edison/chanora
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: restore product scaffold to rollback baseline

Browse Source
This commit is contained in:
Edison Jwa
2026-05-29 14:02:04 +09:00
parent 2896f14ec9
commit fe6e07353e
434 changed files with 27278 additions and 63230 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/diagnostic-redaction-audit-report.md
+31
View File
@@ -0,0 +1,31 @@
# Chanora Diagnostic Redaction Audit Report
**Document status:** DV meeting baseline candidate
**Date:** 2026-05-29
## 1. Scope
This report defines the diagnostic redaction audit required before enabling diagnostics for external testers or public release.
## 2. Redaction Targets
| Data class | Required handling |
|---|---|
| Server passwords | Redact before export |
| Identity/private-key material | Redact before export |
| Tokens and known secrets | Redact through known-secret registry |
| Host/IP/email/path values | Redact or minimize according to diagnostic policy |
| User text content | Avoid unnecessary capture; redact when classified as sensitive |
## 3. Evidence Required
| Evidence | Required result |
|---|---|
| Unit tests | Redactor removes sample secrets and registered known secrets |
| Export demo | User-initiated export produces a JSON bundle without sample secrets |
| Manual review | Reviewer inspects candidate export before external release |
| Privacy alignment | Privacy policy describes user-initiated diagnostic sharing |
## 4. DV Conclusion
Audit expectations are defined. Candidate export evidence must be attached before external tester release.