Repository navigation
Enhancement: Create a /docs/security.md for corporate security #1427
Description
Bump: https://github.com/bradygaster/squad/issues/945#event-27390514464, still needed.
The draft document is really good, it would be nice to get this back on top and worked into a good place so it can be referenced quickly.
Draft:
Activity
bradygaster commentedon Aug 3, 2026
A companion docs issue has been filed: #1567 (
docs: production security hardening — threat model, prompt injection defense, and credential hygiene). That issue covers the operational secrets / threat model side — Key Vault, OIDC, workload identity, and a Squad-specific infectious prompt injection risk via shared.squad/decisions.mdand.squad/history/files. Recommend structuring both as siblings under a/docs/security/nav section: this issue = corporate policy/compliance, #1567 = operational threat model. Not a duplicate. See umbrella #1564 for full context.docs: production security hardening — threat model, prompt injection …