Full security documentation lives under docs/:

• docs/SECURITY.md — operator security guide: authentication, integrity signing, network exposure, secrets handling, hardening posture.
• docs/SECURITY_HARDENING.md — hardening measures and their rationale.

Please report suspected security issues via a GitHub issue on sandboxcom/gludd marked security, or email srwilson@ioswitch.dev. Do not disclose the issue publicly until it has been triaged.