amitwh dd6d97c35d docs(security): formal security assessment summary ...

Manual audit + Task 24 formal pass: SEC-1 Pandoc argument injection
(critical, fixed), Git sidebar XSS (high, fixed), File.path dead on
Electron 41 (fixed), pdf-lib encryption silent no-op (fixed, honest
failure). 14 areas verified clean. 7 deferred/accepted risks documented
(D1-D7) incl. real-encryption dependency decision and GUI-pass release
blocker.

Amit Haridas

2026-08-23 19:31:33 +05:30

..

plans

docs(security): formal security assessment summary

2026-08-23 19:31:33 +05:30

specs

docs(monospace): approve design for embedded monospace font in preview + all exports

2026-08-23 19:31:32 +05:30