# Jobjakt Security Release Gate — TEMPLATE

- Release commit / staging image digest:
- Reviewer / assessment date:
- Scope: exact repos, services, staging targets and accounts:
- Staging isolation verified: YES / NO (evidence)
- Test suites and scan outputs: tool, version, last execution, pass/fail/blocked:
- Authentication and MFA negative paths: PASS / FAIL / UNTESTED
- Cross-tenant and object-level isolation: PASS / FAIL / UNTESTED
- Upload, document parsing and PDF/export isolation: PASS / FAIL / UNTESTED
- AI prompt injection and service boundary: PASS / FAIL / UNTESTED
- Nginx/Docker/DB and credential exposure: PASS / FAIL / UNTESTED
- Backup restoration (synthetic staging): PASS / FAIL / UNTESTED
- CI/CD and SBOM/security checks: PASS / FAIL / UNTESTED
- Active exposed secrets pending revocation: YES / NO / UNKNOWN
- Known unmitigated critical/high exploitable issues: YES / NO / UNKNOWN
- Human acceptance tests, OAuth provider and mobile devices still unverified:
- Explicit accepted risks and sign-offs:
- Rollback and incident contacts verified: YES / NO

## Proposed recommendation
GO / CONDITIONAL NO-GO / NO-GO. Justify. No actual production deploy or merge from this report. High/critical exploitable issues, data isolation breakages and active exposed secrets prevent a GO recommendation. No assessment guarantees absence of other bugs.