Open
122 critical
Canonical risk register
Findings
Deduplicated security findings with traceable evidence, remediation, and independent validation.
Fixes proposed
43 in review
Validation pending
3oldest 8h
Validated this week
7100% independent
State is not ClosedWorkspace is Core Platform
| Finding | Severity | Confidence | Remediation | Validation | Owner | SLA |
|---|---|---|---|---|---|---|
 Hard-coded production signing keySEC-1427 · services/auth/src/jwt.ts:38 | Critical | Confirmed | PR opened | Not run | Maya Chen | 1h 42m |
 Unauthenticated admin export endpointSEC-1424 · apps/api/routes/admin/export.ts:14 | Critical | High | Open | Not run | Unassigned | 1h 18m |