Files
OwnCord/Client
J3vb 2bfc5e30d6 docs(b2-9,hp-2): security owners closed, HP-2 sign-off scorecard (#1444)
* docs(b2-7): record the #1443 squash SHA in the evidence block

* docs(b2-9): SEC-03 sized and re-tagged to B5, verdict recorded

* test(e2ee): HP-2 adversarial membership and key-change cases

Three cases from docs/trust-model.md that had no dedicated test: a modified
server adding an unknown member at first contact (pinned as today's behaviour,
a known gap with its RED recorded in the HP-2 scorecard), a second device's key
overwriting the one-per-account pin so the first device mismatches, and a peer
resumed across a rotation being re-keyed with the rotated key (OC-0316, holder
side). The last two were proven able to fail by temporary code mutation.

* docs(b2-9): close the owner table; advisory placeholders for SEC-01/SEC-04

* docs(hp-2): protocol and threat-model sign-off scorecard

Seven questions answered with commands and their output; B2 exit gate walked
(nine conditions). Adds the trust-model anchor checker beside the scorecard,
the HP-2 evidence block, and the plan index / roadmap slice updates. Owner
lines (reader, review date, decision, signature) are left blank on purpose.
2026-08-29 12:54:30 +00:00
..