- Modified task status update instructions in AGENTS.md files to refer to corresponding sprint files as `/docs/implplan/SPRINT_*.md` instead of `docs/implplan/SPRINTS.md`. - Added a comprehensive document for Secret Leak Detection operations detailing scope, prerequisites, rule bundle lifecycle, enabling the analyzer, policy patterns, observability, troubleshooting, and references.
1.0 KiB
1.0 KiB
30 Oct 2025 — Governance rules anchor consolidated
What changed
- Published
docs/devops/contracts-and-rules.mdcapturing the Sprint 33 governance rules:- API Gateway remains a proxy; Policy Engine composes overlays/simulations.
- AOC ingestion persists upstream truth only (no merge/deduplicate logic).
- Graph platform standardised on Graph Indexer + Graph API (Cartographer retired).
- Updated backlog hygiene note (
docs/backlog/2025-10-cleanup.md) and archived the Cartographer handshake plan to point at the new graph platform. - Logged the rules in
ops/devops/TASKS.mdand corresponding sprint filedocs/implplan/SPRINT_*.md, removing duplicate references to Cartographer as an active service.
Reviewers / acknowledgements
- Platform Leads (DevOps + Graph) confirmed the retirement of Cartographer in favour of Graph Indexer + Graph API.
- Policy Engine Guild acknowledged the proxy-only Gateway posture and downstream overlay ownership.
See DEVOPS-RULES-33-001 for the owning task.