- Modified task status update instructions in AGENTS.md files to refer to corresponding sprint files as `/docs/implplan/SPRINT_*.md` instead of `docs/implplan/SPRINTS.md`. - Added a comprehensive document for Secret Leak Detection operations detailing scope, prerequisites, rule bundle lifecycle, enabling the analyzer, policy patterns, observability, troubleshooting, and references.
18 lines
1.0 KiB
Markdown
18 lines
1.0 KiB
Markdown
# 30 Oct 2025 — Governance rules anchor consolidated
|
||
|
||
**What changed**
|
||
|
||
- Published `docs/devops/contracts-and-rules.md` capturing the Sprint 33 governance rules:
|
||
1. API Gateway remains a proxy; Policy Engine composes overlays/simulations.
|
||
2. AOC ingestion persists upstream truth only (no merge/deduplicate logic).
|
||
3. Graph platform standardised on Graph Indexer + Graph API (Cartographer retired).
|
||
- Updated backlog hygiene note (`docs/backlog/2025-10-cleanup.md`) and archived the Cartographer handshake plan to point at the new graph platform.
|
||
- Logged the rules in `ops/devops/TASKS.md` and corresponding sprint file `docs/implplan/SPRINT_*.md`, removing duplicate references to Cartographer as an active service.
|
||
|
||
**Reviewers / acknowledgements**
|
||
|
||
- Platform Leads (DevOps + Graph) confirmed the retirement of Cartographer in favour of Graph Indexer + Graph API.
|
||
- Policy Engine Guild acknowledged the proxy-only Gateway posture and downstream overlay ownership.
|
||
|
||
See `DEVOPS-RULES-33-001` for the owning task.
|