commit log
- security: install worker seccomp pre-exec 06936a2 Jaime Fournier
- docs: consolidate security status 5bef2c8 Jaime Fournier
- security: shrink native export surface fdf29f0 Jaime Fournier
- security: require native export decisions ce749ee Jaime Fournier
- security: gate native export review 2450d60 Jaime Fournier
- docs: consolidate security review records bca56ab Jaime Fournier
- security: gate vendored jsqlite advisory review 0168b46 Jaime Fournier
- security: taint ring and websocket inputs 5c03e25 Jaime Fournier
- security: add taint propagation benchmark 5bcaf97 Jaime Fournier
- docs: align security roadmap status 29f3ff6 Jaime Fournier
- docs: consolidate repository documentation map 5db90b2 Jaime Fournier
- security: taint safe-prelude env and file sources a2d0e55 Jaime Fournier
- security: add ffi audit per-site verdicts 8e16f3d Jaime Fournier
- security: close leak-sweep status and stabilize repl test 196e673 Jaime Fournier
- security: make worker sandbox and egress policy explicit 9c01882 Jaime Fournier
- security: expand taint propagation wrappers c51d2a6 Jaime Fournier
- security: deny implicit unsafe ops in native crate 6e8fb5b Jaime Fournier
- security: install worker memory rlimits pre-exec 708e7e7 Jaime Fournier
- security: gate shstk defaults on no-callcc binaries a5561de Jaime Fournier
- security: remove inherited env placeholder debab54 Jaime Fournier
- security: redact mcp log secrets f12715f Jaime Fournier
- security: wire changed-line scanner hook a4cf444 Jaime Fournier
- security: document red team cadence 11f4827 Jaime Fournier
- security: add tcb release evidence de890de Jaime Fournier
- security: gate audits on jpkg advisories 7d22f49 Jaime Fournier
- security: scaffold jpkg projects with strict defaults e16b2a4 Jaime Fournier
- security: report sandbox confinement state a34356b Jaime Fournier
- security: inventory ffi audit surface 0266200 Jaime Fournier
- security: lint capability overgrants 13238b9 Jaime Fournier
- security: load capability plans at startup fece141 Jaime Fournier
- docs: consolidate security documentation map 408eb75 Jaime Fournier
- security: require parameterized safe SQL 7be7d56 Jaime Fournier
- security: hide router dispatch errors 6f6fb64 Jaime Fournier
- security: hide lsp handler errors 07c5c15 Jaime Fournier
- security: hide mcp protocol errors 7df5b4d Jaime Fournier
- security: hide repl protocol errors f1c0e08 Jaime Fournier
- security: gate release path leaks 279d204 Jaime Fournier
- security: flag condition leaks in http responses 0381489 Jaime Fournier
- security: add opaque http handler errors 68c3bfb Jaime Fournier
- security: hide grpc handler errors 7e7c4d7 Jaime Fournier
- security: redact audit logs with env policy 520417d Jaime Fournier
- security: enforce runtime capability plans 9196fb1 Jaime Fournier
- security: add seccomp server presets 1692077 Jaime Fournier
- security: fail closed worker memory limits 34b05a8 Jaime Fournier
- security: add checked secure bytevectors 06260b1 Jaime Fournier
- security: route crypto defaults through rust 6b2db57 Jaime Fournier
- security: lock sandbox macro allowlist b2c1e98 Jaime Fournier
- security: bind safe prelude taint sinks f072895 Jaime Fournier
- docs: consolidate security references 44b9fd4 Jaime Fournier
- security: expand fuzz regression corpora 59c581d Jaime Fournier