genosdb 0.36.0 → 0.36.1

package/README.md

@@ -123,10 +123,10 @@ For deployments that need guaranteed availability on top of that, the optional [
 
 ## Verification and Audits
 
-GenosDB is closed source by design; what it does cryptographically is not. [CRYPTOGRAPHY.md](https://github.com/estebanrfp/gdb/blob/main/CRYPTOGRAPHY.md) specifies the protocol end to end — identity, operation signing, verification and authorization, ordering and replay, encrypted records, WebAuthn key protection, signaling and transport, persistence — and states the boundaries of the security model as design decisions with their reasons. Its last section is a set of commands anyone can run against the published npm bundle to confirm that the code matches the document: checking the claims requires no trust in the maintainer.
+GenosDB is closed source by design; what it does cryptographically is not. [CRYPTOGRAPHY.md](https://github.com/estebanrfp/gdb/blob/main/CRYPTOGRAPHY.md) specifies the protocol end to end — identity, operation signing, verification and authorization, ordering and replay, encrypted records, WebAuthn key protection, signaling and transport, persistence — and states the boundaries of the security model as design decisions with their reasons. Its last section is a set of commands anyone can run against the published npm bundle to confirm that it carries every primitive, parameter and format the document names: checking that requires no trust in the maintainer. [`tests/vectors/`](https://github.com/estebanrfp/gdb/tree/main/tests/vectors) carries conformance vectors executed from the reference with public test keys and a verifier that re-derives them from the specification alone — `node tests/vectors/verify.mjs`, or open [`verify.html`](https://estebanrfp.github.io/gdb/tests/vectors/verify.html) to run the published bundle over them in the browser.
 
 - **Guarantees and their status** — [SECURITY.md](https://github.com/estebanrfp/gdb/blob/main/SECURITY.md) lists every guarantee, each pinned by a conformance test run in real browsers over real WebRTC, and how to report a vulnerability.
-- **Independent review** — security researchers, auditors and organizations evaluating GenosDB are invited to review the specification against the bundle. Published audit reports will be listed in this section, with date, reviewer and scope. To coordinate a review, see [Business Inquiries & Collaboration](#business-inquiries--collaboration).
+- **Independent review** — security researchers, auditors and organizations evaluating GenosDB are invited to review the specification against the bundle. Published audit reports are listed in [docs/audits](https://github.com/estebanrfp/gdb/blob/main/docs/audits/index.md), with date, reviewer and scope. To coordinate a review, see [Business Inquiries & Collaboration](#business-inquiries--collaboration).
 
 ---