Skip to content

docs: add SECURITY.md (A2c) - #68

Closed
rodchalski wants to merge 1 commit into
mainfrom
claude/trust-a2c-security-md
Closed

rodchalski wants to merge 1 commit into
mainfrom
claude/trust-a2c-security-md

Conversation

@rodchalski

Copy link
Copy Markdown
Collaborator

Trust buildout A2c batch: private disclosure to security@permissionprotocol.com, 48-hour acknowledgment, safe harbor. Same template across all Permission Protocol public repos. No code changes.

🤖 Generated with Claude Code

https://claude.ai/code/session_01XPRcFvYLR6RS7vgJhYynrJ


Generated by Claude Code

Disclosure path and safe harbor, landing across all Permission Protocol
public repos.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XPRcFvYLR6RS7vgJhYynrJ
@github-actions

Copy link
Copy Markdown

⏳ Permission Protocol: Approval required
Review & approve →

Copy link
Copy Markdown
Collaborator Author

CI status, for the record: the failing check is this repo's own Permission Protocol gate, red until a signer approves (fail-closed by design in this repo; the diff is SECURITY.md only, no protected paths touched, and the gate log confirms Protected paths changed: false). It created deploy request f0a4c215-463d-4201-af6f-edc146fdcf27; approving at https://app.permissionprotocol.com/pp/deploy-requests/f0a4c215-463d-4201-af6f-edc146fdcf27 and re-running the check turns it green. No code defect to fix on this branch.

One unrelated observation from the job log, already tracked as F-11/F-9 in the trust plan: post-job cleanup warns No url found for submodule path 'repo-writable' in .gitmodules (the dangling gitlink). Harmless here.


Generated by Claude Code

@rodchalski rodchalski closed this Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants