2 commits

Author	SHA1	Message	Date
Adam Moussa	2f7d12a431	docs(agent-team): fold GPT-4.1 plan-review findings into the P3-live-flip plan (#31) ... REQUEST CHANGES from the cross-family plan-review (2026-06-22), dispositioned: - expanded denylist (§4.2): submodules/.gitmodules, git hooks, .gitattributes filters, lockfile postinstall, generated artifacts - runner-trust assertion (privileged jobs GitHub-hosted only) - concrete diff-transport spec + threat model (signed artifact / branch-only token, nonce anti-replay) - gate-weakening detection (noqa/skip/excludes/--no-verify) - PR-metadata secret sanitization; ledger diff-hash anti-tamper - Phase 1b: recovery for an accidentally-merged/applied privileged change + draft-PR rate monitoring + stale-PR cleanup - required-check-name discovery; deploy-before-merge enforcement; no-write-token audit Notes which BLOCK items are already implemented in PR #17's CI (Phase 1 verifies, not rebuilds).	2026-06-22 16:21:35 -04:00
Adam Moussa	8afe876fa2	docs(agent-team): formal phased plan for the P3-live flip (build->verify->draft-PR) (#28) ... Phased plan to take Plane-2 from clarify+plan to producing reviewable draft PRs: locked decisions (GitHub App pull-requests:write, zero-AWS, read-only box), the mandatory gates (/sh-plan-review + /sh-security-review + GPT-4.1 cross-review on the CI surface), the B4 CI trust boundary (split CI, denylist, diff-hash, pure-code green gate), phases 0-6 with owners + exercised rollbacks, what changes vs what does not, risks, and definition of done. Input to /sh-plan-review before any build.	2026-06-22 16:05:54 -04:00