summaryrefslogtreecommitdiff
path: root/docs/POLICY.txt
diff options
context:
space:
mode:
authorDoan Luu Duc Tai <doan@luuduct.ai>2026-10-30 17:24:45 -0500
committerDoan Luu Duc Tai <doan@luuduct.ai>2026-10-30 17:24:45 -0500
commitcf2f0e8c6752c401f152a8e534ba166839d4307e (patch)
treea495aee0cbdc111cd9773f7d2d02753cd1d778d5 /docs/POLICY.txt
parentf196c27faf265cd14d8d7accf58e87b4df3c8a91 (diff)
Prove OpenSSL PQ crypto in browser WASI and document the migration
Diffstat (limited to 'docs/POLICY.txt')
-rw-r--r--docs/POLICY.txt6
1 files changed, 4 insertions, 2 deletions
diff --git a/docs/POLICY.txt b/docs/POLICY.txt
index e2cc4a9..4c8d0bd 100644
--- a/docs/POLICY.txt
+++ b/docs/POLICY.txt
@@ -48,8 +48,10 @@ STRICTNESS
or broad warning suppression is introduced.
cargo-deny rejects duplicate crate versions, wildcard requirements, unknown
- registries, unknown Git sources, and yanked versions. There are no duplicate
- version skip exceptions. Its AGPL allowance is scoped to this package.
+ registries, unknown Git sources, and yanked versions. The chat prototype has
+ exact-version duplicate exceptions reviewed in CHAT-OPENSSL-MIGRATION.txt.
+ No RustSec advisories are ignored. First-party AGPL and required dependency
+ license allowances are scoped to their individual packages.
The dependency allowlist retains the requested permissive licenses and
Zlib; an unused allowance may produce an informational audit warning.