cesnimda
1.7 KiB
Codex Security scan register
3 November2026 update: owner approved exact root policy creation/publication. Define-security-policy workflow COMPLETED for root policy only; source base88bcd6d9, exact candidate and resolver results in ../security/ROOT_POLICY_APPROVAL.md. Managed standalone artifact ID/path is documented there; there is no scan ID. Root now resolves for API/UI, nested CV-doc policy remains closest. Baseline/deep/final scans below remain NOT RUN/BLOCKED; no charges, active targets or release acceptance approved. Earlier policy-pending entries are historical.
2 November 2026. Source baseline ba826de1e5c959352e4442ab2fec5d02445dd32d, branch codex/security-offline-preflight. Owner confirms installation; actual tool metadata/skill files verified. Production/third parties excluded. Paid/deep compute allowance pending. ROE: ../security/00-rules-of-engagement.md.
| Phase/workflow | Status | Actual evidence and limits |
|---|---|---|
| 00 define-security-policy review | NOT RUN (full workflow); resolver substep COMPLETED | Installed helper resolve-security-md --list exited 0, returned two docs-only policies. No root policy created; proposal/review/approval remains. No scan ID. |
| 01 baseline standard scan | NOT RUN | Skill/tool exposure checked; threat-model/policy and capability preflight pending. No scan artifacts or findings. |
| 03 deep scan | BLOCKED | Baseline and separately approved compute/cost scope missing. No scan launched. |
| 15 final standard and diff scans | NOT RUN | Await baseline, remediation range and independent verification. |
No scan findings, closure verdicts or human release acceptance are implied by tool availability or regression tests.