Gap tracker

Living backlog. Update status when backend/product answers. Do not remove rows — mark Done with date.

Area	Item	Status	Evidence	Needed from backend	Priority
REST	QA/Prod base URLs	Open	Postman has Dev only	Hostnames	P0
REST	WSS public hostnames	Open	WS docs use <host>	Hostnames per env	P0
REST	Response DTO schemas in OpenAPI	Open	Controllers / VO classes	Confirm field lists or allow doc authors to derive from VO	P1
REST	Per-endpoint error mapping	Open	ApiErrorCode global only	Matrix or “all codes possible” policy	P1
REST	Rate-limit weight tables	Open	RateLimitInterceptor + Apollo	Export config	P1
REST	Market path dual alias long-term	Open	MktDataApiController dual mapping	Prefer /openapi/quote/v1?	P1
REST	Fiat QR + sub-account apikey IP (code only)	Deferred	See rest/_todo.md	Add to Postman or confirm excluded	P2
REST	Migration GET with @RequestBody	Open	FiatMigrationApiController	Confirm client contract	P2
Auth	Role matrix per endpoint	Open	@SignAuth flags	Publish table	P2
WS	Future market public support	Open	/future paths in handler	Polaris spot-only?	P0
WS	Private event field enums completeness	Open	WS_API_SPOT.md	Confirm vs production payloads	P1
FIX	Full source in local checkout	Open	ptrader-fix-server README only	Provide src/ or confirm Postman guide is production contract	P0
FIX	Prod host/port/CompID	Open	README default 5005	Onboarding sheet	P0
Infra	Public exposure proof (ingress)	Open	No sibling ingress repo	Confirm gateway/WSS/FIX edges	P1

Resolved during authoring

Item	Resolution	Evidence
Public doc scope	= new Postman full collection	Product confirmation
merchant-api / create-api-key-tool	Excluded	Product confirmation
listenKey signature	Not required (validKeyOnly)	UserDataApiController + AuthFilter
Old Postman *-api-gateway.json	Ignored	Product confirmation
EN / 中文 site	Enabled via mkdocs-static-i18n	docs/en, docs/zh