Repository navigation
docs(security): correct default local storage inventory - #2461
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Correct the default storage inventory in
SECURITY.mdagainst the current storage producers. Replace the obsolete meeting JSON-index and MLX-cache entries with retained audio, Writing, MCP SQLite, WhisperKit and FluidAudio locations. Include model-specific speaker databases and the actual saved speaker WAV/JSON metadata directory, and link the canonical storage map.Addresses the factual inventory portion of DOCS-4, also pending in broader #2336 (left untouched). This draft changes only the table, its default-location heading and storage-map link. It adds no encryption, privacy, retention, or security promise. The surrounding beta-proxy, entitlement/model rationale, screen, egress and trust wording is unchanged and remains for owner review; this PR does not adopt those pending policy choices.
Validation on
4883724e7: both mapped doc-path checks passed; the orchestration-only preflight entry was skipped by the runner and a separate actual preflight passed.verify-change.shselected no app check. Independent full one-hunk factual/source review: GREEN. Storage locations were verified from checked-in source/docs. No real application stores or app preferences were read, and no app, models, or SDKs were executed.Owner-review draft. Keep this out of the next validation union until that review, consistent with the other owner-doc proposals.