Harden source release preparation and record verified security follow-up

2026-09-08 08:04:12 +02:00
parent 9554657bb5
commit 58d320d9b3
26 changed files with 3833 additions and 163 deletions
@@ -199,3 +199,9 @@ they do not change its immutable tags or published package bytes.
 These are unreleased follow-up source changes, not a new runtime release or
 deployment. The runtime-image hold under Meta #52 remains in force; the
 historical peer-dependency workaround still needs its separate review.
+
+Further implementation and adoption gates are tracked in the
+[security follow-up](SECURITY_FOLLOWUP_2026-09-08.md), including disposable
+parsing/execution workers, opt-in password recovery, workflow read projections
+and the newer runtime-image evidence. The original scanner counts above remain
+historical and are not silently replaced by later test results.