e4b6516f1c
Status flipped Draft → Final. In-scope rows now cite specific config files / settings (auditable from clean checkout): - LUKS2 params from kickstart/veilor-os.ks - sysctl knobs file path - USBGuard policy mode + rule type - sshd_config drop-in path + every directive - auditd rule path + watched paths - chrony NTS endpoints - systemd-resolved DoT settings - bootloader kernel args (lockdown, slab_nomerge, init_on_alloc/free, etc.) Out-of-scope rows un-hedged. 'May not always' phrasings removed; each adversary states unambiguously what veilor-os does NOT do. |
||
|---|---|---|
| .. | ||
| research/2026-05-05-agent-wave | ||
| BUILD.md | ||
| CLI.md | ||
| HARDENING.md | ||
| INSTALL.md | ||
| INSTALLER.md | ||
| POWER.md | ||
| ROADMAP.md | ||
| STRATEGY.md | ||
| THREAT-MODEL.md | ||