Security

docs/SECURITY.md

Security Model (v1.0)

Integrity via SHA‑256 of canonical JSON payload.
Authenticity via ECDSA (secp256k1) over HASH.
Replay mitigation via unique ID and server‑side dedupe.
Key management: rotation, storage in KMS/HSM.
Not provided: confidentiality (planned in v2), anonymity.

There aren’t any published security advisories