Security
Working draft. It describes how the software behaves and has not been reviewed by counsel. The operator names the legal entity, hosting region and contact address before launch.
Sign-in uses salted password hashes and optional time-based two-step codes. Sessions are signed and expire.
Every operation's data is separated by operation. Roles limit which boards a person can open.
The audit trail is a hash chain with signed anchors and an optional independent countersignature.
Pages are served with a content security policy and refuse to be embedded in other sites. Windows inside the workspace are the same site.
To report a vulnerability, write to the contact address the operator publishes. Do not test against live operations without written permission.