docs(agents): drop security review gates (#71)

Agents no longer treat a security review or a cross-family review as a merge gate.
This commit is contained in:
Adam Moussa 2026-09-26 17:18:09 -04:00 • committed by GitHub
parent cc961e4b93
commit 5bede89b08
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -18,8 +18,4 @@
**Prohibited**: AI-attribution footers in commits, PRs, comments, or generated artifacts. **Prohibited**: AI-attribution footers in commits, PRs, comments, or generated artifacts.
**Security gates**:
- PRs touching payment flows, authentication logic, secret handling, AWS IAM, or untrusted user input require security review.
- IAM role, policy, or resource-permission changes require cross-family review.
**CI workflow refs**: All `uses:` workflow refs must be pinned to a full commit SHA with an inline version comment — `owner/repo/.github/workflows/file.yaml@<full-sha> # vX.Y.Z`. No floating tags or branch refs. **CI workflow refs**: All `uses:` workflow refs must be pinned to a full commit SHA with an inline version comment — `owner/repo/.github/workflows/file.yaml@<full-sha> # vX.Y.Z`. No floating tags or branch refs.