32 lines
1.2 KiB
Markdown
32 lines
1.2 KiB
Markdown
|
# Phase 00 Tasks
|
||
|
|
|
||
|
|
## Task Set A: Contract Alignment
|
||
|
|
|
||
|
|
- [ ] Validate `shared/domain-model.md` against current repository constraints.
|
||
|
|
- [ ] Validate `shared/api-contracts.md` names and payload conventions with router ownership.
|
||
|
|
- [ ] Validate event naming strategy with notification and webhook owners.
|
||
|
|
|
||
|
|
## Task Set B: Governance Lock
|
||
|
|
|
||
|
|
- [ ] Confirm `shared/decision-log.md` with Product + Engineering.
|
||
|
|
- [ ] Confirm cutover/no-compatibility policy in writing.
|
||
|
|
- [ ] Confirm override governance requirements and mandatory reason fields.
|
||
|
|
|
||
|
|
## Task Set C: Access and Security
|
||
|
|
|
||
|
|
- [ ] Validate `shared/authz-matrix.md` for each role.
|
||
|
|
- [ ] Define scope enforcement standard for program-scoped admin actions.
|
||
|
|
- [ ] Confirm audience vote abuse controls (token, rate-limit, dedupe key).
|
||
|
|
|
||
|
|
## Task Set D: Validation Baseline
|
||
|
|
|
||
|
|
- [ ] Validate `shared/test-matrix.md` coverage and practicality.
|
||
|
|
- [ ] Map each test ID to ownership.
|
||
|
|
- [ ] Confirm CI entry strategy for U/I/E/P layers.
|
||
|
|
|
||
|
|
## Task Set E: Risk Baseline
|
||
|
|
|
||
|
|
- [ ] Review `shared/risk-register.md` with owners.
|
||
|
|
- [ ] Add any repository-specific risks identified during contract review.
|
||
|
|
- [ ] Mark mitigation action owner and due phase per risk.
|