High Severity

• Order handler complexity: 18
• Untested pricing branch

Medium Severity

• Dependency fan-out in auth module
• Long-running SQL in report query