meshbay.git/second-review.md, branch 0.1MeshBay — read-only public mirrorhttps://git.meshbay.org/meshbay.git/atom?h=0.12026-08-13T01:56:30Zdocs: second security review + roadmap rewrite2026-08-13T01:56:30ZChristophe Bessoncbesson@gmail.com2026-08-13T01:56:30Zurn:sha1:ee6573c57f721db8550e34e1c1c79c5922c62a4b
Second architecture and security review (second-review.md): 6 critical and
7 high findings against the Phase 12 implementation, plus an assessment of
whether the system meets its end-to-end confidentiality claim.
Roadmap rewritten against those findings (devel-phases-next.md): new blocking
Phase 11.5 (security remediation), Phase 12 (hub minimization), Phase 13
(native desktop client). Old phases 12-17 renumbered to 14-19.
tmp-decisions.md records two open decisions: whether the hub keeps serving
the web UI, and browser extension vs native desktop client vs both.
CLAUDE.md and devel-phases-next.md also carry pre-existing Phase 12 edits from
the working tree that could not be cleanly separated from the review changes.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>