chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity
9 Commits 11 Branches 1 Tag 5.2 MiB
3b6e4e4890
Commit Graph

3 Commits

Author SHA1 Message Date
Chris Christiansen
3b6e4e4890 docs/code: clarify A2H2A prototype status and disable execution 
- Add Implementation Status section to A2H2A spec

- Clarify Google Chat is notification-only

- Add target approval architecture requirements

- Add critical A2H2A safety principle to RUNBOOK.md

- Remove unsafe approval/rejection endpoints from server.py

- Enforce server-side parameter_hash calculation

- Disable execution for all tools in A2H2A_TOOL_ALLOW_LIST
 2026-09-04 12:00:07 +00:00
Chris Christiansen
79b100caff docs(security): komplett sikkerhetsdokumentasjon med 7 manifestfiler
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details 
- SECURITY.md: Overordnet visjon med lenker til alle manifestfiler
- SECURITY_AUDITS.md: Historikk og To-Do liste
- RUNBOOK.md: 6 operasjonelle scenarier (ukjent bruker, eksponert secret, 401/403, 50x, VPC-SC, BinAuthz)
- INCIDENT_RESPONSE.md: PICERL-modell med eskaleringsmatrise
- SECRET_MANAGEMENT.md: Policy + lokal utvikling
- ACCESS_CONTROL.md: IAM-policy med service account-oversikt
- COMPLIANCE.md: TYR, Binary Auth, KMS-attestasjon

Opprydding:
- Slettet sensitive filer (test_secret.txt, final-secret-test.txt, tyr/certs/ca_password.txt)
- Slettet engangsskript og midlertidige filer
- Oppdatert .gitignore med *.txt
 2026-09-04 08:25:57 +00:00
Chris Christiansen
1ba991f582 feat(core): Fresh initialization - Deploy v3.6.1 Singularity Architecture 2026-09-03 04:03:09 +00:00