Stable v2.8.26¶

docs(whatsnew): add security-over-time note for the stable fold
chore(changelog): regenerate testing index for v2026.08.13.09
feat(security): security-posture attestation + trend (G7)
docs(security): publish honest security-architecture whitepaper (G15)
chore(changelog): regenerate testing index for v2026.08.13.08
i18n(mailhost): localise mail. activation outcome in all 15 languages
fix(mailhost): never let the TLS reconciler purge a freshly issued mail. cert
chore(changelog): regenerate testing index for v2026.08.13.06
feat(deliverability): include grade C in the domains 'needs attention' list
chore(changelog): regenerate testing index for v2026.08.13.05
docs(whatsnew): note per-site security score for next stable fold
fix(isolation): slice migration covers ALL provisioned sites, not just cached ones
fix(isolation): apply cgroup slice limits at site provision, not just at agent start
feat(security): per-customer verified isolation score (G6)
chore(changelog): regenerate testing index for v2026.08.12.07
docs(whatsnew): note enforceable 2FA for next stable fold
feat(security): disable PHP FFI, harden kernel sysctl, enforce mandatory 2FA
docs(security): add 'Weg zur Weltspitze' gap report