3 Commits

Author	SHA1	Message	Date
Bantuson	2154e6bb07	feat: add security-first enforcement layer with threat-model-anchored verification ... Adds /gsd:secure-phase command and gsd-security-auditor agent as a threat-model-anchored security gate parallel to Nyquist validation. New files: - agents/gsd-security-auditor.md — verifies PLAN.md threat mitigations exist in implemented code; SECURED/OPEN_THREATS/ESCALATE returns - commands/gsd/secure-phase.md — retroactive command, mirrors validate-phase - get-shit-done/workflows/secure-phase.md — enforcing gate: threats_open > 0 blocks phase advancement; accepted risks log prevents resurface - get-shit-done/templates/SECURITY.md — per-phase threat register artifact Modified: - config.json — security_enforcement (absent=enabled), security_asvs_level, security_block_on parallel to nyquist_validation pattern - VALIDATION.md — Threat Ref + Secure Behavior columns in verification map - gsd-planner.md — <threat_model> block in PLAN.md format + quality gate - gsd-executor.md — Rule 2 threat model reference + ## Threat Flags scan - gsd-phase-researcher.md — ## Security Domain mandatory research section - plan-phase.md — step 5.55 Security Threat Model Gate - execute-phase.md — security gate announcement in aggregate step - verify-work.md — /gsd:secure-phase surfaced in completion routing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-25 11:18:30 +02:00
Fana	8b90235dea	refactor: compress Nyquist validation layer to align with GSD meta-prompt conventions (#699) ... Reduces token overhead of Dimension 8 and related agent additions by ~37% with no behavioral change. Removes theory explanation, dead XML tags (<manual>, <sampling_rate>), aspirational execution tracking, and documentation-density prose from runtime agent bodies. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-23 09:57:47 -06:00
Bantuson	e0f9c738c9	feat: add Nyquist validation layer to plan-phase pipeline ... Adds automated feedback architecture research to gsd-phase-researcher, enforces it as Dimension 8 in gsd-plan-checker, and introduces {phase}-VALIDATION.md as the per-phase validation contract. Ensures every phase plan includes automated verify commands before execution begins. Opt-out via workflow.nyquist_validation: false. Closes #122 (partial), related #117 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-20 13:46:39 +02:00