Security
Security overview and vulnerability disclosure.
Launch security is built around audited access, tenant isolation, entitlement checks, queue recovery, and operational evidence.
Security Commitments
- Authenticated app access uses server-side session checks.
- Workspace membership gates tenant data.
- Admin and support views require internal admin access and write audit events.
- Billing, publishing, domains, forms, and queue recovery produce operational evidence.
Vulnerability Disclosure
Report suspected vulnerabilities to security@example.com. Include affected routes, reproduction steps, impact, and contact information.
