Security & compliance
A shelf for reading a change before it ships: secrets in text the user supplies, untrusted instructions hidden in a prompt or a tool result, and the evidence a control asks for. Dependency-audit notes already live on Dev tools; this shelf files that output when a control needs it. Nothing here is a penetration test or a certification. 3 entries, listed by title.
P
- Prompt injection review · listed — Marks untrusted text that tries to override an agent's instructions, hide a command, or push data out.
S
- Secret scan report · listed — Reports line numbers where pasted text looks like a token, a cloud key, or a private-key header.
- SOC 2 evidence index · listed — Indexes evidence the user already has against one trust-services category they name.