v0.27.3

docs/V0.25.0_SECURITY_PREPROD_AUDIT.md

@@ -23,15 +23,15 @@ The reference/generated systemd units were also aligned with the stronger Debian
 
 Passed in the audit environment:
 
-- `python3 scripts/check_source.py`
-- `python3 scripts/web_server_contracts.py`
-- `python3 scripts/security_contracts.py`
-- `python3 scripts/security_dependency_contracts.py` (offline minimum-version gates for RustSec items reviewed on 2026-10-04)
-- `node scripts/web_service_ui_test.mjs` (preset selection + Save serialization regression)
-- `python3 scripts/memory_contracts.py`
-- `python3 scripts/docs_check.py`
-- `python3 scripts/langs_check.py`
-- `python3 scripts/release_smoke.py`
+- `python3 tools/checks/check_source.py`
+- `python3 tools/checks/web_server_contracts.py`
+- `python3 tools/checks/security_contracts.py`
+- `python3 tools/checks/security_dependency_contracts.py` (offline minimum-version gates for RustSec items reviewed on 2026-10-04)
+- `node tools/checks/web_service_ui_test.mjs` (preset selection + Save serialization regression)
+- `python3 tools/checks/memory_contracts.py`
+- `python3 tools/checks/docs_check.py`
+- `python3 tools/checks/langs_check.py`
+- `python3 tools/checks/release_smoke.py`
 - `node --check` for all administration JavaScript
 - `bash -n` for managed shell scripts
 - `go test ./...` for `docker-agent`
@@ -41,7 +41,7 @@ Passed in the audit environment:
 - hard-coded secret scan for common private-key/token patterns: no production secret found; documentation placeholders only
 - manual review of the locked major network/security dependencies against current RustSec advisories, plus an offline regression deny-list for the reviewed 2026 malicious-crate campaign
 
-`./dev.sh test` runs every non-Rust phase successfully and then stops because `cargo/rustc` are unavailable. `scripts/admin_audit.py` was also attempted, but no compiled/running RustProxy administration listener exists in this workspace, so its live probes are **blocked/unexecuted**, not passed.
+`./dev.sh test` runs every non-Rust phase successfully and then stops because `cargo/rustc` are unavailable. `tools/audit/admin_audit.py` was also attempted, but no compiled/running RustProxy administration listener exists in this workspace, so its live probes are **blocked/unexecuted**, not passed.
 
 ## Dependency review
 
@@ -119,7 +119,7 @@ Do not treat this audit as production approval until all of these pass on the ex
 
 1. Install stable Rust/Cargo and run `./dev.sh doctor`, `./dev.sh check`, `./dev.sh test`, `cargo test --locked` and a release build.
 2. Run `cargo audit` (and preferably OSV/Trivy or equivalent) against the exact `Cargo.lock`; resolve vulnerabilities and review unmaintained/yanked transitive crates.
-3. Start the exact release binary under the target systemd unit and run `scripts/admin_audit.py` against loopback.
+3. Start the exact release binary under the target systemd unit and run `tools/audit/admin_audit.py` against loopback.
 4. Run active malformed HTTP tests for duplicate/ambiguous framing, oversized headers, slow headers/bodies, oversized request bodies, H2/H3 stream floods, WebSocket idle/connection exhaustion and Range edge cases.
 5. Fuzz/property-test `routing_path`, rewrite/`try_files`, `.htaccess`, CGI header parsing and backup restore parsers.
 6. Run filesystem escape tests using symlink races, nested links, renames and mount/bind-mount edge cases on the production kernel/filesystem.