chore(work): finish 08-reviewer-prompt-update
This commit is contained in:
@@ -3,7 +3,7 @@ id: 08-reviewer-prompt-update
|
||||
epic: 2026-05-14-ci-security-and-supply-chain
|
||||
title: Sandcastle reviewer prompt update
|
||||
type: technical-story
|
||||
status: todo
|
||||
status: done
|
||||
feature: tooling
|
||||
depends-on: [02-socket-integration, 06-codeql-and-audit-signatures]
|
||||
blocks: [09-ci-security-guide-and-docs]
|
||||
@@ -37,4 +37,4 @@ The sandcastle reviewer is the single composable gate for agent PRs (ADR-019 con
|
||||
|
||||
## Tasks
|
||||
|
||||
- [ ] Extend `.sandcastle/reviewer.prompt.md` with a "CI security checks" section after the library-trace check: instruct the reviewer to read `gh run view` output for Socket `critical` findings and CodeQL `error` findings, reject on either with notes naming the finding and citing `docs/guides/ci-security.md` failure-mode hierarchy; one commit, all gates pass.
|
||||
- [x] Extend `.sandcastle/reviewer.prompt.md` with a "CI security checks" section after the library-trace check: instruct the reviewer to read `gh run view` output for Socket `critical` findings and CodeQL `error` findings, reject on either with notes naming the finding and citing `docs/guides/ci-security.md` failure-mode hierarchy; one commit, all gates pass.
|
||||
|
||||
Reference in New Issue
Block a user