2 Commits

Author	SHA1	Message	Date
Charles N Wyble	787fe1f702	docs(audit): add comprehensive security audit report ... External security audit of KNEL-AIMiddleware before release: - FINAL-REPORT.md: Executive summary, risk assessment, remediation roadmap - 01-dockerfile-security.md: 38/40 containers run as root (HIGH) - 02-shell-script-security.md: 83 missing set -e/u directives (HIGH) - 03-docker-compose-security.md: 3 privileged services documented (MEDIUM) - 04-secrets-audit.md: PASS - no hardcoded secrets found - 05-vulnerability-scan.md: 14+ CVEs, 1 CRITICAL OpenSSL (golang:1.23-alpine) Assessment: CONDITIONAL PASS for release 💘 Generated with Crush Assisted-by: GLM-5 via Crush <crush@charm.land>	2026-02-20 11:59:09 -05:00
Charles N Wyble	5fd45d48c9	docs: add SDLC.md with MCP/LSP validation requirements and commit policy ... Defines the software development lifecycle for KNEL-AIMiddleware: - Protocol validation is NON-NEGOTIABLE: build + start + protocol handshake ALL required before marking a server as "working" - MCP initialize handshake: {"jsonrpc":"2.0","method":"initialize"...} - STATUS.md is the single source of truth for server status - Status categories: Working, Runtime Connection Required, Host-Only, Transport Mismatch, Build Failed, Runtime Issue - Step-by-step process for adding new MCP/LSP servers - Common Dockerfile patterns for Python/uv, Node/npx, Go - Wrapper script pattern for Crush integration Commit Policy (MANDATORY): - AI agents MUST commit automatically WITHOUT prompting - Atomic commits: one logical change per commit - Conventional format: feat:, fix:, docs:, build:, refactor:, test: - Verbose messages explaining what, why, and how validated - Automatic push after each commit Version: 1.0	2026-02-20 09:24:32 -05:00