kernel-security-review-policy
Authentication, authorization, secrets, untrusted input, dependency additions, security-sensitive APIs, and high-risk data boundaries require project-specific security verification plus the Kernel-recorded independent Review Receipt path. A caller-supplied reviewer string or standalone audit is not sufficient.