feat: harden CASAN production install lifecycle

2026-07-24 11:11:44 +07:00
parent c7671ab198
commit 114340c719
48 changed files with 1036 additions and 165 deletions
@@ -0,0 +1,90 @@
+version: 1.0
+description: CASAN production tool registry with ownership, schema, risk, idempotency, and rollback metadata
+
+tools:
+  - id: agent_step
+    owner: ai-platform
+    risk_level: low
+    side_effect: false
+    idempotency_required: false
+    timeout_seconds: 600
+
+  - id: write_code
+    owner: engineering
+    risk_level: high
+    side_effect: true
+    idempotency_required: true
+    timeout_seconds: 900
+    allowed_agents: "boss,implement-agent"
+    rollback:
+      strategy: git_patch_reverse
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
+
+  - id: migration
+    owner: database-owner
+    risk_level: high
+    side_effect: true
+    idempotency_required: true
+    timeout_seconds: 900
+    allowed_agents: "boss,implement-agent"
+    rollback:
+      strategy: migration_down_or_restore
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
+
+  - id: deploy
+    owner: release-manager
+    risk_level: high
+    side_effect: true
+    idempotency_required: true
+    timeout_seconds: 1200
+    rate_limit_per_run: 2
+    allowed_agents: "boss,release-manager"
+    rollback:
+      strategy: previous_release
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
+
+  - id: external_api
+    owner: platform-team
+    risk_level: medium
+    side_effect: true
+    idempotency_required: true
+    timeout_seconds: 120
+    allowed_agents: "boss,implement-agent"
+    rollback:
+      strategy: compensating_request
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
+
+  - id: db_write
+    owner: database-owner
+    risk_level: high
+    side_effect: true
+    idempotency_required: true
+    timeout_seconds: 300
+    allowed_agents: "boss,implement-agent"
+    rollback:
+      strategy: restore_from_backup
+      script: packages/casan-harness/scripts/powershell/rollback-manager.ps1
+
+  - id: write_file
+    owner: engineering
+    risk_level: medium
+    side_effect: true
+    idempotency_required: false
+    timeout_seconds: 60
+    allowed_agents: "boss,implement-agent,design-agent"
+    rollback:
+      strategy: delete_or_restore
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
+
+level5_gate:
+  required_fields:
+    - id
+    - owner
+    - risk_level
+    - side_effect
+    - idempotency_required
+    - timeout_seconds
+  side_effecting_tools_require:
+    - idempotency_key
+    - audit_record
+    - rollback_strategy