| ID | Task | Status |
|---|---|---|
M1 |
Post-quantum crypto module (SHAKE3-256, BLAKE3, Kyber, Dilithium, Argon2id, Ed448) |
✓ DONE |
M2 |
Complete input validation test coverage |
PENDING |
M3 |
Security headers comprehensive tests |
PENDING |
M4 |
RDF/Turtle escaping edge case tests |
PENDING |
| ID | Task | Status |
|---|---|---|
A1 |
Align production-ready wording with executed validation evidence and actual release state |
PENDING |
A2 |
Publish an executable validation report for the headline XSS, SSRF, and coverage claims in the docs |
PENDING |
A3 |
Decide and document release posture: beta until Packagist publication and environment-backed validation are complete |
PENDING |
A4 |
Demote or remove non-executed 100% completion language where the remaining test work is still open |
PENDING |
| ID | Task | Status |
|---|---|---|
S1 |
IndieWeb security helpers (Micropub, IndieAuth, Webmention) |
PENDING |
S2 |
Rate limiting with file/memory backends |
PENDING |
S3 |
CSRF token generation and validation |
PENDING |
S4 |
Input filtering chains (composable validators) |
PENDING |
S5 |
Integration with sanctify-php static analysis |
PENDING |
S6 |
Add Guix/Nix package definitions |
PENDING |