Move the harness-config files out of the mixed .specify/level5 and .specify/agentops
dirs (which also hold governance/domain/state) into packages/casan-harness, leaving a
per-file compat symlink at each old path. Runtime state and governance stay in place.
Moved (+ .specify symlink each):
level5: drift-policy.yaml kpi-schema.yaml model-fallback.yaml tool-registry.yaml
harness-package.json project-registry.json provider-usage-sample.json
agentops: alerts.yaml hallucination-tracking.yaml metrics.yaml rate-limits.yaml tracking.yaml
top: init-options.json
Stays in .specify: level5/central-governance (governance), level5/golden-runs (domain,
Phase 3), agentops/alerts.log (state), traceability-map.json (domain, Phase 3).
Full gate: PASS=64 FAIL=0 SKIP=3 (CASAN_CI_STEP_TIMEOUT_SEC=1200).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
91 lines
2.3 KiB
YAML
91 lines
2.3 KiB
YAML
version: 1.0
|
|
description: CASAN Level 5 tool registry with ownership, schema, risk, idempotency, and rollback metadata
|
|
|
|
tools:
|
|
- id: agent_step
|
|
owner: ai-platform
|
|
risk_level: low
|
|
side_effect: false
|
|
idempotency_required: false
|
|
timeout_seconds: 600
|
|
|
|
- id: write_code
|
|
owner: engineering
|
|
risk_level: high
|
|
side_effect: true
|
|
idempotency_required: true
|
|
timeout_seconds: 900
|
|
allowed_agents: "boss,implement-agent"
|
|
rollback:
|
|
strategy: git_patch_reverse
|
|
script: .specify/scripts/bash/rollback-manager.sh
|
|
|
|
- id: migration
|
|
owner: database-owner
|
|
risk_level: high
|
|
side_effect: true
|
|
idempotency_required: true
|
|
timeout_seconds: 900
|
|
allowed_agents: "boss,implement-agent"
|
|
rollback:
|
|
strategy: migration_down_or_restore
|
|
script: .specify/scripts/bash/rollback-manager.sh
|
|
|
|
- id: deploy
|
|
owner: release-manager
|
|
risk_level: high
|
|
side_effect: true
|
|
idempotency_required: true
|
|
timeout_seconds: 1200
|
|
rate_limit_per_run: 2
|
|
allowed_agents: "boss,release-manager"
|
|
rollback:
|
|
strategy: previous_release
|
|
script: .specify/scripts/bash/rollback-manager.sh
|
|
|
|
- id: external_api
|
|
owner: platform-team
|
|
risk_level: medium
|
|
side_effect: true
|
|
idempotency_required: true
|
|
timeout_seconds: 120
|
|
allowed_agents: "boss,implement-agent"
|
|
rollback:
|
|
strategy: compensating_request
|
|
script: .specify/scripts/bash/rollback-manager.sh
|
|
|
|
- id: db_write
|
|
owner: database-owner
|
|
risk_level: high
|
|
side_effect: true
|
|
idempotency_required: true
|
|
timeout_seconds: 300
|
|
allowed_agents: "boss,implement-agent"
|
|
rollback:
|
|
strategy: restore_from_backup
|
|
script: .specify/scripts/powershell/rollback-manager.ps1
|
|
|
|
- id: write_file
|
|
owner: engineering
|
|
risk_level: medium
|
|
side_effect: true
|
|
idempotency_required: false
|
|
timeout_seconds: 60
|
|
allowed_agents: "boss,implement-agent,design-agent"
|
|
rollback:
|
|
strategy: delete_or_restore
|
|
script: .specify/scripts/bash/rollback-manager.sh
|
|
|
|
level5_gate:
|
|
required_fields:
|
|
- id
|
|
- owner
|
|
- risk_level
|
|
- side_effect
|
|
- idempotency_required
|
|
- timeout_seconds
|
|
side_effecting_tools_require:
|
|
- idempotency_key
|
|
- audit_record
|
|
- rollback_strategy
|