BOLT-1988: add manufacturerSlug allowlist guard + unknown-slug UI fallback
failedSub-task of BOLT-1988. Code-side remediation: (1) validate manufacturerSlug against known manufacturer catalog on WorkspaceSystemConnection write (CSV enrollment and generic resolver paths), (2) add UI fallback in OemOverridesCard to bucket unknown slugs instead of one-row-per-unknown. Can be drafted independently while data-repair task awaits Slava approval.
Event Timeline
created
status_change
queued → in_progress
failed
lease expired — re-queued for retry
in_progress → queued
progress
UI guard shipped as PR #14936 (bucket unrecognized slugs, 13/13 tests, lint clean). Backend allowlist guard split to follow-up (needs cross-service supergraph call + reject-vs-bucket decision). Monitoring CI.
status_change
queued → in_progress
failed
lease expired — re-queued for retry
in_progress → queued
status_change
queued → in_progress
failed
lease expired — max retries reached, marking failed (poison pill)
in_progress → failed