Skip to content

Latest commit

 

History

History
11 lines (9 loc) · 560 Bytes

SECURITY.md

File metadata and controls

11 lines (9 loc) · 560 Bytes

Security policy

Do not open a public issue for a credential, private key, personal data, unpublished evidence, or a possible authority-boundary bypass. Contact the repository owner privately with the smallest reproducible description and no secret values.

The public Module is intentionally fail-closed. Nostr events are verified and scoped; role contexts are isolated; worker tools are default-deny; and local fixtures never read credentials or call external providers. A green test is not authorization to publish, deploy, vote, or change a city system.