security: public-claims accuracy: SECURITY.md, AUDIT_POSTURE, profile + public-truth gate - #7

Merged

SaulBuilds merged 5 commits into

mainfrom

fix/pba-r2-truth

Sep 25, 2026

Commits on Sep 25, 2026

docs(security): draft BOUNTY.md (not in force, OWNER TO FILL), reconciled tier table, no private-archive or PGP path

BerryManifold
and
claude
committed
950ddb5
docs(profile): HIC not HITL, paid rails not deployed, SHA pins, live endpoints only

BerryManifold
and
claude
committed
d9e30ef
ci: public-truth check for org profile, README, SECURITY and BOUNTY

BerryManifold
and
claude
committed
9e249e8
docs(security): no BOUNTY link or remediation wording in AUDIT_POSTURE; public-truth checks every .md for bounty links and tighter qualifiers

BerryManifold
and
claude
committed
e0fe6e6
chore: move the draft bounty policy to its own PR; public-truth passes with or without BOUNTY.md

BerryManifold
and
claude
committed
3569c06