test(handoff): add fail-closed evidence schema and qualification records
This commit is contained in:
cesnimda
@@ -0,0 +1,278 @@
|
||||
{
|
||||
"schemaVersion": 1,
|
||||
"workstreamId": "AUTOMATION-HANDOFF-01",
|
||||
"kind": "GATES",
|
||||
"contractStatus": "PROPOSED_EVIDENCE_ADAPTER_NOT_EXECUTABLE_POLICY",
|
||||
"controllerCommit": "c1663df44ca54eb1e6fad8facfcbc2d5eb5db8c8",
|
||||
"controllerFiles": [
|
||||
"automation/backlog.json",
|
||||
"automation/schemas/backlog.schema.json",
|
||||
"automation/schemas/result.schema.json",
|
||||
"docs/automation/GATES.md"
|
||||
],
|
||||
"executionEnabledByThisPackage": false,
|
||||
"externalApprovalPolicy": "Use existing protected RSA/SHA256 owner-SID/request-hash/expiry binding. Bind resolved final baseline, candidate scope, policy/prompt and artifact hashes. No signatures/tokens are created here; all current checkpoint deferrableGates are empty. Any policy update/conditional-deferral requires the controller signed process.",
|
||||
"stages": [
|
||||
{
|
||||
"id": "PHASE-10",
|
||||
"sequence": 5,
|
||||
"requiredPredecessor": [
|
||||
"AUTOMATION-HANDOFF-01 accepted entry and protected owner decision"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"phase10-development-entry",
|
||||
"stage-requirements-review",
|
||||
"candidate-specific-cleanup-scope"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding",
|
||||
"Missing protected candidate-scope decision before removal; assessment-only entry cannot authorise deletions"
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "PRODUCT-REVIEW-01",
|
||||
"sequence": 6,
|
||||
"requiredPredecessor": [
|
||||
"PHASE-10"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"product-ranked-scope",
|
||||
"stage-requirements-review"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "INT-GLOBAL-JOBS-01",
|
||||
"sequence": 7,
|
||||
"requiredPredecessor": [
|
||||
"PRODUCT-REVIEW-01"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"global-jobs-implementation",
|
||||
"product-ranked-scope",
|
||||
"provider-licences-and-display-rights",
|
||||
"stage-requirements-review"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "I18N-01",
|
||||
"sequence": 8,
|
||||
"requiredPredecessor": [
|
||||
"INT-GLOBAL-JOBS-01"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"human-linguistic-and-market-qualification",
|
||||
"i18n-scope",
|
||||
"stage-requirements-review"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "LAUNCH-SITE-01",
|
||||
"sequence": 9,
|
||||
"requiredPredecessor": [
|
||||
"I18N-01"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"homepage-design-selection",
|
||||
"stage-requirements-review"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "SECURITY-AUDIT-01",
|
||||
"sequence": 10,
|
||||
"requiredPredecessor": [
|
||||
"LAUNCH-SITE-01"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"isolated-adversarial-targets",
|
||||
"material-security-findings-disposition",
|
||||
"security-test-environment-and-scope",
|
||||
"stage-requirements-review"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "RELEASE-READINESS-01",
|
||||
"sequence": 11,
|
||||
"requiredPredecessor": [
|
||||
"SECURITY-AUDIT-01"
|
||||
],
|
||||
"requiredTestSuites": [
|
||||
"Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
|
||||
"Stage-specific requirements and independent source-requirements review"
|
||||
],
|
||||
"minimumEvidence": [
|
||||
"Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
|
||||
"Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
|
||||
],
|
||||
"requiredGitState": [
|
||||
"Exact approved published baseline ancestry",
|
||||
"Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
|
||||
"No main merge, force push or deployment"
|
||||
],
|
||||
"preservationChecks": [
|
||||
"All57 original criteria retain status and scope; all33 old routes plus admin processing route",
|
||||
"Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
|
||||
"Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
|
||||
],
|
||||
"manualApprovals": [
|
||||
"release-evidence-review",
|
||||
"stage-requirements-review"
|
||||
],
|
||||
"permissibleConditionalDeferrals": [],
|
||||
"blockingFindings": [
|
||||
"Missing predecessor or protected approval",
|
||||
"Unqualified runtime/test adapter or missing/wrong-source report",
|
||||
"Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
|
||||
]
|
||||
}
|
||||
],
|
||||
"separateInitiatives": [
|
||||
"P5-13/C11 AI qualification and model assessment",
|
||||
"LinkedIn feasibility",
|
||||
"Android application",
|
||||
"SQLite retirement",
|
||||
"MariaDB upgrade strategy",
|
||||
"Monitoring and operational improvements",
|
||||
"Future country integrations"
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user