Files
msd-core/tests/agent-size-baseline.json
Tom Boucher 207d8f1697 fix(#1626): make the security gate severity-aware via per-threat severity (#1635)
workflow.security_block_on was documented as the minimum threat severity
that blocks advancement, but threats carried no severity and the auditor's
threats_open count (the SECURITY.md gate field) counted every open threat
regardless of severity — so the threshold had no effect, and the auditor's
block_on vocabulary (open/unregistered/none) did not even match the config
enum (critical/high/medium/low/none).

- planner: add a Severity column to the STRIDE threat register; assign
  severity per threat.
- auditor: read severity; reconcile the <config> block_on domain to the
  severity enum; redefine threats_open as the count of OPEN threats whose
  severity is at or above block_on (none => 0). Below-threshold opens are
  reported as non-blocking and excluded from threats_open.
- SECURITY.md template + planning-config.md reconciled.

No gate-check site changed: threats_open == 0 stays the gate everywhere;
only its computation is now severity-filtered.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 19:04:13 -04:00

37 lines
1.1 KiB
JSON

{
"gsd-advisor-researcher.md": 4543,
"gsd-ai-researcher.md": 5851,
"gsd-assumptions-analyzer.md": 4496,
"gsd-code-fixer.md": 36506,
"gsd-code-reviewer.md": 16780,
"gsd-codebase-mapper.md": 21395,
"gsd-debug-session-manager.md": 14159,
"gsd-debugger.md": 51220,
"gsd-doc-classifier.md": 7629,
"gsd-doc-synthesizer.md": 9722,
"gsd-doc-verifier.md": 12403,
"gsd-doc-writer.md": 38834,
"gsd-domain-researcher.md": 6938,
"gsd-eval-auditor.md": 7761,
"gsd-eval-planner.md": 7008,
"gsd-executor.md": 43343,
"gsd-framework-selector.md": 6778,
"gsd-integration-checker.md": 15148,
"gsd-intel-updater.md": 18122,
"gsd-mempalace-curator.md": 4160,
"gsd-nyquist-auditor.md": 7255,
"gsd-pattern-mapper.md": 12487,
"gsd-phase-researcher.md": 40638,
"gsd-plan-checker.md": 44646,
"gsd-planner.md": 48023,
"gsd-project-researcher.md": 22014,
"gsd-research-synthesizer.md": 13653,
"gsd-roadmapper.md": 22183,
"gsd-security-auditor.md": 8891,
"gsd-ui-auditor.md": 17159,
"gsd-ui-checker.md": 11088,
"gsd-ui-researcher.md": 19272,
"gsd-user-profiler.md": 8516,
"gsd-verifier.md": 48859
}