Aurea Gold

Aurea Gold is a production-grade digital wallet and PIX platform built for real financial operations.

Designed with reliability, payment integrity, and operational discipline at its core, Aurea Gold is not a demo system — it is a fintech foundation ready for real-world usage.

What Aurea Gold Is

Aurea Gold is a complete digital wallet platform that enables:

• PIX-based payments
• secure authentication flows
• controlled financial operations
• premium interfaces for both clients and administrators

The system is built with a production-first mindset, ensuring that every validated behavior is deterministic and reliable.

Why It Matters

Financial systems cannot afford ambiguity.

Aurea Gold focuses on:

• preventing duplicated transactions
• ensuring safe request replay
• delivering clear operational feedback
• maintaining strict backend validation rules

This approach reduces risk and increases trust for both users and integrators.

Validated Capabilities

The platform already includes:

• JWT authentication
• health and readiness endpoints
• PIX send flow (/api/v1/pix/send)
• idempotency protection
• replay-safe requests (same key → same response)
• conflict detection (same key + different payload → 409 Conflict)
• CI workflows for lint, tests, smoke, and health validation

PIX Flow Reliability

The PIX operation supports:

• first execution → 200 OK
• replay with same payload → 200 OK + x-idempotency-replayed: true
• conflict with same key and different payload → 409 Conflict

No duplicated records are created.

This ensures safer financial operations even under retry scenarios and strengthens integration reliability for client applications.

Platform Structure

• backend/ — FastAPI core, wallet logic, PIX, auth
• frontend/ — base application layer
• aurea-gold-client/ — premium client panel
• aurea-gold-admin/ — premium admin panel
• docs/ — technical and product documentation
• .github/ — CI workflows and repository automation
• scripts/ — development and operational utilities
• tests/ — validation and safety checks

Documentation

Detailed project documentation is available in:

• docs/architecture.md
• docs/deploy.md
• docs/pix-operation.md
• docs/panels.md
• docs/product-maturity.md
• docs/WALLET_ASAAS_SANDBOX_MANUAL_EXECUTION_GATE_V1.md
• docs/WALLET_ASAAS_SANDBOX_FIRST_HTTP_CALL_RUNBOOK_V1.md

Tech Stack

• Backend: FastAPI / Python
• Database: PostgreSQL
• Auth: JWT
• Frontend: React / TypeScript
• Infra / Deploy: Railway
• CI/CD: GitHub Actions

Running Locally

Example backend flow:

cd ~/dils-wallet/backend
source .venv/bin/activate
export DATABASE_URL='postgresql://aurea:aurea123@127.0.0.1:55440/aurea'
uvicorn app.main:app --host 0.0.0.0 --port 8090 --reload --log-level debug

Health check:

curl -i http://127.0.0.1:8090/healthz

Engineering Principles

This repository follows a practical engineering playbook:

• deterministic debugging first
• no blind fixes
• validate health before changing code
• prefer small patches over large rewrites
• validate backend behavior before touching interface
• protect stable flows as product assets

Current Focus

The current product phase is focused on:

• strengthening public repository presentation
• improving technical documentation
• exposing validated platform capabilities more clearly
• consolidating governance and product visibility
• maintaining a manual execution gate before any Asaas Sandbox HTTP call

Status

Aurea Gold is an active fintech product under structured development, focused on production readiness, payment reliability, and premium delivery quality.

Author

Developed by Dilson Pereira GitHub: dilson123-tech

• v0.2.49-wallet-asaas-sandbox-first-http-call-preflight — adds a local preflight validation before the first Asaas Sandbox HTTP call, keeping HTTP blocked, production blocked, real money disabled and secrets masked.

• v0.2.50-wallet-asaas-sandbox-first-customer-http-client-gate — adds a client-side gate for the first future Asaas Sandbox POST /customers call, keeping HTTP transport disabled, production blocked, real money disabled and secrets masked.

• v0.2.51-wallet-asaas-sandbox-first-customer-http-transport-review — reviews the safe design for the future Asaas Sandbox POST /customers HTTP transport, still without HTTP execution, production, real money or exposed secrets.

