Add tekimax-security v0.3.0 to community catalog

[kaman1]

Summary

• Adds the TEKIMAX Secure SDD extension (tekimax-security v0.3.0) to the community catalog
• Security-first extension: threat modeling (STRIDE), automated red teaming, AI guardrails, data contracts, model governance gates
• 8 commands, 5 hooks, 15 automated tests, Apache 2.0

What it does

tekimax-security layers six security gates on top of Spec Kit's SDD lifecycle:

Gate	Phase	Catches
Data Contract	SPECIFY	Unvetted sources, unprotected PII, undeclared schemas
Threat Model	DESIGN	STRIDE coverage, unmitigated high/critical threats
Model Governance	DESIGN	Unpinned versions, missing rollback plans, no eval baselines
Guardrails	SPECIFY/IMPLEMENT	Missing input validation / output redaction, non-numeric rate limits
Red Team	VERIFY	Automated adversarial testing against staging
Inline Content Scan	IMPLEMENT	Committed secrets, inline prompts, direct SDK imports

v0.3.0 highlights

• Project-root confinement — scripts cannot access files outside the project directory
• Tamper-evident hash chain — every gate-log entry links to the previous via SHA-256
• JSONL injection prevention — all log output uses Python json.dumps
• Security Model docs page at speckit.tekimax.com/docs/security
• Ask AI docs chat at speckit.tekimax.com/chat (Llama 3.3 70B on Workers AI)

Verification

• extension.yml validates (v0.3.0)
• Installs cleanly via specify extension add --dev
• All 8 commands register correctly
• 15/15 tests pass on macOS and Ubuntu
• ShellCheck passes on all scripts
• Zero open Dependabot vulnerabilities
• Apache 2.0 license

Links

• Repo: https://github.com/TEKIMAX/speckit-security
• Docs: https://speckit.tekimax.com
• Release: https://github.com/TEKIMAX/speckit-security/releases/tag/v0.3.0
• Changelog: https://github.com/TEKIMAX/speckit-security/blob/main/CHANGELOG.md

Compatibility

Requires speckit_version >= 0.1.0.

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Adds the tekimax-security community extension (TEKIMAX Secure SDD) to Spec Kit’s community extension discovery catalog.

Changes:

• Adds a new tekimax-security entry (v0.3.0) with metadata, URLs, requirements, and tags to extensions/catalog.community.json.

Show a summary per file

File	Description
extensions/catalog.community.json	Adds the tekimax-security extension metadata to the community catalog.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/1 changed files
• Comments generated: 3

[mnriem]

Please address Copilot feedback

[kaman1]

Hi @mnriem — all three Copilot feedback items have been addressed in commit 172a25c:

1. Alphabetical ordering — moved tekimax-security entry to the correct position (between sync and tinyspec)
2. Timestamps — aligned created_at and updated_at to 2026-04-16T00:00:00Z and bumped the file-level updated_at
3. README table — added a row to the Community Extensions table in the correct alphabetical position

Ready for re-review when you get a chance. Thanks!

[mnriem]

Please resolve conflicts