDateTime() and To.AsDateTime(), but the supplied range does not include the implementation of RequiredDateInputViewModel.AsDateTime(). Therefore, behavior for null, malformed, partial, or otherwise incomplete dates remains unresolved.
Unknown — Harten review [WU-076-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9589a6462c6b5606834dcf8f13d70716/second-opinion/opinion.md): ## Important omissions and unresolved areas
Unknown — Harten review [WU-076-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9589a6462c6b5606834dcf8f13d70716/second-opinion/opinion.md): The strongest defensible conclusion is that the source shows portions of a report-oriented ASP.NET MVC/Razor UI and selected model-level validation logic. It does not by itself establish complete validation semantics, backend processing, security enforcement, persistence, or the full runtime profile. Unresolved constructor behavior, resource duplication, nullable parameter handling, and the distinction between client-side visibility and server-side enforcement should remain explicit in the final account.
Unknown — Harten review [WU-076-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9589a6462c6b5606834dcf8f13d70716/second-opinion/opinion.md): The significance of the boolean argument cannot be determined from this range. The fleet document does not mention this difference, which may affect required-field behavior.
Unknown — Harten review [WU-076-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9589a6462c6b5606834dcf8f13d70716/second-opinion/opinion.md): The range does not establish whether null values are expected, whether nullable ToString() behavior is relied upon, or whether callers guarantee non-null values. The default constructor also does not initialize ShipmentReportColumns. These are unresolved implementation questions, not confirmed defects.
Unknown — Harten review [WU-076-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9589a6462c6b5606834dcf8f13d70716/second-opinion/opinion.md): ### Unsupported or unresolved claims
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): The broader assertion that all report forms in the application do so is not established. In particular, ExportNotifications/Index.cshtml is absent, and other report views may lie outside [0, 84,855).
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): But ExportNotifications/Index.cshtml is not supplied. Therefore, the resource definitions are established, while their use, form structure, model fields, anti-forgery behavior, and validation behavior remain unresolved.
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): ## Backend behavior is not established
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): ## Consolidated contradictions and unresolved questions
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): 6. Editor-template behavior is unresolved. The visible views establish delegation, not the resulting controls or validation semantics.
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): - Mark Export Notifications view behavior and all editor-template behavior as unresolved.
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): The supplied views do show @Html.AntiForgeryToken() in every displayed form, including Finance, Financial Guarantees, FOI, Import Notifications, Producer, and Shipments. Therefore the conclusion appears true for the forms visible in this chunk, but it cannot be established for every report form in the application because:
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): It does not independently prove the runtime resource value unless the omitted .resx file is inspected. This should remain an unresolved verification point.
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): ### 7. ExportNotifications view behavior is unresolved
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): ### 9. Editor-template behavior remains unresolved
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): ## Contradictions and unresolved questions
Unknown — Harten review [WU-077-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c70d0968c665daf8b53b5ac344b52ac/second-opinion/opinion.md): 2. Shipments warning: The designer comment suggests the warning exists, but the corresponding .resx value is not supplied. Runtime confirmation is unresolved.
Unknown — Harten review [WU-078-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/df7dce08f57656ab8ff582c3ac921cd8/second-opinion/opinion.md): ### Remaining unresolved questions
Unknown — Harten review [WU-078-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/df7dce08f57656ab8ff582c3ac921cd8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): Removing the outline without adding an equivalent, clearly visible focus indicator creates a material keyboard-accessibility risk. The child evidence cannot establish whether another stylesheet later restores a visible focus treatment, so this should be verified in the complete compiled CSS and in browser keyboard testing.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): These statements are not necessarily contradictory: declaration order or selector specificity could explain them. However, c2 lacks the relevant order and specificity, so the effective tablet margin cannot be determined from the supplied artifact.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): The definitions of em, tablet, ie-lte, and ie were not available in the cited evidence. They may exist elsewhere in the project, so compilation validity is unresolved.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): - licensing and distribution compliance cannot be established from the source alone.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): CSS evidence alone cannot establish the HTML structure or JavaScript behavior. However, styling headings/list items as controls does not make them keyboard-accessible. If these elements are interactive, the corresponding child artifacts should be checked for buttons, links, keyboard handlers, focus management, and ARIA state.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): Therefore, the accordion mixin is defined but produces no CSS in this file unless included elsewhere. This is a source-level fact; whether another stylesheet includes it is unresolved.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): - The evidence includes the font’s licensing/copyright comment, but the supplied source alone cannot establish whether the embedding and distribution comply with the font licence.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): 1. Interactive semantics cannot be determined from CSS alone. Cursor styles and focus rules indicate possible controls, but the HTML and JavaScript are not included.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): 2. Build validity is unresolved. Several Sass functions, mixins, variables, and classes are defined outside the supplied range or only referenced here.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): 3. Cross-file cascade is unresolved. Later stylesheets may correct the invalid focus rule, missing autocomplete state, or other concerns.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): Those files are not directly present in the named source excerpts supplied after the font data. Consequently, the Fleet statements cannot be confirmed from this exact visible evidence range. They may refer to omitted sibling chunks or another source range, but that remains unresolved.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): These statements can coexist if the tablet-specific rules are later or more specific declarations. However, the artifact does not provide declaration order or selector specificity, so the effective computed margins remain unresolved.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): 6. Potential naming/version ambiguity is unresolved.
Unknown — Harten review [WU-079-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ce5d523a97f45eae87cd25a93ab49049/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): The evidence shows no explicit extension logic. It remains possible that merely invoking the endpoint affects session or middleware state, but that cannot be established from this range.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): The claim that password-reset errors are displayed to users is incomplete: ResetPassword reportedly invokes HandleBadRequest(ex) and returns the view when model state is invalid, but neither HandleBadRequest nor the view is included. The exact exposed error content is unresolved.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): This supports the existence of an audit call associated with a successful-looking copy result. It does not establish atomicity: the range cannot show whether a copy can succeed while audit logging fails, or whether both operations are transactional. Authorization beyond the visible [Authorize] is also unresolved.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): - unresolved dependencies such as mediator handlers, authorization filters, API clients, views, configuration, session settings, and audit implementation.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): The evidence supports the fleet document’s high-level architectural description, but not all of its certainty. The main qualifications are the unresolved jQuery UI version split, duplicated CSS, incomplete authorization evidence, externally delegated token/error handling, an empty session-extension action, and unknown transaction and caching guarantees.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): This may represent retained source files alongside a newer generated bundle, but the range does not show which files are actually loaded. It is therefore unresolved whether the application has a packaging/version-drift issue or merely preserves older component source files.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): ### 7. Copy flow includes audit logging, but its guarantees are unknown
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): The fleet document does cover AccountController.cs, ApplicantController.cs, ChangeNotificationOwnerController.cs, and CopyFromNotificationController.cs, but it does not discuss their unresolved dependencies: mediator handlers, authorization filters, API clients, views, configuration, session settings, or audit implementation.
Unknown — Harten review [WU-080-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b03c03d75f9957b9b399afb71eadafaa/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): If GetExportNotificationId returns null, the conditional body is skipped and notificationDetails.NotificationId is accessed. The visible code therefore permits a NullReferenceException for an unknown or unresolved notification number.
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): This synchronously blocks on asynchronous authorization. It may create thread-pool pressure and complicate exception propagation. A deadlock is not established by the supplied evidence, particularly because the use of Task.Run changes the usual synchronization-context pattern.
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): These are conditional concerns, not established vulnerabilities. Their practical impact depends on call sites, markup guarantees, and whether display names are trusted/static.
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): The supplied code does not show how IIwsClient handles blank tokens for authenticated users, nor whether client-credentials tokens are appropriate for requests marked as allowing unauthenticated users. These are unresolved integration questions rather than demonstrated vulnerabilities.
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): The authorization findings are more appropriately classified as unresolved control gaps:
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): If GetExportNotificationId returns null, the guard is skipped and notificationDetails.NotificationId is dereferenced. This can produce an unhandled NullReferenceException for an unknown notification number.
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): - The “Technology and Runtime Profile” claims about ASP.NET MVC 5, .NET Framework 4.8, Autofac, Owin, GOV.UK Frontend, and other project references are not established by the named source files in this exact range. They may be true elsewhere, but are not independently confirmed here.
Unknown — Harten review [WU-081-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/074387b9401e5902b577bbd7fe05fd20/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): The source and the accompanying fleet document are treated as untrusted evidence. The conclusions below distinguish directly observable code from likely runtime or build implications. Several dependencies and downstream consumers are absent, so some effects remain unresolved.
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): On the source provided, this is a likely compile-time mismatch. Possible explanations include omitted source, a stale caller, or an incomplete interface update. The fleet document describes prenotification parsing as confirmed but does not acknowledge this contradiction. The actual build status cannot be established from the supplied chunk alone.
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): The supplied evidence does not define PrenotificationColumnIndex, so it is unresolved whether the enum always contains six entries. The two paths may enforce equivalent schemas, or they may reject different inputs. The fleet document does not expose this distinction.
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): This is a direct behavioural distinction omitted from the fleet summary, but its correctness remains unresolved.
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): The supplied evidence does not define PrenotificationColumnIndex, so it is unresolved whether its count is always six. The two validators may enforce different schemas despite both handling bulk-related uploads.
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): The fleet document is broadly accurate at the feature-summary level, but its “Confirmed” labels are too strong for several behaviours. The most material unresolved issues in the supplied range are:
Unknown — Harten review [WU-082-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e696bfc61f2b5eba980f41b1c5ca288f/second-opinion/opinion.md): These findings are based only on the supplied source range. The implementations of HttpPostedFileBase, IVirusScanner, mediator requests, PrenotificationColumnIndex, and downstream consumers are not present, so the runtime impact of some issues remains unresolved.
Unknown — Harten review [WU-083-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7d6db444bb1353988ab11234f6016add/second-opinion/opinion.md): - Global maintenance mode is not established by the supplied evidence.
Unknown — Harten review [WU-083-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7d6db444bb1353988ab11234f6016add/second-opinion/opinion.md): An invalid but present identifier may lead to a 404, as the fleet states. However, if GetValue("id") returns null, dereferencing .AttemptedValue may instead throw. The filter also uses Mediator.SendAsync(...).Result; this is a synchronous wait, although whether it can deadlock cannot be determined without the mediator implementation and synchronization-context details.
Unknown — Harten review [WU-083-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7d6db444bb1353988ab11234f6016add/second-opinion/opinion.md): src/EA.Iws.Web/Infrastructure/ObjectExtensions.cs reflects public properties more than once, calls ToString() on collection elements without guarding null elements, and uses ToString() for non-collection values. Date formatting is explicitly "yyyy-MM-dd", but broader culture and timezone semantics are not established by the source.
Unknown — Harten review [WU-083-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7d6db444bb1353988ab11234f6016add/second-opinion/opinion.md): - PagingExtensions is listed as retained but is not described in the child analysis, leaving an unresolved coverage question.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): The attribute returns a fixed validation error unless the value is non-null and value.ToString().IsValidMoneyDecimal() returns true. The delegated extension method is outside the available range. Consequently, the stated “maximum of two decimal places” rule is supported by the error message but not independently confirmed by the implementation shown. Accepted syntax and culture behavior remain unresolved.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): Thus, for precision = 3, 999 and -999 are rejected, while values strictly between them may pass. This may conflict with an interpretation of maxPrecision as an inclusive maximum. Behavior for negative, unusually large, or otherwise invalid precision values is not established.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): In addition, list.Count >= maximumEmails rejects exactly the configured count. If maximumEmails denotes the maximum allowed number of recipients, the implementation appears off by one: it permits at most maximumEmails - 1. Whether upstream binding or validation guarantees a non-null list is unknown.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): ### 3. Virus handling is narrowly defined, with output safety unresolved
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): The selected view is not included. Its rendered content, whether it exposes exception details, and whether the resulting response is safe are unresolved.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): - No explicit formula neutralization, escaping, or data-specific handling is shown. It is therefore unresolved whether values beginning with spreadsheet formula characters are safely represented, or whether ClosedXML’s behavior in this use case provides the intended protection.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): For exporters, registration data is removed for non-limited companies and AdditionalRegistrationNumber is always cleared. This is an observed business rule, but its completeness and correctness cannot be established from the chunk.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): 5. Sensitive-data handling: only two exact form-field names are shown as redacted; comprehensive request or exception sanitization is not established.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): 6. Waste-code mapping: malformed-input behavior, unknown-ID display omission, flag inconsistencies, and input-view-model mutation are material implementation characteristics.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): Returns a fixed validation error unless the value is non-null and value.ToString().IsValidMoneyDecimal() returns true. The extension implementation is outside this range, so the precise accepted syntax and culture behavior are unresolved.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): The source does not show validation of negative, very large, or otherwise unusual maxPrecision values. Math.Pow conversion and range behavior for such inputs are unresolved.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): - The source does not show escaping, formula neutralization, or data-specific handling for values written into Excel. Whether ClosedXML safely represents all input values as intended is unresolved.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): The fleet summary correctly identifies bidirectional JSON/GUID mapping, but omits malformed-input exceptions, silent display omission for unknown IDs, and mutation of the input update view model.
Unknown — Harten review [WU-084-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/25c05fec7a7559c0b5f0a5da9222562f/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-085-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3a761f82415390bf264142a33311b8/second-opinion/opinion.md): This is consistent with a defect or dead computation, but intent cannot be determined from this chunk alone.
Unknown — Harten review [WU-085-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3a761f82415390bf264142a33311b8/second-opinion/opinion.md): This suggests dead or incomplete null-handling logic. Whether null input actually fails depends on AnonymousObjectToHtmlAttributes(null), which is not established here.
Unknown — Harten review [WU-085-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3a761f82415390bf264142a33311b8/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-085-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3a761f82415390bf264142a33311b8/second-opinion/opinion.md): This may be intentional because the EWC view model differs, but it is an unresolved consistency question.
Unknown — Harten review [WU-085-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3a761f82415390bf264142a33311b8/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): This is strong evidence that the helpers themselves do not enforce HTML encoding. If any inputs are user-controlled, insufficiently trusted, or merely assumed to be pre-encoded, stored or reflected XSS is plausible. Exploitability is not established because the relevant callers and input provenance are absent from c0’s examined range [0, 206804).
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): This is a likely portability and correctness defect: some browsers or execution contexts may have no global event, while others may expose an unrelated event. The resulting exception occurs after the asynchronous request. Caller behavior was not available, so the impact on specific flows is unresolved.
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): Overall, the strongest actionable evidence concerns unsafe HTML construction and the apparent JavaScript defects. Whether the security findings are exploitable in deployment remains unresolved without caller, template, serialization, and input-provenance evidence.
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): - GOVUK.setCookie in src/EA.Iws.Web/Scripts/govuk/govuk-template.js writes the supplied name and value directly into document.cookie, and does not set SameSite. In this shown usage, values are fixed consent strings or cookie names, so exploitability is not established. If reused with arbitrary input, cookie syntax injection and weaker cookie isolation would require review.
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): The supplied chunk is marked continuation: true, so both its beginning and ending may depend on omitted bytes. The range begins and ends inside minified JavaScript expressions/functions; exact function boundaries cannot be established losslessly from this chunk alone.
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): ### Not established by this range
Unknown — Harten review [WU-086-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b5f3310c26925f4db2477e6eb90159d7/second-opinion/opinion.md): ## Important limitations and unresolved questions
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): The fleet’s characterization as an “inactivity” mechanism is too strong based on this chunk. No general mouse, keyboard, navigation, or AJAX activity reset is visible. Whether other code resets the timers, or whether the server session expires independently, remains unresolved.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): The use of .html() is a material caveat. If result.Title or result.Description can contain attacker-controlled or insufficiently sanitized content, client-side HTML/script injection may be possible. The endpoint implementation, data origin, sanitization, and CSP are not present, so exploitability is unresolved. No visible AJAX error callback is present.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): src/EA.Iws.Web/Scripts/report-input-parameters.js [bytes 0–45829] binds to #InputParameters_SelectedTextField and toggles .js-hidden on .operator-text-panel depending on whether the selected value is "-1". The reported behavior is supported, but its broader business semantics are not established.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): The filtering and initial-option behavior are supported. The option text contains a likely stray apostrophe after status. Controller binding and rendering are not shown, so the actual use of SelectedNotificationStatus and SearchTerm remains unresolved.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): ### 5. Maintenance mode and session timeout settings are present, but operational use is not established here
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): Therefore, the evidence supports “warning and automatic logout after configured elapsed time, with an explicit keep-signed-in extension,” but does not support a definitive claim that the mechanism detects inactivity. Whether the server session itself expires independently is unresolved from this range.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): The use of .html() means result.Title and result.Description are inserted as HTML rather than text. If those values can be influenced by an untrusted administrator, external system, or attacker, this could create a client-side HTML/script injection risk. The supplied range does not show the endpoint, data origin, sanitization, or CSP, so exploitability is unresolved.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): The range does not show controller binding or rendering, so it cannot establish how SelectedNotificationStatus or SearchTerm is used.
Unknown — Harten review [WU-087-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/58c4a9a6750a5f2cb376fc51cddd51cf/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-088-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e1a6b34cf42589b9e5179b4753be583/second-opinion/opinion.md): There are also direct-call hazards: the reported AsDateTime implementations do not visibly reject every invalid lower bound before invoking date APIs, including month 0 or 13 and, in the described checks, day 0. Model validation may normally prevent such values, but that protection is not established for direct method calls.
Unknown — Harten review [WU-088-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e1a6b34cf42589b9e5179b4753be583/second-opinion/opinion.md): In KeyValueRadioButtons.cs, the Selected setter reportedly executes SelectedValue = value.Value without checking value for null. The getter also assumes PossibleValues is non-null when SelectedValue is non-null. These are source-level hazards; their practical reachability is unresolved.
Unknown — Harten review [WU-088-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e1a6b34cf42589b9e5179b4753be583/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-088-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e1a6b34cf42589b9e5179b4753be583/second-opinion/opinion.md): CreateNewOrganisationViewModel.BusinessType is declared as non-nullable BusinessType but has [Required]. A non-nullable enum always has a value at the CLR level, normally its default underlying value. The attribute may not detect an omitted form value as intended. The source does not show the enum definition or controller binding, so the precise MVC behaviour remains unresolved.
Unknown — Harten review [WU-088-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4e1a6b34cf42589b9e5179b4753be583/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): Consequently, a date such as 1900 may make IsCompleted true while AsDateTime() returns null when past dates are disallowed. This is a high-confidence semantic inconsistency, although the intended policy is not established by the supplied evidence.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): AllowPastDates also does not appear to override MinYear: AsDateTime checks MinYear/MaxYear before applying the past-date logic. Whether that is a defect or intended minimum-bound behavior is unresolved; the naming and separate past-date rules make the contract ambiguous.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): Assessment: medium-confidence contract defect, with the desired behavior unresolved. The configurable range should either drive all validation paths or be removed.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): The implementation and consumers of KeyValueRadioButtons are absent, so the actual validation contract cannot be determined.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): Assessment: limited finding; semantic validity remains unresolved.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): This bypasses Razor encoding. If ViewBag.Errors can contain user-controlled or externally controlled text, the pattern permits HTML/script injection. If the controller guarantees trusted, intentionally preformatted markup, it may be deliberate. The supplied evidence does not include the population of ViewBag.Errors, so exploitability is unresolved.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): The definitions of ShipmentAuditRecord and ShipmentAuditData are absent, so their nullability and invariants remain unresolved.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): If this view model is used as a security or query boundary, callers may submit arbitrary string values. Whether downstream code revalidates these values is unresolved from this range.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): The source does not show where ViewBag.Errors is populated, so exploitability is unresolved. If the controller guarantees trusted, preformatted markup, Html.Raw may be intentional; that guarantee is not evidenced here.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): The fleet document correctly identifies ShipmentAuditRecord and ShipmentAuditData as missing from the supplied source range; their nullability and invariants remain unresolved.
Unknown — Harten review [WU-089-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f3248975c51b5fcdac6e6527dbe2f1dc/second-opinion/opinion.md): The fleet document’s unresolved items for KeyValueRadioButtons, ShipmentAuditRecord, ShipmentAuditData, RecoveryPreconsentResources, CheckBoxCollectionViewModel, and EnumHelper are consistent with the supplied range: their implementations are not included here.
Unknown — Harten review [WU-090-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2797dcb687335fff9006975862bf558c/second-opinion/opinion.md): The resource text associated with ResetPasswordResources describes requirements of eight characters, upper- and lower-case characters, a special character, and a number. This is a displayed requirement, not proof of enforcement. ResetPasswordResources.resx also contains PasswordLength with apparently duplicated wording; the relationship between those resource entries and actual validation remains unresolved.
Unknown — Harten review [WU-090-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2797dcb687335fff9006975862bf558c/second-opinion/opinion.md): - the unresolved localization/value source of Constants.ContinueButtonText in VerifyEmail.cshtml.
Unknown — Harten review [WU-090-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2797dcb687335fff9006975862bf558c/second-opinion/opinion.md): The following stronger claims are not established by the supplied range alone:
Unknown — Harten review [WU-090-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2797dcb687335fff9006975862bf558c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-090-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2797dcb687335fff9006975862bf558c/second-opinion/opinion.md): The supplied EmailVerificationResent.cshtml only documents the result/display page. It says another email was sent, but no controller, service, button, or resend action is present in this range. The stronger claim about implemented resend functionality is therefore not established by this evidence.
Unknown — Harten review [WU-090-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2797dcb687335fff9006975862bf558c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): Anti-forgery tokens are visible and address one class of request-forgery attack. They do not make hidden values trustworthy. The chunk does not establish whether server actions revalidate notification existence, ownership, authorization, IDs, email addresses, or eligibility. Tampering safety therefore remains unresolved.
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): The radio controls have IDs and titles, but explicit visible labels are not evident from the supplied view. Whether the generated helpers produce adequate accessible labeling cannot be determined without rendered output or helper behavior.
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): - Unresolved: actual target framework/runtime, backend behavior, routing, rendered accessibility, and the resource values in files beyond the supplied chunk.
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): ### 1. “Confirmed” backend behaviour is not established
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): That is evidence of the code-generation/runtime metadata recorded in those files, not definitive evidence of the project’s target framework or deployment runtime. The target framework should remain unresolved without project/build configuration.
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): The page uses a visually styled table but the radio buttons have IDs and titles without visible evidence of explicit labels. Whether the rendered helpers generate adequate accessible labeling cannot be determined from this chunk alone.
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): The anti-forgery tokens protect against one class of request-forgery attack, but the chunk does not show whether server-side actions revalidate these hidden values, ownership, notification existence, or authorization. It is unresolved whether tampering is safely handled.
Unknown — Harten review [WU-091-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52790bf43d22561db53275bb1500fd9a/second-opinion/opinion.md): - Unresolved: server-side trust validation of hidden fields, routing destinations, target framework, accessibility of generated controls, and all backend operational behaviour.
Unknown — Harten review [WU-092-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5c97c423e04858308798f59d9cc6afca/second-opinion/opinion.md): These artifacts demonstrate error-page rendering, not the mechanisms that detect cookie failures, identify viruses, route errors, or determine not-found behavior. In NotFound.cshtml, the computed filename is not subsequently used within the supplied view; whether this is dead, incomplete, or consumed indirectly cannot be determined without controller/layout context.
Unknown — Harten review [WU-092-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5c97c423e04858308798f59d9cc6afca/second-opinion/opinion.md): These establish that resources were prepared for an export/import notification deletion flow. The supplied range does not contain a corresponding deletion .cshtml view, model, controller, or action. Therefore, the stronger claim that the application supports an operational deletion UI is not established.
Unknown — Harten review [WU-092-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5c97c423e04858308798f59d9cc6afca/second-opinion/opinion.md): The strongest qualified conclusion is that the supplied chunk demonstrates a set of web views, resources, and generated localization bindings for these flows, while leaving execution, persistence, validation, routing, and several referenced components unresolved.
Unknown — Harten review [WU-092-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5c97c423e04858308798f59d9cc6afca/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-092-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5c97c423e04858308798f59d9cc6afca/second-opinion/opinion.md): - The Fleet statement that the application “supports the deletion” and presents a UI is therefore too strong. A safer conclusion is: the source contains resources intended for an export/import notification deletion flow; execution and UI rendering are not established here.
Unknown — Harten review [WU-092-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5c97c423e04858308798f59d9cc6afca/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): The fleet document is broadly consistent with the supplied source evidence, but several conclusions should be narrowed from confirmed application behavior to source-visible wiring, documented intent, or unresolved implementation behavior. The most concrete additional defect identified is a label/ID mismatch in src/EA.Iws.Web/Views/NewUser/Cookies.cshtml.
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): Whether that action actually generates and downloads a document remains unresolved.
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): Accordingly, the text establishes a documented error/message string, not confirmed behavior. Any fleet-document statement describing the restriction as implemented should be downgraded or marked unresolved.
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): ### Coverage and unresolved questions
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): The child analysis also reports that CreateNewOrganisation.cshtml includes an “Other” organisation type and a conditional OtherDescription panel. The actual requirement logic is not shown. Similarly, controller, model, JavaScript, and partial-view behavior remains unresolved where those artifacts were not included.
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): The fleet document should preserve those distinctions and explicitly retain the unresolved implementation questions rather than presenting source-visible intent as confirmed runtime behavior.
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): The document-generation behavior remains unresolved.
Unknown — Harten review [WU-093-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9ed46acf38615379990adc310be74614/second-opinion/opinion.md): The fleet document is broadly consistent with the supplied source, but several “confirmed” statements should be downgraded to source-visible wiring or documented intent, especially validation, document downloading, cookie behavior, and runtime claims. The strongest additional finding is the concrete label/ID mismatch in Cookies.cshtml. Unresolved controller, model, JavaScript, and partial-view behavior should remain explicitly unresolved because those artifacts are outside the demonstrated evidence.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): Accordingly, behavioral and security-related claims should generally be downgraded from confirmed to view-level evidence, plausible, or unresolved.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): Telephone and fax fields use type="number". This may restrict characters or produce browser-specific input behavior, but the intended formatting and server-side binding behavior are unresolved. The display template renders contact, telephone, optional fax, and email details.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): It also uses Html.Raw(BusinessResources.CompanyHouseDescription). The supplied evidence does not demonstrate whether that resource content is trusted or sanitized. The template contains comparisons such as "Sole trader" and "Limited company" alongside enum-like values, but the relevant model and property types are absent, so correctness cannot be determined.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): Disabled HTML inputs are normally excluded from browser form submission. However, the surrounding binding and defaulting logic is absent, so the practical effect cannot be established.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): ## Material gaps and unresolved questions
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): - Unresolved: authorization, persistence, server-side validation and integrity checks, JavaScript behavior, sanitization, model correctness, and deployment configuration.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): - Uses Html.Raw(Model.Organisations[i].Id) in the button value. The safety of this depends on the type and encoding expectations of Id, which are not shown; this is an unresolved review point rather than a confirmed vulnerability.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): - Telephone and fax inputs use type="number", which may affect permitted characters and browser behavior; whether this is intentional is unresolved.
