mix 18bfd148ec docs: close P7 — security review of the P0–P1 diff, no findings ...

The Fable review of the send-log authorization, tryAdmit, session create and app-delete ordering against security.md found no further issues: every send-log query path states its scope and an empty scope matches nothing, rejected rows cannot consume rate-limit budget, the milter's nil-registry fail-open is test-only, and each failure residue of the reordered delete fails safe. Outcome recorded in security.md's header and the plan; nothing added to the accepted risks.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-14 15:02:07 +03:00

..

code-review.md

docs: close P7 — security review of the P0–P1 diff, no findings

2026-08-14 15:02:07 +03:00

dmarc-reports.md

docs: rewrite security/operator docs for the multi-user panel (P2)

2026-08-13 16:15:14 +03:00

inbound-relay.md

docs: record full-tree review and 2.x schema squash

2026-08-13 01:36:08 +03:00

queue-retries.md

docs: agree queue-retries (Postfix retry policy in the panel)

2026-08-13 23:51:13 +03:00