Pre-open-source security review. Verified 2026-07-28 (see status comment below). - [x] SECURITY.md — disclosure policy, contact, supported-versions table - [x] Git history audit (no secrets, internal hostnames, private package names) - [x] No hardcoded secrets / internal URLs / employee names in comments - [x] Cross-repo references to internal repos resolved or made public — **fix in #997** - [x] CI workflows scrubbed of internal secret names; OSS-safe runner pools - [x] Internal-only paths removed **Closes when #997 merges** (the only outstanding remediation). One non-code action remains before the repo is made public — see the status comment.
Pre-open-source security review. Verified 2026-07-28 (see status comment below).
Closes when #997 merges (the only outstanding remediation). One non-code action remains before the repo is made public — see the status comment.