19 lines
1.0 KiB
Markdown
19 lines
1.0 KiB
Markdown
# Advanced capability sign-off
|
|
|
|
> **2026-08-15:** `scripts/verify-mongodb-advanced.sh` was removed, so nothing reads this directory
|
|
> automatically any more. The files below are still the record that a review happened, but a missing
|
|
> one no longer fails anything — a human has to check for it during promotion.
|
|
|
|
`scripts/verify-mongodb-advanced.sh` treated a file in this directory as the evidence that a review
|
|
happened:
|
|
|
|
- `security.md` — per-capability privilege review, naming the roles granted and by whom.
|
|
- `migration.md` — per-capability migration path, naming what an existing deployment has to do.
|
|
|
|
These were previously appended to the gate's missing-evidence list unconditionally, so the gate had
|
|
no passing state at all. A gate that can never pass is one nobody can act on, and the thing it was
|
|
waiting for — a human review — has an artefact. This is that artefact.
|
|
|
|
A file here asserts the review was done. Adding one without doing it is the failure mode; that is a
|
|
review-process problem, and no script can tell the difference.
|