connermajic/rods
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: sync governance and validation with hardening pass

Browse Source 
Update contributor, security, validation, and compute handoff documentation to reflect new runtime safeguards, CI gates, and expected regression checks.

Made-with: Cursor
This commit is contained in:
Conner Majic
2026-04-17 08:23:37 -06:00
parent 92a417c102
commit ce137dd1c2
6 changed files with 26 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
SECURITY.md
View File

@@ -18,3 +18,5 @@ Do not open a public issue for undisclosed vulnerabilities.
- The local API is intended for **trusted development networks**. Do not expose it to the public internet without hardening (TLS, auth, rate limits, reverse proxy).
- Treat uploaded XML as untrusted input at API boundaries.
- `CORS_ORIGINS` can be set to a comma-separated allowlist for browser clients; default behavior is permissive for local development.
- For production-like deployments, disable runtime compiler dependencies and prebuild `solver-c/solver_main` and `solver-c/solver_fea_main`.