gsadmin/sencho
1
0
Fork 0
mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-12 03:36:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: align Community and Admiral assurance positioning (#1632)

Browse Source 
Reframe docs, OpenAPI registries copy, and License trial/expiry helpers
so Community is the full AGPLv3 product and Admiral leads with current
assurance (Hardened Build, Recovery Vault, support, governance).
Mesh, Secrets, and Host Console stay limited-availability without
Admiral sales framing.
This commit is contained in:
Anso
2026-07-14 19:44:28 -04:00
committed by GitHub
parent 678c198faa
commit 8096799e49
20 changed files with 168 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/security.mdx
+3 -4
View File
@@ -61,7 +61,7 @@ Every self-hosted instance includes the full security stack. Some advanced gover
</Card>
<Card title="Fleet Secrets" icon="key-skeleton" href="/features/fleet-secrets">
Encrypted, versioned env-var bundles pushed to labeled nodes' stacks. Sealed with the same data key as MFA and registry credentials.
Limited-availability encrypted, versioned env-var bundles pushed to labeled nodes' stacks when the surface is present. Sealed with the same data key as MFA and registry credentials.
</Card>
<Card title="Webhook signatures" icon="signature" href="/features/webhooks">
@@ -91,9 +91,8 @@ Every Sencho instance includes the foundational security stack. Advanced access-
| API tokens (scoped, expiring) | ✓ | ✓ |
| SBOM generation (SPDX, CycloneDX) | ✓ | ✓ |
| Recent-activity audit log (14-day window) | ✓ | ✓ |
| Scan policies (`block_on_deploy`) | | ✓ |
| SARIF export | | ✓ |
| Fleet Secrets (encrypted env-var bundles, limited availability) | | ✓ |
| Scan policies (`block_on_deploy`) | ✓ | ✓ |
| SARIF export (admin) | ✓ | ✓ |
| Advanced RBAC (Deployer, Node Admin, Auditor) | | ✓ |
| Scoped permissions (per-stack, per-node) | | ✓ |
| Audit log export, anomaly detection, and extended retention | | ✓ |
docs/reference/settings.mdx
+1 -1
View File
@@ -26,7 +26,7 @@ Open the Settings Hub by clicking the **Profile** icon in the top bar and select
Vulnerability scanning is no longer a Settings section: scanner setup, scan policies, suppressions, and acknowledgements now live on the dedicated [Security page](/features/security).
Sections that require a higher license tier stay hidden until the operator has the matching license. Admin-only sections (Users, SSO, API Tokens, Fleet, Registries, Cloud Backup, Notification Routing) stay hidden for non-admin operators.
Sections that require a higher license tier or the admin role are limited to operators who meet that requirement (Users, SSO, API Tokens, Fleet, Registries, Recovery Vault, Notification Routing are admin-only).
### Page chrome