Merge branch 'usnistgov:sonoma' into sonoma

.github/workflows/spellcheck.yml

@@ -0,0 +1,38 @@
+name: Spell Check
+
+on:
+  push:
+    branches-ignore:
+      - main
+  pull_request:
+    branches-ignore:
+      - main
+
+jobs:
+  spellcheck:
+    runs-on: ubuntu-latest
+
+    steps:
+      # Checkout the branch that triggered the workflow
+      - name: Checkout branch
+        uses: actions/checkout@v3
+
+      # Pull latest cspell files from main to keep them in sync
+      - name: Pull cspell config and dictionary from main
+        run: |
+          git fetch origin main
+          git checkout origin/main -- .github/cspell/
+
+      # Setup Node 20+ for cspell
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: '20'
+
+      # Install cspell globally
+      - name: Install cspell
+        run: npm install -g cspell@latest
+
+      # Run spell check
+      - name: Run cspell
+        run: npx cspell --no-progress --no-summary --config .github/cspell/cspell.json "**"

rules/os/os_on_device_dictation_enforce.yaml

@@ -4,6 +4,8 @@ discussion: |
   Dictation _MUST_ be restricted to on device only to prevent potential data exfiltration.
 
   The information system _MUST_ be configured to provide only essential capabilities.
+
+  IMPORTANT: This rule only applies to Apple Silicon devices.
 check: |
   /usr/bin/osascript -l JavaScript << EOS
   $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\