• v0.2.52-wallet-asaas-sandbox-first-customer-http-transport-skeleton: adds the first safe Asaas Sandbox customer HTTP transport skeleton for the future POST /customers call, still with no HTTP implementation, no HTTP execution, no Asaas request, no real customer, no Pix, no production, no real money and no exposed secrets.

• v0.2.53-wallet-asaas-sandbox-first-customer-http-transport-adapter-gate: adds a blocked adapter gate for the future Asaas Sandbox POST /customers transport, still with no HTTP adapter implementation, no HTTP execution, no Asaas request, no real customer, no Pix, no production, no real money and no exposed secrets.

• v0.2.54-wallet-asaas-sandbox-first-customer-http-blocked-adapter-contract: adds a blocked adapter contract for the future Asaas Sandbox POST /customers transport, defining request, safe response and sanitized error shapes while keeping no HTTP adapter implementation, no HTTP execution, no Asaas request, no production, no real money and no exposed secrets.

• v0.2.55-wallet-asaas-sandbox-first-customer-http-response-sanitizer-contract: adds a response sanitizer contract for the future Asaas Sandbox POST /customers transport, defining safe success and error exposure rules while keeping no HTTP adapter implementation, no HTTP execution, no Asaas request, no production, no real money, no raw provider payload and no exposed secrets.

• v0.2.56-wallet-asaas-sandbox-first-customer-http-error-sanitizer-contract: adds a dedicated error sanitizer contract for the future Asaas Sandbox POST /customers transport, defining safe error exposure rules while keeping no HTTP adapter implementation, no HTTP execution, no Asaas request, no production, no real money, no raw provider error, no request body, no stacktrace and no exposed secrets.

• v0.2.57-wallet-asaas-sandbox-first-customer-http-pre-execution-safety-review: adds a documented pre-execution safety review for the future Asaas Sandbox POST /customers call, keeping no HTTP adapter implementation, no HTTP execution, no Asaas request, no production, no real money, no raw provider payload exposure and no exposed secrets.

• v0.2.58-wallet-asaas-sandbox-first-customer-http-manual-execution-approval-gate: adds a manual execution approval gate for the future Asaas Sandbox POST /customers call, recognizing the mandatory authorization phrase while keeping HTTP execution blocked, adapter disabled, production blocked, real money disabled, raw provider payload exposure blocked and secrets hidden.

• v0.2.59-wallet-asaas-sandbox-first-customer-http-disabled-adapter-shell: adds a disabled adapter shell for the future Asaas Sandbox POST /customers call, keeping HTTP client selection, network binding, send method, execution method, production, real money and provider payload exposure blocked.

• v0.2.60-wallet-asaas-sandbox-first-customer-http-explicit-enable-preflight: adds a non-executing explicit enable preflight for the future Asaas Sandbox POST /customers call, recognizing the required explicit enable phrase while keeping adapter enablement, HTTP execution, production, real money and provider payload exposure blocked.

• v0.2.61-wallet-asaas-sandbox-first-customer-http-runtime-enable-contract: adds a non-executing runtime enable contract for the future Asaas Sandbox POST /customers call, recognizing the required runtime enable phrase while keeping adapter enablement, HTTP execution, production, real money and provider payload exposure blocked.

• v0.2.62-wallet-asaas-sandbox-first-customer-http-runtime-switch-guard: adds a non-executing runtime switch guard for the future Asaas Sandbox POST /customers call, recognizing the required runtime switch phrase while keeping adapter enablement, HTTP execution, production, real money and provider payload exposure blocked.

• v0.2.63-wallet-asaas-sandbox-first-customer-http-execution-gate-contract: adds a non-executing execution gate contract for the future Asaas Sandbox POST /customers call, recognizing the required execution gate phrase while keeping adapter enablement, HTTP execution, production, real money and provider payload exposure blocked.

