report-header:
  bottom-line: '[CUTOVER GOLDEN] SEC-APPSEC/appsec-review 계약 실행 실증'
  decision-needed:
    needed: false
  confidence:
    value: Med
  risks: []
report-type: work
report-id: SEC-APPSEC-appsec-review-golden
workflow-id: cutover-all
role-id: SEC-APPSEC
tier: standard
verification-performed: 'cutover golden: workflow 완결'
method-execution:
  role-id: SEC-APPSEC
  method-id: appsec-review
  contract-sha256: 4613c6471075d350010af0cbe2a6360b455cd3aff247f00cba834fdb13271287
  step-results:
  - step-id: threat-model
    status: completed
    artifact-refs:
    - report-id: SEC-APPSEC-appsec-review-golden
      sha256: golden0000000000000000000000000000000000000000000000000000000000
  - step-id: verify-controls
    status: completed
    artifact-refs:
    - report-id: SEC-APPSEC-appsec-review-golden
      sha256: golden0000000000000000000000000000000000000000000000000000000000