16 commits

Author	SHA1	Message	Date
codex	9c18673da1	security: close unauthenticated runner Docker exposure with native proof	2026-10-13 18:50:05 +02:00
codex	a3b56d689f	security: verify forge scanner expansion across 166 repositories	2026-10-13 17:59:50 +02:00
codex	8f770e1eea	security: recover Forgejo scanner custody and prove restart acceptance	2026-10-13 15:07:30 +02:00
codex	e570433060	security: verify Forgejo write paths and isolate lifecycle coverage gaps	2026-10-13 13:40:26 +02:00
codex	eb93eeedfd	security: preserve verified Forgejo scanner activation and reconcile recovery	2026-10-13 11:31:06 +02:00
codex	78081dabf2	security: record introduced-history scanner proof and native admission gates	2026-10-12 18:53:18 +02:00
codex	6502bfe4d8	security: establish native Forgejo receive-hook baseline	2026-10-12 18:15:56 +02:00
codex	355b6b9720	security: verify staged-secret enforcement across 22 workstation checkouts	2026-10-12 17:48:43 +02:00
codex	2544b8703e	docs(security): record scanner proof and enforcement gaps	2026-10-12 16:51:40 +02:00
codex	e2dbe1267f	docs(security): record current-profile admin bootstrap repair	2026-10-12 15:03:59 +02:00
codex	6cdf1d4ad8	docs(security): record rotation output repair and adoption gap	2026-10-12 12:55:41 +02:00
codex	6af985b115	security: record private SOPS recovery and remaining caller gaps	2026-10-12 12:11:24 +02:00
codex	6500726f65	security: assess custody requirements against repaired helper paths	2026-10-12 10:56:27 +02:00
codex	0e25826919	security: record bootstrap custody repair and native acceptance gates	2026-10-12 09:42:49 +02:00
codex	1d57add0c3	security: record PDP transport repair and authentication follow-through	2026-10-12 08:29:12 +02:00
codex	149b08b543	Review NetKingdom security architecture and repair MFA recovery boundary	2026-10-12 07:31:13 +02:00