Automatic Updates Initiative meeting on Mar 5, 2024

This meeting:
➤ Is for core developers, initiative contributors, the Drupal Association and anyone interested in the initiative.
➤ Usually happens every other Tuesday at 1700 UTC.
➤ Is done over chat.
➤ Happens in threads, which you can follow to be notified of new replies even if you don’t comment in the thread. You may also join the meeting later and participate asynchronously!
➤ Has a public agenda anyone can add to
➤ *Transcript will be exported and posted* to the agenda issue. For anonymous comments, start with a :bust_in_silhouette: emoji. To take a comment or thread off the record, start with a :no_entry_sign: emoji.

:zero: Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.

:one: Do you have any topics to propose for the meeting today? Feel free to propose them in this thread, and then I will give them their own unique threads for discussion. Conversation moving slow? Go ahead and open your own thread in the next numeric order.

0️⃣ Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.

1️⃣ Do you have any topics to propose for the meeting today? Feel free to propose them in this thread, and then I will give them their own unique threads for discussion. Conversation moving slow? Go ahead and open your own thread in the next numeric order.

2️⃣ HSM signing ritual end-to-end test - @drumm and @ergonlogic and I are doing this later today - and can report back to this thread afterwards.Rough draft of the ritual runbook in this thread (edited) 

INCOMPLETE

3️⃣ Server-side security audit remediationsMost of the recommendations will be resolved when we verify completion of the root key management/HSM ritual - but we'll do a pass through the report to verify anything else.

4️⃣ Client-side security audit remediationsWithout naming any non-public issues - how is this going?

5️⃣ Planning for deploymentWill be based on outcome of HSM test, and status of audit remediations

Participants:

hestenet, TravisCarden, tedbow, dts

Meeting link: https://drupal.slack.com/archives/C7QJNEY3E/p1709657658540349