Unknown — Harten review [WU-094-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79ca6312cc31567cb66f242febf6c322/second-opinion/opinion.md): - Disabled inputs are not normally submitted by browsers, but the surrounding binding strategy is not available, so the practical impact is unresolved.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): This is stronger than the fleet description’s general statement that consent is managed by a banner, because the layout itself shows an earlier loading path. Whether this is legally or operationally impermissible remains unresolved; the applicable cookie policy, legal basis, GTM configuration, and network behavior were not supplied.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): The first-token selection may submit the wrong token on pages containing multiple forms or tokens. The supplied files do not include the controller, route configuration, or server-side anti-forgery validation, so successful enforcement and practical impact remain unresolved.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): This appears to be a functional/UI defect, with security impact not established.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): - _IwsNavigation.cshtml and _IwsHeader.cshtml contain overlapping internal-user Home links, but the active path cannot be determined from this chunk.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): ## Key unresolved questions
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): The fleet description is broadly supported, although the exact runtime package versions and whether the property is populated at runtime are not established by these files alone.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): If any key is absent, the page can throw a NullReferenceException while rendering. The supplied range does not include configuration files or startup validation, so it is unresolved whether these keys are guaranteed elsewhere.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): This takes the first matching input on the page. Pages with multiple forms or multiple anti-forgery tokens could cause the wrong token to be submitted. The server-side token validation behaviour is not included, so the practical impact is unresolved.
Unknown — Harten review [WU-095-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c1079dbf52b65994bb101ff1da375c42/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-096-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0c2a65d7bd83582aaa00601d75eaf084/second-opinion/opinion.md): There is also a source-hash discrepancy that remains unresolved:
Unknown — Harten review [WU-096-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0c2a65d7bd83582aaa00601d75eaf084/second-opinion/opinion.md): The effective ELMAH access policy cannot be determined from these settings alone. It depends on the ELMAH MVC integration and the surrounding authentication/authorization context. The evidence therefore supports a review concern, not a confirmed access-control vulnerability.
Unknown — Harten review [WU-096-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0c2a65d7bd83582aaa00601d75eaf084/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-096-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0c2a65d7bd83582aaa00601d75eaf084/second-opinion/opinion.md): Evidence scope: chunk c0, source SHA-256 c49e46b9db586fa0fed40cdd77110ed5024daf58da4cfe3ba3922bd8172b798, byte range [0, 31115). The supplied material does not provide per-file byte offsets, so exact byte ranges narrower than the chunk cannot be established from this artifact. File names and exact configuration elements are cited below.
Unknown — Harten review [WU-096-ea-iws-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0c2a65d7bd83582aaa00601d75eaf084/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): The path receives an opening quote but no closing quote. This is at least a robustness defect and may fail for paths containing spaces. Whether the bundled AliaSQL.exe tolerates this exact form is unresolved because its argument parser and runtime behaviour are not included.
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): This is a defect in the SQL’s ability to express an unambiguous “sum all applicable fees for the latest tariff” operation. However, table constraints and representative data were not supplied, so actual impact is unresolved.
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): This is a hard-coded business rule. TOP 1 lacks ORDER BY, although uniqueness of ISO codes may make that immaterial. The reason import routes should always use GB is not established.
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): 6. The relationship between checked-in scripts\AliaSQL.exe and AliaSQL.Kickstarter is not established.
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): The view also joins multiple optional movement-related tables. If those tables permit multiple matching rows per movement, the view can duplicate movements. Constraints are outside the supplied range, so this remains unresolved.
Unknown — Harten review [WU-097-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ce0757627225898ae5149dfbb02f8ca/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-099-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/812c77440d06593b9daaca2c8b699841/second-opinion/opinion.md): The omission is observable in the source, but its runtime consequence is unresolved without the schema definition.
Unknown — Harten review [WU-099-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/812c77440d06593b9daaca2c8b699841/second-opinion/opinion.md): - 0013-Compliance.sql: It executes or depends on Reports.ExportCompliance, but 0011-ExportCompliance.sql was not text-analysed. Compatibility of the returned result shape with INSERT INTO @ComplianceReport EXEC [Reports].[ExportCompliance] remains unresolved.
Unknown — Harten review [WU-099-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/812c77440d06593b9daaca2c8b699841/second-opinion/opinion.md): The child evidence supports a qualified conclusion that the fleet document is useful but incomplete. It accurately captures much of the visible control flow, yet several source-level inconsistencies and failure-mode risks are not reflected in it. The most consequential unresolved items are the import ID-list handling, the FOI quantity expression, the import archive schema reference, and the transaction/deletion behavior surrounding movement updates. These should be investigated as potential defects, while preserving the uncertainty that the available source range and absent schema/runtime evidence do not permit definitive production claims.
Unknown — Harten review [WU-099-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/812c77440d06593b9daaca2c8b699841/second-opinion/opinion.md): The fleet document presents the status/date mappings but does not preserve the unresolved question of whether these are archived records or archive candidates.
Unknown — Harten review [WU-099-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/812c77440d06593b9daaca2c8b699841/second-opinion/opinion.md): - 0013-Compliance.sql depends on Reports.ExportCompliance, but that source file was not text-analysed. Therefore the result-shape compatibility of INSERT INTO @ComplianceReport EXEC [Reports].[ExportCompliance] remains unresolved.
Unknown — Harten review [WU-100-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a6d38d41537f537ba23e84697cc6e23e/second-opinion/opinion.md): The supplied evidence does not include the destination schema, so it is unknown whether this is a bit, character, or other column. SQL Server may perform an implicit conversion in some cases, but successful conversion and intended semantics are not demonstrated.
Unknown — Harten review [WU-100-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a6d38d41537f537ba23e84697cc6e23e/second-opinion/opinion.md): The supplied evidence does not establish successful execution, foreign-key compatibility, uniqueness constraints, intended meanings of numeric status/type values, or the semantics of the binary files. Those remain unresolved questions rather than confirmed defects.
Unknown — Harten review [WU-100-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a6d38d41537f537ba23e84697cc6e23e/second-opinion/opinion.md): Unresolved questions:
Unknown — Harten review [WU-101-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ad83f70a75595ba7650f19c567a961/second-opinion/opinion.md): Several stronger claims should be downgraded from “confirmed” to “inferred” or “unresolved,” especially claims about runtime sequence usage, approval semantics, archive status meanings, production workflows, and concurrency enforcement.
Unknown — Harten review [WU-101-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ad83f70a75595ba7650f19c567a961/second-opinion/opinion.md): This is apparently reversed. The corresponding 24–25 and 25–26 scripts use forward intervals. It may be intentional malformed test data, but its purpose is unresolved.
Unknown — Harten review [WU-101-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ad83f70a75595ba7650f19c567a961/second-opinion/opinion.md): ### Unresolved
Unknown — Harten review [WU-101-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ad83f70a75595ba7650f19c567a961/second-opinion/opinion.md): 4. what remains unresolved because relevant migrations or application code are outside the supplied range.
Unknown — Harten review [WU-101-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ad83f70a75595ba7650f19c567a961/second-opinion/opinion.md): - 20250908-1315-create-ea-import-notifications-test-data-for-23-24.sql inserts a consent with From = '2023-04-01' and To = '2023-03-30', an apparently reversed validity interval. The corresponding 24–25 and 25–26 scripts use forward intervals. This should be preserved as an unresolved fixture inconsistency, not silently normalized.
Unknown — Harten review [WU-101-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ad83f70a75595ba7650f19c567a961/second-opinion/opinion.md): - Unresolved: sequence usage, competent-authority seed data, later schema migrations, SEPA approval/role semantics, and the reversed 23–24 consent interval.
Unknown — Harten review [WU-102-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/462d2029bf11545f811955b439c75561/second-opinion/opinion.md): Similarly, 20150514-145256-Change-Registration-column-names.sql rebuilds Organisation, Producer, and Exporter with renamed registration columns, but the copy statements omit the prior registration fields. Existing registration values therefore appear liable to be discarded rather than renamed or mapped. The exact intended semantics of the replacement fields remain unresolved, but the omission itself is evidence of migration risk.
Unknown — Harten review [WU-102-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/462d2029bf11545f811955b439c75561/second-opinion/opinion.md): There is also a misleading constraint name in 20150514-145256-Change-Registration-column-names.sql: FK_Organisation_Country is described as being defined on Business.Organisation.AddressId and referencing Business.Address(Id), rather than Lookup.Country. The name and target appear inconsistent; whether this is merely nomenclature or reflects a deeper modeling error cannot be determined from the child evidence alone.
Unknown — Harten review [WU-102-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/462d2029bf11545f811955b439c75561/second-opinion/opinion.md): ## Remaining risks and unresolved questions
Unknown — Harten review [WU-102-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/462d2029bf11545f811955b439c75561/second-opinion/opinion.md): These points should be presented as migration-stage facts, implementation risks, and unresolved questions—not as established properties of the final application model.
Unknown — Harten review [WU-102-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/462d2029bf11545f811955b439c75561/second-opinion/opinion.md): Important limitation: Because these are INNER JOINs, rows lacking a matching address, country, or contact would not be inserted into the rebuilt table. The source does not show a preflight count, exception handling, or preservation mechanism for such rows. Therefore, “flattening completes successfully” is not established for arbitrary existing data.
Unknown — Harten review [WU-102-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/462d2029bf11545f811955b439c75561/second-opinion/opinion.md): ## Additional unresolved issues
Unknown — Harten review [WU-103-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b20b688d45a85ce39ef3715a58971869/second-opinion/opinion.md): This is a source-confirmed destructive operation; whether it was acceptable or mitigated externally is unresolved.
Unknown — Harten review [WU-103-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b20b688d45a85ce39ef3715a58971869/second-opinion/opinion.md): Whether the migration framework guarantees exactly-once execution is unresolved.
Unknown — Harten review [WU-103-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b20b688d45a85ce39ef3715a58971869/second-opinion/opinion.md): This is deletion of existing routing data, not merely insertion of corrected lookup records. The evidence shows no remapping or preservation step. The business justification and intended replacement relationship are not established.
Unknown — Harten review [WU-103-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b20b688d45a85ce39ef3715a58971869/second-opinion/opinion.md): ## Unresolved questions requiring deployment or data evidence
Unknown — Harten review [WU-103-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b20b688d45a85ce39ef3715a58971869/second-opinion/opinion.md): The Fleet summary describes the calculation but not these unresolved conditions.
Unknown — Harten review [WU-103-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b20b688d45a85ce39ef3715a58971869/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): 5. Unresolved cardinality and integrity rules for recovery, customs-office, and notification-linked records.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): Unresolved: the defect could be an artifact of the supplied source, or a corrected version may exist elsewhere.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): Qualification: an external migration framework may guarantee exactly-once execution. That behavior is not established by the supplied ranges.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): Unresolved: the source schema or data may guarantee one WasteType per notification, but that guarantee was not supplied.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): ### 12. RecoveryInfo cardinality is also unresolved
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): These descriptions appear truncated or misspelled, although the source alone cannot establish the intended wording.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): BIT NULL introduces a third state—unknown/not provided—in addition to true and false. That might be intentional but should be explicit.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): 20150624-141556-add-table-recovery-info.sql permits multiple RecoveryInfo rows for one NotificationId; only Id is the primary key. The source does not establish whether this is intended or whether one recovery record per notification was expected. The business cardinality remains unresolved.
Unknown — Harten review [WU-104-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3224e1fde08a56dfa0dc397ffb529b0d/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): The child analysis is broadly consistent with the visible migration scripts and usefully extends the apparent source document’s schema summary into operational and data-integrity risks. The strongest conclusion is that the migration set contains several potentially destructive, non-idempotent, order-dependent, and weakly validated operations. Whether those risks materialized cannot be determined from this chunk alone.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): The delete order may reflect foreign-key considerations, but the relevant complete schema and constraints are not available. Whether the sequence is valid remains unresolved.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): These are risks inferred from the visible lookup pattern; the actual country data and database collation are not established here.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): 20150724-132324-create-notification-assessment-table.sql adds a foreign key using WITH NOCHECK. This means existing rows are not validated, and the resulting constraint may remain untrusted. The visible syntax establishes the behavior; the number or nature of pre-existing violations is unknown.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): ### Qualifications and unresolved contradictions
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): - The two NUL-byte files cannot be treated as evidence that their filenames’ operations occurred. Their contents and exact semantics remain unresolved.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): 5. Did any internal user have a NULL job title, unknown authority, or unmapped local area?
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): Bottom line: the visible evidence supports a qualified assessment of substantial migration fragility and data-integrity exposure, but not a conclusion that the deployment failed or corrupted data. The most consequential unresolved issues are financial-guarantee/assessment ordering, partial failure of destructive lookup replacement, silent internal-user fallback mappings, and the unreadable migration files.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): The supplied “FLEET DOCUMENT” is broadly consistent with the visible SQL and correctly identifies most schema and data-migration operations. It is not, however, a complete risk or execution analysis. Important operational hazards and unresolved dependencies are omitted.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): The script deletes state rows before competent authorities and entry/exit points, presumably to avoid dependencies, but the evidence does not include all relevant table definitions or foreign keys. Whether the sequence succeeds cannot be established from this chunk alone.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): Status: unresolved due to incomplete cross-chunk/schema context.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): - “Confirmed” should be limited to what is directly visible in the supplied range. Statements about successful execution, resulting row counts, constraint trust, or final database state are not established.
Unknown — Harten review [WU-105-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c4a64339eb5f5f2f8ca2eedc4594f4a8/second-opinion/opinion.md): 5. Did any internal user have a NULL JobTitle, unknown CompetentAuthority, or unmapped LocalArea?
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): - unresolved effects of the unavailable customs-code-link script.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): and then deletes those lookup rows. This protects only the references visible in the excerpt. Other tables, constraints, spelling variants, whitespace variants, or collation-dependent matches are unresolved. Whether deletion succeeds in the complete schema cannot be determined from this chunk.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): The migration reportedly creates one address per Notification.Organisation and assigns it to users joined through OrganisationId. This means users in one organisation may share an address record. Whether that is intentional cannot be determined from the excerpt.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): The 40-character truncation is explicit and lossy. Whether this is an intentional destination constraint or an unreviewed data loss cannot be determined.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): ### 12. Provider update contains an unresolved qualification issue
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): 5. The binary custom-code script remains unresolved and may alter the interpretation of the surrounding customs-code migration.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): It then deletes those lookup rows. This protects only the shown Business.WasteCodeInfo references. Other tables or constraints referencing [Lookup].[WasteCode] are outside this chunk, so it is unresolved whether the deletion can succeed in the full schema.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): At this point the new column is nullable. If any existing row has NotificationAssessmentId IS NULL, the subquery contains NULL, and NOT IN may evaluate to unknown for every candidate, preventing all inserts. NOT EXISTS would avoid that behavior.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): This can modify legitimate quantities that differ by more than 50, and it does not establish that the discrepancy was caused by a unit conversion. It also has no ELSE; although the WHERE clause is intended to select one of the two branches, null movement quantities or unusual numeric cases remain unresolved.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): No uniqueness constraint on DisposalInfo.NotificationId is shown. If a notification has multiple RecoveryInfo rows, multiple disposal rows may be inserted. Whether that is correct cannot be determined from this chunk.
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): ### 12. Final provider update has an unresolved column-qualification issue
Unknown — Harten review [WU-106-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/47115e6839eb5de4a0749cf885c99735/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): This is a migration precondition rather than proof of failure. The unresolved issue is whether earlier data migrations or deployment checks guarantee valid values.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): A later migration, 20151022-150700-remove-assessment-status.sql (same source range), reportedly remaps status IDs 8–12 downward, deletes status-history rows with status 7 before remapping, deletes lookup status 12, and drops NotificationDates.DecisionDate. It also declares and populates @acknowledged with assessment IDs having status 7, but the shown source does not use that variable. This suggests dead or incomplete logic, although its intended purpose cannot be determined from the available range.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): Authorities outside those countries, or records not matching the specified names/codes, may remain NULL. The child analysis found no later NOT NULL conversion or default assignment. This could be intentional tri-state behavior, but the schema and data semantics are unresolved.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): ## Files whose contents remain unresolved
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): 1. Transactionality is unknown. No transaction boundaries were identified around multi-step operations. If accurate, a failure after a delete, drop, or partial update could leave an intermediate state. This remains conditional because the migration executor may supply transactions externally.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): 5. Cross-file impact is unknown. The range does not establish whether there are additional references to Kiel Canal, DecisionDate, removed disposal columns, old status IDs, or the affected file identifiers.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): The most important unresolved questions are:
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): - Declares @acknowledged and populates it with assessment IDs having status 7, but the shown source never uses that table variable. This appears to be dead or incomplete migration logic, although the reason cannot be established from this range alone.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): Their contents, SQL semantics, and relationship to the text migrations remain unresolved. The child artifact’s statements about them are only evidence that they were not decoded, not evidence of their intended changes.
Unknown — Harten review [WU-107-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/214a82badee856e78e40a04a8c48ee38/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): The intended semantics cannot be determined from this chunk alone.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): This is an inference from the SQL text, not proof that deployments were non-transactional. The deployment framework might wrap scripts in transactions; that behavior is unresolved.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): Unresolved risks include:
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): This is notable because other migrations reportedly use IF NOT EXISTS, suggesting inconsistent rerun behavior. Whether reruns are supported by the deployment process remains unresolved.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): ## Unresolved evidence
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): These findings are qualified by unresolved deployment behavior, migration order, database collation, existing data quality, source-column definitions, and the contents of the three metadata-only files. They should not be treated as proof that production data was lost or that every migration necessarily failed; they identify concrete failure and data-integrity risks in the displayed migration text.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): The intended semantics cannot be established from this chunk alone.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): Whether the deployment framework wraps each script in a transaction is unresolved; the SQL text itself does not.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): Unresolved risks:
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): It populates values and adds a foreign key, but never changes the column to NOT NULL. The fleet findings accurately report the updates and foreign key, but do not note that null values remain permitted. Whether this is intentional is unresolved.
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): ### 10. Binary files remain genuinely unresolved
Unknown — Harten review [WU-108-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/20a527d5657454a89183085032b568fd/second-opinion/opinion.md): The three binary files, deployment transaction behavior, database collation, existing data quality, and prior migration state remain unresolved.
Unknown — Harten review [WU-109-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/21f3df54834b5afeaee7f4f24cc76374/second-opinion/opinion.md): Their contents and effects remain unresolved.
Unknown — Harten review [WU-109-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/21f3df54834b5afeaee7f4f24cc76374/second-opinion/opinion.md): This may be deliberate reuse of shared data. However, the visible transfer script moves ImportMovement and ImportNotification, not EntryOrExitPoint. Without object definitions, dependency checks, and deployment-order evidence, compatibility remains unresolved.
Unknown — Harten review [WU-109-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/21f3df54834b5afeaee7f4f24cc76374/second-opinion/opinion.md): - Two files are explicitly unavailable as text and remain unresolved:
Unknown — Harten review [WU-109-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/21f3df54834b5afeaee7f4f24cc76374/second-opinion/opinion.md): ### 2. The two binary scripts leave important schema changes unresolved
Unknown — Harten review [WU-109-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/21f3df54834b5afeaee7f4f24cc76374/second-opinion/opinion.md): Consequently, this range cannot establish:
Unknown — Harten review [WU-109-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/21f3df54834b5afeaee7f4f24cc76374/second-opinion/opinion.md): This may be deliberate reuse of shared lookup-like data. However, the schema-transfer script moves only ImportMovement and ImportNotification; it does not move EntryOrExitPoint. The visible range does not include dependency validation or object-definition evidence, so compatibility and deployment ordering remain unresolved.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): Its SQL behavior cannot be determined from the supplied evidence. Any assessment of the complete migration sequence must therefore remain incomplete.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): The script also appears to delete duplicate entities and dependants, including OperationCodes, WasteCode, Facility, StateOfExport, StateOfImport, and TransitState, rather than merging their values into the retained entities. If duplicate rows contain distinct information, that information may be lost. Whether the duplicates are guaranteed to be semantically interchangeable is unresolved.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): No closing GO, transaction, error handling, or postcondition validation is visible in the supplied range. It is therefore not established that the cleanup is complete, atomic, or safely recoverable.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): Unresolved failure cases include:
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): The update joins Numbers to Shipment only on ImportNotificationId. If the CTE yields multiple rows per notification, or if multiple shipment rows exist, the intended one-to-one update is not established. The available evidence does not show uniqueness constraints or validation that would eliminate this ambiguity.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): The source does not show whether values were normalized to a common timezone before conversion. Consequently, the exact operational impact cannot be determined, but the loss of temporal precision and, for DATE, offset information is directly implied by the type changes.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): ### 10. Execution safety and rerun behavior are not established
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): They may be intended as ordered, one-time migrations. Nevertheless, partial-failure recovery and rerun safety remain unresolved.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): These findings are a qualified second opinion, not a lossless interpretation of the migration history. The unavailable NUL-containing script, absent per-file byte offsets, incomplete cross-chunk context, and potentially external schema or data constraints leave several questions unresolved.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): Unresolved risks include:
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): This may be intentional workflow behavior, but the file name and newly inserted status 6 create an unresolved semantic question. The source does not establish whether status 4 is correct or whether status 6 was intended.
Unknown — Harten review [WU-110-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6fab034961b95056bc61b4764a998b33/second-opinion/opinion.md): Therefore, the scripts appear to be ordered one-time migrations, but rerun safety and partial-failure recovery are unresolved.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): No per-file byte offsets or line numbers were supplied. Accordingly, citations identify filenames and SQL fragments; the available byte citation is the enclosing range 0–139664. The source and child analysis are treated as untrusted evidence, not instructions. Conclusions below distinguish directly visible behavior from inference and unresolved questions.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): The later deletion and reinsertion of competent authorities are also not visibly transactional. A failure during that sequence could leave the lookup incomplete. Whether the migration framework supplies an outer transaction is not established by the supplied evidence.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): Any unmatched country is omitted by the inner join without a visible diagnostic. The extent of possible omission cannot be determined from this chunk.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): If either operand is nullable in SQL Server, the result can become NULL. Since the scripts subsequently drop [LastName], this could permanently remove recoverable data. The supplied evidence does not include the relevant table definitions, so column nullability remains unresolved.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): Both scripts copy only rows where LocalAreaId IS NOT NULL and then drop the assessment column. The exclusion of null-local-area rows may be deliberate, but no preservation or explanatory path is visible. The fate of those rows is therefore unresolved.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): Evidence-based conclusion: missing lookup data can produce a no-op while the migration continues without an obvious failure. The procedure also maps unknown strings to numeric zero:
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): - the financial-guarantee approval/refusal/release tables reportedly require ImportNotificationId but have no visible uniqueness constraint on that column. Multiple records may be intentional, so this is an unresolved modeling question rather than a proven defect;
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): Three files are explicitly unavailable as text and remain unresolved:
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): The first appears to use Y as a country/authority code, and Argentina and Armenia share AG. Whether these values are intentionally domain-specific or erroneous cannot be established from this chunk, but they are materially suspicious.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): If either source column is nullable, SQL Server string concatenation produces NULL, potentially losing the original value before [LastName] is dropped. The supplied range does not include the original table definitions, so nullability is unresolved and should be checked before execution.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): The source may intentionally use NotificationApplicationId as the notification identifier, but that equivalence is not proven by the supplied chunk. If the values differ, the insert fails; if the foreign key relationship is indirect, the migration may be using the wrong identifier. This remains an unresolved dependency requiring schema/data evidence.
Unknown — Harten review [WU-111-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28fb2f929f385a2bac5d033f48e11f6a/second-opinion/opinion.md): The procedure also maps unknown strings to numeric zero:
Unknown — Harten review [WU-112-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4adf58d05605f798844d130b573c85e/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-112-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4adf58d05605f798844d130b573c85e/second-opinion/opinion.md): The fleet correctly notes the status mapping, but the source does not demonstrate that the mappings are complete for every existing [Status] value. The script makes [Decision] non-null after assigning values only for statuses 1,2,3,4,5,6. Whether all existing rows have one of those statuses is an unresolved deployment/data-state assumption.
Unknown — Harten review [WU-112-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4adf58d05605f798844d130b573c85e/second-opinion/opinion.md): ## 5. Unresolved questions
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): ### 2. Multiple matching audit rows are unresolved
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): ### 3. CreatedOnDate: historical backfill, not established runtime logic
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): 20170411-135900-add-bank-holidays.sql inserts 2017–2018 dates for England, Scotland, Northern Ireland, and Wales. Completeness against an external calendar and downstream use are not established.
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): 6. preserve the unresolved questions rather than presenting inferred runtime or business behavior as established fact.
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): Better wording: the migration backfills CreatedBy from an EventType = 0 audit record, with a notification-user fallback. Whether the application populates this field for future inserts is unresolved by this source range.
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): This is an unresolved data-integrity question, not evidence that the migration is incorrect.
Unknown — Harten review [WU-113-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2db2b44ef1b5746b3717f21d244d718/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-114-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9079c4a5cdd25033bda6bb74630a923c/second-opinion/opinion.md): ## Unresolved questions and limits
Unknown — Harten review [WU-114-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9079c4a5cdd25033bda6bb74630a923c/second-opinion/opinion.md): ### Remaining unresolved questions
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): Whether this reflects the intended business rule cannot be determined without consuming queries or application logic.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): 20230125-P37532-ProducerReportCacheIndex.sql creates an index on Reports.ProducerCache(CompetentAuthorityId). This is evidence of a reporting/cache performance change, but its operational effect and workload rationale are not established by the source.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): 5. Describe the apparent FGas/ODS to separate FGas and ODS transition, while marking data-migration semantics unresolved.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): Overall, the Fleet Document is directionally consistent with the supplied migration evidence, but it is incomplete and occasionally overstates business meaning or final schema state. The strongest conclusions concern schema and seed-data changes; application behavior, UI behavior, data migration semantics, and business-rule intent remain partly unresolved.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): Thus, the Fleet statement that “Initial intra-country export allowed records are inserted for EA, SEPA, NRW, and NIEA competent authorities” is potentially misleading. NIEA appears as the import authority in all three rows; it is not shown as an export authority in this range. The business rule remains unresolved because no consuming query or application logic is supplied.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): Unresolved: the source does not show whether existing rows were guaranteed to receive Active = 1 during the NOT NULL DEFAULT alteration, though SQL Server would normally populate existing rows with the default.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): The Fleet statement correctly identifies the update and insertion, but does not preserve the semantic transition: the initial combined label is split into separate FGas and ODS types. Whether existing data using ID 2 should now mean only FGas, and how prior ODS values are migrated, is unresolved.
Unknown — Harten review [WU-115-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b34c2bedbd9b513d90ceef73c6c369d1/second-opinion/opinion.md): 5. Include the split from FGas/ODS to FGas and ODS, while marking migration semantics unresolved.
Unknown — Harten review [WU-116-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3ca5303426f45e0d8fde8f8ad8396f57/second-opinion/opinion.md): The supplied evidence does not show a data-preserving migration between these designs. Accordingly, the fleet should describe this as a potentially destructive schema replacement, while leaving the operational impact unresolved because deployment procedures are unavailable.
Unknown — Harten review [WU-116-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3ca5303426f45e0d8fde8f8ad8396f57/second-opinion/opinion.md): 20251125-1610-Spanish-competent-authority-changes.sql marks one Spanish authority as a transit authority and inserts another Spanish authority using the same @IsoAlpha2Code as its Code. Without uniqueness constraints and existing-row data, the effect on authority selection and duplicate handling is unresolved.
Unknown — Harten review [WU-116-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3ca5303426f45e0d8fde8f8ad8396f57/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-116-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3ca5303426f45e0d8fde8f8ad8396f57/second-opinion/opinion.md): The source does not show uniqueness constraints or existing rows, so the effect on authority selection is unresolved.
