# SINT Security Bulletin — April 2026

Published: 2026-04-05
Scope: Protocol, runtime enforcement, and integration hardening updates.

## Highlights

- Shipped public protocol surfaces for discovery and schemas.
- Expanded industrial interop validation: ROS2, Open-RMF, Sparkplug, OPC UA, gRPC equivalence fixtures.
- Added docs and runtime surfaces for policy playground and API docs.
- Added Gazebo and Isaac Sim validation profiles for robotics simulation safety testing.
- Extended operator interface governance capabilities (memory + delegation + transparency views).

## Security-Relevant Changes

- Runtime paths continue fail-closed behavior under revocation and escalation checks.
- Added conformance coverage for industrial equivalence and simulation-specific ROS2 mappings.
- Reinforced approval/evidence observability via dashboard and gateway API surfaces.

## Recommended Operator Actions

1. Upgrade to latest `main` and rerun conformance fixtures.
2. Validate your deployment profile policy templates (`warehouse-amr`, `industrial-cell`, `edge-gateway`).
3. Re-check revocation + escalation drills in staging.
4. If using simulation-first workflows, run Gazebo/Isaac validation compose profiles before production rollout.

## Validation Commands

```bash
pnpm run build
pnpm run test
pnpm run docs:build
pnpm --filter @sint/conformance-tests test -- src/industrial-interoperability.test.ts
```

## Forward Look (May 2026)

- Community launch execution (Discord + external contributor path)
- Security bulletin cadence automation
- Additional conformance/certification fixtures for industrial buyer scenarios
