hardening wave 2: race-safe opens, permission checks, .env deprecation#92

Merged

iicky merged 2 commits intomainfrom

feat/hardening-wave2

Mar 29, 2026

Commits on Mar 29, 2026

race-safe lock opens via O_NOFOLLOW, reject world-readable key files, deprecate inline .env keys
iicky
committed
add community standards files, prefer tmpfs for edit, warn on ssh-rsa authorize
iicky
committed