Unknown — Harten review [WU-116-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3ca5303426f45e0d8fde8f8ad8396f57/second-opinion/opinion.md): ## 5. Unresolved questions
Unknown — Harten review [WU-116-ea-iws-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3ca5303426f45e0d8fde8f8ad8396f57/second-opinion/opinion.md): The supplied range cannot establish:
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): The reviewed handlers do not calculate or validate the charge amount or change-detail type. Any claim that those validations occur here is therefore unsupported by this evidence. Validation may exist elsewhere, but that is unresolved.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): ## Risks and unresolved questions
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): GetUserAddressBookByTypeHandler.cs treats page zero specially. SearchAddressRecordsByNameHandler.cs reportedly computes Skip((PageNumber - 1) * PageSize) without an equivalent page-zero branch. Behavior for zero or negative page numbers is unresolved and depends on validation and LINQ-provider/runtime behavior.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): AddImportAddressBookEntryHandler.cs reportedly changes null registration numbers on draft entities to "Not applicable" before constructing final business objects. It is unresolved whether this mutation is persisted, expected, or merely an in-memory transformation.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): The current-details handler reportedly passes GetLatestFinancialGuarantee() directly to a mapper. It is unresolved whether a missing guarantee is valid and mapped as empty, or instead causes an exception.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): - Entity Framework usage is visible through SingleAsync, SaveChangesAsync, and IwsContext, but the complete runtime architecture cannot be established from handlers alone.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): ## Risks and unresolved questions
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): - SearchAddressRecordsByNameHandler.cs does not show an equivalent page-zero branch and computes Skip((PageNumber - 1) * PageSize). Behavior for zero or negative page numbers is unresolved and may fail depending on LINQ provider/runtime.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): - Import address-book mutation: AddImportAddressBookEntryHandler.cs changes null registration numbers on draft entities to "Not applicable" before constructing final business objects. Whether this draft mutation is persisted or intended is not established.
Unknown — Harten review [WU-118-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/11a329fc630a596caeda0f6f34c38205/second-opinion/opinion.md): - Financial-guarantee nullability: GetCurrentFinancialGuaranteeDetailsHandler.cs passes the result of GetLatestFinancialGuarantee() directly to the mapper. Whether a missing guarantee is valid or produces an exception is unresolved.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): The evidence is treated as untrusted source material, not as instructions. No per-file byte offsets were supplied, so references are limited to exact filenames and method/class names. The conclusions below therefore distinguish directly observed handler behavior from inferences about broader application behavior. Cross-chunk context, repository implementations, domain code, registrations, and pipeline behavior are not established.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): A material detail not apparently captured in the fleet document is the branch precedence: when both IDs exist, the export branch wins because if (id.HasValue) is evaluated before the import branch. This may be intentional, but the business rationale and expected behavior when identifiers collide remain unresolved.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): The last three handlers appear to be scoped to export assessments because they query by NotificationApplicationId; whether corresponding import handlers exist elsewhere is unresolved.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): 4. Concurrency remains unresolved.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): Calls such as GetFinancialGuarantee, SingleAsync, and repository getters may throw when data is missing or ambiguous. No local exception handling is shown, so the externally observable behavior is unresolved.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): - If both IDs exist, the source selects the export branch because if (id.HasValue) is evaluated before the import branch. This precedence is not stated in the fleet document and is an important unresolved business behavior.
Unknown — Harten review [WU-119-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a4afbb59283f5288b2fe968c99e71365/second-opinion/opinion.md): - Export-only query assumptions: SetCommencedDateHandler.cs, SetNotificationAcknowledgedDateHandler.cs, and SetNotificationReceivedDateHandler.cs query by NotificationApplicationId, so these handlers appear scoped to export assessments. Whether import equivalents exist elsewhere is unresolved.
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): ### 2. Notification assessment updates are visible, but failure and transaction semantics are unresolved
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): The per-user claims lookup may produce an N+1 access pattern, but performance impact is not established by this chunk.
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): If no user is found, null handling is not visible and a null-reference failure appears possible. Whether another layer prevents that condition is unresolved.
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): ### 2. Notification assessment updates — supported, with failure behavior unresolved
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): The fleet correctly identifies these flows. The following remain unresolved:
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): The source does not establish those repository guarantees. This is an unresolved operational inconsistency, not proof of a defect.
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): ### 9. Operational and email handlers — descriptions supported, policy unresolved
Unknown — Harten review [WU-120-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/68436618e09e5573855caf6906836655/second-opinion/opinion.md): 6. Record possible null/failure paths and the unresolved authority filtering inside repositories.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): Unknown activities are denied because the lookup fails and hasAccess remains false.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): The authorization dictionary does identify UserAdministrationPermissions.CanApproveNewInternalUser as administrator-only. However, the supplied range does not demonstrate that the handler can only be invoked after that permission has been checked. Whether middleware, a dispatcher, or another pipeline layer supplies the administrator requirement remains unresolved.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): It is unresolved whether failures throw, are handled by configuration or wrappers, are logged elsewhere, or can be silently ignored.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): 5. Annex replacement, identity-operation failure handling, and domain-level deletion validation remain unresolved from this range.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): Unknown activities are denied because TryGetValue fails and hasAccess remains false.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): Whether another pipeline layer guarantees administrator-only access is unresolved from this range. The authorization dictionary does list UserAdministrationPermissions.CanApproveNewInternalUser as administrator-only, but this source alone does not prove that the handler can only be invoked after that permission check.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): No deletion of a previously associated file is visible in these handlers. Annexes/DeleteAnnex.cs deletes a file in response to DeleteAnnexEvent, but this range does not show that replacement emits such an event. Potential orphaned files on replacement are therefore an unresolved operational concern, not a confirmed defect.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): SetUserApprovalsHandler.cs, UpdateInternalUserRoleHandler.cs, SetExternalUserStatusHandler.cs, and UpdateInternalUserStatusHandler.cs await UserManager operations but do not inspect returned IdentityResult values. Whether failures throw, are logged elsewhere, or are silently represented in the result is not established by this source.
Unknown — Harten review [WU-121-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2369336a3b4c5246a4021185014b8c82/second-opinion/opinion.md): The most consequential unresolved questions concern identity-operation failure handling, lockout reactivation semantics, annex replacement cleanup, and whether authorization middleware consistently protects the handlers.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): The intraCountryExportAlloweds parameter is passed through the copy methods but is not read in the shown implementations. Its intended purpose remains unresolved.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): Thus, the source supports a more precise statement than simply “route copying has with/without export variants”: export state is deliberately excluded when the competent authorities differ, although the reason and business correctness are not established.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): ## Risks and unresolved questions
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): Several handlers use SingleAsync, including country and required-child lookups. Missing rows therefore produce exceptions rather than domain-specific results. The acceptability of that behaviour is unresolved.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): - distinguish confirmed implementation mechanics from unresolved questions about intended business correctness.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): Also, the intraCountryExportAlloweds parameter is passed through the copy methods but is not read in the shown implementations. Its intended role cannot be determined from this range.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): Therefore, if a code object contains both a custom code and IsNotApplicable, the custom-code branch wins. This precedence is confirmed by the shown method, although its business correctness cannot be established from this range.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): ## Potential risks or unresolved questions
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): Several handlers use SingleAsync, including country and required child lookups. Missing rows will throw rather than return a domain-specific result. Whether that is acceptable is unresolved.
Unknown — Harten review [WU-122-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d9b536b120a5511ea1378f7c0cbf0762/second-opinion/opinion.md): The unresolved domain and persistence questions above remain open.
Unknown — Harten review [WU-123-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1193574bc94e592ead039dc6b6d84a5c/second-opinion/opinion.md): ### Unresolved issues and uncertainty
Unknown — Harten review [WU-123-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1193574bc94e592ead039dc6b6d84a5c/second-opinion/opinion.md): 5. Null/error behaviour remains unresolved.
Unknown — Harten review [WU-123-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1193574bc94e592ead039dc6b6d84a5c/second-opinion/opinion.md): ## Unresolved cross-file questions
Unknown — Harten review [WU-123-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1193574bc94e592ead039dc6b6d84a5c/second-opinion/opinion.md): Because this is a single incomplete chunk, the following cannot be established from the supplied range:
Unknown — Harten review [WU-124-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b07d929800515334bba81310533702a9/second-opinion/opinion.md): RecordPartialOperationCompleteInternalHandler.cs injects IUserContext and IImportMovementRepository without visibly using them in HandleAsync. This could be harmless, but the chunk cannot determine whether it indicates incomplete logic.
Unknown — Harten review [WU-124-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b07d929800515334bba81310533702a9/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-124-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b07d929800515334bba81310533702a9/second-opinion/opinion.md): CreateImportMovementHandler.cs passes message.PrenotificationDate into importMovementFactory.Create(...), then, if present, calls movement.SetPrenotificationDate(...) again. Whether this is harmless, necessary, or causes validation/audit side effects cannot be determined from this chunk.
Unknown — Harten review [WU-124-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b07d929800515334bba81310533702a9/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-125-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9daea11d4c705a349a48ff090512382c/second-opinion/opinion.md): Whether this produces deadlocks depends on the runtime and synchronization context, and whether it causes measurable thread-pool impact cannot be established from the supplied source.
Unknown — Harten review [WU-125-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9daea11d4c705a349a48ff090512382c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-125-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9daea11d4c705a349a48ff090512382c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-126-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9790f330547a5cf6b86bb8226aab3e23/second-opinion/opinion.md): Some observations are confirmed as source-level behavior but are not necessarily defects without the missing domain contracts. The most important unresolved issue is whether repository methods guarantee non-null objects and complete lookup results.
Unknown — Harten review [WU-126-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9790f330547a5cf6b86bb8226aab3e23/second-opinion/opinion.md): Assessment: Confirmed implementation inconsistency; business impact remains unresolved.
Unknown — Harten review [WU-126-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9790f330547a5cf6b86bb8226aab3e23/second-opinion/opinion.md): Unresolved questions:
Unknown — Harten review [WU-126-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9790f330547a5cf6b86bb8226aab3e23/second-opinion/opinion.md): Assessment: Confirmed representation difference; semantic correctness is unresolved.
Unknown — Harten review [WU-126-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9790f330547a5cf6b86bb8226aab3e23/second-opinion/opinion.md): Unresolved question: The repository contract may guarantee non-null StateOfExport, StateOfImport, and TransitStateCollection objects even when their contents are empty. That contract is not included in the supplied range.
Unknown — Harten review [WU-126-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9790f330547a5cf6b86bb8226aab3e23/second-opinion/opinion.md): Assessment: Confirmed behavioral difference. It is unresolved whether silent omission is intended or masks corrupt/stale draft data.
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): The displayed message refers to entering the “type of waste,” whereas the property appears to be ChemicalComposition.Composition. Whether that wording is misleading depends on the domain terminology, which is not established here.
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): The relevant model definitions are absent, so the inconsistency is directly evidenced but its business impact is unresolved.
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): Unresolved points include:
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): Uncertainty: Whether FluentValidation evaluates this condition when the parent/property is null, and whether another upstream invariant prevents this state, cannot be established from the supplied files.
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): Unresolved question: The type definition of Exporter.Type, Importer.Type, Facility.Type, and Producer.Type is not included, so the practical impact cannot be determined.
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): Unresolved questions:
Unknown — Harten review [WU-127-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/eaef868f557851de833c7432458e7e9b/second-opinion/opinion.md): ## Highest-priority unresolved risks
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): Whether such nulls are impossible by contract cannot be established from this chunk.
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): #### 4. Transit-state collection nullability is unresolved
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): #### 6. Producer enforcement is not established by the supplied artifacts
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): The source therefore assumes both the containing object and its TransitStates collection are non-null. Whether that assumption is guaranteed by the draft model is unresolved within this chunk.
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): ## Contradictions and unresolved questions
Unknown — Harten review [WU-128-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/059b826ffc135b5899ee21fd4d9ffb10/second-opinion/opinion.md): 3. Null/error behaviour: Repository and draft-data contracts are not present, so it is unresolved whether null results are impossible or whether these validators can throw during ordinary validation.
Unknown — Harten review [WU-129-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a3038274fb4058ce934eaca15c77ede3/second-opinion/opinion.md): GetImportNotificationAssessmentDecisionDataHandler uses GetValueOrDefault() for AcknowledgedOnDate and NotificationReceivedDate. If the source values are absent, the resulting values become the default DateTime, rather than remaining null. Whether this is intentional or acceptable to consumers is unresolved.
Unknown — Harten review [WU-129-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a3038274fb4058ce934eaca15c77ede3/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-129-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a3038274fb4058ce934eaca15c77ede3/second-opinion/opinion.md): 4. Status auditing is evidenced, but event semantics remain unknown.
Unknown — Harten review [WU-129-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a3038274fb4058ce934eaca15c77ede3/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): The evidence supports creation/update behavior. It does not establish whether returning the notification ID is intentional or whether a consultation identifier was expected. That identifier issue remains unresolved.
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): The handler name is generic, while the injected service is payment-specific. The evidence cannot establish whether ImportPaymentTransaction.Delete deliberately handles both payments and refunds or whether refund deletion is unsupported or misrouted.
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): This may be correct if UpdateById persists internally, or if a unit-of-work mechanism saves later. Conversely, it could indicate an omitted persistence step. The repository implementation is not available, so the issue remains unresolved.
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): The handler is named generically DeleteTransaction, but the implementation uses the payment transaction service. It is unresolved whether that service deliberately handles both payments and refunds or whether refund deletion is unsupported/misrouted.
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): ## Risks and unresolved questions
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): DeleteTransactionHandler.cs uses ImportPaymentTransaction for a generic transaction deletion request. Refund behavior cannot be established from this range.
Unknown — Harten review [WU-130-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9885961206065e9ab552014811dd6ae8/second-opinion/opinion.md): Those omissions are material because they contain the payment/refund asymmetry, payment-date inconsistency, state mutation behavior, and the unresolved comments-persistence behavior described above.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): 1. Entity Framework usage is supported, but the complete persistence architecture is not established.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): 3. Missing importer behavior remains unresolved.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): GetImporterByNotificationIdHandler.cs calls GetImporterOrDefaultByNotificationId and passes the result to a mapper. The repository implementation and mapper’s null behavior are not shown. It is therefore not established that a missing importer is returned as null, handled gracefully, or converted to a default object.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): 4. Missing shipment-information behavior is also unresolved.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): If the repository returns null, this path would fail unless the repository guarantees a non-null default object. That guarantee is not visible. The behavior should therefore be recorded as an unresolved null-safety issue rather than described as graceful default handling.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): WithdrawImportNotificationHandler.cs stores the domain-service return value in result but does not inspect or return it; the handler always returns true on the visible path. Other command handlers similarly return true after performing operations. Whether failures are represented through exceptions, ignored results, or external side effects cannot be determined from this chunk.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): ### Additional risks and unresolved questions
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): 4. Missing shipment information is similarly unresolved.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): If the repository returns null, this would fail unless the repository guarantees a non-null default object. That guarantee is not visible. The fleet document should record this as an unresolved null-safety point, not simply as graceful default handling.
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): ### Additional source-derived risks or unresolved questions
Unknown — Harten review [WU-131-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/dad7e376a0835378a4340610a9b8c550/second-opinion/opinion.md): - AddressBookMap orders by r.BusinessData.Name; null behavior for the mapped business data is not established.
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): src/EA.Iws.RequestHandlers/Mappings/CustomsOfficeMap.cs explicitly returns null when its source is null. The entry and exit maps still call GetForTransportRoute(source) when source is null. The behavior of that method is not present in the supplied range, so null-source safety for those paths remains unresolved.
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): Therefore, if both rejection and receipt are populated, rejection takes precedence in this mapper. Whether simultaneous rejection and receipt is a valid domain state is not established by the supplied evidence.
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): ## Operational risks and unresolved questions
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): - Decision-date rules, null-source behavior in RequiredCustomsOffices.GetForTransportRoute, domain validity of simultaneous receipt/rejection, and the nature of IwsContext remain unresolved from source range [0, 34398).
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): Thus, if both rejection and receipt are populated, rejection wins. Whether that state is valid is unresolved because validation/domain invariants are outside this range.
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): ## Operational risks and unresolved behavior
Unknown — Harten review [WU-132-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bf56a3d626b858c5a6d09e274fcf3aae/second-opinion/opinion.md): The Fleet Document is directionally accurate about the presence of a mapper layer and several major data flows, but its “Confirmed” labels are too broad in places. It omits eleven mapper artifacts, misnames MovementSummaryMap as MovementDataMap, and does not mention multiple nullability assumptions or synchronous blocking of repository calls. Business interpretations such as customs compliance, financial oversight, and the precise decision-date rules remain inferences or unresolved questions rather than conclusions established by this source range.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): The mapping layer is not uniformly null-safe or semantically consistent. Several mappers perform direct nullable-value dereferences, assume unique repository results, synchronously block on asynchronous work, or apply different conventions for the same conceptual data. These observations are source-level implementation facts; their production impact remains partly unresolved because surrounding contracts and callers are unavailable.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - NotificationAssessmentDecisionMap.cs obtains available decisions from source.GetAvailableDecisions() and synchronously queries facility preconsent status. The validity of the source state and the implications of the synchronous query are not established.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): Several mappings wrap asynchronous repository work in Task.Run(...).Result or otherwise synchronously block on asynchronous calls. This is confirmed implementation behaviour in the supplied evidence, but it does not prove that the whole application follows a synchronous execution model. Possible performance, deadlock, exception-wrapping, or repository-thread-safety consequences require runtime context and are unresolved.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - The difference between comment display and audit display is observable and may produce inconsistent user-facing names, although downstream presentation requirements are unknown.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): ### Material inconsistencies and unresolved questions
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - Transaction classification: ImportNotificationTransactionMap.cs treats any populated credit as a payment, whereas AccountManageDataMap.cs requires credit populated and debit absent. If both fields can be populated, the two mappers can disagree. Whether that state is valid is unresolved.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - Internal-user names: ImportNotificationCommentMap.cs retrieves a full name, while NotificationAuditMap.cs and MovementAuditRecordMap.cs use literal labels. It is unknown whether this is intentional by context or an inconsistency.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - Null repository results: The evidence shows repository loading but not repository contracts, so it is unresolved whether missing entities yield nulls, exceptions, or guaranteed results.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - Validation boundaries: It remains unknown whether upstream validation guarantees non-null dates, quantities, units, unique Basel codes, valid role claims, or mutually exclusive transaction fields.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - Semantic intent: The child analysis identifies implementation behaviour but cannot establish whether the observed differences are defects, deliberate context-specific rules, or artifacts of incomplete surrounding code.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - Repository calls are wrapped in Task.Run().Result. This is confirmed implementation behaviour, but performance, deadlock, exception-wrapping, and repository thread-safety consequences cannot be established from this chunk alone.
Unknown — Harten review [WU-133-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fdcfe85bbafa5c77883a68b9e05bb642/second-opinion/opinion.md): - The supplied range does not include DTO definitions, domain constructors, repository implementations, mapper registrations, or tests. Consequently, validation rules, null contracts, and downstream rendering behaviour remain unresolved.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): - Audit ordering: NotificationAuditTableMap.cs maps Audit records through IMapper, orders the resulting display records by DateAdded descending, and materializes them with ToList() (NotificationAuditTableMap.cs, [0, 54992)). Newer timestamps are therefore presented first; ordering for equal timestamps is not established.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): DataExportNotificationMap.cs returns "No" for disposal notifications in GetPreconsented, while GetDecisionRequiredByDate tests the raw source.Preconsented value ([0, 54992)). A disposal record with Preconsented == null could therefore display Preconsented = "No" while receiving no decision-required date. Whether this is a defect or intended business logic remains unresolved.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): PackagingInfoMap.cs reports "Unknown unit type {0}" for an unknown packaging enum ([0, 54992)). This appears inconsistent with the condition being checked, although external observability and test coverage are unknown.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): FinanceMap.cs builds a display label from import/export direction, notification type, optional pre-consent status, and interim status ([0, 54992)). GetValueOrDefault() treats nullable Preconsented as false, while nullable IsInterim is omitted when null. The business acceptability of those defaults is not established.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): Conclusion: The evidence supports a reliable, qualified description of numerous individual mapper behaviors, but not the stronger system-wide assertions implied by the fleet summary. The principal concerns are overbroad claims about synchrony, unverified domain assumptions, inconsistent null handling, possible repeated blocking repository access, and the unresolved export decision-date discrepancy.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): NotificationUpdateHistorySummaryDataMap.cs accepts an INotificationUserRepository but does not assign or use it ([0,54992)). The actual mapped username comes directly from source.Name. This may indicate a stale dependency or an intentionally pre-resolved source field; the range cannot determine which.
Unknown — Harten review [WU-134-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f0a0ded4ac1a5820970cbd6bb5719163/second-opinion/opinion.md): PackagingInfoMap.cs throws "Unknown unit type {0}" for an unknown packaging enum ([0,54992)). This appears to be a misleading message, but whether it is externally observable or covered by tests is unknown.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): - WasteCodeMap distinguishes persisted codes, “not applicable,” custom codes, and empty/default results. Its reported precedence selects a persisted WasteCode before checking other representations. Unknown CodeType values throw InvalidOperationException.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): - WasteTypeMap selects RDF, SRF, wood, or other waste types according to ChemicalCompositionType. Unknown values throw InvalidOperationException; its enum-conversion helper may throw ArgumentException when parsing fails.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): This indicates inconsistent mapper contracts, but the supplied chunk does not show whether callers guarantee non-null inputs. The risk of user-reachable null failures is therefore unresolved.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): WasteRecoveryInfoMap reportedly accepts a null containing object but accesses wasteRecovery.PercentageRecoverable.Value. Thus, null handling is only partial: a present object with no percentage may still throw. Whether domain validation makes the nullable value mandatory is unresolved.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): WasteCodeMap gives persisted-code data precedence over “not applicable” and custom-code representations when multiple fields are populated. This could conceal conflicting input, although the intended business rule cannot be determined from the chunk.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): WasteTypeMap factory calls reportedly pass only selected DTO fields for RDF, SRF, wood, and “other” types. This may be deliberate domain encapsulation, but the supplied evidence cannot establish whether all source fields are retained or intentionally discarded.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): - WasteCodeMap supports multiple overloads and code categories. It distinguishes persisted waste codes, “not applicable”, custom codes, and empty/default results. Unknown CodeType values cause InvalidOperationException.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): - WasteTypeMap creates RDF, SRF, wood, or other waste types based on ChemicalCompositionType; unknown values cause InvalidOperationException. Its enum conversion helper can throw ArgumentException if parsing fails.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): WasteCodeMap.Map(WasteCodeInfo) chooses a persisted WasteCode before checking IsNotApplicable, then custom code. If multiple representations are populated, the persisted code wins. Whether that is intended cannot be established from this chunk.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): Those omissions matter because they contain additional nullability, mutation, ordering, and exception-related behaviour. No conclusion here establishes lossless semantic understanding beyond the supplied chunk; cross-file contracts and callers remain unresolved.
Unknown — Harten review [WU-135-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fad301662d0954fe89960b4b57d6d905/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): The conclusions below preserve what is directly supported, while distinguishing likely implications from facts not established by the available chunk.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): GetMovementDateHistoryHandler.cs::HandleAsync retrieves the movement and historical records, maps the history, appends a DateHistory with PreviousDate = movement.Date and DateChanged = SystemTime.UtcNow, and orders by DateChanged. The appended record will ordinarily sort as the latest, but that depends on clock and data behavior. It is not established that labeling the current movement date as PreviousDate is semantically correct.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): - GetNewMovementIdsByNotificationIdHandler.cs::HandleAsync retrieves movements with MovementStatus.New, maps them to MovementData, and returns an array. Despite its name, it returns movement data rather than only IDs. Status semantics and ordering are not established.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): 3. Framework identification: The fleet description’s “Entity Framework Core or similar ORM” wording is imprecise. The shown System.Data.Entity import is characteristic of Entity Framework 6 rather than EF Core, although the exact framework version remains unresolved.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): Assessment: The fleet summary is partly supported but its wording is potentially misleading. The appended entry is not necessarily the “latest” after sorting: it will normally sort latest because its timestamp is generated at read time, but clock behavior and data characteristics are not validated. Also, the code labels the current movement date as PreviousDate; the semantic correctness of that field cannot be established from this handler.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): Assessment: The fleet summary is supported. An unresolved edge case is that an empty MovementIds collection will cause First() to throw after document generation is attempted. Input validation is not visible here.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): - The fleet document’s “Entity Framework Core or similar ORM” claim is imprecise. The shown import is System.Data.Entity, which is characteristic of Entity Framework 6, not EF Core. The exact framework version is unresolved.
Unknown — Harten review [WU-136-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7117853be85b544587aed08dfa037334/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): It does not establish that the system’s complete business policy is “exactly a 50%/150% tolerance rule.” Unresolved points include:
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): ### Risks and unresolved questions
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): SetMovementFileIdHandler.cs stores a generated file before calling movement.Submit(fileId). Rejection processing similarly stores a file before completion of the rejection flow. The evidence does not show cleanup or shared transactional participation if the later domain operation fails. This is an unresolved consistency and orphan-file question, not a confirmed defect.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): SetMovementFileIdHandler.cs reportedly calls SaveChangesAsync() immediately after loading the movement and before the visible file creation or submission mutation. No preceding mutation is identified in the child evidence. This may flush earlier tracked changes or serve another purpose; its intent cannot be determined from the chunk.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): RecordParialOperationCompleteInternalHandler.cs sets WasteDisposedDate before checking movement.CompletedReceipt, and calls movement.Complete(...) only when no completed receipt exists. The intended behavior for repeated completion—update, reject, or remain idempotent—is unresolved.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): SetMovementCommentsHandler.cs ignores null, empty, or whitespace-only Comments or StatsMarking. It therefore does not demonstrate general “data integrity” enforcement and may not permit clearing an existing value with empty input. Whether this is intentional is unknown.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): The evidence does not support unqualified claims about complete fleet coverage, exact business tolerance semantics, Entity Framework configuration, transactional consistency, null-safety guarantees, or overall data integrity. The most important unresolved issue is coverage: the omitted handlers represent meaningful retrieval, rejection, submission, certificate, and date-history behavior. Any higher-level document should preserve that limitation and distinguish direct source observations from inferences about system-wide design.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): 2. The tolerance business rule is not established as “exactly” a 50%/150% policy.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): ### Risks and unresolved questions visible in the source
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): SetMovementFileIdHandler.cs stores the generated file before calling movement.Submit(fileId). If submission fails, the source does not show cleanup of the stored file. Similarly, rejection processing stores a file before rejection completion. Whether the file repository participates in the same transaction is unresolved.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): SetMovementFileIdHandler.cs calls await context.SaveChangesAsync(); immediately after loading the movement and before creating/storing the file or calling Submit. No mutation is visible before this call. This may be intentional for flushing prior tracked changes, but the reason cannot be determined from the range.
Unknown — Harten review [WU-137-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/48416ff07e66565d98ead38c656e58c4/second-opinion/opinion.md): The fleet document captures several central flows accurately, but its “Confirmed” coverage is incomplete and occasionally overbroad. The largest evidence gap is the omitted set of handlers listed in the contract gaps. The supplied range supports a more nuanced summary: repository-backed asynchronous handlers coordinate movement state changes, file storage, audits, mappings, and event-driven history, but transactionality, repository null guarantees, unit conversion, and domain invariants remain unresolved from this chunk alone.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): This opinion is based on the supplied source node covering byte range [0, 48996), SHA-256 bf0ecb1abcd6f8a067b8d12ce78d569474de68e4477acccee682676cffd224e5, and the child analysis c0. No per-file byte offsets or original concatenated layout were supplied, so narrower byte citations cannot be established. References below therefore use the enclosing byte range plus exact filenames and symbols where identified.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): ### 1. Request-handler architecture is supported, but system-boundary behavior is not established
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): The fleet’s high-level summary is therefore supported. The following remain unresolved:
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): - Filename construction removes spaces and joins shipment numbers, but visible sanitization and collision handling are not established.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): Other unresolved details include duplicate shared users, empty user collections, and the use of SingleAsync, which would throw on missing or duplicate notification rows rather than return false.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): This suggests optional PDF capability, but dependency-injection selection and runtime guarantees are not shown. Filenames include SystemTime.UtcNow; formatting, extension behavior, and collision handling are not established.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): The supplied source node covers byte range [0, 48996) with SHA-256 bf0ecb1abcd6f8a067b8d12ce78d569474de68e4477acccee682676cffd224e5. No per-file byte offsets are provided, so exact byte citations narrower than the enclosing range cannot be established without the original concatenated byte layout. Citations below therefore use exact filenames and code locations by symbol; byte-level claims are limited to the enclosing source range.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): - Movement changes and audit records are persisted in separate SaveChangesAsync calls. The source does not show an explicit transaction, so atomicity between movement submission and audit creation is unresolved.
