Reminder: a reserved review slot is not an approval

A short reminder from Security, prompted by a few recent messages that described work as "security approved" before any review had actually taken place.

Reserving a slot on the security-review calendar means exactly that: a slot is reserved. It does not mean a review has happened, and it does not mean anything has passed. A completed review has a written scope, defining what was checked and what was not, and a written record of the outcome. Please don't describe any deployment, integration, or customer-facing claim as security approved unless you can point to that written record.

For planning purposes: there is a provisional review slot held for a customer review in September. The scope and outcome of that review are not yet confirmed, and it should not be referenced externally or treated as a completed approval until Security confirms otherwise.

If you're unsure whether something has been through review, ask Security directly rather than assuming.