Skip to content

Updating audit documents for baseline compliance #6084

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
makr-code merged 7 commits into from
Aug 31, 2026
Merged

Updating audit documents for baseline compliance #6084

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
0d77286
Add consolidated 2026-08-31 audit maturity security monetary report
Copilot Aug 31, 2026
e8734fe
Baseline-sync undated root audit documents
Copilot Aug 31, 2026
b025f85
Clarify roadmap-to-source evidence validation rule in audit docs
Copilot Aug 31, 2026
f159aa3
fix(audit): address review comments on version clarity, scope, and me…
Copilot Aug 31, 2026
f39edea
audit: add MARKER_LOCATIONS_2026-08-31.md with exact TODO/STUB/MOCK/F…
Copilot Aug 31, 2026
11d66ac
audit: correct marker count to 1.737 and update reproducibility comma…
Copilot Aug 31, 2026
e65a1e3
audit: regenerate MARKER_LOCATIONS with Gaps-Nr., Pfad, Dateiname, Ze…
Copilot Aug 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 9 additions & 4 deletions audit/AUDIT.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,14 @@
# ThemisDB — Security & Compliance Audit Record

**Last Updated:** 2026-08-26
**Repository Metadata:** `VERSION=2.4.0`, `RELEASE_TYPE=stable`
**Evidence Snapshot:** v2.4.0-rc1 GA-hardening trail on `develop`
**Last Updated:** 2026-08-31
**Repository Metadata:** `VERSION=2.4.0-alpha`
**Evidence Snapshot:** v2.4.0-rc1 GA-hardening trail on `develop` *(audit-evidence snapshot; distinct from current repo `VERSION=2.4.0-alpha`)*
**Scope:** Root audit summary across current module, compliance, and release-readiness evidence

> **NOTE:** This document aggregates the current audit stack. When August 2026 audit files disagree, prefer `IMPLEMENTATION_AUDIT_2026-08-26.md`, then `IMPLEMENTATION_AUDIT_2026-08-18.md`, then `MATURITY_REPORT_2026-08.md`, then the root `ROADMAP.md`, and finally module-local `src/<module>/AUDIT.md` / `src/<module>/ROADMAP.md`.
> **BASELINE SYNC (2026-08-31):** This undated canonical document was refreshed to align with `THEMISDB_AUDIT_MATURITY_SECURITY_MONETARY_REPORT_2026-08-31.md`.
> **ROADMAP Evidence Rule (2026-08-31):** ROADMAP checkbox states are planning/documentation signals only; audit or release evidence requires source-verified traces (code paths, tests, benchmarks, or runbooks).

> **NOTE:** This document aggregates the current audit stack. When August 2026 audit files disagree, prefer `THEMISDB_AUDIT_MATURITY_SECURITY_MONETARY_REPORT_2026-08-31.md`, then `IMPLEMENTATION_AUDIT_2026-08-26.md`, then `IMPLEMENTATION_AUDIT_2026-08-18.md`, then `MATURITY_REPORT_2026-08.md`, then the root `ROADMAP.md`, and finally module-local `src/<module>/AUDIT.md` / `src/<module>/ROADMAP.md`.
> **NEW (Aug 2026):** EU AI Act compliance documentation added (canonical in `/audit`, downstream mirrors may lag):
> - `docs/compliance/EU_AI_ACT_COMPLIANCE.md` — Risk classification & deployment checklist
> - `docs/compliance/EU_AI_ACT_RISK_MAPPING.md` — Module-by-module risk assessment
Expand Down Expand Up @@ -328,6 +331,8 @@ For details see: [BSI_C5_2026_THEMISDB_AUDIT.md](BSI_C5_2026_THEMISDB_AUDIT.md)
The acceleration module roadmap is subject to an automated consistency audit.
See [ARCHITECTURE.md § Acceleration Module ROADMAP Audit](../ARCHITECTURE.md#acceleration-module-roadmap-audit) for usage.

Before using ROADMAP status as evidence, validate each relevant claim against source artifacts in `src/`, `tests/`, and benchmark/runbook evidence where applicable.

---

## References
Expand Down
Loading
Loading