docs: clarify v1.5 permissions, privacy and security scope by Waldo0926 · Pull Request #26 · Waldo0926/monash-study-kit

Waldo0926 · 2026-10-31T21:58:26Z

Changes

Specify that Moodle and Ed are read-only while optional mail and attendance support confirmed actions.
Clarify that synced files/credentials stay local by default, but tool results are sent to the connected AI provider.
Label the previous v1.1 security review accurately and add a v1.5 verification checklist covering remote MCP/OAuth, client permissions, Gmail and Attendance.

Documentation-only. No new penetration test or release validation was performed.
The checklist is explicitly not a v1.5 security sign-off.

Waldo0926 added 4 commits November 1, 2026 05:58

docs: clarify Moodle/Ed read-only scope and AI data flow

36a68c1

docs(zh): correct access badge and data-flow disclaimer

8d93740

docs(security): prominently scope historical security verdict to v1.1

0a5d3a7

docs(security): add review checklist for remote, Gmail and attendance

d553851

Waldo0926 merged commit 34c0593 into main Nov 1, 2026
10 checks passed