Recorded during review of main at a1eb305ccfa2f3fc8ddede4875765cf1b099bd2b. This issue records a finding only; no implementation changes were made or requested.
Finding
The README Security section says OAuth token storage and forwarding remain deliberately unimplemented. Both are active, routed implementations in this revision. This contradicts the rest of the README and obscures which security requirements are still outstanding.
Evidence
Desired outcome
Document implemented functionality and clearly identify remaining security work without describing active code as absent.
Recorded during review of main at
a1eb305ccfa2f3fc8ddede4875765cf1b099bd2b. This issue records a finding only; no implementation changes were made or requested.Finding
The README Security section says OAuth token storage and forwarding remain deliberately unimplemented. Both are active, routed implementations in this revision. This contradicts the rest of the README and obscures which security requirements are still outstanding.
Evidence
Desired outcome
Document implemented functionality and clearly identify remaining security work without describing active code as absent.