1.0 KiB
Advanced capability sign-off
2026-08-15:
scripts/verify-mongodb-advanced.shwas removed, so nothing reads this directory automatically any more. The files below are still the record that a review happened, but a missing one no longer fails anything — a human has to check for it during promotion.
scripts/verify-mongodb-advanced.sh treated a file in this directory as the evidence that a review
happened:
security.md— per-capability privilege review, naming the roles granted and by whom.migration.md— per-capability migration path, naming what an existing deployment has to do.
These were previously appended to the gate's missing-evidence list unconditionally, so the gate had no passing state at all. A gate that can never pass is one nobody can act on, and the thing it was waiting for — a human review — has an artefact. This is that artefact.
A file here asserts the review was done. Adding one without doing it is the failure mode; that is a review-process problem, and no script can tell the difference.