From 36755034c74ad2f5aef0cd6383dd02ac11f085e4 Mon Sep 17 00:00:00 2001 From: Jens Caers Date: Mon, 31 Aug 2026 09:01:53 +0200 Subject: [PATCH 1/4] repo: prevent generated Codex inputs from returning --- .codex-input/.gitignore | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 .codex-input/.gitignore diff --git a/.codex-input/.gitignore b/.codex-input/.gitignore new file mode 100644 index 00000000..4d861b12 --- /dev/null +++ b/.codex-input/.gitignore @@ -0,0 +1,3 @@ +# Local AI/import workspace. Never commit generated inputs, databases, archives or screenshots. +* +!.gitignore From 5e941edb8c7eeb8300e77bcd8bd7e2a339b9619f Mon Sep 17 00:00:00 2001 From: Jens Caers Date: Mon, 31 Aug 2026 09:02:14 +0200 Subject: [PATCH 2/4] docs: add geospatial data security policy --- SECURITY.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..05f5dd91 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,13 @@ +# Security Policy + +## Reporting vulnerabilities + +Report suspected vulnerabilities privately to the repository owner. Do not publish credentials, private infrastructure, precise sensitive locations, proprietary imagery, private datasets, model artifacts, database snapshots or exploit-sensitive evidence in a public issue. + +Include the affected commit/component, minimal reproduction conditions using synthetic data where possible, expected and observed behaviour, impact, and whether the issue affects ingestion, geospatial processing, model inference, exports, authorization, deployment or data retention. + +## Data boundary + +Geospatial inputs and derived outputs can reveal people, assets and sensitive locations. Treat screenshots, contact sheets, coordinates, source archives, SQLite/WAL state, model output and exports as potentially sensitive. These belong in external controlled storage, not the source repository. + +Never commit live `.env` files, credentials, private keys, production databases, unpublished imagery, customer data or local AI-workspace artifacts. From 4fe3040f85582463c04c2b28f3804fc75cb6e5ad Mon Sep 17 00:00:00 2001 From: Jens Caers Date: Mon, 31 Aug 2026 09:02:30 +0200 Subject: [PATCH 3/4] docs: add data and provenance contribution rules --- CONTRIBUTING.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 CONTRIBUTING.md diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md new file mode 100644 index 00000000..3ecfc16e --- /dev/null +++ b/CONTRIBUTING.md @@ -0,0 +1,12 @@ +# Contributing + +Keep GeoIntel changes reproducible, privacy-preserving and free from generated workspace state. + +- Branch from the protected default branch. +- Use synthetic or explicitly redistributable imagery, coordinates and datasets in tests and documentation. +- Do not commit `.codex-input` contents, SQLite/WAL/SHM files, archives, contact sheets, model outputs, private maps, credentials or local deployment data. +- Document the origin, license and intended use of every external dataset, model and media asset. +- Add tests for behavioural changes and run the documented backend, frontend, geospatial and managed validation gates. +- Explain data-model, coordinate-system, model, privacy and deployment impact in the pull request. + +Report security issues according to `SECURITY.md`. From db73a0c6aebe3f76908ad2e1df74b83dbace1af7 Mon Sep 17 00:00:00 2001 From: Jens Caers Date: Mon, 31 Aug 2026 09:02:50 +0200 Subject: [PATCH 4/4] docs: record required history sanitation --- docs/REPOSITORY_SANITATION.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 docs/REPOSITORY_SANITATION.md diff --git a/docs/REPOSITORY_SANITATION.md b/docs/REPOSITORY_SANITATION.md new file mode 100644 index 00000000..ef07657b --- /dev/null +++ b/docs/REPOSITORY_SANITATION.md @@ -0,0 +1,16 @@ +# Repository sanitation status + +The current-tree hygiene campaign removed committed local AI/import artifacts from `.codex-input`, including SQLite databases and WAL/SHM state, archives, generated JSON, geometry diagnostics and large contact-sheet screenshots. A deny-by-default `.codex-input/.gitignore` prevents recurrence. + +## HISTORY_REWRITE_REQUIRED + +Deleting these files from the current tree does not remove their objects from reachable Git history. A later owner-approved history phase must inventory all refs and remove or explicitly retain the historical objects after evidence and backup review. + +| Path family | Information type | Why history sanitation is required | +|---|---|---| +| `.codex-input/*.db`, `*.db-wal`, `*.db-shm` | local application/database state | may contain records and internal processing state; WAL/SHM files are runtime artifacts | +| `.codex-input/*.tar`, `*.tar.gz` | source/workspace snapshots | duplicate source and potentially private repository content | +| `.codex-input/*contact_sheet*.png` | generated screenshots/imagery | may expose source imagery, UI state or sensitive locations | +| `.codex-input/*.json`, geometry diagnostics | generated analysis/evidence | may contain private inputs, coordinates or operational context | + +Before any public review, perform a bare-clone all-ref secret, path, database/archive, media and large-object scan. No history was rewritten during this campaign.