Adam Moussa cfdd79d6b5 Scrub residual transport tokens from PO fixtures ... The first-pass harvest scrub sanitized only the primary SES/DKIM header blocks, leaving the real SES Feedback-ID sender-identity hash in 49 committed fixtures and, on the two non-Coupa fixtures, an embedded second SES block's X-Ses-Receipt, the Exchange cross-tenant UPN ciphertext, and Gmail ARC fh= / X-Gm-* tokens -- exactly the token classes the PR #99 fixture lesson requires placeholdered. Replace each with a same-shape ScrubbedFixture value (byte-safe, CRLF and folding preserved) so header structure and ses_auth behavior are unchanged.		2026-07-16 16:03:16 -04:00
..
tests	Scrub residual transport tokens from PO fixtures	2026-07-16 16:03:16 -04:00
handler.py	Wire template-first parse into PO handler with EMF metric	2026-07-16 15:14:58 -04:00
requirements.txt	Migrate PO processor to Bedrock	2026-07-15 20:10:14 -04:00
ses_auth.py	Add fail-closed SES sender authentication (INFRA-107) (#98)	2026-07-15 20:58:47 -04:00
template_parser.py	Pin line-item currency to USD in the PO gate	2026-07-16 16:02:46 -04:00