Bantuson 2154e6bb07 feat: add security-first enforcement layer with threat-model-anchored verification ...

Adds /gsd:secure-phase command and gsd-security-auditor agent as a
threat-model-anchored security gate parallel to Nyquist validation.

New files:
- agents/gsd-security-auditor.md — verifies PLAN.md threat mitigations
  exist in implemented code; SECURED/OPEN_THREATS/ESCALATE returns
- commands/gsd/secure-phase.md — retroactive command, mirrors validate-phase
- get-shit-done/workflows/secure-phase.md — enforcing gate: threats_open > 0
  blocks phase advancement; accepted risks log prevents resurface
- get-shit-done/templates/SECURITY.md — per-phase threat register artifact

Modified:
- config.json — security_enforcement (absent=enabled), security_asvs_level,
  security_block_on parallel to nyquist_validation pattern
- VALIDATION.md — Threat Ref + Secure Behavior columns in verification map
- gsd-planner.md — <threat_model> block in PLAN.md format + quality gate
- gsd-executor.md — Rule 2 threat model reference + ## Threat Flags scan
- gsd-phase-researcher.md — ## Security Domain mandatory research section
- plan-phase.md — step 5.55 Security Threat Model Gate
- execute-phase.md — security gate announcement in aggregate step
- verify-work.md — /gsd:secure-phase surfaced in completion routing

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-25 11:18:30 +02:00

..

add-backlog.md

feat: add backlog parking lot and persistent context threads (#1005)

2026-03-18 20:28:40 -04:00

add-phase.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

add-tests.md

feat: add /gsd:add-tests command for post-phase test generation (#635)

2026-02-23 09:39:56 -06:00

add-todo.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

audit-milestone.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

audit-uat.md

feat: add verification debt tracking and /gsd:audit-uat command

2026-03-19 00:05:05 -05:00

autonomous.md

feat: add Copilot CLI runtime support and gsd-autonomous skill (#911)

2026-03-14 17:41:19 -06:00

check-todos.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

cleanup.md

feat(phases): archive completed milestone phase directories (closes #489)

2026-02-15 14:33:50 -06:00

complete-milestone.md

refactor: unify milestone flow, remove deprecated commands

2026-01-17 00:28:41 -06:00

debug.md

fix: add <available_agent_types> to all workflows spawning named agents

2026-03-24 13:17:18 -04:00

discuss-phase.md

fix: prevent discuss-phase from ignoring workflow instructions (#1292)

2026-03-21 14:13:11 -04:00

do.md

feat(do): add freeform text router command (#1067)

2026-03-15 19:30:46 -06:00

execute-phase.md

Merge branch 'main' into Solvely/execute-phase-active-flags

2026-03-20 13:52:26 -04:00

fast.md

feat: /gsd:fast command for trivial inline tasks (#609)

2026-03-18 17:17:28 -04:00

forensics.md

fix: address review findings on forensics PR #1305

2026-03-21 18:21:41 -04:00

health.md

feat(health): add /gsd:health command for planning directory validation

2026-02-15 16:25:01 -06:00

help.md

refactor: update commands, workflows, agents for gsd-tools integration

2026-02-07 11:25:35 -06:00

insert-phase.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

join-discord.md

chore: update Discord invite to vanity URL

2026-02-25 07:20:14 -06:00

list-phase-assumptions.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

list-workspaces.md

feat: add multi-project workspace commands (#1241)

2026-03-20 17:02:48 -04:00

manager.md

feat(manager): add interactive command center with dependency-aware recommendations

2026-03-21 07:22:21 -05:00

map-codebase.md

feat(gsd): add dedicated codebase mapper agent

2026-01-15 17:16:02 -06:00

milestone-summary.md

fix: address all review findings on PR #1299

2026-03-21 16:38:34 -04:00

new-milestone.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

new-project.md

feat(new-project): add --auto flag for unattended initialization

2026-02-08 10:00:13 -06:00

new-workspace.md

feat: add multi-project workspace commands (#1241)

2026-03-20 17:02:48 -04:00

next.md

feat: add /gsd:next command for automatic workflow advancement (#927) (#1167)

2026-03-18 09:56:35 -06:00

note.md

feat(note): add zero-friction note capture command (#1080)

2026-03-16 08:50:19 -06:00

pause-work.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

plan-milestone-gaps.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

plan-phase.md

fix: add text_mode support to plan-phase workflow

2026-03-22 11:21:43 -04:00

plant-seed.md

feat: community-requested commands — /gsd:review, /gsd:plant-seed, /gsd:pr-branch

2026-03-18 23:53:13 -04:00

pr-branch.md

feat: community-requested commands — /gsd:review, /gsd:plant-seed, /gsd:pr-branch

2026-03-18 23:53:13 -04:00

profile-user.md

feat: add developer profiling pipeline (#1084)

2026-03-16 09:46:00 -06:00

progress.md

refactor: update commands, workflows, agents for gsd-tools integration

2026-02-07 11:25:35 -06:00

quick.md

feat(quick): add --research flag for focused pre-planning research (#317) (#1063)

2026-03-15 11:45:25 -06:00

reapply-patches.md

fix(opencode): detect runtime config directory instead of hardcoding .claude

2026-02-28 05:40:27 -08:00

remove-phase.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

remove-workspace.md

feat: add multi-project workspace commands (#1241)

2026-03-20 17:02:48 -04:00

research-phase.md

fix: add <available_agent_types> to all workflows spawning named agents

2026-03-24 13:17:18 -04:00

resume-work.md

feat: add Claude Code marketplace plugin support

2026-01-06 18:11:30 -06:00

review-backlog.md

feat: add backlog parking lot and persistent context threads (#1005)

2026-03-18 20:28:40 -04:00

review.md

feat: community-requested commands — /gsd:review, /gsd:plant-seed, /gsd:pr-branch

2026-03-18 23:53:13 -04:00

secure-phase.md

feat: add security-first enforcement layer with threat-model-anchored verification

2026-03-25 11:18:30 +02:00

session-report.md

fix: hook version tracking, stale hook detection, stdin timeout, and session-report command (#1153, #1157, #1161, #1162) (#1163)

2026-03-18 09:57:20 -06:00

set-profile.md

feat: Programmatic implementation of /gsd:set-profile command (#1007)

2026-03-15 11:45:14 -06:00

settings.md

refactor: extract settings, add-todo, pause-work, set-profile to thin orchestrators

2026-02-07 11:08:35 -06:00

ship.md

feat: /gsd:ship command for PR creation from verified phase work (#829) (#1123)

2026-03-18 10:01:08 -06:00

stats.md

feat: add /gsd:stats command for project statistics

2026-03-14 21:58:09 -06:00

thread.md

feat: add backlog parking lot and persistent context threads (#1005)

2026-03-18 20:28:40 -04:00

ui-phase.md

feat: add /gsd:ui-phase + /gsd:ui-review design contract and visual audit layer (closes #986)

2026-03-14 21:57:59 -06:00

ui-review.md

feat: add /gsd:ui-phase + /gsd:ui-review design contract and visual audit layer (closes #986)

2026-03-14 21:57:59 -06:00

update.md

refactor: extract check-todos, add-phase, update to thin orchestrators

2026-02-07 11:08:27 -06:00

validate-phase.md

feat: harden Nyquist defaults, add retroactive validation, compress prompts (#855)

2026-03-03 11:19:44 -06:00

verify-work.md

refactor: complete context-proxy orchestration flow

2026-02-19 12:40:45 -06:00

workstreams.md

feat: workstream namespacing for parallel milestone work

2026-03-21 15:21:13 -07:00