2154e6bb07
Adds /gsd:secure-phase command and gsd-security-auditor agent as a threat-model-anchored security gate parallel to Nyquist validation. New files: - agents/gsd-security-auditor.md — verifies PLAN.md threat mitigations exist in implemented code; SECURED/OPEN_THREATS/ESCALATE returns - commands/gsd/secure-phase.md — retroactive command, mirrors validate-phase - get-shit-done/workflows/secure-phase.md — enforcing gate: threats_open > 0 blocks phase advancement; accepted risks log prevents resurface - get-shit-done/templates/SECURITY.md — per-phase threat register artifact Modified: - config.json — security_enforcement (absent=enabled), security_asvs_level, security_block_on parallel to nyquist_validation pattern - VALIDATION.md — Threat Ref + Secure Behavior columns in verification map - gsd-planner.md — <threat_model> block in PLAN.md format + quality gate - gsd-executor.md — Rule 2 threat model reference + ## Threat Flags scan - gsd-phase-researcher.md — ## Security Domain mandatory research section - plan-phase.md — step 5.55 Security Threat Model Gate - execute-phase.md — security gate announcement in aggregate step - verify-work.md — /gsd:secure-phase surfaced in completion routing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
48 lines
1.1 KiB
JSON
48 lines
1.1 KiB
JSON
{
|
|
"mode": "interactive",
|
|
"granularity": "standard",
|
|
"workflow": {
|
|
"research": true,
|
|
"plan_check": true,
|
|
"verifier": true,
|
|
"auto_advance": false,
|
|
"nyquist_validation": true,
|
|
"security_enforcement": true,
|
|
"security_asvs_level": 1,
|
|
"security_block_on": "high",
|
|
"discuss_mode": "discuss",
|
|
"research_before_questions": false
|
|
},
|
|
"planning": {
|
|
"commit_docs": true,
|
|
"search_gitignored": false,
|
|
"sub_repos": []
|
|
},
|
|
"parallelization": {
|
|
"enabled": true,
|
|
"plan_level": true,
|
|
"task_level": false,
|
|
"skip_checkpoints": true,
|
|
"max_concurrent_agents": 3,
|
|
"min_plans_for_parallel": 2
|
|
},
|
|
"gates": {
|
|
"confirm_project": true,
|
|
"confirm_phases": true,
|
|
"confirm_roadmap": true,
|
|
"confirm_breakdown": true,
|
|
"confirm_plan": true,
|
|
"execute_next_plan": true,
|
|
"issues_review": true,
|
|
"confirm_transition": true
|
|
},
|
|
"safety": {
|
|
"always_confirm_destructive": true,
|
|
"always_confirm_external_services": true
|
|
},
|
|
"hooks": {
|
|
"context_warnings": true
|
|
},
|
|
"agent_skills": {}
|
|
}
|