docs: archive the 2026-06-10 architecture + security review decks

Both were sitting untracked in the repo root. They're the source for
the "candidate N from the 2026-06-10 review" references in this
batch of follow-up PRs, so keeping them in-repo makes those references
resolvable. Self-contained HTML; a short README indexes them.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Ullrich Schäfer 2026-06-11 08:33:48 +02:00
parent b4067301cc
commit 10a3a6f1c4
No known key found for this signature in database
GPG key ID: A32FF691A0F752D9
3 changed files with 1058 additions and 0 deletions

17
docs/reviews/README.md Normal file
View file

@ -0,0 +1,17 @@
# Reviews
Point-in-time review decks. Self-contained HTML — open directly in a
browser (arrow keys / click to navigate). Each is a snapshot of its
date; findings were triaged and tracked through PRs, so the deck reads
as the "why" behind a batch of follow-up work rather than a live
checklist.
- **`architecture-review-2026-06-10.html`** — deepening opportunities
(shallow modules, implicit interfaces, duplicated choreography). The
10 candidates were implemented across PRs that reference them as
"candidate N from the 2026-06-10 review".
- **`security-review-2026-06-10.html`** — defensive review of the auth,
federation, secrets, and injection surfaces. Severity-calibrated
(several scanner false-positives were verified and dropped). All
actionable findings were fixed in follow-up PRs.