feat(plan-01): Phase 1 — relocate harness code to packages/casan-harness (symlink facade)

Physically move the pure-code subtrees out of .specify into the package, leaving compat symlinks at the old .specify/<dir> paths so every existing reference (internal CASAN_HARNESS_ROOT + external CI/docker/mjs) keeps resolving. Runtime state stays put. Moved (git mv): scripts/ tests/ security/ templates/ config/ governance/ memory/ .specify/<dir> -> packages/casan-harness/<dir> (+ .specify/<dir> symlink) Stays in .specify (state/governance/domain, handled later): logs/ agentops/ level5/ init-options.json traceability-map.json Python `.resolve()` self-location followed the compat symlink into packages and lost the app root; generate-casan-demo-context.py, generate-agentops-dashboard.py and dashboard-server.py now walk UP for the `.specify` state marker instead of a fixed parent depth (fixes "missing trace files" in run-casan4). Full gate: PASS=64 FAIL=0 SKIP=3 (CASAN_CI_STEP_TIMEOUT_SEC=1200 — track-a ~450s runs close to the 600s default and can tip over under load; this is timing variance, not a regression — it passed cleanly with headroom). Runtime log/audit artifacts kept unstaged. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-08 00:06:00 +09:00
parent 2c765c9a45
commit 664bd1f00c
229 changed files with 268 additions and 3 deletions
@@ -0,0 +1,62 @@
+#!/usr/bin/env pwsh
+# CASAN H5 Approval Request — identity-verified human checkpoint
+# Usage:
+#   request-approval.ps1 -ActionName <name> -RiskLevel <low|medium|high> [-Description <text>] [-NonInteractive]
+#
+# Exit codes: 0=approved, 2=denied
+
+param(
+    [Parameter(Mandatory=$true)][string]$ActionName,
+    [Parameter(Mandatory=$true)][ValidateSet("low","medium","high")][string]$RiskLevel,
+    [string]$Description = "",
+    [switch]$NonInteractive
+)
+
+$timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ")
+
+# Low/medium: auto-approve
+if ($RiskLevel -ne "high") {
+    Write-Output "AUTO_APPROVED: $ActionName (risk=$RiskLevel) ts=$timestamp"
+    exit 0
+}
+
+# High risk — require explicit approval with identity
+if ($NonInteractive) {
+    $decision = $env:CASAN_APPROVAL_DECISION
+    $approver = $env:CASAN_APPROVER
+
+    if ($decision -ne "approve") {
+        Write-Error "HIGH_RISK_DENIED: '$ActionName' requires CASAN_APPROVAL_DECISION=approve"
+        Write-Error "Set CASAN_APPROVER=<name> and CASAN_APPROVAL_DECISION=approve to proceed"
+        exit 2
+    }
+    if ([string]::IsNullOrWhiteSpace($approver)) {
+        Write-Error "HIGH_RISK_DENIED: CASAN_APPROVER must be set (cannot be empty)"
+        exit 2
+    }
+    Write-Output "APPROVED_WITH_IDENTITY: action=$ActionName approver=$approver ts=$timestamp"
+    exit 0
+}
+
+# Interactive mode
+Write-Host ""
+Write-Host "[GOVERNANCE] High-risk action requested" -ForegroundColor Yellow
+Write-Host "  Action:      $ActionName" -ForegroundColor White
+Write-Host "  Risk level:  $RiskLevel" -ForegroundColor Red
+if ($Description) { Write-Host "  Description: $Description" -ForegroundColor Gray }
+Write-Host ""
+
+$answer = Read-Host "Approve this action? (yes/no)"
+if ($answer.Trim().ToLower() -ne "yes") {
+    Write-Error "HUMAN_DENIED: $ActionName denied by operator"
+    exit 2
+}
+
+$approver = Read-Host "Enter your name (for audit trail)"
+if ([string]::IsNullOrWhiteSpace($approver)) {
+    Write-Error "HUMAN_DENIED: approver name cannot be empty"
+    exit 2
+}
+
+Write-Output "HUMAN_APPROVED: action=$ActionName approver=$approver ts=$timestamp"
+exit 0