sg-compute.sgit.ai / documents / Boundaries, redaction and the disclosure
Boundaries, redaction and the disclosure
What was checked and is clean, what must be redacted, what must not be published at all, how to publish the one security note, and the network boundaries. Published redacted under its own rule.
Published redacted. This document is the redaction list, so it named every live address it told the site to strip. It is published under its own rule — shapes, not addresses — with the AWS account id, the live internal hostnames, the named stack FQDNs and the real EC2 and AMI ids each replaced by the shape they are an instance of. Nothing else was changed, and the site's leak tripwire encodes the same list so it cannot regress.