docs(agents): drop security review gates (#46)

Agents no longer treat a security review or a cross-family review as a merge gate.
This commit is contained in:
Adam Moussa 2026-09-26 17:18:28 -04:00 • committed by GitHub
parent 780d2f625c
commit 621fef3b19
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -22,12 +22,6 @@ State verifiable facts only. Do not cite the handbook to justify changes.
Allowed types: `feat` `fix` `docs` `style` `refactor` `perf` `test` `build` `ci` `chore` `revert` `release`. Allowed types: `feat` `fix` `docs` `style` `refactor` `perf` `test` `build` `ci` `chore` `revert` `release`.
## Security Gates
Changes touching payment flows, authentication, secrets, IaC/IAM, or untrusted user input require
a security review. IAM role, policy, or resource-permission changes require cross-family review.
Lambda handler-signature changes alone do not trigger cross-family review.
## CI and SHA Pins ## CI and SHA Pins
Pin every GitHub Actions ref to a full commit SHA with an inline version comment: Pin every GitHub Actions ref to a full commit SHA with an inline version comment: