Privateer joins OpenSSF Sandbox for security and compliance evaluation

OpenSSF approved Privateer as a Sandbox project under its ORBIT Working Group, moving the security evaluation framework toward neutral governance. Engineering contributors include Sonatype, Revanite, and Microsoft. Privateer checks source code, repository configurations, and deployed systems against separately maintained security controls. Deterministic checks run first; optional language models review human-written evidence those checks cannot resolve. Uncertain findings require human review. Its machine-readable results can feed audit workflows and compliance dashboards, but they do not independently determine legal compliance.