coulomb/risk-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Type the publication handover as a wait like any other

Browse source 
policy-nexus owes entries; if none arrive by 2026-09-17 the findings sit
as disclosure: public with no address, which this register records as a
claim rather than a publication. Same rule we apply to everyone else.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-08-20 22:44:46 +02:00
parent f0db7c83ca
commit ce8fb70afd
3 changed files with 15 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
findings/RISK-F-0001-flex-auth-unauthenticated-check.md
View file

@ -34,10 +34,17 @@ escalation: withdrawn
escalation_trigger: 1
escalation_status: withdrawn-before-sending
date_fixed: "2026-08-19"
last_checked: "2026-08-19T21:30:00Z"
next_check: "2026-08-19T21:30:00Z" # due now: the ladder starts at instant
last_checked: "2026-08-20T20:44:46Z"
next_check: "2026-08-20T20:44:46Z"
cadence: instant
clean_streak: 0
waiting_on:
- who: policy-nexus
what: "publication.json entries for RISK-F-0001, RISK-F-0008 and the five public method documents"
since: "2026-08-20"
would_change: "publication: published plus the permanent URL comes back onto each record"
default: "the findings stay disclosure: public with no address, which the register records as a claim rather than a publication"
default_at: "2026-09-17"
graded_by: risk-nexus
ruling: RISK-RULING-2026-08-19
---
@ -220,3 +227,4 @@ inbox is now step 0 of grading and question 0 of every review — see
- **2026-08-19** — re-graded `high`, closed `fixed`, disclosure `public`,
escalation withdrawn. Remaining: handover to `policy-nexus`; the CNI
enforcement question is `flex-auth`'s and no longer this finding's.
- **2026-08-20** — not clean: Publication handover requested; publication front-matter applied and the wait on policy-nexus typed. Cadence instant → instant; checked again immediately.