egbt/secrets
1
0
Fork 0
Code Issues Pull requests Projects Releases 13 Packages Wiki Activity Actions

chore: security review policy + operator runner, doc updates (EGB-677 stage 1)

Browse source 
Add .ship-policy.json (opts out AI adversarial/red-team/security-specialist
review; requires local operator sign-off) and test/run-security.sh (the
operator-local security regression subset). Document the policy in CLAUDE.md
and README, fix stale test counts (manifest.bats 41->58, total 174->191), and
update the storage-recursion note to reflect rekey/list now walking the full
project tree.
This commit is contained in:
Brian Majewski 2026-06-07 13:12:39 -07:00
parent c6ea724ddb
commit 588f290dcc
4 changed files with 121 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

15
.ship-policy.json Normal file
View file

@ -0,0 +1,15 @@
{
"version": 1,
"ai_review": {
"adversarial": false,
"red_team": false,
"security_specialist": false,
"reason": "This repo ships defensive security regression tests with attack-payload fixtures (shell injection, path traversal, symlink rails). AI-driven adversarial, red-team, and security-specialist review triggers Anthropic Usage Policy blocks (real-time cyber safeguards on hosted models). Do not dispatch those subagents or prompts for this repository."
},
"manual_security_signoff": {
"script": "./test/run-security.sh",
"signoff_file": ".gstack/security-signoff.json",
"required_before_ship": true,
"instructions": "A human operator runs the script locally, reviews output, and types SIGNOFF. Agents must not run the security suite or substitute AI review for sign-off."
}
}