# Verified and closed hire dependency security updates ## Situation Hire's installed dependency tree incl…

…Situation The SOC 2 auditor's evidence request "records of security issues being tracked" had only ever been answered with one…

…uses** | Code review templates, commit message generators, security audit checklists, architecture review prompts | **Example…

…rompt` - 18 Qwestly prompts: code-review, write-unit-tests, security-review, planning-doc, etc. ### Rules - `.omp/rules/*.{md,m…

…and imports from `node_modules/` resolve automatically). **Security note:** extensions run with pi's full process permissions —…

…m/mcp-prompts/prompts/` and include: - `code-review.md` - `security-review.md` - `accessibility-audit.md` - `write-unit-tests.m…

…| Review pending changes (branch diff) — flags correctness, security, style | | **security-review** | subagent | Security-focuse…

…RODUCT_SENSE.md ├── QUALITY_SCORE.md ├── RELIABILITY.md └── SECURITY.md ``` Design documentation is catalogued and indexed, inc…

…ty remediation baseline for SOC 2 evidence](qwestly/2026-10-security-issue-tracking-baseline.md) | 2026-10-05 | baseline | 2026-…

…nfrastructure as code (CloudFormation, per the Operations Security Policy): a signature-verifying Lambda, per-app log groups t…

…need day to day: - **On Mac ssh, unlock keychain**: run **`security unlock-keychain`** if using ACP servers which require auth…

…ded for keyboard input) Go to: System Settings → Privacy & Security → Automation → ensure Terminal has Notes access. ## Usage…

…rs": 'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,Set-Cookie', "Access-Control-Allow-Origin": "*"…

…/dev/sdb_ /media/dominick/my_drive_name -o uid=1000` -o is security options, uid=1000 is current user **unmount** `sudo umount…

…l, not to the daemon. **Fix:** System Settings → Privacy & Security → **Local Network** → enable the process. Takes effect imme…

…-contracts`, `qwestly-hire`, `qwestly-internal`) run tests, security scans, release automation, and Claude Code Review here. Ver…

…d, for input, Accessibility) in System Settings → Privacy & Security. The user TCC db cannot be read for this (`authorization de…

…te) were both removed 2026-09-20 as unused/unneeded. ## ⚠️ Security notes worth remembering - **`c-de.dph.am` has no `auth_req…

…ot logged anywhere**. **Fix:** System Settings → Privacy & Security → **Local Network** → enable `nginx`. Applies immediately,…

…ledTask` fail with > *"No mapping between account names and security IDs was done."* The installer uses > `[Security.Principal.W…

…oopback portproxy avoids the second case entirely. | ## 5. Security notes - Root login, key-only — no password auth. Reasonabl…

…ss -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtoco…

…| Select-Object ProcessId, CommandLine ``` --- ## 8. Security notes - The server binds `0.0.0.0`, so **any device on the…

…in locally. Console title shows `Administrator: ...` and `([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdent…

…eceipt within two business days for all monies paid. **5\. Security Deposit.** At the time of signing this Agreement, Tenant mu…

…l unit when the renter moves out. * The total amount of the security deposit and the move-in fees combined cannot exceed one mon…

…'s signoff gates (EM approval for architecture, DB changes, security, etc.) are now the critical path — not coding. This is a *…

…ode quality went UP. Those 18 review prompts (architecture, security, accessibility, code & PR review, unit tests, etc.) get app…

…live at `~/Work/llm/mcp-prompts/prompts/`: `code-review`, `security-review`, `accessibility-audit`, `write-unit-tests`, `optimi…

…x config, rather than DNS-level allowlisting, is the actual security boundary. ## The four pieces, briefly 1. **DNS**: `*.dph.…

…e of its bootstrap instructions. It is **not** a filesystem security boundary: host tools may reach other paths unless constrain…

…rns, dangerous code duplication, missing abstractions | | **Security** | "security", "vulnerabilities", "OWASP", "injection", "a…

…ility permission when prompted (System Settings → Privacy & Security → Accessibility). - Works at the Accessibility/event-tap le…