sync: update from private repo (2eb6723)

2026-06-16 03:38:42 +00:00
parent b411151bad
commit 519e898c10
5 changed files with 211 additions and 1 deletions
@@ -15,7 +15,8 @@ within seven days and coordinate disclosure after a fix is available.
 ## Deployment Baseline

 MAESTRO can execute tools, browser actions, and optionally SSH commands. Treat
-it as a privileged service:
+it as a privileged service. For a step-by-step checklist, see
+[docs/security-hardening.md](docs/security-hardening.md).

 - Keep the service bound to localhost until OAuth authentication is configured.
 - Put internet-facing deployments behind a TLS reverse proxy.