Release digest
Added
- SECURITY-READINESS-PUBLIC-VALIDATION (Marketing) — Added a bounded
Security Readiness candidate-acquisition wedge and dedicated static page for
the manually delivered private pilot, including buyer, outcome, process,
synthetic sample,
$299-$999scope-dependent pricing, optional-call copy, manual review, and non-audit boundaries. - SECURITY-READINESS-PRIVACY-NOTICE (Privacy) — Added a public Privacy Notice covering accepted request/evidence data, storage, 90/180-day retention rules, deletion requests, submitter authority, analytics, and separate written consent for case studies or public mention.
- SECURITY-READINESS-CONVERSION-TELEMETRY (Marketing) — Added non-PII
security_readiness_page_viewandsecurity_readiness_pilot_cta_clickevents with bounded CTA-source values and no customer/project fields.
Improved
- SECURITY-READINESS-PUBLIC-DOCS (Docs) — Documented the manually delivered
security_readiness.v1brief while explicitly separating it from the existing Trust Score-based/app/crypto/:slug/readinessdashboard preview. - SECURITY-READINESS-ROADMAP-EXCEPTION (Planning) — Approved only the static candidate-acquisition, Privacy Notice, public-docs, and non-PII telemetry surface; checkout, CRM, billing, customer portal, product automation, audit engine, exploit simulation, and expensive infrastructure remain frozen.
Internal
- Added semantic public-surface contract coverage for route registration, preview/brief separation, states, evidence categories, centralized contact configuration, privacy policy, telemetry fields, CTA semantics, and prohibited claims.
- Verified docs-site lint/build, knowledge-base build, snapshot contracts, production-like static route behavior, links, accessibility, and mobile/ desktop rendering.
- Updated canonical architecture, sprint, quarterly roadmap, project context, landing copy, Security Readiness public docs, docs navigation, and public Privacy Notice. The previous release's no-public-docs decision remains unchanged because it correctly described that earlier internal-only slice.