fix(security): enforce audited account, network and resource boundaries

Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
2026-09-09 18:21:47 +02:00
parent 7d641edc7b
commit 0954876295
116 changed files with 10101 additions and 122 deletions
@@ -2,3 +2,6 @@
 # A CRLF deploy.sh fails with "bad interpreter: /usr/bin/env bash\r" or silently
 # mis-parses. This guarantees LF in every checkout regardless of core.autocrlf.
 *.sh text eol=lf
+
+# Preserve the exact exported bytes used by the spreadsheet regression evidence.
+/docs/audits/2026-09-07/validation/evidence/*.csv binary