Issues

• [CI] Add security badges and a reporting guide/template

  audit-readinesscidocslowP2security
  lecodev-26/nexus-q#96 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Audit Log] Rotate HMAC keys and protect against rollback

  audit-readinesscryptolowP2security
  lecodev-26/nexus-q#95 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Crypto] Add official NIST KATs for ML-KEM/ML-DSA to CI

  audit-readinesscryptolowP2securitytesting
  lecodev-26/nexus-q#94 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Fuzzing] Provide reproducible harnesses for auditors

  audit-readinessfuzzinglowP2security
  lecodev-26/nexus-q#93 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [SAST] Version reproducible Semgrep/CodeQL configuration

  audit-readinesslowP2security
  lecodev-26/nexus-q#92 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Process] Add SECURITY.md with SLA and supported versions

  audit-readinessdocsmediumP1security
  lecodev-26/nexus-q#91 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Lint] Add Dylint rules for dangerous cryptographic patterns

  audit-readinesscimediumP1security
  lecodev-26/nexus-q#90 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Supply Chain] Evaluate cargo-vet and cargo-geiger

  audit-readinessmediumP1securitysupply-chain
  lecodev-26/nexus-q#89 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Docs] Create a traceable STRIDE threat model

  audit-readinessdocsmediumP1security
  lecodev-26/nexus-q#88 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [FFI] Review secret exposure in SDK bindings

  audit-readinessffimediumP1security
  lecodev-26/nexus-q#87 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Policies] Add proptest coverage for the policy engine

  audit-readinessmediumP1securitytesting
  lecodev-26/nexus-q#86 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Testing] Run Miri in CI for crates using unsafe/FFI

  audit-readinessmediumP1securitytesting
  lecodev-26/nexus-q#85 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Crypto] Use constant-time comparisons when verifying secrets

  audit-readinesscryptohighP0security
  lecodev-26/nexus-q#84 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Vault] Audit zeroization and key lifecycle

  audit-readinesscryptohighP0security
  lecodev-26/nexus-q#83 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Scope] Decide whether the native backend is in audit scope

  audit-readinessdecisionhighP0security
  lecodev-26/nexus-q#82 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Unsafe] Define a SAFETY policy and inventory unsafe blocks

  audit-readinesshighP0securityunsafe
  lecodev-26/nexus-q#81 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Fuzzing] Establish a corpus, historical results, and continuous fuzzing

  audit-readinessfuzzinghighP0security
  lecodev-26/nexus-q#80 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Coverage] Add cargo-llvm-cov to CI with thresholds

  audit-readinesshighP0securitytesting
  lecodev-26/nexus-q#79 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [Supply Chain] Enforce strict cargo-deny and deny.toml policies

  audit-readinesshighP0securitysupply-chain
  lecodev-26/nexus-q#78 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [CI] Make cargo-audit blocking on every PR

  audit-readinesscihighP0securitysupply-chain
  lecodev-26/nexus-q#77 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap

• [EPIC] Audit Readiness v4.2.0

  audit-readinesshighsecurity
  lecodev-26/nexus-q#76 · Filter by author lecodev-26 opened on Oct 22, 2026 · Audit Readiness v4.2.0 — 4-Year Roadmap