[alangou]

Summary

Three passages overstate or omit limits of existing security guarantees. Clarify L7 audit behavior, Google token delivery, and the assets protected by the trusted sandbox runtime.

Related Issue

None, as requested for this documentation clarification.

Changes

• Limit the Profiles request-rule requirement to enforcement: enforce; explain that audit forwards violations while credential checks still apply.
• Scope the Google placeholder guarantee to metadata delivery and link the limits on upstream response handling.
• Replace “nothing worth stealing” with the runtime's actual assets, including its TLS private key and enforcement state.

Testing

• mise run docs passes with zero errors. The same three Fern warnings occur on unmodified main: an unrelated gateway page parse warning, an unauthenticated redirects check, and color contrast.
• git diff --check passes.
• All three statements were checked against the corresponding implementation and independently reviewed.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Architecture docs updated

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-5452.docs.buildwithfern.com/openshell