Type the publication handover as a wait like any other
policy-nexus owes entries; if none arrive by 2026-09-17 the findings sit as disclosure: public with no address, which this register records as a claim rather than a publication. Same rule we apply to everyone else. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
parent
f0db7c83ca
commit
ce8fb70afd
3 changed files with 15 additions and 6 deletions
|
|
@ -41,6 +41,7 @@ Silence never buys a softer grade — see `docs/method/dependencies.md`.
|
|||
| RISK-F-0005 | audit-core | likelihood rises to L3 if any other production credential carries may_read | graded on the sender alone, as stated; the wider question is recorded as unanswered | 2026-09-19 |
|
||||
| RISK-F-0004 | tenant-engine | grade rises if the log carries tenant payload rather than metadata | grade stands as recorded; absent fix tracking is recorded as a stall | 2026-09-03 |
|
||||
| RISK-F-0002 | ops-warden | if it admits no ingress, enabling the gate stops all signing — an availability blocker, not a risk one | the register records the ordering as unverified and re-raises it; the finding stands at medium | 2026-08-27 |
|
||||
| RISK-F-0001 | policy-nexus | publication: published plus the permanent URL comes back onto each record | the findings stay disclosure: public with no address, which the register records as a claim rather than a publication | 2026-09-17 |
|
||||
|
||||
## Embargoes
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue