docs: record security-hardening (KI-48, KI-49) in AGENTS.md and CHANGELOG (KI-50)

docs: record security-hardening (KI-48, KI-49) in AGENTS.md and CHANGELOG #50

Merged

wasabi opened 1 week ago

Documentation-only update capturing the merged security-hardening work:

AGENTS.md: ruff + pip-audit are now mandatory CI gates; new Directus hook Zod validation bullet; all FROM/image refs pinned to @sha256 with CI enforcement via scripts/check-image-digests.sh.
CHANGELOG.md: new [Unreleased] entry summarizing base-image digest pinning, mandatory Python supply-chain gates, and Directus hook Zod validation (KI-48, KI-49, merged to main).

No code changes.

Commits were merged into target branch

Submitter	wasabi
Target	main
Source	chore/docs-security-hardening

Jobs

Merge Strategy

Create Merge Commit

Watchers (1)

Reference

pull request KI-50