cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: consolidate repository guides and preserve audit history

Browse Source
This commit is contained in:
cesnimda
2026-09-11 14:22:41 +02:00
parent 115441a409
commit 682a3028bb
404 changed files with 3402 additions and 2621 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/security-notes.md
+16
View File
@@ -0,0 +1,16 @@
# Current security notes
## Verified locally
- Tenant isolation, authorization replay, session revocation, upload/parser boundaries, AI sidecar token checks, PDF admission, and high-severity dependency gates have focused regression coverage.
- The AI service is not published to the host in the production Compose topology; only the backend joins its private network.
- Production Compose requires an AI service token and enables backend authentication by default.
## Requires external or manual verification
- Trusted proxy/ingress CIDRs, host firewall closure, TLS/redirect behavior, and production network topology.
- Authenticated production smoke tests, real OAuth/provider behavior, email delivery, backup/restore, rollback, and key custody.
- Full keyboard/screen-reader/zoom review of the CV builder and complete production UI console cleanliness.
- Account-deletion retention policy, tombstone protection, and restored-backup erasure behavior.
These are not claims of resolved security findings. Dated evidence and the detailed P1/P2 audit packet are archived under `docs/_archive/pre-docs-cleanup-2026-09-11/docs/audits/` and the pre-existing archive.