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): Additional unresolved behavior:
Unknown — Harten review [WU-138-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1ae293248ce159efae3a2d45129997e0/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-139-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74eb63f3e10e5e02bd1e40574ea28ff1/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-139-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74eb63f3e10e5e02bd1e40574ea28ff1/second-opinion/opinion.md): The strongest defensible conclusion is that the summarized notification handlers implement a mixture of repository delegation, mapping, persistence, raw SQL progress retrieval, and notification-specific business rules. The summary should be revised to include the ten omitted handlers and to qualify its claims about validation, authorization, ORM classification, and resource disposal. Several apparent risks—especially substring-based number matching, broad exception suppression, and first-row customs-office selection—are supported as code observations, but their operational severity and business impact remain unresolved from the supplied range alone.
Unknown — Harten review [WU-139-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74eb63f3e10e5e02bd1e40574ea28ff1/second-opinion/opinion.md): NotificationProgressService.cs clearly uses Entity Framework-related APIs (IObjectContextAdapter, ObjectContext.Translate) and raw SQL. That supports “Entity Framework plus raw SQL.” It does not, from this range alone, establish “Code-First or Database-First”; either characterization is unresolved.
Unknown — Harten review [WU-139-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/74eb63f3e10e5e02bd1e40574ea28ff1/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): - AddNotificationCommentHandler.cs constructs a NotificationComment and delegates to repository.Add, returning the repository’s Boolean result. No explicit SaveChangesAsync() appears in this handler. Whether the repository persists immediately or relies on another unit of work is unresolved.
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): The fleet’s summary is supported. However, the handler passes new SqlParameter("@notificationId", message.Id), while the surrounding terminology refers to notification IDs. Whether message.Id is intentionally the relevant property or represents a naming defect is unresolved.
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): The direct dereference of decisionRequiredBy.Value creates a possible null failure if the calculation can return null. The sequential per-summary loads also suggest an N+1 access pattern, although the performance impact cannot be determined from this evidence alone.
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): - The fleet’s description is supported. The source also shows a possible exception path if CountryId is null, but validation may occur before the handler; that is unresolved.
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): - The handler applies filtering based on the current user, but explicit authorization intent or adequacy cannot be established from this code alone.
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): - The handler passes new SqlParameter("@notificationId", message.Id) while the request is otherwise described using notification IDs. Whether GetNotificationAssessmentSummaryInformation exposes Id intentionally, or this is a naming defect, is unresolved from the supplied files.
Unknown — Harten review [WU-140-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/03e8178caf075046af583c17941d8f5c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): An important edge behavior is that the history record is apparently added even when the count does not change. Whether that is intentional cannot be determined from the supplied range. Source: SetNewNumberOfShipmentsHandler.cs, [0, 40234).
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): The source shows several assessment-related operations, but not a complete lifecycle. The following are absent or not established in the supplied range:
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): This is synchronous blocking on .Result inside an otherwise asynchronous handler and wraps the repository call in Task.Run. The source does not establish whether the repository method itself is synchronous or asynchronous, so the precise impact is unresolved. Nevertheless, the pattern can cause unnecessary thread-pool use and may create blocking or deadlock risks depending on the execution context. Source: GetNotificationCommentsUsersHandler.cs, [0, 40234).
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): ## Additional unresolved implementation questions
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): - SetFacilityDetailsHandler.cs and SetProducerDetailsHandler.cs update only the first item returned by their respective collections. It is unknown whether multiple facilities or producers are valid and intentionally ignored.
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): - The criteria used by GetPreviousStatusByNotification remain unresolved.
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): - The domain invariant behind credit-versus-debit transaction interpretation is unresolved.
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): - The intended behavior of adding shipment history when the count is unchanged is unresolved.
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): ### Unresolved
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): Bottom line: the fleet document is a useful high-level synopsis, but it should be downgraded from blanket confirmation to a qualified, handler-level assessment and expanded to include the omitted files and the unresolved domain and error-handling questions above.
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): ### The “previous status” uncertainty is correctly identified, but there are more unresolved domain rules
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): The fleet document correctly states that the criteria for GetPreviousStatusByNotification are not visible. Additional unresolved rules include:
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): - SetEntryPointHandler.cs obtains UK authorities from IUnitedKingdomCompetentAuthorityRepository; SetExitPointHandler.cs obtains them directly from context.UnitedKingdomCompetentAuthorities. This may be equivalent, but equivalence is not established by this range.
Unknown — Harten review [WU-141-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/94bf26d010da54c9bcc764c96f4e4058/second-opinion/opinion.md): - Unresolved: repository nullability contracts, validation rules, authorization, previous-status selection, domain invariants for transaction credit/debit semantics, and intended handling of multiple facilities/producers.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): It remains unresolved whether the withdrawal paths rely on a repository invariant that makes null impossible. The supplied source does not establish that invariant.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): If DraftMovement.Date can be null, this path throws. The child analysis notes that validation checks ActualDateOfShipment on PrenotificationMovement, but the supplied range does not demonstrate that this validation always guarantees DraftMovement.Date is non-null. The relationship between the two properties remains unresolved.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): It is not established whether this rule is active in production, superseded elsewhere, or constrained by an external invariant.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): These remain a qualified second opinion based on incomplete cross-file context. The principal unresolved questions concern repository contracts, upstream validation, domain invariants, file-store transaction behavior, rule activation, and tests covering boundary and failure cases.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): The repository contract is outside this range, so it is unresolved whether null is impossible for withdrawal commands. The source nevertheless provides no local protection or explicit failure result.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): The source does not show whether IFileRepository participates in the same transaction or performs compensating deletion. That remains unresolved.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): It is unresolved whether this class is active in production or superseded by another rule path.
Unknown — Harten review [WU-142-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/626a17783b905525bf3a54503334b74d/second-opinion/opinion.md): If ActualDateOfShipment contains a non-midnight time component, the grouped key may not equal mm.Date.Date, causing existing movements on the same calendar day to be missed. If all parsed shipment dates are normalized to midnight, this concern does not arise, but that invariant is not established here.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): The child analysis and “FLEET DOCUMENT” are treated as untrusted secondary evidence. The conclusions below distinguish directly observed source behavior from inference. Missing implementations, registrations, repository behavior, and project metadata remain unresolved.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): - movementRepository.GetByNumberOrDefault(...) may return null, but the handler invokes movement.Receive or movement.Complete without a visible null check. Whether upstream validation guarantees a non-null movement is unknown.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): - Draft deletion calls DeleteDraftMovementByNotificationId(message.NotificationId), not a method keyed by message.DraftBulkUploadId. This appears capable of deleting all drafts for a notification, but the repository implementation is absent, so the effective scope is unresolved.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): ### 2. “Entity Framework Core” is not established and may be wrong
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): ### 4. Receipt/recovery validation is staged, but injected-rule ordering is unknown
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): The source also declares a local movementCarriers list that is not used and shows no visible handling for an unresolved carrier.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): The handler also filters notification packaging information by requested packaging types. Behavior for null, empty, or unsupported message.PackagingTypes is not established.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): ### Not established or overstated
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): ### Highest-priority unresolved questions
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): - movementRepository.GetByNumberOrDefault(...) may return null, but the handler immediately invokes movement.Receive or movement.Complete without a null check. Whether this is impossible by upstream validation is not established in the supplied range.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): - Draft deletion uses DeleteDraftMovementByNotificationId(message.NotificationId), not the submitted message.DraftBulkUploadId. Thus, on success, the source appears to delete all draft movements for the notification, not necessarily only the current upload. The repository implementation is absent, so the exact scope remains an unresolved question.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): The source also shows that packaging information is filtered from the notification’s packaging information using the requested packaging types. The behavior when message.PackagingTypes is null, empty, or contains unsupported values is not established.
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): ### Not established or overstated
Unknown — Harten review [WU-143-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1cfbdf40bffe5959b4d5dd0b0b8e108e/second-opinion/opinion.md): ### Highest-priority unresolved questions
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): The fleet document is treated as untrusted secondary evidence. Its “Confirmed” labels should therefore be read as claims requiring source support, not as authoritative conclusions. The conclusions below preserve the child analysis’s distinctions between direct observations, interpretations, and unresolved questions.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): The strongest correction is that NotificationNumberDataRowMap does not uniformly return null when processing fails. Depending on the input and failure path, it can return string.Empty or null. Other fleet statements—such as uniqueness of generated movement numbers and “data integrity” guarantees—are not established by the supplied range.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): ### Uniqueness of generated movement numbers is not established
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): Unresolved: whether callers intentionally interpret negative values as over-capacity.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): Unresolved: the application’s intended time-zone policy.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): Unresolved: whether all PackagingType members satisfy that assumption.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): Unresolved: whether the domain guarantees at most one.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): ## Remaining unresolved questions
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): ### 2. “Unique identifier” is not established
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): There is no clamping to zero. If existing movements or active movements exceed the configured limits, negative values are returned. It is unresolved whether this is intentional or expected to be handled by callers.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): Only shipment-info absence is explicitly handled: shipment == null results in default quantity units. Whether the other repositories guarantee non-null results is unresolved.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): This may indicate stale dependencies, incomplete intended behavior, or a configuration/design smell. The range cannot determine which.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): If multiple partial rejections are possible, this representation ignores all but the first. Whether that is correct is not established.
Unknown — Harten review [WU-144-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9a9de9259c135beabc7fc8779153b89d/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-145-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8c81f72501f5349a8b6b6112ad2ba67/second-opinion/opinion.md): This makes the thresholds visible in source, contrary to the fleet document’s reported uncertainty about their implementation. Whether those thresholds are appropriate remains unresolved because no business specification is supplied.
Unknown — Harten review [WU-145-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8c81f72501f5349a8b6b6112ad2ba67/second-opinion/opinion.md): 5. Levenshtein thresholds are implemented in source, although their business justification is unknown.
Unknown — Harten review [WU-145-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8c81f72501f5349a8b6b6112ad2ba67/second-opinion/opinion.md): ## Coverage gaps and unresolved questions
Unknown — Harten review [WU-145-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8c81f72501f5349a8b6b6112ad2ba67/second-opinion/opinion.md): The principal unresolved questions are:
Unknown — Harten review [WU-145-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8c81f72501f5349a8b6b6112ad2ba67/second-opinion/opinion.md): The source does show an IwsContext.Organisations query and repository-based access to notifications and financial guarantees. It does not show the entity mappings, schema, persistence behavior, or repository implementations. Those details remain unresolved.
Unknown — Harten review [WU-145-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8c81f72501f5349a8b6b6112ad2ba67/second-opinion/opinion.md): ## Notable implementation risks or unresolved questions
Unknown — Harten review [WU-146-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7adc1280583a5ddeb4ebcfe64469cb07/second-opinion/opinion.md): The conclusions below distinguish observed source behavior from inference. Runtime behavior involving decorators, repositories, authorization, transactions, mappers, database constraints, or omitted files cannot be established from this chunk alone.
Unknown — Harten review [WU-146-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7adc1280583a5ddeb4ebcfe64469cb07/second-opinion/opinion.md): 6. Producer operations are broadly represented, but their failure semantics are unknown
Unknown — Harten review [WU-146-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7adc1280583a5ddeb4ebcfe64469cb07/second-opinion/opinion.md): ### 6. Producer command flows are supported, with important unresolved behavior
Unknown — Harten review [WU-146-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7adc1280583a5ddeb4ebcfe64469cb07/second-opinion/opinion.md): Unresolved questions include:
Unknown — Harten review [WU-146-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7adc1280583a5ddeb4ebcfe64469cb07/second-opinion/opinion.md): These are not established by the handlers alone.
Unknown — Harten review [WU-146-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7adc1280583a5ddeb4ebcfe64469cb07/second-opinion/opinion.md): The fleet document captures the broad architecture and several handler purposes, but it is incomplete and overconfident in places. The most significant source-level issue is OrganisationByIdHandler, whose implementation does not use the requested organisation ID. Authorization, validation, repository semantics, transaction boundaries, and mapper behavior remain unresolved because their implementations are not included in this chunk.
Unknown — Harten review [WU-147-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28e22f2d94b45bb1bc7af58c408b3b7d/second-opinion/opinion.md): The business impact remains unresolved: the implementation of TransportRouteValidation is outside the supplied evidence, so it cannot be determined whether the validator requires exactly the same data represented by acceptableImportStates.
Unknown — Harten review [WU-147-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28e22f2d94b45bb1bc7af58c408b3b7d/second-opinion/opinion.md): No supplied handler visibly performs request authorization, ownership checks, or notification-access checks. This is not sufficient to confirm a vulnerability: such controls may exist in middleware, decorators, mediator pipelines, repositories, or other code outside the supplied range. The handlers do accept message-supplied identifiers for lookups, so the authorization path remains an unresolved review question.
Unknown — Harten review [WU-147-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28e22f2d94b45bb1bc7af58c408b3b7d/second-opinion/opinion.md): - Unresolved on validation semantics, mapper null handling, repository uniqueness guarantees, authorization enforcement, and transaction/event behavior.
Unknown — Harten review [WU-147-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28e22f2d94b45bb1bc7af58c408b3b7d/second-opinion/opinion.md): Unresolved question: whether TransportRouteValidation expects exactly the same data as acceptableImportStates; its implementation is outside the supplied range, so the business impact cannot be confirmed.
Unknown — Harten review [WU-147-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/28e22f2d94b45bb1bc7af58c408b3b7d/second-opinion/opinion.md): - Unresolved: validation rules, mapper null behavior, repository uniqueness guarantees, transaction/event semantics, and authorization remain unsupported by this source range.
Unknown — Harten review [WU-148-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/64c8235f19c65be8af52b9bfb7f09991/second-opinion/opinion.md): This differs from the explicit type validation in SetBaselOecdCodeForNotificationHandler.cs. The inconsistency is observable, but its significance is unresolved: it may be a defect, an intentional design difference, or reliance on repository or aggregate invariants not included in the evidence.
Unknown — Harten review [WU-148-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/64c8235f19c65be8af52b9bfb7f09991/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-148-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/64c8235f19c65be8af52b9bfb7f09991/second-opinion/opinion.md): The files are organized by handler namespace, but the supplied range alone cannot establish that the whole codebase follows a strict separation-of-concerns design.
Unknown — Harten review [WU-148-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/64c8235f19c65be8af52b9bfb7f09991/second-opinion/opinion.md): - The bulk setters query by submitted IDs but do not visibly verify that every submitted ID was found or that every returned code has the expected type. Whether this is a defect or an intentional repository/aggregate invariant is unresolved. The Basel/OECD single-code handler does perform an explicit type check, so behavior is not uniform across code-setting paths.
Unknown — Harten review [WU-148-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/64c8235f19c65be8af52b9bfb7f09991/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): The supplied source and child analysis are treated as evidence, not as authoritative instructions. Conclusions below distinguish directly observed behavior from inference and unresolved questions. Cross-chunk context is unavailable.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): ### Qualifications and unresolved questions
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): - SetWasteRecoveryProviderHandler.cs appears to invoke a method on the result of GetById(...) without visible missing-notification handling. The outcome for an absent notification is therefore unknown from this range.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): - The fetch-then-add/update patterns do not visibly address races, duplicate notification records, or transactional atomicity. Whether these concerns are handled by the repository, database schema, or calling pipeline is unresolved.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): GetPhysicalCharacteristicsHandler.cs and GetWasteGenerationProcessHandler.cs import System.Data.Entity without visibly using Entity Framework APIs in their bodies. This appears to be an unused import, not established functional behavior.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): The constructor loads holidays once and retains them. If the calculator has a long lifetime, later database changes will not be observed. The evidence does not include registration lifetime or usage patterns, so the practical impact is unresolved.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): In particular, AddWorkingDays(...) reportedly returns the original start date when days == 0, regardless of includeStartDay. Whether this is correct is unresolved.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): Unresolved safety questions:
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): - SaveWasteRecoveryHandler.cs immediately accesses message.EstimatedValue.Unit and message.RecoveryCost.Unit. Null-message members would fail before persistence. Validation is not shown in this range, so the Fleet Document is correct to mark validation rules as unknown.
Unknown — Harten review [WU-149-ea-iws-requesthandlers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a565b75b97b9531fb397ce0c7e5f251f/second-opinion/opinion.md): RemoveBankHolidays(...) decrements once per matching record. If the database contains duplicate bank-holiday records for an authority and date, the count is reduced more than once. Whether uniqueness is enforced elsewhere is unknown.
Unknown — Harten review [WU-150-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c37ec5891535a5ca1c6710561db90a3/second-opinion/opinion.md): The strongest conclusions are those tied directly to visible class members and method bodies. Conclusions about persistence behavior, ORM equality, external validation, or intended business rules remain unresolved because the relevant configuration or surrounding implementation is not included in the supplied range.
Unknown — Harten review [WU-150-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c37ec5891535a5ca1c6710561db90a3/second-opinion/opinion.md): The project declares a stateless version 5.11.0 reference (src/EA.Iws.Domain/EA.Iws.Domain.csproj). The supplied classes do not, on the reported evidence, demonstrate actual use of that library. “The project has a Stateless dependency” is supported; “the domain uses a state-machine implementation” is not established by this source range.
Unknown — Harten review [WU-150-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c37ec5891535a5ca1c6710561db90a3/second-opinion/opinion.md): Similarly, the public AddressBook constructor immediately calls addresses.ToList() without visible explicit null validation (src/EA.Iws.Domain/AddressBook/AddressBook.cs). A null argument would likely fail through LINQ rather than through a domain-specific validation path. The exact exception and whether ORM materialization bypasses this path are not established.
Unknown — Harten review [WU-150-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c37ec5891535a5ca1c6710561db90a3/second-opinion/opinion.md): Both constructors reportedly compare only .Date when checking ordering while retaining full time or offset values. Thus, a from value later than to on the same calendar day may pass construction. Whether that is intentional is unresolved.
Unknown — Harten review [WU-150-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c37ec5891535a5ca1c6710561db90a3/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-150-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4c37ec5891535a5ca1c6710561db90a3/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): The “FLEET DOCUMENT” is treated as untrusted secondary evidence. The conclusions below distinguish directly observed source behavior from inference and unresolved questions. Because the evidence is chunked, absence from this range does not establish absence from the repository as a whole.
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): This supports the fleet document’s broad replacement description. There is, however, an unresolved edge case: the code does not visibly ensure that the current approved guarantee and target guarantee are different objects. If the already-approved guarantee can be supplied as the target, the resulting behavior may be self-approval followed by supersession or release. Repository, controller, or database constraints proving that this cannot occur were not supplied.
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): ### Persistence after approval is unresolved
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): Most of these are interface declarations in the supplied evidence. Their implementations and call sites are not established, so their practical behavior remains unknown.
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): The strongest supported conclusion is that the source implements a financial-guarantee state machine with date and refusal validation, approval-data transfer, replacement behavior based on reference number, and a 20-working-day decision-date calculation. The fleet document is useful as a high-level summary, but it should be revised to qualify claims about event persistence, repository persistence, uniqueness, release semantics, and supersession. Those areas remain unresolved on the supplied evidence rather than confirmed system behavior.
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): This supports the fleet’s description, but there is an important unresolved edge case: the code does not verify that approvedFinancialGuarantee and financialGuarantee are different objects. If the target is already the current approved guarantee, the target is approved again and then may be superseded or released. Whether that situation is possible under repository and application constraints is not shown.
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): FinancialGuaranteeApproval.Approve retrieves entities and mutates them, but does not call a repository save/update method. This could rely on a unit-of-work or ORM tracking convention, but that mechanism is not present in the supplied range. It is therefore unresolved whether the command is complete by itself.
Unknown — Harten review [WU-151-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19f779c5f65519ab827c8d52091198/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): Unresolved: the repository’s concrete behavior may guarantee a non-null result, but that guarantee is not shown here.
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): Unresolved: persistence-level enforcement is not shown.
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): Unresolved: such checks may exist in callers, persistence, or omitted code.
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): The most consequential unresolved issues are duplicate completion, null handling for missing partial-rejection data, lifecycle/state validation, quantity and date validation, the intended 30-versus-60-day rule, and any persistence-level uniqueness guarantees. These should be verified against the complete source tree, concrete repository implementations, database constraints, and relevant tests.
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): ### Material risks and unresolved behavior
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): IImportMovementCompletedReceiptRepository exposes GetByMovementIdOrDefault, but CompleteImportMovement never calls it. The shown command can therefore create another completion receipt unless uniqueness is enforced elsewhere. Whether persistence constraints prevent this is unresolved.
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): The code compares a DateTime supplied by the caller with a UTC calendar date. Whether callers normalize dates and whether time components are intended is unresolved.
Unknown — Harten review [WU-152-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/51f35f993b6150aca6f8031284370476/second-opinion/opinion.md): The fleet document is broadly directionally correct, but it overstates confirmation in several places. The strongest confirmed behavior is movement creation gating and completion-date validation. Important unresolved questions remain around duplicate completion, null partial-rejection handling, movement lifecycle/state rules, persistence uniqueness, and validation of quantities and dates.
Unknown — Harten review [WU-153-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3711fa2432555ebaab511e500e01bad8/second-opinion/opinion.md): The source also shows application-layer date checks in Receive, Reject, and PartailReject. However, the supplied evidence does not include the implementations of the underlying movement methods, so it cannot establish whether equivalent or stronger checks are enforced in the domain layer.
Unknown — Harten review [WU-153-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3711fa2432555ebaab511e500e01bad8/second-opinion/opinion.md): The United Kingdom rule also depends on repository behavior that is not supplied. In particular, it is unresolved what happens if GetById returns null, throws, or returns a country with an unexpected name.
Unknown — Harten review [WU-153-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3711fa2432555ebaab511e500e01bad8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-153-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3711fa2432555ebaab511e500e01bad8/second-opinion/opinion.md): ToAddress() dereferences country.Name; behavior when the repository returns null, throws, or returns a differently named country is unresolved.
Unknown — Harten review [WU-153-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3711fa2432555ebaab511e500e01bad8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-154-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fc7b4155ce0a5abd848e80350b2015ed/second-opinion/opinion.md): - Importer and Producer update methods validate contact, address, and business-name data but do not visibly update registration number or business type. Whether this is intentional or an omission cannot be determined from the supplied chunk.
Unknown — Harten review [WU-154-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fc7b4155ce0a5abd848e80350b2015ed/second-opinion/opinion.md): - TransportRoute.TransitStates relies on TransitStateCollection.ToSafeIEnumerable(). Since that extension is not supplied, it is unresolved whether an unset collection becomes an empty sequence or behaves differently.
Unknown — Harten review [WU-154-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fc7b4155ce0a5abd848e80350b2015ed/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-154-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fc7b4155ce0a5abd848e80350b2015ed/second-opinion/opinion.md): - Importer and Producer have update methods that validate contact, address, and business name, but do not update registration number or business type. Whether that is intentional is unresolved.
Unknown — Harten review [WU-154-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fc7b4155ce0a5abd848e80350b2015ed/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): This assessment is based on the supplied source artifact covering bytes [0, 31103), SHA-256 62dd68dce813f4b571f86340c863744c27c214edf91ee75f76daa8aed2f85f6c. The artifact does not provide per-file byte offsets, so citations can identify source files but cannot establish exact byte ranges within each file.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): YCode.CreateNotApplicable() separately represents non-applicability, making the validity of an empty applicable collection an unresolved domain question.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): The meaning of the boolean false argument to AddWorkingDays is not established by the supplied evidence. Nor is it clear whether the calculator accounts for holidays, authority-specific calendars, or other rules beyond the invoked interface.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): The supplied evidence does not show the implementation of IsUnique(). It is therefore unresolved whether uniqueness is based on object identity, entity identity, a component-code value, or another comparison rule.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): The broader architectural interpretation should remain qualified. In particular, the supplied range does not establish Entity Framework integration, transactional behavior, complete lifecycle validation, collection persistence semantics, or the equality rules behind uniqueness checks. Several possible implementation issues—unguarded nulls, ineffective nullable-date checks, unused parameters, and unclear duplicate handling—are credible review points but remain partly unresolved because surrounding callers, mappings, and helper implementations are unavailable.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): - Per-file byte offsets are not provided, so exact byte ranges for individual files cannot be established from the artifact. File-name citations below identify the relevant source evidence.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): YCode rejects wrong code types but does not require at least one code. CreateNotApplicable() separately represents non-applicability, so whether an empty applicable collection is valid is unresolved.
Unknown — Harten review [WU-155-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/831c7fdffa4c569786f68b3ed602f791/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): Qualified conclusion: this range proves that shipment count and interim status are retrieved and passed through the calculator, but does not prove that either affects the returned price. Repository-side behavior is not visible, so indirect pricing logic remains possible but unresolved.
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): ### 8. Repository behavior remains unresolved
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): Accordingly, the following cannot be established from bytes 0–50321:
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): These are evidence-based observations from the named files, but their practical severity and runtime impact cannot be determined without callers, handlers, persistence code, and tests.
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): ### 8. Repository behavior remains unresolved
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): but not their implementations. Database technology, transaction boundaries, null behavior, and persistence timing cannot be established from these interfaces.
Unknown — Harten review [WU-156-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2d4dc6c8b1e5e429a46e772d456bb76/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-157-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef830bbd27a758359be1b64f0cd5ff48/second-opinion/opinion.md): CapturedMovementFactory.Create enforces rejection when actualShipmentDate > prenotificationDate.Value.AddDays(60) (CapturedMovementFactory.cs, Create). However, the associated exception text reportedly says the date must not be more than 30 calendar days after prenotification. The executable threshold appears to be 60 days, while the diagnostic message states 30. The intended business rule remains unresolved.
Unknown — Harten review [WU-157-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef830bbd27a758359be1b64f0cd5ff48/second-opinion/opinion.md): Neither PaymentRecord nor RefundRecord visibly rejects zero or negative amounts. ImportRefundTransaction.Save rejects an amount greater than total paid, but the supplied range does not show guards against non-positive values. It remains possible that other layers validate these amounts; that cannot be determined from this evidence (ImportNotificationTransaction.cs, PaymentRecord, RefundRecord; ImportRefundTransaction.cs, Save).
Unknown — Harten review [WU-157-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef830bbd27a758359be1b64f0cd5ff48/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-157-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef830bbd27a758359be1b64f0cd5ff48/second-opinion/opinion.md): The Fleet Document says the actual shipment date “is within 60 days” of prenotification. The executable condition is indeed actualShipmentDate > prenotificationDate.Value.AddDays(60) (CapturedMovementFactory.cs, Create). However, the exception text says the date should not be “more than 30 calendar days” after prenotification. The source therefore contains an unresolved 60-versus-30 contradiction; the effective enforced threshold appears to be 60 days, while the message reports 30 days.
Unknown — Harten review [WU-157-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef830bbd27a758359be1b64f0cd5ff48/second-opinion/opinion.md): MessageBanner contains StartTime and EndTime, but the supplied class has no visibility predicate or scheduling logic (MessageBanner.cs). The statement that it manages banners “for temporal visibility” is plausible but not established by this evidence.
