Audit first, rebuild second
Not a line-by-line port — a spec-driven rebuild. The legacy Spring Boot app and Mongo schema were treated as the source of truth, not the implementation to copy: APIs, order lifecycle, zone rules, and catalog shapes mapped before code, with payments made server-authoritative and internal runbooks produced.