Hardening baseline (JOE-1637)¶
Operator checklist¶
- Prefer local STT/TTS; set
local_onlyfor offline embeds. - Prefer env for secrets (
OPENROUTER_API_KEY); never logDebugsecrets (redacted). - Run
aurum doctorafter install; fix!!failures before production use. - Keep ffmpeg on PATH for file STT; pin system packages where possible.
- Restrict cache directory permissions (
0700recommended for multi-user hosts). - For custom TTS packs:
trust=verifiedwith digests only; avoidlocal_unverified. - Verify release downloads with
SHA256SUMS+scripts/verify_release_assets.sh. - Review
PROVENANCE.txt/ SBOM inventory on each release.
Embedder checklist¶
- Prefer job APIs from event-loop threads (ABI v2).
- Destroy engines after
aurum_engine_shutdown; free results once. - Call
aurum_shutdown_exonly after engines are destroyed. - Do not pass untrusted paths to output without host-side sandboxing.
- Install your own tracing subscriber; library does not install a global one.
CI / release checklist¶
cargo auditandcargo deny checkgreen on the tag.- Actions pinned to full commit SHAs (see workflow comments).
- Tag checkout fails closed (exact tag object).
- SBOM inventory + checksums attached to GitHub Release.
./scripts/release_gate.shon a clean tree before prepare/tag.
Disclosure¶
See root SECURITY.md for reporting and the disclosure rehearsal procedure.