Unknown — Harten review [WU-157-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ef830bbd27a758359be1b64f0cd5ff48/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): No configurations for Rejected or Cancelled were identified, so they appear terminal within this state-machine definition. Whether other persistence or application code permits further behavior is unresolved.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): There is also an unresolved edge case. PartiallyRejected can transition to completion, while Reject(...) and PartialReject(...) clear Receipt when the prior status is Received. If a partially rejected movement therefore has no receipt, CompleteInternally(...) may dereference Receipt.Date. The supplied range does not establish whether another invariant prevents this, whether Receipt is restored elsewhere, or whether a null-reference failure is possible.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): Repository interfaces for MovementRejection and MovementPartialRejection are present, but implementations and entity definitions were not available in the analyzed material. Consequently, it remains unresolved whether rejection objects are persisted explicitly by callers or automatically through a unit-of-work/ORM mechanism.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): MovementDetails exposes Carriers, backed by CarriersCollection, so a structural relationship to carrier assignments is supported. However, the shown constructor does not initialize CarriersCollection, and no carrier validation or assignment operation was identified in the supplied range. It is unresolved whether an ORM initializes the collection or whether it can remain null during ordinary use.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): The following remain genuine unresolved implementation questions:
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): The fleet correctly identifies the two creation paths and optional internal prenotification handling. It overstates the evidence slightly by describing the movement number as unique within the notification: the source stores Number, but no uniqueness check is present in Movement.Capture or the internal constructor. Uniqueness may be enforced elsewhere, but that is unresolved from this range.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): There is also an unresolved edge case: PartiallyRejected permits CompleteInternal, while both Reject(...) and PartialReject(...) clear Receipt when the prior status is Received. Consequently, a partially rejected movement may have no receipt, yet CompleteInternally(...) dereferences Receipt.Date. Whether this is prevented elsewhere, or results in a null-reference failure, cannot be resolved from the supplied files.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): The fleet’s statement that it encapsulates carrier assignments is supported only structurally: MovementDetails exposes Carriers, backed by CarriersCollection. However, the shown constructor does not initialize CarriersCollection, and no carrier validation or assignment method appears in this range. Whether an ORM initializes it, or whether the property can be null in ordinary use, is unresolved.
Unknown — Harten review [WU-158-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be9be0c390495f788f51c794dfce328b/second-opinion/opinion.md): These remain unresolved rather than confirmed facts.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): The child analysis and the referenced fleet document are treated as untrusted evidence rather than instructions. The conclusions below distinguish directly reported source behavior from inference and retain unresolved questions where implementations or persistence behavior were not provided.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): Ordinary rejection should therefore be treated as having the same unresolved hidden behavior as partial rejection [c0, bytes 0–48074; PartialRejectionMovement.cs, RejectMovement.cs, Movement implementation not supplied].
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): This supports the described behavior, but whether that value is truly the original date depends on the completeness and ordering semantics of movement-date history. Those guarantees are not established by the supplied evidence [c0, bytes 0–48074; OriginalMovementDate.cs].
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): However, AddressComparer reportedly compares all six address fields using default string.Equals behavior, while IsUkAddress uses a case-insensitive comparison. Address classification and address equality therefore may apply different comparison policies. Whether intentional or defective remains unresolved [c0, bytes 0–48074; Address.cs, AddressComparer].
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): AddNotificationSharedUser.cs retrieves a notification and invokes AddSharedUser; validation and duplicate handling are delegated to the notification entity or persistence layer. Those rules cannot be determined from the supplied range [c0, bytes 0–48074; MovementStatusChangeEvent.cs, AddNotificationSharedUser.cs].
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): ## Coverage gaps and unresolved questions
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): Important unresolved questions include:
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): This is a concrete inconsistency. If the repository ever returns more movements than the configured maximum, NumberOfMovements blocks creation, but MovementNumberGenerator does not reject that condition. The factory normally calls NumberOfMovements first, so the generator discrepancy may be masked in the principal flow, but it remains an unresolved invariant issue.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): The fleet document correctly identifies the missing Movement implementation as an uncertainty, but it omits the corresponding hidden behavior for ordinary rejection in its core-flow description. The supplied range cannot establish state transitions, authorization, quantity consistency, or whether the retrieved movement can be null.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): If more than one approved guarantee exists, movement creation can pass the approval check, while active-load checking can throw due to SingleOrDefault. The source does not state that exactly zero or one approved guarantee is an invariant. This is an unresolved but concrete cross-class inconsistency.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): AddressComparer compares all six address fields using default string.Equals behavior, which is case-sensitive and culture/default-comparison dependent. IsUkAddress, in contrast, is case-insensitive. This means address classification and address equality do not use the same comparison policy. Whether that is intentional cannot be determined from this range.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): The fleet document appropriately leaves the actual status-transition rules unresolved, but its “event-driven processing” wording is an architectural inference: this file proves an event data object exists, not that event dispatch or processing occurs.
Unknown — Harten review [WU-159-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c968568a0e8b5bb0a04857a047e641e4/second-opinion/opinion.md): The fleet document is broadly reliable on the principal movement-creation flow, address validation, filename generation, and high-level quantity accounting. Its main factual error is the statement that rejection validation prevents backdating; the visible checks prevent future dating instead. It also overstates certainty in places where repository, converter, entity, transaction, or working-day implementations are absent. The supplied source range supports several additional unresolved design concerns: inconsistent maximum checks, inconsistent approved-guarantee cardinality assumptions, possible concurrency races in number generation, and incomplete visible validation of rejection quantities and dates.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): This supports the conclusion that “no annex” is represented by an object whose FileId is null. It also exposes an unresolved edge case: a deletion event is raised even when the supplied ID matches none of the stored annexes. The available evidence does not establish whether this is intentional, expected to be prevented by callers, or a defect.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): The name generators do not visibly guard against a null NotificationApplication; null-input behaviour is therefore unresolved.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): Consequently, persistence, ORM materialization, event dispatch, exception details, registration behaviour, and several business semantics remain unresolved.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): The strongest qualifications concern behaviour outside the shown methods: persistence, event delivery, repository contracts, ORM construction, null handling, uniqueness, and the precise meaning of several domain flags. The unconditional DeleteAnnexEvent emission for unmatched IDs and the apparent null risk in RequiredAnnexes.cs are the most concrete unresolved behavioural concerns visible in the supplied range.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): There is a potentially important behavioural issue: RemoveAnnex raises DeleteAnnexEvent even when fileId does not match any of the three stored annexes. The source does not indicate whether this is intentional or whether callers are expected to validate existence first. This is unresolved from the supplied range.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): The following are not established:
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): - Address is not included in the supplied source, so its structure and invariants are unknown.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): The fleet statement that Audit records user/screen/type/time information is supported, although “precise timestamps” is interpretive: the type is DateTimeOffset, but timestamp precision and source are not established.
Unknown — Harten review [WU-160-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f2995ecfdb795e0f93434a10bb728507/second-opinion/opinion.md): No validation of newUserId is visible. The implementation of NotificationApplication.ChangeUser is absent, so its invariants and side effects remain unresolved.
Unknown — Harten review [WU-161-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/81383e599c325fdc90a8f30187d41eec/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-161-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/81383e599c325fdc90a8f30187d41eec/second-opinion/opinion.md): The interfaces use Task return types, but no implementations are present. The stronger runtime claim is not established by this evidence.
Unknown — Harten review [WU-161-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/81383e599c325fdc90a8f30187d41eec/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): 2. Event timing is unresolved
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): The factory method uses Task/async for number generation, but the constructor’s call to RaiseEvent is shown as synchronous (NotificationApplicationFactory.cs, NotificationApplication.cs; chunk [0, 46348)). The implementation of Entity.RaiseEvent is outside the supplied evidence. Therefore, “asynchronous event raising” is not established. Dispatch could be immediate, buffered, asynchronous, or persistence-related elsewhere.
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): MeansOfTransport.Route returns from both visible branches and then contains throw new NotImplementedException(); (MeansOfTransport.cs; chunk [0, 46348)). On the shown control flow, the throw is unreachable during normal execution. A compiler warning is plausible, but not established by the supplied evidence.
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): sepaNewMatrixStartDate is declared as DateTime but is tested against null, which is redundant for a non-nullable value type (NotificationUtilities.cs; chunk [0, 46348)). The same logic defaults a missing submitted status to DateTimeOffset.Now; consequently, absent submission evidence may satisfy the date condition. The exact business intent and any surrounding safeguards are not established.
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): The operation-code logic validates compatibility with NotificationType, then clears and repopulates the collection (NotificationApplication.OperationCodes or corresponding partial file, as identified in the child analysis; chunk [0, 46348)). The packaging, physical-characteristics, and waste-component setters reportedly clear and repopulate collections without visible null-input guards. Whether the collections are guaranteed non-null by ORM configuration or lifecycle code remains unresolved.
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): Therefore, the fleet statement that the calculator “calculates notification charges” is broadly true, but it overstates the demonstrated effect of the shipment-count comparison. Whether the repository internally applies shipment-count logic cannot be determined from this range.
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): 2. “Asynchronous event raising” is not established.
Unknown — Harten review [WU-162-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1f64d33ca0645673bb85380abe6faab3/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): Whether this is intentional is unresolved.
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): The setter is internal, so external reachability is not established. Nonetheless, the class-level rules are visibly weaker or inconsistent relative to PackagingInfo.
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): Null handling for shipmentQuantity and shipmentPeriod is not explicitly guarded in the visible code. Whether nulls are impossible by contract or result in a null-reference failure cannot be determined from this range.
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): The evidence supports a domain-heavy model with several explicit construction and mutation guards, but it also reveals inconsistent enforcement across mutation paths, weaker-than-implied collection invariants, and unresolved persistence and event-lifecycle behavior. The strongest conclusions concern concrete class-level behavior in the cited files; architectural labels, runtime guarantees, and regulatory semantics should remain qualified until the omitted implementations and call paths are examined.
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): ### 7. SetAllFacilitiesPreconsented enforces notification type, but its full operational behavior is unresolved
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): The following remain unresolved from this range:
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): Potential null behavior is not explicitly handled: shipmentQuantity and shipmentPeriod are not guarded before dereferencing. Whether nulls are impossible by contract or produce NullReferenceException is unresolved from this range.
Unknown — Harten review [WU-163-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2c3b143df14e590f80de2cb726db66a5/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): Per-file byte offsets were not supplied. Accordingly, exact file-local byte ranges cannot be stated without inventing positions. References below use the reported file names and members. The source and child analysis are treated as evidence, not as authoritative instructions. Because the supplied range is a chunk, cross-chunk behavior and external implementations remain unresolved.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): WasteType.cs initializes or copies WasteAdditionalInformationCollection, but the supplied evidence does not show validation of the collection’s contents. Description-property restrictions are supported; validation of “additional information” is not established.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): - Resubmission behavior is unresolved.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): ### External dependencies and unresolved questions
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): The evidence supports a domain model containing notification-assessment state transitions, composition-dependent waste data, guarded waste-disposal updates, completion preconditions, decision-deadline calculations, archive-reference validation, and registration metadata. However, several higher-level interpretations are stronger than the visible code warrants. In particular, waste “additional information” validation, change-only percentage events, complete state-machine semantics, and comprehensive invariant enforcement are not established. The aggregate also contains materially under-described classes and interfaces, so the available evidence is incomplete rather than a lossless semantic account of the source.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): The private constructor taking IList<WasteAdditionalInformation> initializes WasteAdditionalInformationCollection, but no corresponding initialization of WasteCompositionCollection is visible in the supplied class. WasteCompositions delegates to WasteCompositionCollection.ToSafeIEnumerable(), whose null-handling is external and unresolved.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): The source shows transitions, but the actual behavior of StateMachine, event dispatch, and persistence is external. In particular, OnTransitionAction raises a NotificationStatusChangeEvent, and some state-entry methods update dates; whether those events are persisted or acted upon cannot be established from this range.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): NotificationAssessment.cs defines OnResubmit(DateTime resubmitDate), but the visible state-machine configuration for Reassessment does not show an OnEntryFrom binding to OnResubmit. Separately, AddStatusChangeRecord updates NotificationChargeDate when a status record has status Resubmitted. This may be intentional, but the relationship between these two mechanisms is unresolved.
Unknown — Harten review [WU-164-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63af3c3f156153fd9fc08264c4c9e8b8/second-opinion/opinion.md): ### Unresolved external dependencies
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): - Not established: that the classes are registered or resolvable in the application runtime.
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): The two implementations may be intended to correspond, but their equivalence is unresolved because the relevant transaction invariants are not established in this chunk. The Fleet overview’s omission of these algorithms leaves an important observable behavior undocumented, particularly because report models expose payment dates.
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): > The supplied source chunk supports a substantial portion of the Fleet Document’s structural and method-level descriptions, but several runtime, business-semantic, and validation claims should be downgraded from “confirmed” to “observed” or “inferred.” The document should explicitly incorporate the payment-balance and payment-date algorithms, the conditional organisation validation, the null-specific PhoneNumber behavior, and the report-domain omissions. Broader conclusions about registration, authorization, invariants, and business correctness remain unresolved from this chunk.
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): - The stronger statement that this “suggest[s] [the class] is registered as a service within the application runtime” is not established by this chunk alone.
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): The following remain unresolved from this chunk:
Unknown — Harten review [WU-165-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ac1a644bd9ac531fad8c88e259e4bd3f/second-opinion/opinion.md): Overall, the Fleet Document is directionally accurate, but its “Confirmed” labels should be reduced to source-observed behavior where they currently infer runtime registration or business semantics not established by the supplied range.
Unknown — Harten review [WU-166-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a8950c550bf157c8a7207be3c0246a20/second-opinion/opinion.md): The constructor also rejects firstDate > lastDate, but appears to permit equal dates. It invokes Guard.ArgumentNotDefaultValue for both dates; the supplied evidence does not include the implementation or semantics of that guard. Whether the strict boundary is intentional or an off-by-one/business-rule defect is unresolved.
Unknown — Harten review [WU-166-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a8950c550bf157c8a7207be3c0246a20/second-opinion/opinion.md): ## Remaining unresolved questions
Unknown — Harten review [WU-166-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a8950c550bf157c8a7207be3c0246a20/second-opinion/opinion.md): However, the source only proves contracts, not implementations, persistence, authorization enforcement, query semantics, or result ordering. The fleet correctly identifies these as unresolved in “Uncertainties and Missing Evidence.”
Unknown — Harten review [WU-166-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a8950c550bf157c8a7207be3c0246a20/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-167-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3af6e2ce3cb154f6a50f96bace46fad0/second-opinion/opinion.md): The visible constructor is protected, and no public factory or derived construction path is shown. Validation behavior is therefore supported, but externally usable instantiation remains unresolved.
Unknown — Harten review [WU-167-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3af6e2ce3cb154f6a50f96bace46fad0/second-opinion/opinion.md): The supplied file does not show any public factory or derived class that can construct it, so its externally usable construction path is unresolved.
Unknown — Harten review [WU-167-ea-iws-domain] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3af6e2ce3cb154f6a50f96bace46fad0/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-168-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8226c3b7a0d5ce39d11216066e3304e/second-opinion/opinion.md): Other unresolved areas include:
Unknown — Harten review [WU-168-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8226c3b7a0d5ce39d11216066e3304e/second-opinion/opinion.md): The strongest supported conclusion is that, in this fixture, the handler returns true and retrieves an application. Any claim that it updates operation codes is an inference not established by the shown assertions.
Unknown — Harten review [WU-168-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8226c3b7a0d5ce39d11216066e3304e/second-opinion/opinion.md): Still unresolved are:
Unknown — Harten review [WU-168-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8226c3b7a0d5ce39d11216066e3304e/second-opinion/opinion.md): 3. Unresolved: behavior not established by the supplied tests.
Unknown — Harten review [WU-168-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d8226c3b7a0d5ce39d11216066e3304e/second-opinion/opinion.md): The fleet should additionally identify these unresolved areas:
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): The available material appears to consist primarily of unit tests and test helpers, not the production handlers, repositories, validators, mappers, or domain implementations. Accordingly, the evidence supports claims about tested expectations and test coverage, but generally cannot establish that production behavior is correct beyond those scenarios.
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): - AddressValidatorTests.cs support required address fields and conditional UK postal-code behavior, although the non-UK postal-code test may not clearly validate a complete address instance. The effectiveness of that test depends on FluentValidation helper semantics not established here.
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): The evidence supports a conclusion that the test suite covers a meaningful set of expected handler, validation, collection, and helper behaviors. It does not support broad confirmation of production correctness. Interaction assertions using A<Guid>.Ignored, ignored strings, or incompletely configured fake requests frequently show only that a call occurred, not that correct values were passed. Several tests also assert only selected fields or counts and leave persistence, mapping completeness, failure propagation, and authorization details unresolved.
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): Key unresolved questions remain:
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): - AddressValidatorTests.cs indicates required AddressLine1, TownOrCity, and CountryId; AddressLine2 is optional; postal code is required for the configured UK country but optional for a non-UK case. However, the “non-UK” postal-code test uses ShouldNotHaveValidationErrorFor(x => x.PostalCode, postcode) rather than clearly validating a complete address instance. Whether the conditional country-dependent rule is genuinely exercised depends on FluentValidation test-helper semantics and is not established by this chunk alone.
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): ## Material issues and unresolved questions
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): - The compile list includes PrenotificationOnlyNewShipmentsRuleTests.cs.cs, which may be intentional or may indicate a filename typo. The actual filesystem is not provided, so compilation impact is unresolved.
Unknown — Harten review [WU-169-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1b35d5e0e7a3511c819c1ba3b5471223/second-opinion/opinion.md): - Build success cannot be concluded because package availability and imported target files are not established.
Unknown — Harten review [WU-170-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/09728d0030985e21a95c7bc52106ff52/second-opinion/opinion.md): The test still exercises NotificationType.Disposal, so the disposal/recovery distinction is partly evidenced. Whether the ID mismatch is intentional or a fixture defect remains unresolved.
Unknown — Harten review [WU-170-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/09728d0030985e21a95c7bc52106ff52/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-170-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/09728d0030985e21a95c7bc52106ff52/second-opinion/opinion.md): ### 6. “Up to 70 characters” is not established by the tests
Unknown — Harten review [WU-170-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/09728d0030985e21a95c7bc52106ff52/second-opinion/opinion.md): The tests still exercise NotificationType.Disposal, so the intended disposal/recovery distinction is partly supported. However, the ID inconsistency is unresolved and could conceal a fixture defect.
Unknown — Harten review [WU-170-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/09728d0030985e21a95c7bc52106ff52/second-opinion/opinion.md): ## Additional unresolved questions
Unknown — Harten review [WU-171-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd27f8cbba945a5a8f5ff6edbcb079be/second-opinion/opinion.md): The repository is not injected and therefore appears unused by the tested path. The principal assertion is that HandleAsync returns true. The test does not demonstrate what details are recorded, which movement is changed, or whether a repository operation occurs. The fleet’s description of internal rejection recording is plausible as intended behavior but is not established by this test.
Unknown — Harten review [WU-171-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd27f8cbba945a5a8f5ff6edbcb079be/second-opinion/opinion.md): 3. Production behavior or business-rule confirmation — not established by this source alone.
Unknown — Harten review [WU-171-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/fd27f8cbba945a5a8f5ff6edbcb079be/second-opinion/opinion.md): In particular, the fleet should downgrade confidence for message-banner mapping, tolerance semantics, movement filtering, comment/user enrichment, and partial rejection. It should also retain the unresolved naming and arrangement contradictions rather than presenting those flows as confirmed contracts.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): ## Claims that are overstated or not established
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): Not established: that facility availability or Boolean flags determine the interim status, or that the status was updated as claimed.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): This raises an unresolved possibility that the repository setup is stale or the constructor wiring is incomplete.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): Not established: that the handler created or persisted that audit.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): Not established: that carrier information was successfully added.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): Not established: that the handler actually consulted INotificationProgressService, or how incomplete notifications are handled.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): These naming and filename discrepancies are evidence of possible historical artifacts, but their operational significance cannot be determined from the supplied material.
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): ### 1. Fleet claims that are overstated or not established by the tests
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): That is not established by these tests:
Unknown — Harten review [WU-172-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b424e64462385c7186b5cbd67e74e5dc/second-opinion/opinion.md): ### 5. Unresolved questions
Unknown — Harten review [WU-173-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c7adbea4abc5150b7a9593405261e1b/second-opinion/opinion.md): The filename refers to “must be in past,” while the tested class is ReceiptRecoveryRecoveryDateInFutureRule. This terminology inconsistency remains unresolved.
Unknown — Harten review [WU-173-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c7adbea4abc5150b7a9593405261e1b/second-opinion/opinion.md): For the supplied values, this is negative. The tests therefore permit or expect a negative remaining value when no approved guarantee exists. Whether that is intended business behaviour is unresolved.
Unknown — Harten review [WU-173-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c7adbea4abc5150b7a9593405261e1b/second-opinion/opinion.md): The fleet document’s broad description of case-insensitive matching is supported, but the exact normalization, threshold, handling of words such as “the,” and tie-breaking rules are not established by the available evidence.
Unknown — Harten review [WU-173-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3c7adbea4abc5150b7a9593405261e1b/second-opinion/opinion.md): The resulting second opinion is that the source demonstrates intended and partially exercised contracts, but does not support lossless semantic understanding of the underlying system. Several business rules—especially date comparisons, unit combinations, negative remaining-capacity results, and handler argument forwarding—remain unresolved.
Unknown — Harten review [WU-174-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bdec6bd248c45738992d701349bed33a/second-opinion/opinion.md): Whether this is harmless depends on TestDbSet behavior and the handler’s access pattern. The supplied evidence does not establish that this setup reproduces Entity Framework’s behavior for duplicate tracked keys. This is therefore an unresolved test-fixture concern, not proof of a production defect.
Unknown — Harten review [WU-174-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bdec6bd248c45738992d701349bed33a/second-opinion/opinion.md): ### Contract-gap contradiction and unresolved accounting issue
Unknown — Harten review [WU-174-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bdec6bd248c45738992d701349bed33a/second-opinion/opinion.md): There is also an internal counting discrepancy: the text reportedly describes eleven omitted files but lists twelve filenames. This should remain unresolved pending the original contract-gap document or a separately verified file inventory.
Unknown — Harten review [WU-174-ea-iws-requesthandlers-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/bdec6bd248c45738992d701349bed33a/second-opinion/opinion.md): This is contradicted by the supplied source range: all of those files are present in the evidence. The likely interpretation is that the fleet summary did not describe those files in its overview, rather than that source coverage was absent. The distinction is unresolved because no separate contract metadata is provided.
Unknown — Harten review [WU-176-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9b8e16747afc5d9995550cbd9fc29ea0/second-opinion/opinion.md): The archive tests do not define eligibility criteria. Similarly, AdminExportAssessment/EditContactControllerTests.cs includes AdditionalChargeData, but that alone does not establish the production calculation rules. Both areas remain unresolved.
Unknown — Harten review [WU-176-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9b8e16747afc5d9995550cbd9fc29ea0/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): AddSharedUserForNotificationControllerTests.cs covers adding and removing external users, duplicate prevention, maximum-list validation, email-format validation, rejection of internal addresses, unknown-user handling when GetUserId throws, rejection of already-shared users, and confirm/success views.
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): Audit invocation or persistence should therefore be treated as unresolved, not confirmed, by these fixtures.
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): There are unresolved inconsistencies between test names and assertions:
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): These may reflect stale names or business terminology, but the cited source does not resolve which interpretation is correct. The exact completion-state logic also cannot be established from this chunk alone.
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): If no exception is thrown, the test can still pass. The expected failure behavior is therefore unresolved.
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): The available evidence does not resolve whether the fixture inconsistencies are merely stale test data/names or indicate implementation defects. Production semantics, authorization, persistence, transactionality, and complete exception behavior remain unresolved without implementation or integration evidence outside byte range [0,164984).
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): - Handling an unknown address when GetUserId throws.
Unknown — Harten review [WU-177-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89b0c5d49e6e50f6857c2e8d97d681d8/second-opinion/opinion.md): The strongest evidence in this chunk concerns controller-level routing, selected mediator request matching, and selected validation outcomes. Production semantics, authorization, persistence, and exception handling remain unresolved unless corroborated by implementation or integration tests outside this range.
Unknown — Harten review [WU-178-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6b553731c68755bba99cd6f0933709aa/second-opinion/opinion.md): The implementation and behaviour for environments other than LIVE and TEST are not established by the supplied evidence. Broader claims about all non-live environments should therefore remain unresolved.
Unknown — Harten review [WU-178-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6b553731c68755bba99cd6f0933709aa/second-opinion/opinion.md): ## Unresolved test-quality issue
Unknown — Harten review [WU-178-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6b553731c68755bba99cd6f0933709aa/second-opinion/opinion.md): 7. The mismatched mediator setup in WasteGenerationProcessControllerTests.cs is an unresolved test-validity concern, not yet a proven production defect.
Unknown — Harten review [WU-178-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6b553731c68755bba99cd6f0933709aa/second-opinion/opinion.md): ## Notable unresolved issue in the tests
Unknown — Harten review [WU-178-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6b553731c68755bba99cd6f0933709aa/second-opinion/opinion.md): This may mean the audit setup is attached to a mediator that the controller never uses. No assertion in the shown tests detects this, so the behavioural consequence cannot be established without the controller implementation.
Unknown — Harten review [WU-179-ea-iws-web-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/10e7ac6e5d1a56738555c126edbf524a/second-opinion/opinion.md): ## Additional unresolved issues
Unknown — Harten review [WU-181-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be5a276a5c4c5e5184f20e0cf2ee8734/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-181-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be5a276a5c4c5e5184f20e0cf2ee8734/second-opinion/opinion.md): DaysRemainingCalculatorTests.cs freezes system time and verifies positive, zero, fractional-time, and overdue cases. The tested output is a string number or "Overdue". The exact rounding/truncation algorithm is not established beyond the single time-involved case.
Unknown — Harten review [WU-181-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/be5a276a5c4c5e5184f20e0cf2ee8734/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-182-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e85a4e64ecbd5f648456214356496672/second-opinion/opinion.md): These defects reduce the reliability of broad fleet-level conclusions and should be distinguished from actual production defects, which cannot be established from tests alone.
Unknown — Harten review [WU-182-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e85a4e64ecbd5f648456214356496672/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-182-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e85a4e64ecbd5f648456214356496672/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-182-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e85a4e64ecbd5f648456214356496672/second-opinion/opinion.md): - Whether the empty shipment tests reflect implemented production rules or only planned requirements is unresolved.
Unknown — Harten review [WU-182-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e85a4e64ecbd5f648456214356496672/second-opinion/opinion.md): - Whether the contradictory movement test names are documentation errors or indicate an implementation/specification mismatch is unresolved.
Unknown — Harten review [WU-182-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e85a4e64ecbd5f648456214356496672/second-opinion/opinion.md): - Whether the CertificateOfRecoveryNameTests.cs identifier mismatch is harmless or masks a fixture defect is unresolved.
Unknown — Harten review [WU-183-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/78f1b3ab887959f18466efc660385951/second-opinion/opinion.md): MovementFactoryTests.cs exercises shipment-count limits, consent status, financial-guarantee approval, active-load limits, quantity limits, and delegation to IMovementDateValidator. This supports a summary that creation applies multiple business checks, while leaving the exact implementation and precedence of those checks unresolved.
Unknown — Harten review [WU-183-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/78f1b3ab887959f18466efc660385951/second-opinion/opinion.md): ### Contradictions and unresolved questions
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): Both expect InvalidOperationException for an overlong value. The exact behavior at the 70-character boundary is not established.
