1.9 KiB
1.9 KiB
What & why
Closes #
Type of change
feat— new functionalityfix— bug fixdocs— documentation onlyci/refactor/test/chore- Breaking change (consumers must act —
!/BREAKING CHANGE:in the commit) - Decision — an ADR is included or updated (
docs/adr/NNNN-*.md)
SOP-001 (branch & merge) checklist
- Branched from
developwith a short-livedfeature/<topic>(no direct commits tomain/develop). - Commits follow Conventional Commits.
- Up to date with the base branch (rebased/merged); no merge conflicts.
- At least one CODEOWNERS reviewer is requested.
CHANGELOG.mdupdated under[Unreleased](if user-facing).
Policy & security gates (must be green)
pre-commit run -apasses locally (whitespace/EOF/YAML, shellcheck, gitleaks, sops-encrypted-check).- CI
static-checks,test,build,policy_checkandsecurity-scanstages pass. - No plaintext secrets added — secrets are SOPS+age encrypted (
*.enc.*/*.sops.*only). SeeSECURITY.md. - Data traffic-light respected: nothing 🔴 RED (sensitive personal data / plaintext keys) committed.
- If this asserts a rule: an ADR records why, an SOP records how, and a Policy (+
*_test.rego) enforces it.