From e9a5bea937061a91431b23d3e337c6491031d16e Mon Sep 17 00:00:00 2001 From: John Coffey Date: Tue, 6 Oct 2026 00:21:48 -0700 Subject: [PATCH] Send security and conduct reports to Coffey Labs LLC addresses Security reports now go to security@coffeylabs.org and code-of-conduct reports to community@coffeylabs.org, replacing a personal address. Written in the same obfuscated form as before. --- CODE_OF_CONDUCT.md | 2 +- SECURITY.md | 2 +- docs/phase-4-runbook.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md index 48d8417..e1ad487 100644 --- a/CODE_OF_CONDUCT.md +++ b/CODE_OF_CONDUCT.md @@ -60,7 +60,7 @@ representative at an online or offline event. Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at -**johnellisATlinuxDOTcom**. +**communityATcoffeylabsDOTorg**. All complaints will be reviewed and investigated promptly and fairly. All community leaders are obligated to respect the privacy and security of the diff --git a/SECURITY.md b/SECURITY.md index 093eba5..1dd9450 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -15,7 +15,7 @@ Cairn OBS is under active development. Security fixes are applied to the latest Instead, report security issues privately by emailing: -**johnellisATlinuxDOTcom** +**securityATcoffeylabsDOTorg** Please include as much of the following as you can: diff --git a/docs/phase-4-runbook.md b/docs/phase-4-runbook.md index cc8091f..f749150 100644 --- a/docs/phase-4-runbook.md +++ b/docs/phase-4-runbook.md @@ -190,7 +190,7 @@ first attempt (before any `tenant_memberships` row existed) correctly failed closed with "this identity has no tenant membership" while still creating the `users` row via `UpsertUserBySSO`, exactly as designed; after `-grant-membership-*` granted that real Auth0 identity -(`john@linuxexperts.net`) an `admin` role on `acme`, a second login +(the administrator account) an `admin` role on `acme`, a second login completed the full OAuth code exchange, consent screen, and redirect to `web`, landing a real `cairnobs_session` cookie; `POST /internal/authorize` with that cookie returned -- 2.54.0