Security Review Evidence

Copy Markdown View Source

Generated from executable security defaults and checked-in proof lanes in this repository.

Rerun Commands

  • mix ci.security
  • mix ci.verify
  • mix relyra.conformance --check
  • mix relyra.security_review --check
  • mix test test/security/strict_default_proof_test.exs --warnings-as-errors
  • mix test test/relyra/ecto/escape_hatch_audit_test.exs --warnings-as-errors

Strict Default Evidence

claimexecutable stateseamproof commandartifact
strict default signature policy6 allowed signature methods; legacy SHA-1 override absent by defaultRelyra.Security.AlgorithmPolicy.default/0mix test test/security/strict_default_proof_test.exs --warnings-as-errorstest/security/strict_default_proof_test.exs
strict default digest policy3 allowed digest methods; SHA-1 rejected unless time-boxedRelyra.Security.AlgorithmPolicy.enforce_digest_method/2mix test test/security/strict_default_proof_test.exs --warnings-as-errorstest/security/strict_default_proof_test.exs
relay_state raw URL rejectionopaque rs_ handles only; raw URLs fail closedRelyra.Security.RelayState.validate/1mix test test/security/strict_default_proof_test.exs --warnings-as-errorstest/security/strict_default_proof_test.exs
signed content trust rejectiondocument-provided KeyInfo is never accepted as a trust sourceRelyra.Security.Signature.verify/3mix test test/security/strict_default_proof_test.exs --warnings-as-errorstest/security/strict_default_proof_test.exs

Escape Hatch And Audit Evidence

claimexecutable stateseamproof commandartifact
legacy unsigned metadata escape hatch is explicit and time-boxedbypass exists only through legacy_unsigned_metadata_policy.allow_until on a metadata sourceRelyra.Metadata.AutoRefresh.refresh/2mix test test/relyra/ecto/escape_hatch_audit_test.exs --warnings-as-errorstest/relyra/ecto/escape_hatch_audit_test.exs
risky compatibility paths remain attributableactor, cause, and correlation_id remain attached to metadata and audit rowsRelyra.Ecto.MetadataApply + Relyra.Ecto.AuditWritermix test test/relyra/ecto/escape_hatch_audit_test.exs --warnings-as-errorstest/relyra/ecto/escape_hatch_audit_test.exs
reviewer-facing evidence stays redaction-safeactor PII is omitted and correlation_id is hashed in exportRelyra.Diagnostic.AllowList.export_audit_log/1mix test test/relyra/ecto/escape_hatch_audit_test.exs --warnings-as-errorstest/relyra/ecto/escape_hatch_audit_test.exs
prior conformance and corpus regressions remain part of the packetexisting generated evidence is still required for review rerunsMix.Tasks.Relyra.Conformancemix relyra.conformance --checkCONFORMANCE.md

Linked Artifacts

artifactrole
SECURITY_REVIEW.mdcanonical reviewer entry point
docs/security_boundary.mdtrust-boundary and scope map
docs/security_findings.mdfindings ledger and remediation policy
SECURITY.mdpublic policy and release prerequisites
CONFORMANCE.mdgenerated conformance and CVE regression evidence