Enhance WHMCS integration with mTLS support and product mapping features. Added mTLS configuration options, updated API endpoints for mTLS status and fingerprint registration, and implemented product validation API. Updated database schema and documentation accordingly.

docs/IMPLEMENTATION_STATUS.md

@@ -2,7 +2,40 @@
 
 Last updated: 2026-06-26
 
-## Current phase: WHMCS Addon Dashboard ✅
+## Current phase: WHMCS hardening — mTLS + Product mappings ✅
+
+### mTLS integration API
+
+| Area | Status | Notes |
+|------|--------|-------|
+| Optional enforcement | Done | `INTEGRATION_MTLS_ENABLED=true` |
+| Fingerprint binding | Done | Per `WhmcsInstallation` |
+| Guard | Done | HMAC + mTLS layered |
+| API | Done | `GET/PUT .../mtls/*` |
+| PHP clients | Done | Addon + server module curl mTLS |
+| nginx example | Done | `deploy/nginx/integration-mtls.conf.example` |
+| Docs | Done | `docs/integrations/whmcs/mtls.md` |
+
+### Product mapping UI
+
+| Area | Status | Notes |
+|------|--------|-------|
+| Addon mappings page | Done | WHMCS product → GameCloud plan |
+| Validation API | Done | `POST /catalog/validate-plan` |
+| WHMCS table | Done | `mod_hexagamecloud_product_mappings` |
+| Server module hook | Done | `ProductMapping.php` resolver |
+| Docs | Done | `docs/integrations/whmcs/product-mappings.md` |
+
+### Abnahmekriterium
+
+- [x] Addon maps WHMCS products to validated GameCloud plan slugs
+- [x] Provisioning uses mapping when active
+- [x] mTLS can be enabled without breaking dev (HMAC-only default)
+- [ ] Manual E2E: nginx mTLS + WHMCS provision
+
+---
+
+## WHMCS Addon Dashboard ✅
 
 ### WHMCS Addon module completed
 
@@ -266,4 +299,4 @@ Server entry fields:
 
 ### Next phase: Post-MVP hardening
 
-- Penetration test, product mapping UI in addon, mTLS for integration API
+- Penetration test, configurable option mappings, IP allowlist for integration API