thanhnvandClaude Opus 4.8
6cb96ce249
The policy bundle listed the 8 governed policy files under .specify/... (pre-restructure). After the move they live in packages/casan-harness/. Repoint all 8 paths and re-sign the manifest. This MUST be committed as its own step: phase-sec09/sec29 cleanup runs `git checkout -- .specify/level5/central-governance/`, which restored the bundle to HEAD on every gate run — so the fix only sticks once HEAD itself carries the corrected, re-signed bundle. sign-policy-bundle verify → POLICY_SIGNATURE_VALID. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
56 lines
1.5 KiB
YAML
56 lines
1.5 KiB
YAML
version: 1.0
|
|
bundle_id: casan-okr-harness-policy
|
|
owner: ai-governance-board
|
|
description: Central policy bundle for CASAN Level 5 governance
|
|
|
|
policies:
|
|
- id: h4-prompt-filter
|
|
path: packages/casan-harness/security/prompt-filter.yaml
|
|
owner: security-team
|
|
required: true
|
|
|
|
- id: h4-output-policy
|
|
path: packages/casan-harness/security/output-policy.yaml
|
|
owner: security-team
|
|
required: true
|
|
|
|
- id: h5-approval-flow
|
|
path: packages/casan-harness/governance/approval-flow.yaml
|
|
owner: governance-team
|
|
required: true
|
|
|
|
- id: h5-risk-registry
|
|
path: packages/casan-harness/governance/risk-registry.yaml
|
|
owner: governance-team
|
|
required: true
|
|
|
|
- id: h6-metrics
|
|
path: packages/casan-harness/agentops/metrics.yaml
|
|
owner: agentops-team
|
|
required: true
|
|
|
|
- id: l5-tool-registry
|
|
path: packages/casan-harness/level5/tool-registry.yaml
|
|
owner: platform-team
|
|
required: true
|
|
|
|
- id: l5-fallback
|
|
path: packages/casan-harness/level5/model-fallback.yaml
|
|
owner: platform-team
|
|
required: true
|
|
|
|
- id: l5-drift
|
|
path: packages/casan-harness/level5/drift-policy.yaml
|
|
owner: quality-team
|
|
required: true
|
|
|
|
approval:
|
|
signing_required: true
|
|
approver_group: ai-governance-board
|
|
verification_script: .specify/scripts/bash/sign-policy-bundle.sh
|
|
|
|
evidence:
|
|
manifest: .specify/level5/central-governance/policy-manifest.json
|
|
signature: .specify/level5/central-governance/policy-manifest.sig
|
|
public_key: .specify/level5/central-governance/policy-public.pem
|