mirror of
https://github.com/hanzoai/commerce.git
synced 2026-10-30 15:08:42 +00:00
zeekay
1943f1c093
Multi-tenant commerce and billing: orders, subscriptions, invoices, plans, usage metering and a credit ledger. One Go binary. MIT OR Apache-2.0. Claude-Session: https://claude.ai/code/session_01SAtaDFm8VDiWrhYHNNtxMw
777 B
777 B
Security Policy
Reporting a vulnerability
Email [email protected] with details. Encrypt with our PGP key (fingerprint TBD).
We respond within 48 hours. Critical issues receive same-day acknowledgment.
Scope
This policy covers code in this repository. For the broader Hanzo platform threat model, see hanzoai/HIPs.
Sandbox boundary
commerce is CDE-connected, not CDE-in-scope: it never sees raw PAN data, only the opaque tokens returned by hanzoai/vault. All other identifying customer data is scoped per-org by the JWT-validated X-Org-Id header, and downstream provider webhooks (Stripe etc.) are signature-verified before processing.
For runtime sandbox guarantees, see HIP-0105 (in-process extension runtimes).