# Security documentation

This folder holds security-related planning, post-mortems, and pen-test
artefacts for the Truck Wash ApS platform.

| Doc | Purpose | Status |
| --- | --- | --- |
| [`pen-test-plan.md`](./pen-test-plan.md) | TRU-80: scope, methodology, schedule and budget for the next white-hat pen test. | Draft v1, awaiting management sign-off. |

Conventions:

- Pen-test reports and any raw findings live in date-stamped subfolders
  (e.g. `2026-q4-pentest/`) and are **never** committed to the public
  repository — only the planning docs and re-test acceptance letters are.
- All security work is tracked under the Linear project
  *UI Library & Pen Testing*.