Initial commit
This commit is contained in:
@@ -0,0 +1,42 @@
|
||||
---
|
||||
id: 02-refresh-operator-checklist
|
||||
epic: compliance-docs-scaffolds
|
||||
title: Refresh operator-checklist.md for ADR-024 and ADR-025
|
||||
type: technical-story
|
||||
status: done
|
||||
feature: ~
|
||||
depends-on: [01-land-operator-checklist]
|
||||
blocks: []
|
||||
created: 2026-05-20T12:00:00Z
|
||||
updated: 2026-05-20T12:08:20.429Z
|
||||
---
|
||||
|
||||
## Goal
|
||||
|
||||
Add two new sections to `docs/guides/operator-checklist.md` covering ADR-024 (analytics backend wiring) and ADR-025 (compliance directory, drift gate, retention purge scheduling, and sub-processors file). Preserve all existing ADR-022/023 content.
|
||||
|
||||
## Why
|
||||
|
||||
The operator checklist predates ADR-024 (analytics) and ADR-025 (the compliance epics). A template operator following the checklist today would miss compliance directory setup, the drift CI gate, and the retention purge job — all of which require a deliberate operator action.
|
||||
|
||||
## Done when
|
||||
|
||||
- `docs/guides/operator-checklist.md` contains a section for ADR-024 operator actions: note that the analytics backend is consumer-chosen + consumer-wired, and that the operator should decide whether to wire a vendor via `/evaluate-library`.
|
||||
- The file contains a section for ADR-025 operator actions: `compliance/*.yml` as committed audit evidence; compliance drift gate running in pre-commit + CI; retention purge job scheduling per `custom.retention`; `compliance/sub-processors.manual.yml` hand-authored for non-npm vendors.
|
||||
- All existing ADR-022/023 content is preserved unchanged.
|
||||
- Commit type is `docs(compliance)`.
|
||||
- `pnpm lint && pnpm typecheck && pnpm test && pnpm conformance && pnpm fallow:audit` all pass.
|
||||
|
||||
## In scope
|
||||
|
||||
- Adding ADR-024 operator actions section to `docs/guides/operator-checklist.md`.
|
||||
- Adding ADR-025 operator actions section to `docs/guides/operator-checklist.md`.
|
||||
|
||||
## Out of scope
|
||||
|
||||
- Rewriting or restructuring the existing ADR-022/023 sections.
|
||||
- Any other files.
|
||||
|
||||
## Tasks
|
||||
|
||||
- [x] Add ADR-024 (analytics backend is consumer-chosen; note `/evaluate-library` decision process) and ADR-025 (commit `compliance/*.yml` as audit evidence, verify compliance drift gate in pre-commit + CI, schedule retention purge job per `custom.retention`, hand-author `compliance/sub-processors.manual.yml` for non-npm vendors) operator action sections to `docs/guides/operator-checklist.md`, preserving all existing content; commit as `docs(compliance): refresh operator-checklist with ADR-024 and ADR-025 actions`.
|
||||
Reference in New Issue
Block a user