Enterprise security review: remove third-party asset loads, close egress, add trust artifacts - #4972

Merged

vivekchand merged 9 commits into

mainfrom

enterprise/security-review-hardening

Aug 21, 2026

Commits on Aug 20, 2026

Remove all third-party asset loads from served pages; gate it in CI

vivekchand
and
claude
committed
073f587
Close discretionary egress in self-hosted/air-gapped installs; document it all

vivekchand
and
claude
committed
55833f3
Add a real security policy, RFC 9116 contact, and an honest compliance table

vivekchand
and
claude
committed
fdcf2c5
Add build provenance, opt-in PyPI Trusted Publishing, and a trust-badge plan

vivekchand
and
claude
committed
b1b7b0b
fix(ci): replace removed --outfile flag with stdout redirect in cyclonedx-py

vivekchand
authored and
claude
committed
dc0a814
Resolve the entity question: US LLC, so retarget the certification plan

vivekchand
and
claude
committed
a5eb51c
chore: re-trigger E2E gate (previous run timed out in queue)
claude
committed
49e7cc1
chore: re-trigger CI (E2E Gate timed out on runner congestion)

Claude Code
authored and
claude
committed
f91a1b4

Commits on Aug 21, 2026

Merge branch 'main' into enterprise/security-review-hardening
vivekchand
authored
c96ad88