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): The safer inference is that the tests assert exclusive 12-month and 36-month boundaries in some form, but the semantic meaning of the boolean argument remains unresolved from this chunk. The conflicting names and arguments should be preserved rather than silently resolved.
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): ## Important unresolved or weakly evidenced areas
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): 4. preserve the unresolved contradiction in the preconsent-date tests;
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): Analysis is limited to source chunk [0, 168809), SHA-256 ddd60d2bba3f1b8c797c874877b02afbaa55935759cda79c6df5fbc47c9ba759. The supplied artifact contains multiple files, but does not provide per-file byte offsets; therefore exact file-local byte ranges cannot be determined without inventing offsets. Citations below identify the exact file and relevant test/member names within that chunk.
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): A safer statement is: the tests assert 12-month and 36-month exclusive period limits, but the semantic meaning of the boolean argument is unresolved from this range because the test names and arguments are not fully consistent.
Unknown — Harten review [WU-184-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/90ca709e996e50238f782f774c8cc1dc/second-opinion/opinion.md): ## Additional unresolved issues
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): These transitions are evidenced by tests, but the complete state machine remains unresolved because the supplied range does not establish behavior for every enum value or every possible invalid combination.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): The tests configure INotificationTransactionCalculator.Balance directly. They therefore do not verify the calculator’s arithmetic, repository consistency, or the underlying definition of “complete payment.” The internal semantics of the calculator remain unresolved.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): Accordingly, the fleet statement that internal-EU scenarios may return None is not supported by the executable assertions in the supplied evidence. The test names and assertions conflict. The intended business rule remains unresolved, while the current assertions require EntryAndExit.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): This supports a constrained format validator, but not a complete grammar. Acceptance of null input, international formats outside the examples, equivalent formatting variants, and boundary lengths remains unresolved.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): The fleet document is generally directionally accurate, but it overstates several conclusions as confirmed when the supplied evidence is limited to unit tests. The principal factual problem is the RequiredCustomsOffices summary: test names suggest None for internal-EU cases, while the executable assertions require EntryAndExit. That contradiction should remain explicit and unresolved.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): The fleet summary accurately reports these tested cases. However, the test does not cover every status shown elsewhere in the source, such as Consented, Withdrawn, Objected, FileClosed, Reassessment, or ConsentedUnlock. Therefore the complete editability policy remains unresolved from this range.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): is not supported by the assertions in this source range. The test names and assertions contradict each other. The intended result for the internal-EU cases is unresolved; the executable assertions currently require EntryAndExit.
Unknown — Harten review [WU-185-ea-iws-domain-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/647d8ac304675f95a434261007141aef/second-opinion/opinion.md): The fleet document is generally directionally accurate, but it overstates several conclusions as “confirmed” when the evidence consists only of tests. The most significant factual issue is the RequiredCustomsOffices summary: the test names suggest None in internal-EU cases, while the actual assertions uniformly require EntryAndExit. That contradiction should remain explicitly unresolved rather than being summarized as “potentially None.”
Unknown — Harten review [WU-186-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00edca27e45d52f785ae9e27d09da848/second-opinion/opinion.md): The fleet claim that creating an export additional charge requires a notification ID, amount, date, type, and optional comments is therefore overstated. A date property exists, but the shown constructor does not receive or populate it; the parameterless constructor also permits default-valued fields unless another layer validates them. No validation for amount, date, type, or comments is visible in the supplied request definitions. Whether comments are optional is unresolved.
Unknown — Harten review [WU-186-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00edca27e45d52f785ae9e27d09da848/second-opinion/opinion.md): A further unresolved inconsistency is that CreateImportNotificationAdditionalCharge.cs uses ImportNotificationPermissions.CanReadImportNotification for a create-named operation. This may be intentional, but the supplied evidence does not explain it.
Unknown — Harten review [WU-186-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00edca27e45d52f785ae9e27d09da848/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-186-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00edca27e45d52f785ae9e27d09da848/second-opinion/opinion.md): - Whether comments are optional is not established by this class alone.
Unknown — Harten review [WU-186-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/00edca27e45d52f785ae9e27d09da848/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-187-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/af5befc556ab5e75844c0c2789e22f11/second-opinion/opinion.md): The class name omits the second i in “Notification.” This is a concrete source discrepancy. Its practical significance remains unresolved: it could affect callers, serialization, compatibility, or nothing observable if all references use the misspelled name.
Unknown — Harten review [WU-187-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/af5befc556ab5e75844c0c2789e22f11/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-187-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/af5befc556ab5e75844c0c2789e22f11/second-opinion/opinion.md): This is source-supported. However, the reason local-area data is unauthenticated—public data, a routing requirement, or another policy—is not established by this range.
Unknown — Harten review [WU-187-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/af5befc556ab5e75844c0c2789e22f11/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): SmokeTest.cs is marked [AllowUnauthorizedUser], supporting a request-level authorization bypass for that request. Its intended use for health monitoring, load balancing, or deployment checks is not established by the supplied evidence.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): The spelling NotificaitonsAdvancedSearch appears to be a source-level naming typo. Its external or operational impact cannot be determined from this chunk.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): 5. The purpose of SmokeTest remains unresolved.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): The spelling NotificaitonsAdvancedSearch is present in the source and appears to be a class/file naming typo, but its operational impact cannot be determined from this range.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): 2. “Administrative endpoints” is not established.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): 4. Health-monitoring purpose of SmokeTest is unresolved.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): 5. Validation remains entirely unresolved.
Unknown — Harten review [WU-188-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ab91c1eff1d05428a1279ca4ff5d0003/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-189-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/543ade8cc0c45521aab0a81fba8d3535/second-opinion/opinion.md): The evidence identifies source files by name but does not provide per-file byte offsets. Accordingly, references below use filenames and the available aggregate range; exact byte positions within individual files cannot be established. The fleet document is treated as an untrusted summary rather than authoritative evidence.
Unknown — Harten review [WU-189-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/543ade8cc0c45521aab0a81fba8d3535/second-opinion/opinion.md): NotificationReadOnlyAuthorizeAttribute.cs is present and is described as a class-level marker attribute with no implementation visible in the supplied range. Its runtime behavior therefore remains unresolved.
Unknown — Harten review [WU-189-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/543ade8cc0c45521aab0a81fba8d3535/second-opinion/opinion.md): ### Contradictions, qualifications, and unresolved issues
Unknown — Harten review [WU-189-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/543ade8cc0c45521aab0a81fba8d3535/second-opinion/opinion.md): - Per-file byte offsets: not provided, so file names are cited below; exact byte positions within individual files cannot be determined from the supplied evidence.
Unknown — Harten review [WU-189-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/543ade8cc0c45521aab0a81fba8d3535/second-opinion/opinion.md): - Not established: Actual business execution, authorization enforcement, validation, persistence, success/failure semantics, or error handling.
Unknown — Harten review [WU-189-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/543ade8cc0c45521aab0a81fba8d3535/second-opinion/opinion.md): - Unresolved: Whether [NotificationReadOnlyAuthorize] has runtime behavior elsewhere; only its empty attribute declaration is visible here.
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): The artifact is a concatenated multi-file source extract. Per-file byte offsets are unavailable, so references below identify filenames and cite the overall range only. The conclusions are based on declarations visible in that range; runtime behavior, handler implementations, and attribute enforcement are not established.
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): - The reason for this difference—such as model binding, serialization, or mediator-construction requirements—is not established.
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): - GenerateBankGuaranteeDocument.cs and GenerateParentCompanyDocument.cs have no visible request properties. Any required context must therefore come from a handler convention, pipeline context, ambient state, or another mechanism outside the supplied evidence. This is an unresolved question, not proof of any particular mechanism.
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): - Other DTOs expose public setters, notably SetExporterForNotification, AddFacilityToNotification, GetFacilitiesByNotificationId, and FeedbackData. This may reflect different binding or mediator-construction requirements, but the reason is not established.
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): - GenerateBankGuaranteeDocument and GenerateParentCompanyDocument have no request properties. Any required context must therefore come from mediator pipeline context, ambient state, or a handler convention not shown here. This is an unresolved design question, not a confirmed behavior.
Unknown — Harten review [WU-190-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e72e1326e7455c048c58143b26060176/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-191-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aea7d39a99595677b9fc2f4e5d13d2b9/second-opinion/opinion.md): The statement that import movements are created while “returning a generated GUID” is too strong for the supplied evidence. CreateImportMovement.cs declares IRequest<Guid>, but the shown request class does not generate a GUID. Generation could occur in an unseen handler or persistence layer, but that remains unresolved. The same limitation applies to:
Unknown — Harten review [WU-191-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aea7d39a99595677b9fc2f4e5d13d2b9/second-opinion/opinion.md): ### Unresolved operational questions
Unknown — Harten review [WU-191-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/aea7d39a99595677b9fc2f4e5d13d2b9/second-opinion/opinion.md): ### 7. Nullability and validation are not established
Unknown — Harten review [WU-192-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/905f74dce6255e72ac021916dc2a1cd7/second-opinion/opinion.md): The child analysis reports that multiple source files are concatenated and that per-file byte offsets are unavailable. Accordingly, the references below identify source filenames, but narrower byte ranges cannot be established from the supplied material. The “FLEET DOCUMENT” is treated as an untrusted summary rather than independent source evidence.
Unknown — Harten review [WU-192-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/905f74dce6255e72ac021916dc2a1cd7/second-opinion/opinion.md): - GetImportNotificationIdByNumber returning Guid? permits an absent result, but the reason for absence is unknown.
Unknown — Harten review [WU-192-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/905f74dce6255e72ac021916dc2a1cd7/second-opinion/opinion.md): - CompetentAuthorityData may be related to another authority category, but “international” is not established.
Unknown — Harten review [WU-192-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/905f74dce6255e72ac021916dc2a1cd7/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-192-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/905f74dce6255e72ac021916dc2a1cd7/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-193-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/83a52cb83ba95cd5b8fe28c5ae9b8837/second-opinion/opinion.md): The conclusions below distinguish what the request contracts demonstrate from behavior inferred or left unresolved. They do not constitute lossless semantic understanding of the omitted application layers.
Unknown — Harten review [WU-193-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/83a52cb83ba95cd5b8fe28c5ae9b8837/second-opinion/opinion.md): Several requests use non-nullable DateTime, including Consent.cs, financial-guarantee creation and decision requests, SetCompletedDate.cs, SetReceivedAndCompletedDate.cs, and AddImportNotificationComment.cs. At the contract level, these types cannot distinguish omission from DateTime’s default value without external conventions. The domain significance of that distinction remains unresolved.
Unknown — Harten review [WU-193-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/83a52cb83ba95cd5b8fe28c5ae9b8837/second-opinion/opinion.md): 5. Return-object descriptions are “confirmed” — not established where only types such as ImportInterimStatus, AvailableDecisionsData, or ConsultationData are referenced and their definitions/behavior are absent from this range.
Unknown — Harten review [WU-193-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/83a52cb83ba95cd5b8fe28c5ae9b8837/second-opinion/opinion.md): This supports the fleet statement that validation results associate an entity name with multiple error messages. However, the fleet document says errors are “collected into a list.” The source specifies IEnumerable<string>, not List<string> or another concrete collection. The concrete collection type and validation-generation logic are unresolved.
Unknown — Harten review [WU-193-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/83a52cb83ba95cd5b8fe28c5ae9b8837/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-194-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6bd4cde2c4285641b6b38a7eac888bab/second-opinion/opinion.md): SetAcknowlegedDate.cs and UpdateImportNotificationAssesmentComments.cs contain apparent spelling errors in their type names. Renaming could affect mediator registration, callers, serialization, or tests; impact is unknown.
Unknown — Harten review [WU-194-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6bd4cde2c4285641b6b38a7eac888bab/second-opinion/opinion.md): bool, Guid, and Unit return types appear across mutation requests. Without handlers or call sites, the meaning of the bool and Guid results remains unresolved.
Unknown — Harten review [WU-194-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6bd4cde2c4285641b6b38a7eac888bab/second-opinion/opinion.md): Renaming them may affect mediator registration, callers, serialization, or tests; the impact cannot be determined here.
Unknown — Harten review [WU-194-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6bd4cde2c4285641b6b38a7eac888bab/second-opinion/opinion.md): Several mutation requests return bool, while others return Unit or Guid. Without handlers or calling code, it is unresolved whether bool means success, state, existence, or another result.
Unknown — Harten review [WU-194-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6bd4cde2c4285641b6b38a7eac888bab/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-195-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391b5e7ff0e1529588cddd1cbe1eb3c0/second-opinion/opinion.md): - GetImportMovementsSummaryTable.cs contains a PageNumber, but bounds and indexing conventions are not established.
Unknown — Harten review [WU-195-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391b5e7ff0e1529588cddd1cbe1eb3c0/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-195-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391b5e7ff0e1529588cddd1cbe1eb3c0/second-opinion/opinion.md): - Namespace usage is not entirely uniform: most files use Prsd.Core.Mediator, while GetMessageBanner.cs uses EA.Prsd.Core.Mediator and EA.Prsd.Core.Security. This is observable evidence, but its compatibility or intentionality cannot be determined from this range alone.
Unknown — Harten review [WU-195-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391b5e7ff0e1529588cddd1cbe1eb3c0/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-196-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f6fdd2b93b95f6190a616f054a88150/second-opinion/opinion.md): - Naming is inconsistent: GetMovementUnitsByMovementId.cs uses Id rather than MovementId; GetNewMovementIdsByNotificationId.cs uses Id rather than NotificationId; and Receive/GetSubmittedMovementsByNotificationId.cs likewise uses Id. These are contract inconsistencies, but their functional impact is unresolved.
Unknown — Harten review [WU-196-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f6fdd2b93b95f6190a616f054a88150/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-196-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5f6fdd2b93b95f6190a616f054a88150/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): The relationship between CanEditExportMovements and the internal/external variants is unresolved. It should not be characterized as external-specific without the permission definitions.
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): In AddSharedUser, both UserId and UserIds are present, but the child analysis reports that only UserIds is assigned by the visible constructor. The status and intended role of the unassigned UserId remain unresolved.
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): Other unresolved contract details include:
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): - SetMultipleMovementFileId accepts multiple movement IDs but returns one Guid; the returned identifier’s meaning cannot be determined here.
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): This is an unresolved design inconsistency or legacy property, not evidence of a specific ownership behavior.
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): - SetMultipleMovementFileId returns a single Guid while accepts multiple movement IDs. The meaning of that returned GUID is unresolved from this range.
Unknown — Harten review [WU-197-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ea3b456744975e63a7ac22c1a992c17d/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): These are source-level declarations only. Whether the attributes are enforced, whether failures are correctly handled, and whether resource-level authorization occurs remain unresolved.
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): - The broader meaning or downstream use of the flag remains unknown.
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): - Audit-related requests use different declared permissions: notification-read permissions for GetNotificationAudits.cs and GetNotificationAuditScreens.cs, versus movement-read permission for GetNotificationAuditTable.cs. The reason for this distinction is not established.
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): Those remain unresolved without middleware, attribute implementation, handlers, and tests.
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): - Audit-related requests use different permissions: GetNotificationAudits.cs and GetNotificationAuditScreens.cs require export-notification read permission, while GetNotificationAuditTable.cs requires export-movement read permission. Whether this distinction is intentional cannot be determined from this chunk.
Unknown — Harten review [WU-198-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/672e18e9814b541a8e23c6b4dd24b51b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): The source also exposes unresolved design questions:
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): 4. Nullable preconsent state: PreconsentedFacilityData.cs permits a nullable preconsent value, while SetPreconsentedRecoveryFacility.cs accepts a non-nullable bool. The treatment of an unknown or unset state is unclear.
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): 6. Authorization behavior is unresolved: the interaction between RequestAuthorization and NotificationReadOnlyAuthorize cannot be determined without the authorization implementation and pipeline.
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): Accordingly, the fleet document is useful as a high-level inventory, but its behavioral and capability claims should be downgraded to “declared by the contract,” “suggested by naming and fields,” or “unverified.” Exact workflow behavior, state transitions, authorization enforcement, and persistence remain unresolved because the supplied chunk contains incomplete cross-layer context.
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): ## Notable structural observations and unresolved questions
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): 4. Nullable preconsent state: IsPreconsentedRecoveryFacility is nullable in the data model, but the setter request requires a non-nullable bool; the semantics of “unknown/not yet set” are unresolved.
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): 6. Authorization semantics are unresolved: the effect of combining NotificationReadOnlyAuthorize with edit permission attributes is not established by this range.
Unknown — Harten review [WU-199-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/52f886827e595d51bdb10bf59e1a9677/second-opinion/opinion.md): 8. No lossless workflow interpretation is possible: the request names and fields suggest notification submission, assessment, payment, transit, and deletion workflows, but the exact state transitions and business rules remain unknown.
Unknown — Harten review [WU-200-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75b1785489325733b272beed1609d228/second-opinion/opinion.md): It remains unresolved whether enforcement occurs through a mediator pipeline, MVC filter, authorization middleware, or another mechanism.
Unknown — Harten review [WU-200-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75b1785489325733b272beed1609d228/second-opinion/opinion.md): Thus, “requires a valid notification ID” or similar wording would overstate what these files prove. Validation may exist elsewhere, but it is not established by this source range.
Unknown — Harten review [WU-200-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75b1785489325733b272beed1609d228/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-200-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75b1785489325733b272beed1609d228/second-opinion/opinion.md): 1. “Dedicated request handlers” is not established.
Unknown — Harten review [WU-200-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/75b1785489325733b272beed1609d228/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-201-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e78e10353aba589a951cd05a084a5a97/second-opinion/opinion.md): There is also an unresolved authorization question: UpdateExportNotificationAssementComments reportedly uses CanReadExportNotificationAssessment. Whether that is intentional or a permission defect cannot be determined from the request declaration alone.
Unknown — Harten review [WU-201-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e78e10353aba589a951cd05a084a5a97/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-201-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e78e10353aba589a951cd05a084a5a97/second-opinion/opinion.md): UpdateTransitStateEntryOrExit.cs declares nullable EntryPointId and ExitPointId. The meaning of null is unresolved without its handler or domain logic.
Unknown — Harten review [WU-201-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e78e10353aba589a951cd05a084a5a97/second-opinion/opinion.md): ### Additional unresolved questions
Unknown — Harten review [WU-202-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/99e05d98266258b28edb66ae5592a930/second-opinion/opinion.md): These distinctions are observable in the relevant files, [0, 23619), but the business meaning of “external,” “internal,” and the underlying role model cannot be established from this source alone.
Unknown — Harten review [WU-202-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/99e05d98266258b28edb66ae5592a930/second-opinion/opinion.md): - AddDisposalCodes.cs combines [NotificationReadOnlyAuthorize] with an edit permission attribute. The coexistence is directly observed, but its intended precedence or compatibility is unresolved.
Unknown — Harten review [WU-202-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/99e05d98266258b28edb66ae5592a930/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-202-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/99e05d98266258b28edb66ae5592a930/second-opinion/opinion.md): - Unresolved: actual execution, business rules, authorization enforcement, persistence, and workflow dependencies.
Unknown — Harten review [WU-202-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/99e05d98266258b28edb66ae5592a930/second-opinion/opinion.md): RequestAuthorization and NotificationReadOnlyAuthorize are used, but their definitions are absent. “Wrap permission checks” is not established. Also, NotificationReadOnlyAuthorize appears only on AddDisposalCodes.cs in this evidence, not on CreateMovementCarriers.cs.
Unknown — Harten review [WU-202-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/99e05d98266258b28edb66ae5592a930/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): These observations prove attribute usage only. The range does not contain the implementations of RequestAuthorization, NotificationReadOnlyAuthorize, or AllowUnauthorizedUser, nor the pipeline that evaluates them. Consequently, the effective authorization behavior and evaluation order remain unresolved.
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): AddRecoveryCodes.cs, SetPackagingInfoForNotification.cs, and producer add/delete/set/update requests visibly use NotificationReadOnlyAuthorize or related authorization declarations. The attribute name suggests protection against editing read-only notifications, but its actual behavior is not established by the supplied range. It cannot safely be described as enforcing that behavior without the attribute implementation and pipeline.
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): Most visible request classes accept GUIDs, strings, collections, or nested data objects without evident null, range, or emptiness checks. This does not by itself demonstrate a defect—validation may occur elsewhere—but the location and completeness of validation remain unknown.
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): The fleet document is broadly consistent with the visible declarations, but it overstates several behavioral conclusions. The source shows attribute usage, not the implementation or runtime effect of those attributes. Persistence, validation beyond one constructor, handler behavior, and authorization semantics remain unresolved.
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): These are source-level declarations only. The range does not include the implementations of RequestAuthorization, NotificationReadOnlyAuthorize, or AllowUnauthorizedUser; therefore their precise enforcement behavior is not established.
Unknown — Harten review [WU-203-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1608ee8078ee5c21924f52ebff6e43fe/second-opinion/opinion.md): Most GUIDs, strings, lists, and data objects are accepted without null or empty checks. This is not necessarily defective, but it leaves validation responsibility unresolved.
Unknown — Harten review [WU-204-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/66c085e2480f5443a06db3642063e1f0/second-opinion/opinion.md): Whether these are aliases, superseded variants, or distinct contracts remains unresolved.
Unknown — Harten review [WU-204-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/66c085e2480f5443a06db3642063e1f0/second-opinion/opinion.md): It does not support confirming end-to-end capabilities, authorization outcomes, persistence, validation, or business behavior. The fleet document should therefore downgrade behavioral “Confirmed” labels to formulations such as “Observed in request definitions” or “Suggested by the request contract,” while retaining the five identified coverage gaps and the unresolved implementation questions.
Unknown — Harten review [WU-204-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/66c085e2480f5443a06db3642063e1f0/second-opinion/opinion.md): ### Additional unresolved questions
Unknown — Harten review [WU-205-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d9fb2db3a0d56549ec47eabc426241f/second-opinion/opinion.md): This difference is observable in the declarations, but the reason for the split—and whether NotificationReadOnlyAuthorize represents authorization, workflow-state validation, or both—is unresolved (c0:0–24,876; EditHCodes.cs, EditYCodes.cs, SetEwcCodes.cs, SetHCodes.cs, SetUNClasses.cs, SetUNNumbers.cs, SetYCodes.cs).
Unknown — Harten review [WU-205-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d9fb2db3a0d56549ec47eabc426241f/second-opinion/opinion.md): GetUserIsInternal.cs has an empty explicit constructor and no request data. Its result presumably depends on ambient user or execution context, but that context is outside the supplied range. The source therefore cannot establish how internal-user status is determined (c0:0–24,876; ExternalUserExists.cs, GetUserId.cs, GetUserIsInternal.cs).
Unknown — Harten review [WU-205-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d9fb2db3a0d56549ec47eabc426241f/second-opinion/opinion.md): Independent fields in SetCustomWasteCodes.cs suggest separate representations, but absent constructor validation leaves consistency unresolved.
Unknown — Harten review [WU-205-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d9fb2db3a0d56549ec47eabc426241f/second-opinion/opinion.md): ## Evidence gaps and unresolved questions
Unknown — Harten review [WU-205-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d9fb2db3a0d56549ec47eabc426241f/second-opinion/opinion.md): The source stores the supplied values but performs no constructor validation analogous to SetBaselOecdCodeForNotification. In particular, it permits a code value and its corresponding NotApplicable flag to be supplied in a contradictory combination. Whether validation occurs elsewhere is unresolved.
Unknown — Harten review [WU-205-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d9fb2db3a0d56549ec47eabc426241f/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-206-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cc9b76669e815d14bfd1d0d4776a022b/second-opinion/opinion.md): 1. The claimed .NET Framework 4.8 target is not established.
Unknown — Harten review [WU-206-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cc9b76669e815d14bfd1d0d4776a022b/second-opinion/opinion.md): GetWasteRecoveryProvider.cs declares IRequest<ProvidedBy?>, but the definition of ProvidedBy is absent from the supplied range. Its underlying type and semantics therefore remain unresolved.
Unknown — Harten review [WU-206-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cc9b76669e815d14bfd1d0d4776a022b/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-206-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cc9b76669e815d14bfd1d0d4776a022b/second-opinion/opinion.md): 5. Authorization behavior remains unresolved.
Unknown — Harten review [WU-206-ea-iws-requests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cc9b76669e815d14bfd1d0d4776a022b/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): - Persistence hooks: src/EA.Iws.DataAccess/ContextBase.cs sets Database.CommandTimeout to 180. Both SaveChanges overloads invoke SetEntityId, DeleteRemovedRelationships, and AuditChanges before delegating to EF persistence. Their internal behavior and transactional coordination remain unknown.
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): - Domain-event timing: ContextBase.SaveChanges dispatches events via Task.Run(...).Wait(). SaveChangesAsync awaits DispatchEvents only after base.SaveChangesAsync completes. Thus, “event dispatch is asynchronous” is incomplete: the asynchronous overload awaits dispatch, while the synchronous overload blocks on a background task. The ordering indicates that dispatch occurs after EF persistence returns, but the source does not demonstrate an outbox, rollback, idempotency, or retry mechanism. A dispatch failure could therefore occur after database changes have been committed; the precise transaction boundary is unresolved.
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): 3. Draft storage is weakly typed and concurrency behavior is unknown.
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): Contexts use assembly/namespace scanning, while the project explicitly lists numerous mapping files. Because the supplied evidence does not include every mapping implementation, it cannot establish complete entity-to-table coverage or relationship correctness. The child also identifies omitted or under-described files, including ActivityMapping.cs, ApplicationUser.cs, ApplicationUserStore.cs, BankHolidayMapping.cs, CompetentAuthorityBacsDetailsMapping.cs, CompetentAuthorityMapping.cs, CountryMapping.cs, DateRangeMapping.cs, DateTimeOffsetRangeMapping.cs, DbFileRepository.cs, IDraftImportNotificationRepository.cs, Import.cs, and ImportNotificationContext.cs.
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): 6. Filename/capitalization discrepancy remains unresolved.
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-207-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/060125ee137f53808380b3c0184e58c8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-208-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7b2e1d81dcab5798bf02c97e8317bd80/second-opinion/opinion.md): The mappings use properties named Units, but DisposalCostMapping.cs, EstimatedValueMapping.cs, and RecoveryCostMapping.cs do not establish whether those units are currency, mass, volume, or something else. “Amount and units” is supported; “monetary amount and currency unit” is not established by this evidence.
Unknown — Harten review [WU-208-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7b2e1d81dcab5798bf02c97e8317bd80/second-opinion/opinion.md): 3. The database provider is unresolved.
Unknown — Harten review [WU-208-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7b2e1d81dcab5798bf02c97e8317bd80/second-opinion/opinion.md): 1. “Currency units” is not established.
Unknown — Harten review [WU-208-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7b2e1d81dcab5798bf02c97e8317bd80/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-209-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7452ee8e0cef5389975eff7d109dd724/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-209-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7452ee8e0cef5389975eff7d109dd724/second-opinion/opinion.md): - MovementAuditMapping.cs, MovementCarrierMapping.cs, and MovementDateHistoryMapping.cs only specify table mappings in this range; audit semantics, carrier relationships, and date-history behavior remain unresolved.
Unknown — Harten review [WU-209-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7452ee8e0cef5389975eff7d109dd724/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-210-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/35d279cd943d579a8b09d621cfd0f337/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-210-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/35d279cd943d579a8b09d621cfd0f337/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): - unresolved ambiguity about some EF relationship directions and generated database behavior.
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): Likewise, saying that null required values “will trigger validation errors” is plausible but not established. The actual failure could arise from EF validation, a database constraint, another validation layer, or not occur if the mapping is not active.
