ASD STIG / NIST 800-53 review of untrusted-input boundaries with remediations - #17

Closed

erikrozi wants to merge 8 commits into

devin/1788814351-asd-stig-nist-review-remediation

Commits on Sep 7, 2026

Add ASD STIG / NIST 800-53 review and harden untrusted-input boundaries

devin-ai-integration[bot]
and
erikrozi
committed
7c8deeb
Preserve notebook link href as written; audit form-level import rejections; bound import traversal; isolate audit provider failures

devin-ai-integration[bot]
and
erikrozi
committed
887b66c
Update verification evidence with final unit test results

devin-ai-integration[bot]
and
erikrozi
committed
71f7719
Audit policy-rejected imports; skip audit for mirrored role changes; guard localStorage getter; emit audit events via EventEmitter; document Audit API

devin-ai-integration[bot]
and
erikrozi
committed
49649ae
Settle async failure paths and clarify audit provider contract

devin-ai-integration[bot]
and
erikrozi
committed
6b8d625
Generate thumbnail before storing notebook images and record unlinked import objects

devin-ai-integration[bot]
and
erikrozi
committed
4ef8e23
Document audit outcome semantics for asynchronous notebook persistence

devin-ai-integration[bot]
and
erikrozi
committed
4775250
Record import workload-limit residual in assessment

devin-ai-integration[bot]
and
erikrozi
committed
fcc1c34