Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Security-sensitive changes

Note

Project policy: draft. This page is the only home of Shiin’s security-sensitive change rules.

What is security-sensitive

A change is security-sensitive if it affects:

  • The decision pipeline, including any evaluation stage.
  • Policy compilation or evaluation.
  • The audit log, receipts, or key management.
  • Unsafe code in shiin-platform or dependencies.
  • Adapter enforcement or fail-closed behavior.

Review

Security-sensitive changes need:

  • A link to the relevant ADR or RFC.
  • Review from a maintainer experienced in the area.
  • For unsafe code, two-maintainer review or an outside reviewer.

Disclosure

A change that might be a way to bypass Shiin is handled through Vulnerability disclosure, not as an ordinary bug.