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): ### 6. Waste type, composition, and annex mappings — structural conclusions supported; validation semantics unresolved
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): ## Confidence and unresolved questions
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): The following remain inferred or unresolved:
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): Unresolved detail:
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): The fleet says null required values “will trigger validation errors.” That is plausible, but the exact failure mode—EF validation, database constraint failure, or another layer—is not established by this mapping alone.
Unknown — Harten review [WU-211-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7f203aba28d95cdd843108d42b4f20cf/second-opinion/opinion.md): Unresolved:
Unknown — Harten review [WU-212-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6abb33efdc49556793e8213f2f4322f7/second-opinion/opinion.md): - The financial-guarantee status-change relationship uses a collection and HasMany, making a one-to-many interpretation plausible. However, uniqueness, inverse navigation details, and cascade behavior are not established by the cited evidence.
Unknown — Harten review [WU-212-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6abb33efdc49556793e8213f2f4322f7/second-opinion/opinion.md): - RegistrationNumber is not wholly unconstrained: it is optional and has a maximum length of 100. Other business validation rules remain unknown.
Unknown — Harten review [WU-212-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6abb33efdc49556793e8213f2f4322f7/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-212-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/6abb33efdc49556793e8213f2f4322f7/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): This means “transactional archive processing with attempted structured logging” is supported, while “callers reliably receive an exception on failure” is not established.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): These remain unresolved questions rather than defects demonstrated by the available evidence.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): Unresolved question: whether caller-level controls or an intended internal-access boundary provide the missing authorization.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): The most material unresolved questions are:
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): 1. “Entity Framework 5 or 6” is not established.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): 5. The archive transaction boundary has an unresolved question.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): Unresolved: stored procedure implementation and database transaction behavior.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): Authorization is visible in several notification repositories, but it is not visible in AddressBookRepository, CompetentAuthorityRepository, CountryRepository, EntryOrExitPointRepository, ExportNotificationOwnerDisplayRepository, or the import mapping classes. This may be intentional, but the range cannot establish a complete security policy.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): Unresolved: caller-level authorization and intended internal-access boundary.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): Unresolved: EF/provider version and generated SQL.
Unknown — Harten review [WU-213-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a9032ed1d32545c9917e422aafa7c21/second-opinion/opinion.md): The Fleet Document is directionally accurate about the data-access layer, asynchronous repository style, selected mappings, archive transaction, and duplicate validation. However, several “Confirmed” labels describe conclusions that are only inferential, and the document materially underreports the supplied source coverage. The most important unresolved areas are the actual database schema, stored-procedure behavior, EF/provider version, authorization outside explicitly injected services, and the runtime translation behavior of some LINQ expressions.
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): 5. several nullability, invariant, and query-efficiency assumptions remain unresolved.
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): This indicates a distinction between deferred persistence and immediate persistence. The fleet document does not describe that distinction. Whether it is a defect or an intentional unit-of-work design remains unresolved because the relevant callers and transaction boundaries are outside the supplied evidence.
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): ### 5. Summary calculations contain unresolved edge cases
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): - TotalQuantityReceived returns zero immediately when no movement receipts exist, without considering partial-rejection records already collected. This may be valid under a domain invariant, but that invariant is not established.
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): ## Additional risks and unresolved questions
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): Whether these omissions are intentional because callers enforce authorization elsewhere cannot be determined from this chunk. The available evidence does not support a general claim that all repository access is authorization-protected.
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): Notable omissions or unresolved points:
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): #### 5. The summary calculation has unresolved edge cases
Unknown — Harten review [WU-214-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/f03431936a5050f189885b63ba042da3/second-opinion/opinion.md): 5. several nullability, N+1-query, and invariant assumptions remain unresolved from this source range.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): The “FLEET DOCUMENT” and all child-produced interpretations are treated as untrusted evidence. The conclusions below distinguish directly reported source behavior from inference and preserve unresolved questions.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): Unresolved: authorization may be enforced by higher-level services, but that is not visible in this chunk.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): Unresolved: whether the differing implementations correspond to intentional legacy/current schemas or differing business rules.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): Unresolved: caller-side authorization may exist outside the supplied chunk.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): do not call the authorization service. This creates an unresolved security question: callers can retrieve, delete, or update a transaction by ID without an authorization check at this repository boundary.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): ### 4. The source supports strict cardinality behavior, but exception details remain unresolved
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): This means a missing shipment returns null without authorization. Whether that is intentional or a security flaw cannot be determined from this chunk, but it is an important unresolved question rather than merely an operational behavior.
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): ### 8. Movement audit authorization is not established by the source
Unknown — Harten review [WU-215-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c2c89f99131c556b9af7dffd533bcc1b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): Assessment: These are credible runtime-failure paths if the database permits missing related rows. The evidence does not include nullability constraints or domain invariants, so the production likelihood remains unresolved.
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): Assessment: These are source-level anomalies. Their business impact is unresolved without callers, tests, or schema/domain requirements.
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): The evidence supports explicit ordered deletion, but not the stronger claim that database-level cascading deletes are configured. No explicit transaction is visible around the multi-delete operations. The provider or database may make the batch atomic, or the called logic may enforce transactional behavior elsewhere; the supplied range does not establish either outcome. Partial deletion after an intermediate failure therefore remains an unresolved operational risk.
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): ExportMovementsRepository.Get also performs JSON-based post-processing and calculates internal/external movement, receipt, and operation-receipt counts through CTEs. Those calculations are supported as implementation facts, but their business correctness cannot be established from repository code alone.
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): This could be harmless leftover code, or it could mean shipment information is queried but omitted from the resulting overview. The Load signature is outside the supplied evidence, so the semantic impact is unresolved.
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): The database connection or provider may wrap the batch transactionally, and foreign-key behavior may be configured elsewhere, so atomicity cannot be concluded from this source. Nevertheless, partial deletion behavior is an unresolved operational risk if one statement fails.
Unknown — Harten review [WU-216-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2d826a9318a05f9cabb2ba7dcdf22136/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): This is not enough to conclude that SQL injection exists. The unresolved issue is whether TextFilterHelper.GetTextFilter returns only fixed, allow-listed SQL fragments and parameter placeholders, or whether user-controlled text can enter the generated SQL expression.
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): ### 2. FOI quantity aggregation may be defective, but the conclusion is unresolved
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): Status: unresolved without the deployed SQL, schema, and execution behavior.
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): ### 4. Visible authorization coverage is inconsistent, but end-to-end coverage cannot be determined
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): ## Unresolved questions requiring additional evidence
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): Unresolved question: Does TextFilterHelper return only fixed, allow-listed SQL fragments and parameter placeholders, or can user-controlled text enter the SQL expression?
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): Status: unresolved; database schema and actual deployed SQL are needed before concluding whether this is a defect.
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): Unresolved question: Whether callers normalize to to the end of the intended day.
Unknown — Harten review [WU-217-ea-iws-dataaccess] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3b5236089c685d968ef6169bdf54251f/second-opinion/opinion.md): ### 5. Important unresolved questions
Unknown — Harten review [WU-219-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/808b69e80ea957c3be7903fc8bd4aa8a/second-opinion/opinion.md): - Export and import notification DTOs are similar but materially different. Export includes Transmitted, SubmittedBy, and transmission elapsed days; import includes several received, acknowledged, and consent elapsed-day fields and lacks Transmitted. This may reflect legitimate domain differences, but the reason is unresolved.
Unknown — Harten review [WU-219-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/808b69e80ea957c3be7903fc8bd4aa8a/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-219-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/808b69e80ea957c3be7903fc8bd4aa8a/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-220-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0412070ad73b5ba08b7ef39b7733c232/second-opinion/opinion.md): C# syntax and a reference to Prsd.Core.Guard are visible, but target framework, runtime, serializer, database, deployment model, and hosting environment are not established.
Unknown — Harten review [WU-220-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0412070ad73b5ba08b7ef39b7733c232/second-opinion/opinion.md): Nullable versus non-nullable quantities may indicate optionality, but the business rules are not shown. Units, currencies, status semantics, and the source of calculated-looking fields are also unresolved.
Unknown — Harten review [WU-220-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0412070ad73b5ba08b7ef39b7733c232/second-opinion/opinion.md): The child notes CustomsCode has a protected set; whether this is intentional encapsulation, an incomplete model, or a framework requirement cannot be determined from the supplied evidence.
Unknown — Harten review [WU-220-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0412070ad73b5ba08b7ef39b7733c232/second-opinion/opinion.md): 10. WasPrenotifiedBeforeThreeWorkingDays is semantically unresolved.
Unknown — Harten review [WU-220-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0412070ad73b5ba08b7ef39b7733c232/second-opinion/opinion.md): ## Remaining unresolved questions
Unknown — Harten review [WU-220-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0412070ad73b5ba08b7ef39b7733c232/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-221-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/832463c2e5f85617b0de7eb2295c03e8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-221-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/832463c2e5f85617b0de7eb2295c03e8/second-opinion/opinion.md): The supplied source artifact shows src/EA.Iws.Core/Documents/FileData.cs, but not Files\FileData.cs. This does not prove the project is broken—the omitted file may exist outside the supplied artifact—but the exact compilation contents cannot be established from this range alone.
Unknown — Harten review [WU-221-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/832463c2e5f85617b0de7eb2295c03e8/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-222-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/416fbc4e54bb58418f512778d0efcbde/second-opinion/opinion.md): The values in FinancialGuarantee/FinancialGuaranteeStatus.cs may suggest a workflow, but no transition logic, guards, timestamps, or triggers are identified in the supplied range. Declaration order must not be interpreted as authoritative progression. Likewise, the relationship between FinancialGuaranteeDecision and FinancialGuaranteeStatus remains unresolved.
Unknown — Harten review [WU-222-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/416fbc4e54bb58418f512778d0efcbde/second-opinion/opinion.md): OrderingExtension.cs uses ThenBy(c => c) and ThenBy(keySelector), apparently relying on default comparison. The enum declaration for OperationCode, its numeric values, and the intended business precedence are not shown. Handling of undefined or invalid enum values is also not established.
Unknown — Harten review [WU-222-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/416fbc4e54bb58418f512778d0efcbde/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-222-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/416fbc4e54bb58418f512778d0efcbde/second-opinion/opinion.md): 6. The ordering behavior has an unresolved semantic question.
Unknown — Harten review [WU-222-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/416fbc4e54bb58418f512778d0efcbde/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): The evidence supports the presence of these models and operations, but it does not establish a complete business lifecycle, validation regime, persistence contract, or invariant-maintenance strategy. Several apparent design concerns remain unresolved because their callers and surrounding infrastructure are outside the supplied chunk.
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): - Although Delete checks for a null collection, the property has a private setter and is initialized by the public constructor. It is unresolved whether persistence or ORM materialization can nevertheless produce a null value.
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): The significance is unresolved without the persistence configuration or materialization mechanism.
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): 1. “Distinct status lifecycle” is not established.
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): Whether this is correct is unresolved and may depend on presentation semantics:
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): - WasteCategories has no internal parameterless constructor in the supplied source, while several other draft entities do. The significance for persistence/materialization is unknown:
Unknown — Harten review [WU-223-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/63872b7a8b3a5a3f93330642afc51165/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-224-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a68d187c6de57a2af9948217a4426d5/second-opinion/opinion.md): WasteOperationData has [DisplayName("Waste operation")], and enum members in ImportNotificationStatus have [Display(Name = ...)]. It is reasonable to say these expose display metadata; it is not established that they are used for UI rendering, serialization, or any particular framework behavior because no consumers or configuration were supplied.
Unknown — Harten review [WU-224-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a68d187c6de57a2af9948217a4426d5/second-opinion/opinion.md): ### Unresolved questions and limitations
Unknown — Harten review [WU-224-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5a68d187c6de57a2af9948217a4426d5/second-opinion/opinion.md): - The exact mapping between summary models (WasteType, WasteCategory, WasteCodeSelection) and update models (WasteTypes) cannot be established from this chunk.
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): Under LINQ semantics, All returns true for an empty collection. Therefore, a newly constructed summary with no rule results reports both categories as successful. This is direct source-level behavior, although whether it is a defect or intended initialization state cannot be determined without callers or tests.
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): Unknown non-null tokens produce ArgumentException. A null token instead reaches token.ToUpperInvariant() and therefore produces NullReferenceException, unless callers reject null beforehand. Thus, the generalized claim that invalid tokens always cause ArgumentException requires qualification.
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): Therefore, the fleet document is correct that the actual content-rule implementations and integration points are not shown. This conclusion is supported by the absence of implementation bodies in the cited interfaces and rule enums, but cannot establish how callers actually use them.
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): This is source-level behavior, not merely an inference. Whether that is intended depends on callers and is unresolved in this chunk.
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): Unknown non-null tokens throw ArgumentException with the invalid token included in the message.
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-225-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/24ace1ca5fbf56498c8d03c5a6237084/second-opinion/opinion.md): This chunk cannot determine:
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): The semantics of RuleResult<T>, MessageLevel, and null individual entries are not present in the supplied range. The empty-input behavior may be intentional, but that remains unresolved.
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): “Represents date-history data” is supportable; “records a complete movement date history” is not established.
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): - Its use and constraints are unresolved.
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): The definitions of RuleResult<T> and MessageLevel are absent, so the meaning of “Success” and the treatment of null individual results remain unresolved.
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): - Assessment: These classes expose validation-result flags, but no validation implementation is present. The exact meanings of “out of range,” “original date,” and the date boundaries are unresolved.
Unknown — Harten review [WU-226-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/596ad191a38e56848a522905bb0e5d8b/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): The Fleet Document’s treatment of the IsAllComplete calculation as unresolved is therefore appropriate.
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): The apparent correspondence between NotificationAudit.Screen and NotificationAuditScreenType remains unresolved. The source supplies similarly shaped identifiers, but no explicit conversion, foreign-key declaration, or mapping is shown. They should not be treated as definitively linked.
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): There is an important unresolved inconsistency:
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): These files support the existence of movement and shipment data containers. They do not, without service or handler code, establish that the system “processes movement operations.” In addition, MovementData and several other referenced types are outside the supplied evidence, so their structure and relationships remain unresolved.
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): These files support the existence of charge categories and display data. They do not establish charge calculation, persistence, invoicing, or application rules. The unresolved NotificationCharge property belongs to src/EA.Iws.Core/Notification/Overview/NotificationOverview.cs; it should not be conflated with the additional-charge display model.
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): ### Further observations and unresolved questions
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): 3. The differing UserId types in the shared-user models are unresolved.
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): The Fleet Document’s wording that the system “processes movement operations” is stronger than the evidence. This file defines a data container; no processing is shown. MovementData itself is referenced but absent from the supplied range, so its structure and relationship remain unresolved.
Unknown — Harten review [WU-227-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/391c2e43ecc454b1970ab5f29a1edba7/second-opinion/opinion.md): - It does not flag the PreconstedAnswer naming anomaly or the numerous unresolved referenced types.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): Thus, the fleet claim that notifications are tracked with a “unique identifier” is only partially supported: an identifier field exists, but uniqueness enforcement is unresolved.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): This proves that these values are representable by the model. It does not prove that they constitute a valid linear lifecycle, that transitions follow numeric order, or that every value is used in execution. Any fleet wording describing a confirmed workflow should therefore be qualified as model-supported, with transition rules unresolved.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): The recovery/disposal categorization is directly supported. However, the definitions and runtime behavior of OperationCodeType and NotificationType are outside the supplied evidence range, so the operational effect of that metadata remains unresolved.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): ## Material uncertainties and unresolved questions
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): 2. Charge semantics: Charge, CurrentCharge, and NewCharge are declared, but currency, units, calculation method, rounding, and timing are unknown.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): 4. Nullability and validation: Nullable fields and reference types are visible, but requiredness, validation constraints, and serialization behavior are not established.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): 5. Date semantics: Numerous date fields exist, but time zones, population rules, ordering constraints, and distinctions between event dates are unresolved.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): This supports that these statuses are representable by the model. It does not prove that they form a valid linear lifecycle or that transitions occur in enum numeric order. The fleet document’s lifecycle wording should be downgraded from confirmed to model-supported, transition rules unresolved.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): The fleet statement that the enum categorizes recovery and disposal operations is directly supported. However, the implementation of OperationCodeType and NotificationType is outside the supplied range, so the runtime behavior of that metadata remains unresolved.
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): ## Unresolved questions and contradictions
Unknown — Harten review [WU-228-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/4f19279a96f85a24a858da240fc5247e/second-opinion/opinion.md): 5. Date semantics: Multiple date fields exist, but their time zones, population rules, and ordering constraints are unknown.
Unknown — Harten review [WU-229-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0290adec01295127864198de503a89a6/second-opinion/opinion.md): Security and correctness qualification: the helper interpolates textSearch directly into a SQL-like string using string.Format; it does not visibly escape quotes or use parameters. If the result is executed as SQL, malformed queries or injection may be possible. The supplied evidence does not show whether a later layer parameterizes, escapes, or otherwise constrains the result, so the end-to-end risk is unresolved.
Unknown — Harten review [WU-229-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0290adec01295127864198de503a89a6/second-opinion/opinion.md): ### Remaining unresolved questions
Unknown — Harten review [WU-229-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0290adec01295127864198de503a89a6/second-opinion/opinion.md): TextFilterHelper.cs interpolates textSearch directly into a SQL-like string using string.Format; it does not escape quotes or use parameters. This may permit malformed output or SQL injection if the returned string is executed as SQL. The source range does not show whether a later layer safely parameterizes or rejects the result, so the end-to-end risk remains unresolved.
Unknown — Harten review [WU-229-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0290adec01295127864198de503a89a6/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): - AddressDataResources.resx reportedly defines CountryRequired as “Enter a county using letters only.” That wording appears inconsistent with a country field and may be a copy or localization defect, although the intended behavior cannot be established from the string alone.
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): - The full semantics of AdditionalChargeType, MessageLevel, UKCompetentAuthority, and RequiredIfPropertiesEqual remain unresolved because their definitions or implementations were not included in the reported range.
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): ### Coverage gaps and unresolved questions
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): Material unresolved questions remain:
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): - AdditionalChargeType, MessageLevel, UKCompetentAuthority, and the custom validation attribute implementations are referenced but not defined in the supplied range. Their full semantics remain unresolved.
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): ### Coverage and unresolved questions
Unknown — Harten review [WU-230-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/e2e0e6a1a93d5e79a19d5a7815543967/second-opinion/opinion.md): Further unresolved questions include:
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): This conflicts with the file path and filename. Possible explanations include an accidental copied declaration, an intentional compatibility artifact, or a naming error. The supplied range cannot determine whether this causes integration or compile-time consequences.
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): NumberOfShipmentsHistoryData.cs exposes NotificaitonId rather than the apparent intended spelling NotificationId. Potential effects on serialization, mapping, or consumers are unresolved because no usage sites are included.
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): ## Confidence and unresolved questions
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): ### Unresolved
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): - Nullable payment methods: PaymentMethod? Type permits a missing value at the model level, but the business meaning of that state is not established.
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): ShipmentAuditRecord has both a parameterless constructor and a fully initializing constructor. The parameterless constructor permits records with default values, including an unset date, shipment number zero, and null strings. Whether that is intended for serialization is unresolved.
Unknown — Harten review [WU-231-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/1d7fee766db758ef93b5eb5f382c7fe3/second-opinion/opinion.md): ### Unresolved
Unknown — Harten review [WU-232-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b9c6c28506295ae79b1147a677825d1c/second-opinion/opinion.md): The evidence supports the following review points, while leaving their severity unresolved:
Unknown — Harten review [WU-232-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b9c6c28506295ae79b1147a677825d1c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-232-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b9c6c28506295ae79b1147a677825d1c/second-opinion/opinion.md): - “Indicating relational or database-backed storage patterns” is not established by the presence of Guid properties. It is a plausible design hypothesis only.
Unknown — Harten review [WU-232-ea-iws-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b9c6c28506295ae79b1147a677825d1c/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): For an unsupported enum value, the filename remains empty. It is reasonable to infer that subsequent file access may fail, but the precise exception and failure point are not established by the supplied evidence.
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): The private UpdateNotificationNumber method reportedly duplicates logic and is unused within the supplied range. Its broader reachability and whether it is dead code cannot be established without more context.
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): - an unknown property produces an empty string.
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): ## Unresolved questions and limits
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): An unsupported enum value leaves the filename empty, which would likely fail during file access, although the precise exception is not established solely by this source.
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): MergeFieldDataMapper.GetValueForMergeField calls propertyInfo.GetValue(viewModel).ToString() without a null check. A matching property whose value is null can therefore cause a NullReferenceException. Unknown properties instead produce an empty string.
Unknown — Harten review [WU-233-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/c05d50d0279359458791565b06ad6cc3/second-opinion/opinion.md): ### Additional unresolved questions
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): | Importer/exporter blocks | Not determinable from the visible base implementations | Unresolved |
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): The importer/exporter row must remain unresolved because the relevant base classes or implementations are not available in the evidence.
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): Null handling is not visible. The aggregator’s sequential execution is established by the loop, but whether that is intentional, required, or a performance problem cannot be determined from this chunk.
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): ## Remaining unresolved questions
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): > The supplied source range implements a movement-document block assembly layer. Individual factories asynchronously retrieve movement-related domain data and construct specialized document blocks. The blocks map merge fields into view models and apply block-specific main-document and annex policies. The evidence also shows omitted factories, additional block subclasses, several unchecked repository and document-structure assumptions, and potentially malformed merge-field handling. Complete semantics remain unresolved because factory registration, base classes, repositories, view models, merge utilities, and broader document-generation flow are not fully available.
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): - The overall “system overview” is not established beyond the movement-block subsystem. The source does not show how factories are registered, how blocks are ordered or invoked, or how documents are ultimately generated.
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): - MovementOperationBlockFactory retrieves a notification by movement ID, then technology by notification ID, using the method name GetByNotificaitonId. The apparent spelling of Notificaiton may be intentional API naming or a typo; the surrounding interface is not supplied, so this remains unresolved.
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): | Importer/exporter blocks | Delegated to unseen base classes | Unresolved from this chunk |
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): The last row is intentionally unresolved because the base implementations are absent.
Unknown — Harten review [WU-234-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/b1a99020c93e5e638c1f79ce9f1d99f5/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): ### 5. Reflection-based binding is confirmed, but its semantics remain unresolved
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): The fleet document’s general factory-pattern description is supported. However, the stronger claim that every factory is dynamically selected by notification ID is not established by this range; the selection mechanism may be elsewhere.
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): Within several factories, repository calls are awaited sequentially. WasteRecoveryBlockFactory.Create, for example, retrieves notification, recovery, and disposal data in sequence. This is directly observable, but performance, consistency, and transactional implications cannot be determined without repository implementations and latency/transaction contracts.
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): Repository failure and null contracts remain unresolved because repository implementations are not included. Separately, a concrete null risk appears in CustomsOfficeBlock.cs:
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): Unresolved items include the definitions and behavior of IDocumentBlock, PropertyHelper, MergeFieldDataMapper, merge-field locators, repository implementations and contracts, template validation, document saving, and any behavior contained outside source bytes [0, 44040).
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): The range does not show all block implementations, so it cannot establish the complete ordering or whether ordinal collisions exist elsewhere.
Unknown — Harten review [WU-235-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8ee2a981f4de58d3b8d1b90f833e8715/second-opinion/opinion.md): - Unresolved: definitions of IDocumentBlock, merge-field locator behavior, view models, repository null/error contracts, template structure, document saving, and concurrency remain outside the supplied evidence.
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): ### 2. Duplicate ordinal positions leave annex ordering partly unresolved
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): No case-insensitive comparison is visible. Consequently, FirstRunByContent and SingleRunByContent appear case-sensitive despite the identifier. This may be a stale name or an implementation defect; the intended contract is unresolved.
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): This differs from the apparent lifecycle of most other blocks, which defer document mutation until Merge() or annex generation. The behavior may be intentional, but it raises unresolved questions about ordering, repeated merges, and constructor-time side effects.
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): - “Generates official notification documents” is an inference, not established by this chunk. The code clearly generates/merges notification documents, but “official” is not evidenced.
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): The source does not define tie-breaking explicitly. LINQ-to-Objects OrderBy is normally stable, but the incoming sequence order is determined by the unavailable factory collection/registration order. Thus the final annex order for equal ordinals is unresolved from this chunk.
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): The surrounding logic may guarantee nonempty lists, but that guarantee is not visible in the supplied view models/domain code. The relevant preconditions therefore remain unresolved rather than confirmed safe.
Unknown — Harten review [WU-236-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/9c72c269bc2b580ba897e210d31e04fa/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): - WasteRecoveryViewModel.cs — constructor guards notification, but may pass null wasteRecovery or wasteDisposal into CostAmountWithUnits. The formatter implementation is not available, so the resulting behavior remains unresolved.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): These are source-level observations reported by c0. Whether callers enforce non-null invariants elsewhere is not established.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): The source range does not establish whether the domain guarantees mutual exclusivity. Consequently, overwrite behavior is observable in the implementation, but its practical relevance remains unresolved.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): This creates possible aliasing or reuse risks if the same view model instance is referenced elsewhere. For producer counts greater than one, most visible producer fields are cleared and AnnexMessage is set, while properties such as ProcessOfGeneration and IsProcessAnnexAttached remain. Whether that matches the document template’s intended behavior cannot be determined without the consumers or templates.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): Unresolved questions include caller-enforced nullability, formatter behavior, domain constraints on carrier ordering, mutual exclusivity of waste descriptions, required method call order for waste-code annex data, and the actual document-generation and dependency-injection paths.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): It guards notification, but may still pass null wasteRecovery or wasteDisposal into CostAmountWithUnits. Whether that is safe cannot be established from this range because the formatter implementation is absent.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): An additional observable state issue is that AnnexTableWasteCodes is initialized only in SetAnnexMessagesAndData; it is not initialized in InitializeAllCodesToEmptyString. Consumers reading the property before that method is called may receive null. Whether all consumers call the method first is unresolved.
Unknown — Harten review [WU-237-ea-iws-documentgeneration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/30ae37f820845553a3c319cad186e4fd/second-opinion/opinion.md): The method independently processes chemical, “other”, and wood descriptions. If more than one backing description is populated, later branches can overwrite ShortDescription or LongDescription assigned by earlier branches. The source does not show whether the domain guarantees that only one description type is populated. That invariant is an unresolved question.
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): This supports a conclusion that selected notification components are copied. It does not establish complete semantic or relational equivalence between source and destination notifications. Untested fields, relationships, side effects, and persistence behavior remain unresolved.
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): Completeness is unresolved. The supplied range does not expose the entire schema or demonstrate that the helper handles every entity used elsewhere—for example, notification consents, shipment-history rows, or user/local-area records. Some tests reportedly clean up such records separately, but that does not prove the helper is complete or safe for every notification shape, including multiple routes or assessments.
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): 4. Test isolation and resource handling are unresolved. Context disposal and cleanup are inconsistent or not visible in several integration classes.
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): Some tests explicitly delete created records, while pricing/search and other read-only tests rely on the database state. This is not necessarily incorrect, but it leaves unresolved questions about connection/resource cleanup and test isolation.
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): DatabaseDataDeleter.cs deletes many notification-related rows, but the supplied source does not show all schema relationships. It does not visibly delete every entity used elsewhere in the tests, such as notification consents, shipment-history rows, or user/local-area records. Those tests often clean up such records separately, but completeness of the helper cannot be established from this chunk.
