Skip to content

docs(security): document 5-pillar user trust model and sha-256 verification (closes #193) - #199

Merged
OdevMatheus merged 1 commit into
mainfrom
docs/user-trust-and-security-model
Nov 9, 2026
Merged

docs(security): document 5-pillar user trust model and sha-256 verification (closes #193)#199
OdevMatheus merged 1 commit into
mainfrom
docs/user-trust-and-security-model

Conversation

@OdevMatheus

@OdevMatheus OdevMatheus commented Nov 9, 2026

Copy link
Copy Markdown
Owner

Closes #193

Summary

  • Adds the Security & Trust Model (5-Pillar Defense-in-Depth) section and CodeQL SAST badge to \README.md.
  • Expands .github/SECURITY.md\ with the complete 5-pillar supply-chain security model (\CODEOWNERS\ curated registry, \INV-SKILL-06\ AST + CodeQL SAST script gate, Anti-Trojan Unicode/boundary guards, Sigstore NPM --provenance, and --dry-run\ + .skillops-lock.json\ SHA-256 verification) and local verification commands.

@github-actions github-actions Bot added the 📄 docs Documentation, ADRs, templates, and guides label Nov 9, 2026
@OdevMatheus
OdevMatheus merged commit 65b295e into main Nov 9, 2026
9 checks passed
@OdevMatheus
OdevMatheus deleted the docs/user-trust-and-security-model branch November 9, 2026 14:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

📄 docs Documentation, ADRs, templates, and guides

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

docs(security): document 5-pillar user trust model, curated registry guarantees, and sha-256 verification

1 participant

@OdevMatheus