3 Commits

Include renames

Author	SHA1	Message	Date
amitwh	cd2980277b	feat(pdf): restore real PDF encryption; close out D1 ... @ cantoo/pdf-lib 2.9.1 was already the dep in use; the encryption plumbing and probe were already in place from the prior hardening pass. This commit: - adds a test confirming executeOperation('permissions', ...) routes through pdfSetPermissions and produces an encrypted PDF unlocked by the owner password (mirrors the existing 'encrypt' route coverage) - updates docs/superpowers/plans/2026-08-23-security-assessment-summary.md to mark deferred risk D1 as resolved (the honest-failure message remains as a fail-closed net for any future library regression) 35 PDF ops tests pass; lint/format clean. Amit Haridas	2026-09-13 23:55:51 +05:30
amitwh	4c00406bcd	docs(security): correct BurntToast drop evidence to cover CLI argv path ... Final-review nit: the hardcoded-list rationale covers the dialog path only; the drop stands on the trusted-argv precedent for --convert-to. Amit Haridas	2026-08-23 19:31:33 +05:30
amitwh	dd6d97c35d	docs(security): formal security assessment summary ... Manual audit + Task 24 formal pass: SEC-1 Pandoc argument injection (critical, fixed), Git sidebar XSS (high, fixed), File.path dead on Electron 41 (fixed), pdf-lib encryption silent no-op (fixed, honest failure). 14 areas verified clean. 7 deferred/accepted risks documented (D1-D7) incl. real-encryption dependency decision and GUI-pass release blocker. Amit Haridas	2026-08-23 19:31:33 +05:30