Skip to content

Release v7.14.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Oct 14:11
v7.14.2
6bdc80c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • A secret concept that the system keeps, such as a third-party API key, now takes Chronicle's [Encrypted] together with Arc's [NotAudited]; personal data keeps [PII] alone, never combined with [Encrypted], and neither marking belongs on an event source id (#531)
  • Credentials used for authentication are described as never stored: a password or token given to a command is [NotAudited], and events carry only a hash or a reference. The security review skill and both security-reviewer agents now agree on this (#531)
  • Screenplay's @sensitive is described as an operational secret, rendered as [Encrypted] plus [NotAudited], with the Screenplay versions that reject @pii (4.69.1) and @sensitive (4.84.1) on identifiers (#531)
Assets 2
Loading