jobtrackingapp/automation/prompts/jobjakt-security/templates/RELEASE_GATE_TEMPLATE.md

Jobjakt Security Release Gate — TEMPLATE

• Release commit / staging image digest:
• Reviewer / assessment date:
• Scope: exact repos, services, staging targets and accounts:
• Staging isolation verified: YES / NO (evidence)
• Test suites and scan outputs: tool, version, last execution, pass/fail/blocked:
• Authentication and MFA negative paths: PASS / FAIL / UNTESTED
• Cross-tenant and object-level isolation: PASS / FAIL / UNTESTED
• Upload, document parsing and PDF/export isolation: PASS / FAIL / UNTESTED
• AI prompt injection and service boundary: PASS / FAIL / UNTESTED
• Nginx/Docker/DB and credential exposure: PASS / FAIL / UNTESTED
• Backup restoration (synthetic staging): PASS / FAIL / UNTESTED
• CI/CD and SBOM/security checks: PASS / FAIL / UNTESTED
• Active exposed secrets pending revocation: YES / NO / UNKNOWN
• Known unmitigated critical/high exploitable issues: YES / NO / UNKNOWN
• Human acceptance tests, OAuth provider and mobile devices still unverified:
• Explicit accepted risks and sign-offs:
• Rollback and incident contacts verified: YES / NO

Proposed recommendation

GO / CONDITIONAL NO-GO / NO-GO. Justify. No actual production deploy or merge from this report. High/critical exploitable issues, data isolation breakages and active exposed secrets prevent a GO recommendation. No assessment guarantees absence of other bugs.