docs: record Seth's 2026-10-28 answers (issues 7, 8, 11, 13, 17, 18, 23, 30, 32 to 36; changes C6 to C11)

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-28 12:35:17 -06:00
parent 58f1be8871
commit 1ae6819289
4 changed files with 34 additions and 19 deletions
@@ -298,7 +298,7 @@ The IDs come from Part 3 of the old SECURITY.md. The status follows the approved
 | D1, D2, D4 | Deferred (envelope encryption, Key Vault) |
 | D3 | IT's (host disk encryption on docker-1) |
 | D5 | Closed, phase 4 (optional ClamAV: a `clamav` compose profile; when `CLAMAV_HOST` is set every upload and every stored drawing is scanned before it is kept, a hit is refused and audited, and an unreachable scanner refuses uploads; off when the host is not set; left off in both stacks by IT on 2026-10-18, Gitea issue 19, with Microsoft Defender on the workstations) |
-| D6, D7 | Deferred (retention period and customer copy need a decision from Seth and Q.C.) |
+| D6, D7 | Phase 10 (decided 2026-10-28, Gitea issues 7 and 8: nothing is purged, filed packets are archived to the QNAP share at filing, and the one data book leaves out the history pages) |
 | M1 | Closed, phase 2 (append-only audit and packet log written only by the server; every packet write carries both) |
 | M2 | Closed, phase 7 (filing seal is HMAC-SHA256 with the server seal key from a Docker secret; a reopen keeps the broken seal and its data book) |
 | M3 | Closed, phase 9 (the nightly `integrity` job re-verifies seals, rehashes asset files, finds missing and orphan files and walks the audit hash chain; findings are kept in the append-only `integrity_findings` and raise `integrity_failure`, which nobody can opt out of) |