feat(saas): enforce strict response policy

req: security/006

req: operations/006

req: operations/008
This commit is contained in:
slhx agent
2026-07-14 00:59:06 +02:00
parent 4fc5e53adf
commit 6f58453aae
5 changed files with 47 additions and 10 deletions
+1 -1
View File
@@ -22,7 +22,7 @@ What it deliberately keeps out of the tutorial crate:
- provider credentials, external services, migrations, or browser automation
- billing, account administration, or other SaaS platform scope
Those production concerns belong in app adapters and recipes so the tutorial remains runnable in CI without external side effects.
Database encryption, backups, retention, incident policy, and identity-provider compliance remain host responsibilities; hemx does not claim them as framework controls. Those production concerns belong in app adapters and recipes so the tutorial remains runnable in CI without external side effects. req: security/009
Run: