chore(work): finish 08-reviewer-prompt-update

This commit is contained in:
2026-05-14 20:05:17 +02:00
parent 83b6119ca6
commit 33ed9e97e4
2 changed files with 5 additions and 10 deletions

View File

@@ -3,7 +3,7 @@ id: 08-reviewer-prompt-update
epic: 2026-05-14-ci-security-and-supply-chain
title: Sandcastle reviewer prompt update
type: technical-story
status: todo
status: done
feature: tooling
depends-on: [02-socket-integration, 06-codeql-and-audit-signatures]
blocks: [09-ci-security-guide-and-docs]
@@ -37,4 +37,4 @@ The sandcastle reviewer is the single composable gate for agent PRs (ADR-019 con
## Tasks
- [ ] Extend `.sandcastle/reviewer.prompt.md` with a "CI security checks" section after the library-trace check: instruct the reviewer to read `gh run view` output for Socket `critical` findings and CodeQL `error` findings, reject on either with notes naming the finding and citing `docs/guides/ci-security.md` failure-mode hierarchy; one commit, all gates pass.
- [x] Extend `.sandcastle/reviewer.prompt.md` with a "CI security checks" section after the library-trace check: instruct the reviewer to read `gh run view` output for Socket `critical` findings and CodeQL `error` findings, reject on either with notes naming the finding and citing `docs/guides/ci-security.md` failure-mode hierarchy; one commit, all gates pass.