claude 952c897760 docs: add alpha-3 security audit report ...

Four findings: shell injection via filename (RCE on CLSI), auth bypass
on publish-presentation routes, shell-escape without sandbox in prod,
and stored XSS via published presentations (CSP removed on main origin).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-19 10:10:19 +00:00

..

python-dependencies-design.md

Python deps: smart missing-package hint + switch to .vrf requirements file

2026-06-02 14:19:01 +00:00

security-audit-alpha3.md

docs: add alpha-3 security audit report

2026-06-19 10:10:19 +00:00