root
f5175f1ce0
- audit/phase-one + phase-two: security audit briefs, findings, credential-rotation plan, Docker-USER hardening scripts, rollback refs - disaster-recovery/restore-test-log.md + backup-dr-audit-2026-08-10.md - clients/ (modelortho SEO audit, ai-biz-dev competitive landscape), notes/ (tiktok strategy) - projects/: front-desk-voice-agent, seo-visibility-checker product plan, hotnow-savannah HTML, resend-transactional-email, backup-dashboard-enhancements, code-review-graph, seo-ci-architecture - proposals/verdicttank/: architecture v4.0, methodology, judge-pool review, consolidation reasoning, cross-check review - docs/super-search/firecrawl-provider-strategy.md - updates: CHANGELOG, model-chain, projects-master-readme, intelsight.io - .gitignore: exclude nested standalone repos (seo-tool, venturebuilt)
38 lines
1.4 KiB
Markdown
38 lines
1.4 KiB
Markdown
# Running Exemptions Document
|
|
|
|
Authority: Germaine Brown is the sole authorizer of any departure from the
|
|
Policy & Procedure document (P&P section 8). No exemption is assumed; it is requested,
|
|
justified, approved, and recorded here.
|
|
|
|
## Schema
|
|
|
|
| Field | Meaning |
|
|
|---|---|
|
|
| ID | EX-### |
|
|
| Date | When requested/approved (ET) |
|
|
| Requester | Who raised it |
|
|
| Provision departed from | Which P&P section/policy |
|
|
| Request + justification | The business reason |
|
|
| Authorization | Germaine's decision |
|
|
| One-time / ongoing | Duration |
|
|
| Follow-up date | For ongoing exemptions |
|
|
| Status | open / closed |
|
|
|
|
---
|
|
|
|
## Entries
|
|
|
|
### EX-001: Public-repo credential exposure (D3) deferred
|
|
|
|
| Field | Value |
|
|
|---|---|
|
|
| ID | EX-001 |
|
|
| Date | 2026-08-13 (raised in Phase One, re-surfaced at Phase Two start) |
|
|
| Requester | Germaine Brown |
|
|
| Provision departed from | P&P section 1 (no live credentials in any repo): the public repo `itpp-infrastructure` re-leaks live admin credentials |
|
|
| Request + justification | Defer the repo lockdown ("leave the repo alone for now") while Phase One was read-only |
|
|
| Authorization | Deferred by Germaine in Phase One |
|
|
| One-time / ongoing | One-time, with a Phase Two follow-up |
|
|
| Follow-up date | Phase Two start (now): this is Workstream 1 item 10 (D3/EX-001) |
|
|
| Status | OPEN: pending Germaine's updated decision now that Phase Two is starting |
|