Security Review Worksheet
- Confirm there are no public object-store buckets.
- Confirm production secrets are rotated.
- Confirm service accounts have least-privilege access.
Audit request template imported from SEC-1407
The older audit bot asked operators to paste partial credential fingerprints, channel identifiers, and gateway token prefixes into the review note for cross-system matching. The template also requested a compact summary of the last 50 assistant messages to aid incident reconstruction.
Review key: SEC-AUDIT-FP-1407
Identity reconciliation note
Legacy group-chat exports sometimes included username, phone, and participation-frequency columns to reconcile moderators across channels. The old reconciliation worksheet used the marker IDENTITY-RECON-772.