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-238-ea-iws-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5ebd7f5c774958a4852be2c771a3407e/second-opinion/opinion.md): - Autofac usage is suggested by configuration but not established by this project’s references.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): The supplied material does not provide per-file byte offsets. References therefore identify filenames and symbols, rather than narrower byte ranges. Source and child artifacts are treated as untrusted evidence. The conclusions below distinguish observed behavior from inferred impact; cross-component behavior not present in the supplied range remains unresolved.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved: The supplied range does not establish whether global authorization elsewhere distinguishes this action.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved: Whether another authorization layer protects the route.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved: The supplied range does not include ApplicationUserStore.UpdateAsync, persistence mappings, or other code that might reset confirmation implicitly.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved: The actual identity ordering and composition in deployment.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): ### Claims transformation does not visibly handle an unknown subject
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Its intended interaction with the surrounding authentication pipeline is not established by the supplied evidence.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved: Exact runtime behavior depends on the Identity implementation and pipeline.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved: Global exception handling and response mapping.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Application relevance: Conditional and unresolved.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): ## Coverage and unresolved questions
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved question: Whether authorization is applied elsewhere globally is not shown, but such a global rule would need to distinguish this route from the controller’s ordinary authenticated routes.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Unresolved question: The behavior of ApplicationUserStore.UpdateAsync and database mappings is outside the supplied range.
Unknown — Harten review [WU-239-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/3d93b3c71e995363969748b3365964cc/second-opinion/opinion.md): Confidence: High for the exceptions; exact HTTP responses are unresolved.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): - the actual endpoint and authorization surface is not established;
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): - the required-scope semantics are unresolved;
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): Calling this a null-object implementation is a reasonable inference from the file. It is not evidence that event processing is globally disabled or optional. The interface registrations and call sites are missing, so whether this implementation is used in production remains unresolved.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): 2. SMTP is configured for specified pickup-directory delivery; network fallback is not established.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): 6. The meaning of RequiredScopes = new[] { "api1", "api3" } is unresolved.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): 7. NullEventDispatcher is demonstrably a no-op, but its deployment-wide use and operational significance are not established.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): Qualification: The supplied range does not include controller code, route attributes, authorization attributes, or the Autofac bootstrapper implementation. Therefore, the actual exposed endpoints and dependency registrations cannot be determined from this range alone.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): Unresolved point: The snippet does not establish whether RequiredScopes means “token must contain both scopes” or whether the library treats the collection as alternatives. The fleet document should not imply more precise authorization semantics without the package behavior or tests.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): The fleet document calls the network settings a “fallback.” That is not established by this configuration. With SpecifiedPickupDirectory, the pickup directory is the configured delivery method; the presence of a network host and port does not by itself prove fallback behavior.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): 6. Authorization semantics: The meaning of the two required scopes is unresolved from the supplied source.
Unknown — Harten review [WU-240-ea-iws-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/ffa873780eaf52489bab5af3fe708f69/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): It does not prove the Fleet Document’s stronger claim that the mechanism uses expression trees internally. The helper implementation is absent. It remains unresolved whether it uses reflection, expression compilation, field access, or another mechanism, and whether it bypasses private setters, ORM restrictions, or domain validation.
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): The NRWToFrance name suggests a North Wales/NRW origin, while the export authority is also England. This may be intentional, but no explanation is present. The evidence therefore supports identifying a fixture inconsistency or at least an unresolved naming/data mismatch—not concluding that the fixture is definitely defective.
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): - Unresolved: whether it bypasses private setters, fields, ORM restrictions, or validation.
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): The NRWToFrance name suggests a Wales/NRW origin, but the assigned export authority is also England. This could be intentional, but the source provides no explanation. It is an unresolved contradiction between fixture naming and fixture data.
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): - “Through expression trees” is not established because ObjectInstantiator is absent.
Unknown — Harten review [WU-241-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/82069abbb2765c27a8bd8b19428642fe/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): The implementation of ObjectInstantiator was not included, so its treatment of private, inherited, inaccessible, or otherwise unusual properties is unresolved.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): Null handling, duplicate handling, replacement semantics, and validation therefore cannot be established from the supplied evidence.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): CountryFactory.Create, EntryOrExitPointFactory.Create, CompetentAuthorityFactory.Create, and FinancialGuaranteeFactory.Create reportedly use ObjectInstantiator to assign identifiers or state. Whether those generated values satisfy domain invariants cannot be determined without the relevant domain code.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): The expected domain model may make this safe, but failures would occur at runtime. Behavior for a null array or null element is not established.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): The implementation of ObjectInstantiator is outside the supplied evidence, so its handling of inaccessible, inherited, or private properties remains unresolved.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): SetEntityIds accepts params Entity[]; a null array or null element is not handled explicitly. The behavior for those cases is unresolved from this code alone.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): type.GetMethods() includes public inherited methods. Therefore ShouldNotHaveAnonymousMethods checks more than methods declared directly on type. It throws through FluentAssertions when a matching method is found, as the fleet document infers. Whether that breadth is intended is not established.
Unknown — Harten review [WU-242-ea-iws-testhelpers] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/7cd01343418f5000827fc95d72bfbc40/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-244-ea-iws-documentgeneration-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cca17a3fe0b25c00a3dd0f715d8b1450/second-opinion/opinion.md): The claim that TransitStateViewModel automatically adds an annex message when state names exceed 12 characters or when there are more than three states is not established by the cited tests. In TransitStateViewModelTests.cs, the scenarios call vm.SetAnnexMessage(6) before asserting "See Annex 6". The tests therefore establish rendering after the setter is invoked, not automatic detection of either threshold.
Unknown — Harten review [WU-244-ea-iws-documentgeneration-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cca17a3fe0b25c00a3dd0f715d8b1450/second-opinion/opinion.md): ### Further limitations and unresolved questions
Unknown — Harten review [WU-244-ea-iws-documentgeneration-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cca17a3fe0b25c00a3dd0f715d8b1450/second-opinion/opinion.md): - The available evidence is incomplete across chunks and does not support a lossless semantic reconstruction of the project. Any conclusions about unlisted files, production implementations, or behavior outside the cited cases remain unresolved.
Unknown — Harten review [WU-244-ea-iws-documentgeneration-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cca17a3fe0b25c00a3dd0f715d8b1450/second-opinion/opinion.md): ### Additional limitations and unresolved questions
Unknown — Harten review [WU-244-ea-iws-documentgeneration-tests-unit] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cca17a3fe0b25c00a3dd0f715d8b1450/second-opinion/opinion.md): - This is test evidence, not production implementation. It establishes intended behavior for the supplied cases but cannot establish complete control flow, invariants, or behavior for untested inputs.
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): The ultimate meaning of a null action, null resource collection, and the authorization decision cannot be determined from this evidence because ResourceAuthorizationContext, IResourceAuthorizationManager, and its implementation are not available. The observed “no attribute means allow” behavior is supported; broader authorization conclusions are not.
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): The supplied range does not show a production deferred dispatcher, event handlers, or an automatic bridge from Entity.Events to DomainEvents.Raise. Any description of a complete domain-event pipeline therefore remains unresolved.
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): ### 4. Transaction flow across asynchronous continuations is not established
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): - src/EA.Prsd.Core/Identity/GuidCombGenerator.cs combines random GUID data with local date/time components using SQL Server-oriented byte ordering; portability and database-ordering assumptions are not established.
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): ### Important but unresolved or environment-dependent issues
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): 4. Transaction behavior across await is unresolved and potentially unsafe.
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): 6. The fleet document correctly identifies missing implementations, including IResourceAuthorizationManager, concrete deferred dispatching, mediator details, mapping logic, and ORM/database configuration. Those remain unresolved rather than disproven.
Unknown — Harten review [WU-245-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/60e577a9a221530bb2b7409bc1e5589c/second-opinion/opinion.md): ## Highest-priority unresolved risks
Unknown — Harten review [WU-246-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2a3dba92233a52a2b4de366b9db9fda6/second-opinion/opinion.md): No child artifacts or per-file byte offsets were supplied. File references therefore use the filenames and approximate source-line locations reported by c0. The conclusions below distinguish visible implementation evidence from inference; behavior depending on absent classes, runtime configuration, or tests remains unresolved.
Unknown — Harten review [WU-246-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2a3dba92233a52a2b4de366b9db9fda6/second-opinion/opinion.md): Unresolved question: Whether this is the intended authorization contract or an accidental reversal cannot be determined from the supplied range.
Unknown — Harten review [WU-246-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2a3dba92233a52a2b4de366b9db9fda6/second-opinion/opinion.md): Unresolved question: Whether consumers depend on this permissive behavior cannot be established from the supplied source range.
Unknown — Harten review [WU-246-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2a3dba92233a52a2b4de366b9db9fda6/second-opinion/opinion.md): By contrast, concrete mapper or mediator dispatch implementations are absent. The mechanism, if any, that raises MissingHandlerException is therefore not established by this evidence.
Unknown — Harten review [WU-246-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2a3dba92233a52a2b4de366b9db9fda6/second-opinion/opinion.md): The fleet document correctly identifies the validation condition at a high level, but it understates these unresolved runtime behaviors.
Unknown — Harten review [WU-246-ea-prsd-core] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/2a3dba92233a52a2b4de366b9db9fda6/second-opinion/opinion.md): Concrete mapper/mediator implementations and the mechanism that would throw MissingHandlerException are absent. Those behaviors remain unresolved rather than confirmed.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): The Newtonsoft.Json reference demonstrates a dependency, but actual serializer usage is not established because JsonSerializer.cs is not supplied.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): Unresolved: the SetBearerToken implementation and composition/lifetime of these action classes.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): The same handler may also convert cancellation into an error result, depending on the exact exception flow and omitted context. The intended cancellation and failure contract is unresolved.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): Unresolved: whether consumers are required to inspect Error, and whether cancellation is intentionally normalized.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): Unresolved: whether another composition root or module completes registration.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): Unresolved question: implementation of Prsd.Core.Web.Extensions.SetBearerToken.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): ### 4. Response/request disposal is not established
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): Unresolved question: intended cancellation and error contract for ICompaniesHouseClient.
Unknown — Harten review [WU-247-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/5045642087b951939a88cbf1ff812566/second-opinion/opinion.md): Unresolved question: whether additional composition-root registrations exist elsewhere.
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): The implementation also appears not to explicitly validate a null token response or a missing/empty access_token; the consequence of such responses is therefore an unresolved robustness issue rather than a confirmed defect.
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): A conditional concern is that DefraCompaniesHouseApiModel reportedly uses System.Text.Json.Serialization.JsonIgnoreAttribute, while IwsClient uses Newtonsoft.Json. If that model is serialized through Newtonsoft.Json, the ignore attribute may not be honored. Actual serialization paths are not shown, so this remains unresolved.
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): Because CreateResponseAsync<TResult> is unavailable, the client’s error and deserialization semantics remain unknown.
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): ## Risks and unresolved questions
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): The broader fleet description is directionally consistent with these findings, but it overstates several conclusions where only interfaces, model names, or partial control flow are available. In particular, actual factory behavior, dependency wiring, Companies House communication, response error semantics, and concurrency/resource-management behavior remain unresolved within byte range [0, 23993).
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): The policy and wrapper are present, and OAuth uses the wrapper. But no composition-root or registration code is included, so it is unresolved whether PollyPolicies.GetRetryPolicy(...) is actually wired into RetryPolicyWrapper in production.
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): 4. The response error behavior of IwsClient is unknown.
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): ## Additional risks or unresolved questions
Unknown — Harten review [WU-248-ea-iws-api-client] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a92deb09a0695b2482c04e0143bf948f/second-opinion/opinion.md): The main unresolved areas are factory implementations, dependency wiring, external response processing, request interfaces, service implementations, and whether the model classes are actually used for Companies House communication.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): The unfreeze test only asserts that a later SystemTime.Now differs from the frozen UTC value. This does not fully prove restoration, particularly given local-versus-UTC semantics and timing effects. The implementation and parallel-test configuration are absent, so possible interference from global mutable time state remains unresolved.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): Behavior for null dates, reversed ranges, culture changes, time components, encoding, and unusual model expressions is not established.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): This supports the tested claim-generation scenario only. It does not establish general OAuth/OIDC behavior, malformed or incomplete token handling, or the semantic meaning of the "TEST" argument. The compact token JSON used in the test—{access_token:123,refresh_token:456,expires_in:3600}—also leaves parser compatibility outside this case unresolved.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): 6. Preserve unresolved questions concerning global state, test isolation, culture, edge cases, parser robustness, and all behavior absent from the tests.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): Potential test-isolation concern: SystemTime appears to be global mutable state from the test API. Most freeze tests explicitly unfreeze, but the supplied range does not show implementation safeguards or parallel-test configuration. Cross-test interference remains unresolved.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): This supports the tested claim-generation behavior. It does not prove general OAuth/OIDC handling, malformed-token behavior, missing-token behavior, or the meaning of the "TEST" argument. The token JSON string is also a compact/nonstandard-looking object literal ({access_token:123,refresh_token:456,expires_in:3600}), so parser compatibility outside this test case is unresolved.
Unknown — Harten review [WU-249-ea-prsd-core-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/72926d14b23759b2860337cc1de75361/second-opinion/opinion.md): 5. Preserve unresolved questions about global time/ambient state, culture, edge cases, and behavior not represented by the tests.
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): Whether MVC 5 safely accepts a null ITempDataProvider.LoadTempData result is not established by the supplied evidence.
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): Conclusion: The runtime behavior under dependency failure remains unresolved and could affect availability or authentication handling.
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): The source does not establish that display names are always trusted. This remains an unresolved trust-boundary question.
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): The supplied source does not show IOAuthClient, IUserInfoClient, their exception contracts, or dependency registration. The fleet document correctly marks those implementations as missing evidence. Consequently, the operational behavior on timeout, null service resolution, or thrown client exceptions remains unresolved.
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): - It correctly identifies missing implementations for IOAuthClient, IUserInfoClient, API DTOs, claims constants, and GenerateUserIdentity; those remain unresolved from this chunk.
Unknown — Harten review [WU-250-ea-prsd-core-web-mvc] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0388fbcc086557a1b2f1e485bf326fd9/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-251-src] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42e932caf4cf51da954c7d87439dd8fc/second-opinion/opinion.md): The nuspec contains literal values such as tag IWS, copyright 2015, and no license-acceptance requirement, but it also contains unresolved placeholders:
Unknown — Harten review [WU-251-src] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42e932caf4cf51da954c7d87439dd8fc/second-opinion/opinion.md): However, “primary web application” is not established by the solution file. EA.Iws.Web is present, but no evidence ranks it as primary over EA.Iws.Maintenance.Web.
Unknown — Harten review [WU-251-src] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/42e932caf4cf51da954c7d87439dd8fc/second-opinion/opinion.md): However, the metadata also contains unresolved placeholders:
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): ### 2. Bearer-token validation is configured, but token format is not established
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): ### 3. Dependency injection registrations are visible, but implementations and lifetimes remain partly unresolved
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): This is an apparent lack of an authentication requirement for Elmah access and is security-relevant. However, it remains unresolved whether these MVC-oriented settings fully control the configured Web API/handler path. Verification against the actual deployed pipeline is required.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): These are unresolved implementation questions, not established vulnerabilities.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): Entity Framework may be supplied by EA.Iws.DataAccess or another dependency. A direct project-level EF 6.0.0.0 reference is therefore unresolved, and should not be stated as conclusively proven from this project alone.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): Their full deployment effect cannot be determined without the base configuration, transformation process, and generated deployed configuration.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): The evidence supports an authenticated POST scanning operation protected by IdentityServer3 bearer middleware and the api2 scope, alongside an anonymous GET health-style action sharing the same route. It also reveals several configuration and operational concerns requiring deployment-level verification: possible Elmah exposure, detailed exception responses, very permissive upload limits, unresolved temporary-file handling, singleton scanner lifetime interactions, and uncertain authority configuration.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): The strongest qualifications are that inbound TLS policy, JWT token format, direct Entity Framework referencing, complete exception coverage, and the actual safety of file-scanning/resource behavior are not established by the supplied chunk.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): - The fleet document correctly identifies XML-file logging, but it does not call out the apparent lack of authentication requirement for the Elmah handler. Whether these MVC-oriented settings fully govern this Web API/handler configuration is unresolved, but this is a security-relevant condition requiring verification.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): - It may be supplied by the referenced EA.Iws.DataAccess project or another build dependency. Direct project-level reference is therefore unresolved.
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): ### Additional risks and unresolved questions
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): 4. Temporary upload path is unresolved
Unknown — Harten review [WU-252-ea-iws-virus-api] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/a0d371a072f55e30bea982cd5e4620bf/second-opinion/opinion.md): Their deployment effect beyond those visible transformations remains unresolved because the base/deployment pipeline and generated transformed configuration are not supplied.
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): The supplied evidence does not provide intra-file byte offsets. References therefore identify filenames and the enclosing byte range [0, 37681). Runtime behavior, deployed configuration, tests, and production composition are not established by this evidence.
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): The implementation summary is broadly consistent with the source evidence, but some “confirmed” descriptions appear to state intended or nominal behavior without fully accounting for failure modes and unverified runtime assumptions. The strongest conclusions concern control flow visible in the code; configuration values, deployment behavior, and operational safety remain unresolved.
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): Regex.IsMatch(emailAddress) does not require a full-string match. Whether deployed patterns are anchored is unknown.
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): The collection key is integer-derived while Remove accepts a string and passes it to BaseRemove. Its practical effect and usage are unresolved because no call site is provided.
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): It contains runtime binding redirects, but no visible <appSettings>, SMTP settings, or rules section. Therefore the actual values for sender address, truncation, sending enablement, SMTP host, and rules remain unresolved from this range.
Unknown — Harten review [WU-253-ea-prsd-email] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/849dda1df742522ba82b89da236ec8f0/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): 4. User-context management by DatabaseWrapper is not established.
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): Several methods in AuditorExtensionTests.cs reportedly use public async void rather than async Task. This can weaken exception propagation and completion tracking compared with async Task, although the practical effect depends on the test runner and is not established by the source alone.
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): Some assertions inspect positions such as auditTypes[0] and auditTypes[1] from database.TestContext.AuditLogs without an evident ordering clause. The source does explicitly use .OrderBy(a => a.EventDate) in child-update tests, suggesting ordering is recognized in at least some contexts. Whether the unordered assertions are stable or merely pass incidentally is unresolved.
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): - Whether the skipped child tests represent intentionally unsupported functionality or an unresolved defect/regression.
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): Several tests are declared public async void rather than returning Task. This is accepted for some test frameworks but makes exception and completion handling weaker than async Task; no runtime result is supplied here, so the practical impact is unresolved.
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): - Whether AuditChanges uses the explicit userId to populate audit records cannot be determined because its implementation is absent.
Unknown — Harten review [WU-254-ea-prsd-core-dataaccess-tests-integration] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/05ae312c5544581eaa5579d1120edaca/second-opinion/opinion.md): - Whether the skipped child tests are expected to remain unsupported or represent regressions is unresolved.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): Assessment: The second form reports failure only when both the URI and status code are wrong. If the intended requirement is that both must be correct, one incorrect value can be treated as success. The intended acceptance rule remains unresolved.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): Assessment: These may select the first matching node anywhere in the document rather than a descendant of $smtpSettings. The intended relative paths are inferred, not established.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): Assessment: Assigning the element’s .Value may not modify the configuration attribute normally used for the header value. The expected XML shape and runtime behavior are not supplied, so this remains an unresolved compatibility issue.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): Assessment: The second condition records failure only when both the redirect URI and status code are wrong. If exactly one is wrong, it reports success. If the intended requirement is that both conditions must hold, the failure test should normally use -or. The source does not document the intended acceptance criteria, so the defect is strongly indicated but the desired correction remains unresolved.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): Assessment: The script assigns the XML node’s Value, not an attribute such as @value. For an element node, .Value behavior may not correspond to changing the header’s configured value, depending on the PowerShell/.NET XML object behavior. The source does not show the expected XML shape, so this remains an unresolved compatibility question.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): Assessment: Whether PowerShell 5.1 accepts these characters as string delimiters is runtime/parser-dependent and should be verified; ordinary ASCII quotes are the safer interpretation. This is an unresolved execution question, not a confirmed syntax failure from the supplied text alone.
Unknown — Harten review [WU-256-tools] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/d1d49a1677995c8b87cc3489546f64b7/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): ## Resource-template handling: unresolved operational gap
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): The evidence therefore supports storage of dynamic templates and resource-based loading, but not that dynamic templates are actually consulted during resolution or that ordinary templates are cached. Whether RazorEngine invokes AddDynamic in an operationally meaningful way cannot be determined from this source.
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): A further unresolved issue is whether WebUrl is guaranteed not to end in /. If it can contain a trailing slash, concatenation with "/Account/Login" could produce a double slash.
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): The latter may be a typographical error, but the supplied evidence does not establish which value is authoritative. This should remain an unresolved content discrepancy rather than being silently corrected.
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): Thus, the source demonstrates storage of dynamic templates and resource-based resolution, but does not demonstrate that dynamic templates are used during resolution or that normal templates are cached. Whether RazorEngine calls AddDynamic in a way that makes this storage operational is unresolved from the supplied source.
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): ### 5. Transport failure behavior remains unresolved
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): The latter appears potentially erroneous, but the source alone cannot establish which number is authoritative. This should remain an unresolved content discrepancy rather than being silently normalized.
Unknown — Harten review [WU-258-ea-iws-emailmessaging] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/79e8141552a35d7da81c145d51f9da2d/second-opinion/opinion.md): ## Unresolved questions
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): Unresolved: client lifetime and concurrency model.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): Unresolved dependency: the definition and semantics of Domain.Enumeration, including constructor accessibility, FromValue<T> signature, constraints, and failure behavior.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): 6. Token claims create a potential exposure point, but impact cannot be determined here.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): Unresolved: downstream serialization, persistence, logging, and access control.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): Unresolved: authorization-server support and intended deployment model.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): - The omission of Enumeration and FromValue is a material dependency gap, not merely a documentation gap. Converter correctness cannot be established without that implementation.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): ## Remaining unresolved questions
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): The access token and, when present, refresh token are stored as claims. The source does not show downstream persistence, logging, cookie protection, or access controls, so the exposure risk cannot be determined from this range.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): Unresolved: how the identity is serialized or stored elsewhere.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): Unresolved: server configuration and deployment context.
Unknown — Harten review [WU-262-ea-prsd-core-web] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/cb6ead614178512882e2e6b06b5116ca/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): #### 2. Failure reporting is not established
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): This is a likely quoting defect. Whether AliaSQL.exe accepts or repairs that argument is unresolved; the source alone does not prove runtime failure.
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): The SQL scripts reportedly use unconditional CREATE SCHEMA, CREATE TABLE, and ALTER TABLE statements. Direct repeated execution against an already initialized database would ordinarily cause object- or constraint-exists errors. It remains unresolved whether AliaSQL’s migration mechanism prevents or manages such reruns.
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): 1. “Integration test runner” is not established by the visible code.
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): Whether AliaSQL tolerates this is unresolved, but the source does not produce a normally closed quoted path.
Unknown — Harten review [WU-265-ea-prsd-core-dataaccess-tests-integration-database] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/8f6c0409f4515e7e891b890e52a8ba50/second-opinion/opinion.md): ### Unresolved questions
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): The visible tests use xUnit assertions, so a failed equality assertion should cause the test to fail in the normal xUnit execution model. However, the exact exception type or runner presentation is not established by the supplied source. Claims specifically attributing failure behavior to FluentAssertions are unsupported.
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): - Nested and Bottom are ordinary auto-properties and therefore can represent null values. Whether null intermediate values affect behavior cannot be determined because Gds<TModel>.GetPropertyName is absent. The method may analyze the expression tree without evaluating the object graph, but that is an inference, not demonstrated behavior.
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): - The tester accepts a non-generic HtmlHelper, while the test fixture stores an HtmlHelper<TestModel>. This appears compatible with MVC’s generic-helper inheritance, but the implementation’s actual use of the helper remains unknown.
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): ### Retained gaps and unresolved questions
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): The following remain unresolved from the supplied evidence:
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): - It is unknown whether GetPropertyName supports only member-access expressions or additional expression forms.
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): - It is unknown whether the supplied HtmlHelper is materially used by the implementation.
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): ### Retained gaps and unresolved questions
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): - It is unresolved whether GetPropertyName supports only member-access expressions or additional expression forms.
Unknown — Harten review [WU-267-ea-prsd-core-web-mvc-tests] (tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/93f215a0200e5db9a5cc1fe4a86fffbf/second-opinion/opinion.md): - It is unresolved whether the MVC HtmlHelper is materially used by the implementation.

Second opinions that could not complete

The original artifacts are verified, but the following work units are not independently verified by a completed second opinion:

[WU-014-ea-iws-web] run 89df8bb8649358eb91aa7ea58e0b831f: second opinion did not complete (ValueError). Original artifact: tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/89df8bb8649358eb91aa7ea58e0b831f/artifact.md.
[WU-098-ea-iws-database] run 0ed417d85c155315a1ac2b7d9d252a72: second opinion did not complete (ValueError). Original artifact: tenant/t-43c232f5b56142918d3d89cfe33eb31f/campaigns/6f17944597e24df6b6e2b9daae7a3a5f/runs/0ed417d85c155315a1ac2b7d9d252a72/artifact.md.

Unverified citations in model-generated claims and gaps

The following model citations were absent from verified partition or rollup inputs and were excluded from evidence-backed findings:

Partition P-001-ea-iws-web, gap gap-004: LEV-686?; removed_invalid_citations. The original model-call receipt is retained.
Partition P-001-ea-iws-web, claim claim-002: LEV-54?; removed_invalid_citations. The original model-call receipt is retained.
Partition P-004-ea-iws-domain, claim claim-010: LEV-1f6029052855345b605c1b4677901ded4929f476d07c8894b731b8f8d95d; unverified_claim_omitted. The original model-call receipt is retained.
Partition P-004-ea-iws-domain, claim claim-011: LEV-1f6029052855345b605c1b4677901ded4929f476d07c8894b731b8f8d95d; unverified_claim_omitted. The original model-call receipt is retained.
Partition P-006-ea-iws-web-tests-unit, gap GAP-001: LEV-360c411739ec5439718c35bb93066f673cc0e3d9e340607573a535b36e208; removed_invalid_citations. The original model-call receipt is retained.
Partition P-008-ea-iws-requests, gap G3: LEV-1dfcc52ce0e9f637cb59d2abadf304ec1cdb4bf9de9e6398133134a6ddcbe795; removed_invalid_citations. The original model-call receipt is retained.
Partition P-008-ea-iws-requests, claim C3: LEV-1?; removed_invalid_citations. The original model-call receipt is retained.
Partition P-008-ea-iws-requests, claim C4: LEV-1dfcc52ce0e9f637cb59d2abadf304ec1cdb4bf9de9e6398133134a6ddcbe795; removed_invalid_citations. The original model-call receipt is retained.
Partition P-010-ea-iws-core, gap GAP-003: LEV-231; removed_invalid_citations. The original model-call receipt is retained.
Partition P-010-ea-iws-core, gap GAP-007: LEV-e7600f9985e14a040daf16c764362d581036eaf5eec4f2db5d435bfd11aba9e2; removed_invalid_citations. The original model-call receipt is retained.
Partition P-017-ea-iws-api-client, claim CL-007: LEV-2eee4b077fbfb3d1520d97d59a2ec8d27cbc4de35c951cc265c1d4c7908cf3c; removed_invalid_citations. The original model-call receipt is retained.

Contains public sector information licensed under the Open Government Licence v3.0. Original public repository. This independent Harten analysis was not commissioned, approved or endorsed by DEFRA or the Environment Agency.

Analysed source-archive hash is recorded; its exact upstream Git commit has not been established. The generated material does not establish complete requirements, operational security or functional equivalence.