docs: consolidate repository guides and preserve audit history

2026-09-11 14:22:41 +02:00
parent 115441a409
commit 682a3028bb
404 changed files with 3402 additions and 2621 deletions
@@ -10,7 +10,7 @@ namespace JobTrackerApi.Tests;
 // The point is that a NEW controller cannot ship unprotected by accident. Authentication used to rely
 // on the Auth:Require fallback policy, which defaults to false — a deployment that lost that flag
 // would have served tenant data anonymously. Every controller must now declare its intent.
-// docs/production-readiness-review.md.
+// docs/security/security-notes.md.
 public sealed class ApiAuthorizationPostureTests
 {
    // Endpoints that are anonymous ON PURPOSE. Adding to this list is a deliberate security decision.