2 Commits

Include renames

Author	SHA1	Message	Date
harald	510cb9b64e	fix(format-v3): harden system binding against replay and bypass attacks (F-01, F-02, F-03) ... - F-02: Require restore_nonce token and explicit confirmation (--rebuild-mac) for PendingRebuild - F-01: Extend canonical MAC transcript to include chunk generation tuples (node_id, chunk_index, generation) and support transparent legacy migration - F-03: Make V2-to-V3 container upgrade atomic with transactional rollback and dual-slot version update - Bump version to 0.9.4 and update changelog and security docs	2026-09-22 16:48:12 +02:00
harald	f0e5d6d26e	sec: add SECURITY.md policy, deny.toml config, and document automated audit results ... - Add SECURITY.md establishing Responsible Disclosure policy, SLA (48h/5d/90d), scope, and contact channels (security@pansi.eu) - Configure deny.toml for cargo-deny (advisories, bans, licenses, sources) - Audit with cargo audit (0 vulnerabilities) and cargo deny (all ok) - Scan entire git history with gitleaks (101 commits, no secrets leaked) - Baseline harmless unit-test mock tokens in .gitleaksignore - Document automated auditing in SECURITY_AUDIT.md and link in README.md	2026-09-21 09:15:20 +02:00