docs(security): add approval state transition contract [skip ci]

This commit is contained in:
Your Name
2026-05-13 18:47:39 +08:00
parent 5a0826bfdb
commit a334ae48cc
30 changed files with 585 additions and 62 deletions

View File

@@ -16,7 +16,8 @@
"docs/security/security-mirror-status-rollup.snapshot.json",
"docs/security/security-approval-gate.snapshot.json",
"docs/security/security-approval-decision-record.snapshot.json",
"docs/security/security-approval-review-packet.snapshot.json"
"docs/security/security-approval-review-packet.snapshot.json",
"docs/security/security-approval-state-transition.snapshot.json"
],
"intake_waves": [
{
@@ -54,7 +55,7 @@
"execution_router",
"blocking_gate"
],
"exit_gate": "Operator Console 能顯示 30 個 contract、5 個 route groups、7 個 acceptance checks、5 個 quarantine lanes、6 個 dry-run steps、status rollup、approval gate、decision recordreview packet且 mirror event envelope action_buttons_allowed=false。"
"exit_gate": "Operator Console 能顯示 31 個 contract、5 個 route groups、7 個 acceptance checks、5 個 quarantine lanes、6 個 dry-run steps、status rollup、approval gate、decision recordreview packet 與 state transition,且 mirror event envelope action_buttons_allowed=false。"
},
{
"wave_id": "M1_kali_visibility",
@@ -133,6 +134,7 @@
"security_approval_gate_v1",
"security_approval_decision_record_v1",
"security_approval_review_packet_v1",
"security_approval_state_transition_v1",
"github_target_repo_approval_package_v1",
"source_control_approval_board_v1",
"kali_scan_scope_approval_v1"
@@ -148,6 +150,7 @@
"display_followup_runtime_gate",
"display_decision_record",
"display_review_packet",
"display_decision_next_state",
"display_required_reviewers",
"display_blocked_until_approved"
],
@@ -156,7 +159,7 @@
"execute_after_approval_without_new_runtime_gate",
"store_secret_value"
],
"exit_gate": "Approval candidate、S3 approval gate、decision recordreview packet 可顯示與留痕,但任何批准後執行仍需要下一階段 runtime gate。"
"exit_gate": "Approval candidate、S3 approval gate、decision recordreview packet 與 state transition 可顯示與留痕,但任何批准後執行仍需要下一階段 runtime gate。"
},
{
"wave_id": "M4_patch_only_backlog",