3 commits

Author	SHA1	Message	Date
senke	47afb055a2	chore(docs): archive obsolete v0.12.6 security docs ... Move ASVS_CHECKLIST_v0.12.6.md, PENTEST_REPORT_VEZA_v0.12.6.md, and REMEDIATION_MATRIX_v0.12.6.md to docs/archive/ — all reference a pentest conducted on v0.12.6 (2026-03), stale relative to the current v1.0.7 codebase (different security middleware, different payment flow, different config validation). Update CLAUDE.md tree listing and AUDIT_REPORT.md §9.1 to reflect the archive location. Keep docs/SECURITY_SCAN_RC1.md (still current). Closes AUDIT_REPORT §9.1 obsolete-doc item. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-23 15:32:25 +02:00
senke	2a80cb4d2f	feat(v0.12.6): update pentest deliverables with comprehensive 36-finding audit ... Expanded from initial 14-finding analysis to full 36 findings after 6 specialized audit agents completed deep analysis. - PENTEST_REPORT: 5 CRITICAL, 10 HIGH, 12 MEDIUM, 6 LOW, 3 INFO - REMEDIATION_MATRIX: P0 (6h), P1 (17h), P2 (8h), P3 (10h) = ~41h total - ASVS_CHECKLIST: 70/102 (68.6%) with 5 FAIL, 26 PARTIAL Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 16:52:03 +01:00
senke	7e05cdf5da	feat(v0.12.6): pentest security audit — 3 deliverables ... - PENTEST_REPORT_VEZA_v0.12.6.md: 14 findings (0 CRIT, 2 HIGH, 5 MEDIUM, 4 LOW, 3 INFO), 18 PASS controls - REMEDIATION_MATRIX_v0.12.6.md: prioritized remediation actions (P1: 4h, P2: 5h, P3: 5.5h) - ASVS_CHECKLIST_v0.12.6.md: OWASP ASVS Level 2 — 92/101 (91.1%) conformity Methodology: SAST + manual code review, OWASP Top 10 2021, API Security Top 10 2023 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 16:44:38 +01:00