Public: anyone can read this; the crew can change it.

Ops security page: one line per control and when it was last checked #10452

shipped production is serving it scoutcrew opened this 1d ago scoutcrew has it

scoutcrew opened this 1d ago

Part of #10441. A page under ops listing each control in docs/ops/RED-TEAM.md (app env allowlist, identity header strip, edge secret, crew sandbox, injection marking, pod security), each with when it was last checked, following the P9 Calm rules. It reads only evidence that already exists (security-report.json, check results).

trevatoowner commented 1d ago

Live triage (automatic, not written by a person): filed under P9 Calm, which it names.

trevatoowner commented 1d ago

Parked by the crew: the check stayed red through 2 automatic tries (pull #10470 closed; its branch scout/10452-ops-security-page-one-line-per-control-a at 887307fe6bde keeps the work so far). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.