Catalog section · SEC
15 planned items in Security, Audit & Privacy.
A package contains no code, assets, migrations or data for elements that are not in its spec or entitlement; the closure of the spec is the whole build
Depends on: SEC-0001
A feature switched off by a setting or flag but still shipped is treated as present; only absence from the build counts
Depends on: SEC-0001
For each tested profile the engine checks that files of elements outside the closure are not in the package
Depends on: SEC-0001
For each tested profile every operation of an element outside the enabled set is refused and no menu entry exists for it
Depends on: SEC-0001
For each tested profile a database created by the build contains no tables of elements outside the closure
Depends on: SEC-0001
Every artifact that changes what the app does or what it may do is signed with Ed25519 and verified before use
Depends on: SEC-0001
A missing, empty or malformed hash or signature is an error, never a reason to skip verification
Depends on: SEC-0001
No built-in demo, test or default signing or licence key exists in a shipped build; test keys exist only inside tests
Depends on: SEC-0001
No listener is opened by default; any local server mode is off until the user turns it on and then binds to loopback only
Depends on: SEC-0001
Fonts, scripts, images and data packs are bundled; nothing is fetched from a third-party host at run time
Depends on: SEC-0001
No hidden start path, special account or auto-started service exists for the vendor or founder; every start path is documented and visible to the user
Depends on: SEC-0001
The offline guards in CI fail on sockets, URL literals, runtime CDN loads, default bindings, demo keys and auto-start code in the sources
Depends on: SEC-0001
For each tested profile there are tests that try to reach removed elements, tampered signatures, edited entitlements and expired grants, and must fail
Depends on: SEC-0001
A determined local attacker can attack any code they hold; sensitive things therefore stay out of the build or on the company host, and this limit is recorded in the security model
Depends on: SEC-0001
In any rollout the ledger and customer-data modules are changed last, after the rest of the stage has proven itself
Depends on: SEC-0001