sjat/boma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

service-checklist: add Level 4 UI verification to the gate

Browse source
This commit is contained in:
sjat 2026-06-05 13:17:16 +02:00
parent 25f04002df
commit 22c0747c0b
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
docs/security/service-checklist.md
View file

@ -48,6 +48,9 @@ This checklist is the generic **bar**. Each service answers it in its own
- [ ] Logs go somewhere reviewable (central aggregation when available)
- [ ] Backup/restore is covered if the service holds state
- [ ] Passed Level 4 service-UI verification (`/verify-service`) against staging — the
service has a populated `roles/<service>/VERIFY.md` and its critical journeys
verified (ADR-008 Level 4 / ADR-017)
> Deviations are allowed but must be **conscious**: record them in
> `docs/security/accepted-risks.md`, don't leave them implicit.