docs(agent-team): fold GPT-4.1 plan-review findings into P3-live-flip plan #31

Merged

amoussa1229 merged 2 commits from docs/p3-plan-review-revision into main

2026-06-22 20:21:35 +00:00

amoussa1229 commented

2026-06-22 20:19:29 +00:00

(Migrated from github.com)

Folds the cross-family /sh-plan-review (GPT-4.1, REQUEST CHANGES) findings into docs/provisioning/P3-LIVE-FLIP-PLAN.md: expanded denylist vectors, runner-trust, concrete diff-transport + threat model, gate-weakening detection, PR-metadata sanitization, ledger anti-tamper, Phase 1b recovery for a merged-privileged change + draft-PR rate monitoring/cleanup, required-check discovery, deploy-before-merge enforcement, no-write-token audit. Annotates which BLOCK items are already implemented in PR #17's CI (Phase 1 verifies, not rebuilds). Docs-only; prep for the P3 session.

Folds the cross-family `/sh-plan-review` (GPT-4.1, REQUEST CHANGES) findings into `docs/provisioning/P3-LIVE-FLIP-PLAN.md`: expanded denylist vectors, runner-trust, concrete diff-transport + threat model, gate-weakening detection, PR-metadata sanitization, ledger anti-tamper, Phase 1b recovery for a merged-privileged change + draft-PR rate monitoring/cleanup, required-check discovery, deploy-before-merge enforcement, no-write-token audit. Annotates which BLOCK items are already implemented in PR #17's CI (Phase 1 verifies, not rebuilds). Docs-only; prep for the P3 session.

This repo is archived. You cannot comment on pull requests.

No reviewers