stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

stop syncing with TASKS.md

Browse Source
This commit is contained in:
StellaOps Bot
2025-12-26 11:44:40 +02:00
parent ebce1c80b1
commit 22390057fc
77 changed files with 24 additions and 1018 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/Zastava/StellaOps.Zastava.Webhook/AGENTS.md
View File

@@ -21,7 +21,7 @@ Operate the Kubernetes admission webhook enforcing image/SBOM/attestation polici
- `docs/modules/devops/runbooks/zastava-deployment.md`
## Working Agreement
1. **Task state**: update corresponding sprint file `docs/implplan/SPRINT_*.md` and local `TASKS.md` to `DOING`/`DONE` as you start or complete work.
1. **Task state**: update corresponding sprint file `docs/implplan/SPRINT_*.md` to `DOING`/`DONE` as you start or complete work.
2. **Surface usage**: fetch cache manifests via Surface.FS, configuration via Surface.Env, secrets via Surface.Secrets; run validators before enforcing policies.
3. **Deterministic verdicts**: avoid non-deterministic data in admission responses; include explain traces referencing evidence IDs.
4. **Security**: enforce mTLS, Authority OpTok scopes, and tenant context; audit all allow/deny decisions.