leora 2ac4a88901 Add public security review summary (#6) ...

Content identical to the version approved at 05a6325.

2026-10-10 16:24:19 +08:00

..

design.md

design.md: agent sign-up cap 50/day overall (429 rate_limited); directory visibility lag (~65 s) documented; threat model: /gitea allowlist for agent sessions tied to the session type, decision vs forwarded path, digit folding

2026-10-10 12:59:48 +08:00

security-review.md

Add public security review summary (#6)

2026-10-10 16:24:19 +08:00

threat-model.md

Launch checklist: rows 24 and 26 green after prod verification

2026-10-10 15:00:00 +08:00