Skip to content

History / Security Review Response 2026 08

Revisions

  • Bring the response document onto the wiki with the rest It was the only security write-up still living in the repository, at docs/security-review-2026-08.md — which is why the link Ed sent the reporter had /blob/ in it. There was never a round-one wiki page; the wiki's whole history only ever held the round-two and round-three pages. Two things in it had rotted since it was sent, and both are now fixed here and flagged in place rather than silently corrected: - it linked to security/findings-2026-08, a branch since merged and deleted - all eight commit ids in its table were pre-rebase and are orphaned; the table now carries the ids that exist on main, with a note that F5 sits out of sequence because it reached main as a cherry-pick The page opens by saying what it is — a record of what was said at the time, not a live document — and points at the round pages for the current position, because its own Outstanding section is now historical and mostly closed. Linked from Security.md, the round-two developer guide and the sidebar.

    @edmozley edmozley committed Aug 12, 2026