cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: consolidate repository guides and preserve audit history

Browse Source
This commit is contained in:
cesnimda
2026-09-11 14:22:41 +02:00
parent 115441a409
commit 682a3028bb
404 changed files with 3402 additions and 2621 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/README.md
+11
View File
@@ -0,0 +1,11 @@
# Security
Security is enforced in the API and deployment topology, not by UI visibility. The current baseline includes tenant owner filters, local/Google/Microsoft identity options, cookie CSRF protection, rate limits, TOTP, session revocation, validated uploads/imports, bounded document parsing, private AI networking, and structured error handling.
- [Authentication](authentication.md)
- [Authorization and tenancy](authorization.md)
- [Sessions and rate limits](sessions.md)
- [File and import security](file-security.md)
- [Current findings and verification limits](security-notes.md)
Historical audits remain recoverable in [`../_archive/`](../_archive/); only verified current claims belong here.