open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity

docs(llm-security): D12 disclosure + last dead pre-split reference

Browse source 
Two org-level findings from the coord inbox, both verified against source
before acting.

README.md:7 - org-ops D12 (docs/decisions.md, 2026-08-01) requires the
plugin-class disclosure line to be self-contained with THREE elements:
generator, process, and the ownership basis (Anthropic Consumer Terms
Section 4). Our line carried the first two. The wording mirrors the one
existing clause in the org (playground-design-system/README.md:21) rather
than inventing a second phrasing. LICENSE verified as MIT before asserting
it. Still one line at the measured head-block position, no link - D12
explicitly rejects both the mechanical sed form (drops ownership) and the
two-paragraph Provenance section (breaks the one-line form).

V3-UPGRADE.md:343 - org-ops census 03 identified this as the org's last
dead `claude-code-llm-security` reference, invisible to the repo-standard
gate because URL_REF requires :// or @host: before open/ and a schemaless
host does not match. Renamed to the post-split name; the file is kept.
CHANGELOG.md:751 is running prose about history with no URL position and
stays as-is.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BB4vXvwvtW4dxbPRd6vsez
This commit is contained in:
Kjell Tore Guttormsen 2026-08-09 10:04:33 +02:00
commit 7336250c60
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -4,7 +4,7 @@ Security scanning, auditing, and threat modeling for Claude Code projects. OWASP
> **Solo-maintained, fork-and-own.** This plugin is a starting point, not a vendor product. Issues are welcome as signals; pull requests are not accepted. See [GOVERNANCE.md](GOVERNANCE.md) for the full model and what upstream provides.
*AI-generated: all code produced by Claude Code through dialog-driven development. Every change is human-directed, reviewed, and validated before commit.*
*AI-generated: all code produced by Claude Code through dialog-driven development. Every change is human-directed, reviewed, and validated before commit. Per Anthropic Consumer Terms §4, ownership of outputs is assigned to the user; this plugin is licensed MIT.*
![Version](https://img.shields.io/badge/version-7.8.3-blue)
![Platform](https://img.shields.io/badge/platform-Claude_Code_Plugin-purple)

2
V3-UPGRADE.md
View file

@ -340,7 +340,7 @@ for full kontekst, nåværende status, og hva neste sesjon skal gjøre.
- package.json + plugin.json bumped to v3.0.0
- .llm-security-ignore updated with TFA suppressions
- [x] **8c.** Public repo sync
- Subtree push to `git.fromaitochitta.com/open/claude-code-llm-security`
- Subtree push to `git.fromaitochitta.com/open/llm-security`
- [x] **8d.** Announcement prep
- V3-ANNOUNCEMENT.md with feature comparison matrix (vs Snyk Agent Scan, Lasso Claude Hooks)
- Key differentiators narrative (6 points)