coulomb/policy-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: publish Risk Nexus findings and methods
All checks were successful
Build and publish policy-nexus image / build-and-push (push) Successful in 1m10s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
tegwick 2026-09-01 01:56:46 +02:00
parent 4c8a7b9666
commit c1b60f322e
70 changed files with 3888 additions and 198 deletions
Download patch file Download diff file Expand all files Collapse all files

61
publication.json
View file

@ -39,6 +39,9 @@
},
"railiance-infra": {
"path": "../railiance-infra"
},
"risk-nexus": {
"path": "../risk-nexus"
}
},
"documents": [
@ -565,6 +568,64 @@
"canonical_path": "standards/security-zones/v0.1/index.html",
"revision_path": "standards/security-zones/v0.1/revisions/{revision}/index.html",
"review_interval": "3m"
},
{
"id": "RISK-F-0001",
"source_repo": "risk-nexus",
"source_path": "findings/RISK-F-0001-flex-auth-unauthenticated-check.md",
"canonical_path": "findings/flex-auth-unauthenticated-check/v1/index.html",
"revision_path": "findings/flex-auth-unauthenticated-check/v1/revisions/{revision}/index.html",
"subtitle": "The estate's authorization oracle authenticated no caller for as long as the endpoint existed. Found by reading, not by monitoring; fixed in two days.",
"review_interval": "6m"
},
{
"id": "RISK-F-0008",
"source_repo": "risk-nexus",
"source_path": "findings/RISK-F-0008-audit-retention-legal-basis-assumed.md",
"canonical_path": "findings/audit-retention-legal-basis/v1/index.html",
"revision_path": "findings/audit-retention-legal-basis/v1/revisions/{revision}/index.html",
"subtitle": "The estate retains personal data in audit records on grounds nobody had established. Published as a question, because it is one.",
"review_interval": "6m"
},
{
"id": "RISK-METHOD-SEVERITY",
"source_repo": "risk-nexus",
"source_path": "docs/method/severity.md",
"canonical_path": "methods/risk-severity/v1/index.html",
"revision_path": "methods/risk-severity/v1/revisions/{revision}/index.html",
"review_interval": "6m"
},
{
"id": "RISK-METHOD-DISCLOSURE",
"source_repo": "risk-nexus",
"source_path": "docs/method/disclosure.md",
"canonical_path": "methods/risk-disclosure/v1/index.html",
"revision_path": "methods/risk-disclosure/v1/revisions/{revision}/index.html",
"review_interval": "6m"
},
{
"id": "RISK-METHOD-REVIEW",
"source_repo": "risk-nexus",
"source_path": "docs/method/review.md",
"canonical_path": "methods/risk-review/v1/index.html",
"revision_path": "methods/risk-review/v1/revisions/{revision}/index.html",
"review_interval": "6m"
},
{
"id": "RISK-METHOD-VERIFICATION",
"source_repo": "risk-nexus",
"source_path": "docs/method/verification.md",
"canonical_path": "methods/risk-verification/v1/index.html",
"revision_path": "methods/risk-verification/v1/revisions/{revision}/index.html",
"review_interval": "6m"
},
{
"id": "RISK-METHOD-DEPENDENCIES",
"source_repo": "risk-nexus",
"source_path": "docs/method/dependencies.md",
"canonical_path": "methods/risk-dependencies/v1/index.html",
"revision_path": "methods/risk-dependencies/v1/revisions/{revision}/index.html",
"review_interval": "6m"
}
]
}