• v0.2.64-wallet-asaas-sandbox-first-customer-http-sanitized-execution-handler-contract: adds a non-executing sanitized execution handler contract for the future Asaas Sandbox POST /customers call, requiring sanitized response and sanitized error handling while keeping adapter enablement, HTTP execution, production, real money, request body exposure, raw provider response/error and stacktrace exposure blocked.

• v0.2.65-wallet-asaas-sandbox-first-customer-http-sanitized-result-envelope-contract: adds a non-executing sanitized result envelope contract for the future Asaas Sandbox POST /customers call, defining safe success and error envelope fields while keeping adapter enablement, HTTP execution, production, real money, request body exposure, raw provider payload/error and stacktrace exposure blocked.

• v0.2.66-wallet-asaas-sandbox-first-customer-http-sanitized-success-error-fixture-contract: adds contract-only sanitized success and error fixtures for the future Asaas Sandbox POST /customers call, defining safe fixture shapes while keeping adapter enablement, HTTP execution, production, real money, request body exposure, raw provider payload/error and stacktrace exposure blocked.

• v0.2.67-wallet-asaas-sandbox-first-customer-http-adapter-boundary-final-contract: adds a non-executing final HTTP adapter boundary contract for the future Asaas Sandbox POST /customers call, defining the allowed future caller and requiring all safety gates, sanitized handlers, sanitized envelopes and sanitized fixtures while keeping adapter implementation, adapter enablement, HTTP execution, production, real money, request body exposure, raw provider payload/error and stacktrace exposure blocked.

• v0.2.68-wallet-asaas-sandbox-first-customer-http-final-manual-execution-runbook-readiness-gate: adds a review-only final manual execution runbook readiness gate for the future Asaas Sandbox POST /customers call, confirming the full safety chain is ready for manual operator review while keeping adapter implementation, adapter enablement, HTTP execution, production, real money, request body exposure, raw provider payload/error and stacktrace exposure blocked.

• v0.2.69-wallet-asaas-sandbox-first-customer-http-first-controlled-sandbox-attempt-preparation: adds a non-executing first controlled Sandbox attempt preparation contract for the future Asaas Sandbox POST /customers call, requiring manual operator review, Sandbox-only confirmation, environment-loaded secrets, sanitized envelopes, redacted logs, single-attempt policy and manual stop on unexpected response while keeping adapter implementation, adapter enablement, HTTP execution, production, real money, request body logging, raw provider payload/error and stacktrace exposure blocked.

• v0.2.85-wallet-asaas-sandbox-subaccount-first-controlled-attempt-runbook: adds a non-executing runbook for the future first controlled Asaas Sandbox POST /accounts subaccount attempt, requiring Sandbox-only configuration, environment-loaded secrets, sanitized payload/response handling, redacted logs, single-attempt policy and manual stop on unexpected response while keeping HTTP execution, subaccount creation, production, real money, raw payload exposure and raw response exposure blocked.

• v0.2.86-wallet-asaas-sandbox-subaccount-first-controlled-attempt-preflight: adds a non-executing preflight/checklist for the future first controlled Asaas Sandbox POST /accounts subaccount attempt, validating the manual subaccount execution gate and operator confirmations while keeping HTTP execution, subaccount creation, production, real money, raw payload storage, raw response storage and request body logging blocked.

• v0.2.87-wallet-asaas-sandbox-subaccount-first-controlled-attempt-operator-review: adds a documentation-only manual operator review record for the future first controlled Asaas Sandbox POST /accounts subaccount attempt, confirming repository, environment, payload, manual gate, execution control and response handling review requirements while keeping HTTP execution, subaccount creation, production, real money, secrets, raw payloads and raw responses blocked.

• v0.2.88-wallet-asaas-sandbox-subaccount-first-controlled-attempt-evidence-template: adds a documentation-only sanitized evidence template for the future first controlled Asaas Sandbox POST /accounts subaccount attempt, defining allowed evidence fields, forbidden values, success/error shapes and operator evidence review confirmations while keeping HTTP execution, subaccount creation, production, real money, secrets, raw payloads, raw responses, raw errors and raw headers blocked.