docs(hub): document workflow security boundaries (#3032)

* docs(hub): add security guidance for workflows * docs: register Hub security guide
2026-08-08 17:22:09 +02:00
parent 375d1d6fb8
commit 3d420720c5
9 changed files with 321 additions and 1 deletions
@@ -57,6 +57,7 @@ At the start of non-trivial work, list `docs/` and skim anything relevant to the
 | [docs/release.md](docs/release.md)                                 | Release playbook, draft releases, completion checklist                                                                         |
 | [docs/terminal-activity.md](docs/terminal-activity.md)             | Terminal activity indicators — source-agnostic tracker, agent hook reporting, adding a new hook provider                       |
 | [SECURITY.md](SECURITY.md)                                         | Relay threat model, E2E encryption, DNS rebinding, agent auth                                                                  |
+| [public-docs/hub/security.md](public-docs/hub/security.md)         | Public Hub guide — trust boundaries, untrusted triggers, provider controls, and output authority                               |

 ### Writing docs