// @bun
import a from"@contractspec/lib.ui-link";import{ChevronRight as i}from"lucide-react";import{jsx as e,jsxs as t}from"react/jsx-runtime";function s(){return t("div",{className:"space-y-8",children:[t("div",{className:"space-y-4",children:[e("h1",{className:"font-bold text-4xl",children:"Security & Trust"}),e("p",{className:"text-muted-foreground",children:"ContractSpec focuses on deterministic, auditable software delivery. This page summarizes our security posture and trust commitments so teams can adopt with clarity."})]}),t("div",{className:"card-subtle space-y-4 p-6",children:[e("h2",{className:"font-bold text-2xl",children:"Security policy"}),e("p",{className:"text-muted-foreground text-sm",children:"We publish a dedicated security policy that explains how to report vulnerabilities and how we respond."}),t(a,{href:"/SECURITY.md",className:"btn-primary",children:["Read the security policy ",e(i,{size:16})]})]}),t("div",{className:"grid gap-4 md:grid-cols-2",children:[t("div",{className:"card-subtle space-y-3 p-6",children:[e("h3",{className:"font-semibold text-lg",children:"Release hygiene"}),e("p",{className:"text-muted-foreground text-sm",children:"We ship with deterministic CI, changesets, and contract validation so teams can trust every release."}),t("ul",{className:"space-y-2 text-muted-foreground text-sm",children:[e("li",{children:"Changesets required for published packages."}),e("li",{children:"CI gate for contract validation and drift detection."}),e("li",{children:"Rollback-friendly release process."})]})]}),t("div",{className:"card-subtle space-y-3 p-6",children:[e("h3",{className:"font-semibold text-lg",children:"Data handling"}),e("p",{className:"text-muted-foreground text-sm",children:"ContractSpec promotes strict data classification and policy-driven access. Specs can tag sensitive fields for enforcement."}),t("ul",{className:"space-y-2 text-muted-foreground text-sm",children:[e("li",{children:"Schema-level sensitivity tags."}),e("li",{children:"Policy Decision Point enforcement."}),e("li",{children:"Audit logs for operational traceability."})]})]})]}),t("div",{className:"grid gap-4 md:grid-cols-2",children:[t("div",{className:"card-subtle space-y-3 p-6",children:[e("h3",{className:"font-semibold text-lg",children:"Supply chain"}),e("p",{className:"text-muted-foreground text-sm",children:"We track dependency updates and keep the monorepo build reproducible."}),t("ul",{className:"space-y-2 text-muted-foreground text-sm",children:[e("li",{children:"Dependabot + Renovate-style updates where available."}),e("li",{children:"Signed release artifacts planned for Studio release cycles."}),e("li",{children:"Transparent changelogs for every package."})]})]}),t("div",{className:"card-subtle space-y-3 p-6",children:[e("h3",{className:"font-semibold text-lg",children:"Responsible disclosure"}),e("p",{className:"text-muted-foreground text-sm",children:"We respond quickly to security reports and coordinate fixes before public disclosure."}),t("ul",{className:"space-y-2 text-muted-foreground text-sm",children:[e("li",{children:"Security response within 5 business days."}),e("li",{children:"Private disclosure via security@contractspec.io."}),e("li",{children:"Credit for researchers (with permission)."})]})]})]}),t("div",{className:"space-y-4",children:[e("h2",{className:"font-bold text-2xl",children:"Next steps"}),e("p",{className:"text-muted-foreground",children:"Explore the broader safety controls or read the roadmap to see upcoming trust investments."}),t("div",{className:"flex flex-wrap gap-4 pt-4",children:[t(a,{href:"/docs/safety",className:"btn-ghost",children:["Safety overview ",e(i,{size:16})]}),t(a,{href:"/ROADMAP.md",className:"btn-ghost",children:["Roadmap ",e(i,{size:16})]})]})]})]})}export{s as SafetySecurityTrustPage};
