butnee-sys/gerchain

7f051b4dc742553198173f551196ca9d43e757fd GerChain CORE only. SHUUD is explicitly OUT OF SCOPE. 1. PostgreSQL transaction integrity and concurrency 2. Money Ledger / Engine 3. Escrow Engine 4. Witness Chain 5. Idempotency and replay protection 6. Outbox, recovery and reconciliation 7. Cryptographic and decision controls 8. CI/CD and GitHub Actions security 9. Container and software supply-chain security 10. Security-sensitive configuration and failure modes Please provide an independent technical security review covering: - exact commit SHA reviewed - methodology and tools used - findings and severity - affected components/files - evidence or reproduction where appropriate - recommended remediation - retest/verification status - residual limitations This review is requested as independent external technical security evidence. It must not be represented as ISO 27001 certification or accredited certification. Do not access or request production credentials, private keys, passwords, tokens, or other secrets. I appreciate for your effort and timing. With Tranquility The Hun