chore(work): decompose 2026-05-14-ci-security-and-supply-chain epic
Decomposer produced 9 stories under docs/work/2026-05-14-ci- security-and-supply-chain/, ordered to land the schema foundation first and the cross-referencing content (reviewer prompt, guide) last: 01 - trace schema extensions (socketRisk + lastRevalidated) 02 - Socket integration (skill + CI) 03 - Renovate adoption 04 - major-bump re-evaluation flow 05 - trace revalidation workflow 06 - CodeQL + audit signatures 07 - gitleaks pre-commit 08 - reviewer prompt update 09 - CI security guide + docs Also fixes a one-char status typo in the PRD frontmatter (\`appoved\` -> \`approved\`) that landed with the decompose run. Anchored by ADR-023 + the approved PRD at docs/work/prds/2026-05-14-ci-security-and-supply-chain.prd.md. Sequencing: depends on stories 01/02/04/06 of the in-flight library-evaluation epic landing first.
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"updated_at": "2026-05-14T16:47:27.076Z",
|
||||
"updated_at": "2026-05-14T16:59:14.033Z",
|
||||
"epics": {
|
||||
"2026-05-13-binder-wrap-helper": {
|
||||
"status": "done",
|
||||
@@ -39,6 +39,109 @@
|
||||
}
|
||||
}
|
||||
},
|
||||
"2026-05-14-ci-security-and-supply-chain": {
|
||||
"status": "in-progress",
|
||||
"title": "CI security + supply-chain enforcement stack",
|
||||
"prd": "docs/work/prds/2026-05-14-ci-security-and-supply-chain.prd.md",
|
||||
"stories": {
|
||||
"01-trace-schema-extensions": {
|
||||
"status": "in-progress",
|
||||
"title": "Trace schema extensions (socketRisk + lastRevalidated)",
|
||||
"ac_total": 1,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [],
|
||||
"blocks": []
|
||||
},
|
||||
"02-socket-integration": {
|
||||
"status": "todo",
|
||||
"title": "Socket integration (skill + CI)",
|
||||
"ac_total": 2,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [
|
||||
"01-trace-schema-extensions"
|
||||
],
|
||||
"blocks": [
|
||||
"08-reviewer-prompt-update"
|
||||
]
|
||||
},
|
||||
"03-renovate-adoption": {
|
||||
"status": "todo",
|
||||
"title": "Renovate adoption",
|
||||
"ac_total": 1,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [],
|
||||
"blocks": [
|
||||
"09-ci-security-guide-and-docs"
|
||||
]
|
||||
},
|
||||
"04-major-bump-reevaluation": {
|
||||
"status": "todo",
|
||||
"title": "Major-bump re-evaluation flow",
|
||||
"ac_total": 1,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [
|
||||
"01-trace-schema-extensions"
|
||||
],
|
||||
"blocks": [
|
||||
"05-trace-revalidation-workflow"
|
||||
]
|
||||
},
|
||||
"05-trace-revalidation-workflow": {
|
||||
"status": "todo",
|
||||
"title": "Trace revalidation workflow",
|
||||
"ac_total": 2,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [
|
||||
"01-trace-schema-extensions",
|
||||
"04-major-bump-reevaluation"
|
||||
],
|
||||
"blocks": [
|
||||
"09-ci-security-guide-and-docs"
|
||||
]
|
||||
},
|
||||
"06-codeql-and-audit-signatures": {
|
||||
"status": "todo",
|
||||
"title": "CodeQL workflow + pnpm audit signatures",
|
||||
"ac_total": 2,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [],
|
||||
"blocks": [
|
||||
"08-reviewer-prompt-update"
|
||||
]
|
||||
},
|
||||
"07-gitleaks-precommit": {
|
||||
"status": "todo",
|
||||
"title": "Gitleaks pre-commit hook",
|
||||
"ac_total": 1,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [],
|
||||
"blocks": [
|
||||
"09-ci-security-guide-and-docs"
|
||||
]
|
||||
},
|
||||
"08-reviewer-prompt-update": {
|
||||
"status": "todo",
|
||||
"title": "Sandcastle reviewer prompt update",
|
||||
"ac_total": 1,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [
|
||||
"02-socket-integration",
|
||||
"06-codeql-and-audit-signatures"
|
||||
],
|
||||
"blocks": [
|
||||
"09-ci-security-guide-and-docs"
|
||||
]
|
||||
},
|
||||
"09-ci-security-guide-and-docs": {
|
||||
"status": "todo",
|
||||
"title": "CI security guide + CLAUDE.md",
|
||||
"ac_total": 2,
|
||||
"ac_completed": 0,
|
||||
"depends_on": [],
|
||||
"blocks": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"2026-05-14-library-evaluation-policy": {
|
||||
"status": "done",
|
||||
"title": "Library evaluation policy — skill, traces, enforcement stack",
|
||||
@@ -154,7 +257,68 @@
|
||||
}
|
||||
}
|
||||
},
|
||||
"ready": [],
|
||||
"blocked": [],
|
||||
"ready": [
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "01-trace-schema-extensions",
|
||||
"title": "Trace schema extensions (socketRisk + lastRevalidated)"
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "03-renovate-adoption",
|
||||
"title": "Renovate adoption"
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "06-codeql-and-audit-signatures",
|
||||
"title": "CodeQL workflow + pnpm audit signatures"
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "07-gitleaks-precommit",
|
||||
"title": "Gitleaks pre-commit hook"
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "09-ci-security-guide-and-docs",
|
||||
"title": "CI security guide + CLAUDE.md"
|
||||
}
|
||||
],
|
||||
"blocked": [
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "02-socket-integration",
|
||||
"title": "Socket integration (skill + CI)",
|
||||
"waiting_on": [
|
||||
"2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions"
|
||||
]
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "04-major-bump-reevaluation",
|
||||
"title": "Major-bump re-evaluation flow",
|
||||
"waiting_on": [
|
||||
"2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions"
|
||||
]
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "05-trace-revalidation-workflow",
|
||||
"title": "Trace revalidation workflow",
|
||||
"waiting_on": [
|
||||
"2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions",
|
||||
"2026-05-14-ci-security-and-supply-chain/04-major-bump-reevaluation"
|
||||
]
|
||||
},
|
||||
{
|
||||
"epic": "2026-05-14-ci-security-and-supply-chain",
|
||||
"story": "08-reviewer-prompt-update",
|
||||
"title": "Sandcastle reviewer prompt update",
|
||||
"waiting_on": [
|
||||
"2026-05-14-ci-security-and-supply-chain/02-socket-integration",
|
||||
"2026-05-14-ci-security-and-supply-chain/06-codeql-and-audit-signatures"
|
||||
]
|
||||
}
|
||||
],
|
||||
"needs_prd_ship": []
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user