REPORT: the security-scan gate (R-986)

2026-10-19 21:48:13 +02:00
parent a03c25aa1f
commit ae2bfb2f7a
1 changed files with 6 additions and 0 deletions
@@ -27,3 +27,9 @@ The race (free at the read, busy at the start) keeps the old behaviour: one shor
 - **Global floor 0.335.0 / MinAgent 0.158.1 at 18:39:26 UTC**, read back from hub.db + WAL; per-box floors cleared.
 - Evidence: `felhom.eu/documentation/audits/night-2026-10-19/P9/`.
 - i18n: no page changed, no fixture changed.
+
+## Also tonight (tooling, no release): the security-scan gate (R-986)
+
+`controller_gates.py` registers the shared `felhom.eu/scripts/security_scan_gate.py` (fast set: hook and CI),
+warn-first; `.security-accepted` holds the first scan's 4 accepted hits (test constants, decoy values); decoys in
+`controller/scripts/test_gate_decoys.py` (55 cases OK). Commit `a03c25a`, CI 2109 success.