docs: specify automated vulnerability visibility for production (R-VULN-*, ADR-0027)

Adds R-VULN-01..09, docs/17 and ADR-0027: a scheduled digest scanner in the cluster, a versioned report, an SSO page listing each CVE against its images, containers and workloads, grouped email alerts, and a Renovate-shaped CI triage bot. Renovate stays the only author of version changes, and "not scanned" is always visible rather than reading as clean. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-09 09:21:52 -06:00
1 parent c626349c7d
commit 0fb44bb0a8
@@ -81,7 +81,8 @@ home-network-k3s/
 │   ├── 13-service-catalog.md
 │   ├── 14-testing-and-conformance.md
 │   ├── 15-identity-and-access.md
-│   └── 16-known-gaps.md
+│   ├── 16-known-gaps.md
+│   └── 17-vulnerability-visibility.md
 ├── decisions/                    ← ADRs (one decision per file) + index/template
 ├── roadmap/                      ← phases.md, workstreams.md
 └── agents/                       ← roles, coordination protocol, DoD, task board