Danijel Martinek c17d3f147d chore(work): decompose 2026-05-14-ci-security-and-supply-chain epic ...

Decomposer produced 9 stories under docs/work/2026-05-14-ci-
security-and-supply-chain/, ordered to land the schema foundation
first and the cross-referencing content (reviewer prompt, guide)
last:

01 - trace schema extensions (socketRisk + lastRevalidated)
02 - Socket integration (skill + CI)
03 - Renovate adoption
04 - major-bump re-evaluation flow
05 - trace revalidation workflow
06 - CodeQL + audit signatures
07 - gitleaks pre-commit
08 - reviewer prompt update
09 - CI security guide + docs

Also fixes a one-char status typo in the PRD frontmatter
(\`appoved\` -> \`approved\`) that landed with the decompose run.

Anchored by ADR-023 + the approved PRD at
docs/work/prds/2026-05-14-ci-security-and-supply-chain.prd.md.
Sequencing: depends on stories 01/02/04/06 of the in-flight
library-evaluation epic landing first.

2026-05-14 18:59:12 +02:00

..

2026-05-13-binder-wrap-helper.prd.md

docs(prds): approve binder-wrap-helper PRD

2026-05-13 17:46:54 +02:00

2026-05-13-coverage-architecture.prd.md

docs(coverage): sync docs to shipped state + wire sandcastle prompts

2026-05-13 16:47:16 +02:00

2026-05-14-ci-security-and-supply-chain.prd.md

chore(work): decompose 2026-05-14-ci-security-and-supply-chain epic

2026-05-14 18:59:12 +02:00

2026-05-14-library-evaluation-policy.prd.md

docs: introduce library evaluation policy (ADR-022 + PRD)

2026-05-14 06:41:28 +02:00