clean-architecture-backend-template/docs/mongodb/advanced/signoff/README.md

Advanced capability sign-off

scripts/verify-mongodb-advanced.sh treats a file in this directory as the evidence that a review happened:

• security.md — per-capability privilege review, naming the roles granted and by whom.
• migration.md — per-capability migration path, naming what an existing deployment has to do.

These were previously appended to the gate's missing-evidence list unconditionally, so the gate had no passing state at all. A gate that can never pass is one nobody can act on, and the thing it was waiting for — a human review — has an artefact. This is that artefact.

A file here asserts the review was done. Adding one without doing it is the failure mode; that is a review-process problem, and no script can tell the difference.