15 lines
770 B
Markdown
15 lines
770 B
Markdown
# Advanced capability sign-off
|
|
|
|
`scripts/verify-mongodb-advanced.sh` treats a file in this directory as the evidence that a review
|
|
happened:
|
|
|
|
- `security.md` — per-capability privilege review, naming the roles granted and by whom.
|
|
- `migration.md` — per-capability migration path, naming what an existing deployment has to do.
|
|
|
|
These were previously appended to the gate's missing-evidence list unconditionally, so the gate had
|
|
no passing state at all. A gate that can never pass is one nobody can act on, and the thing it was
|
|
waiting for — a human review — has an artefact. This is that artefact.
|
|
|
|
A file here asserts the review was done. Adding one without doing it is the failure mode; that is a
|
|
review-process problem, and no script can tell the difference.
|