K8: record blocked owner review and release evidence

This commit is contained in:
2026-08-21 14:27:23 +08:00
parent 2ef2d82db3
commit b1b5a3cc8a
62 changed files with 171781 additions and 19 deletions

View File

@@ -0,0 +1,22 @@
# Remediation Evidence Roundup
`coverage/remediation-evidence-roundup.report.json` is the K8-REL-14
consolidation of the six remediation reports K8-REL-08 through K8-REL-13. It
verifies each report's self-hash and context, preserves the six blocker IDs,
and checks that no remediation artifact promoted entries, generated official
goldens, resolved resources by fiat, pinned an unreviewed browser matrix or
approved an implementation license.
The roundup is complete as an audit, but its `roundup_status` remains
`blocked_pending_owner_actions`. The release conclusion is still
`blocked_not_release_candidate` with `release_action: STOP_RELEASE`.
Remaining transitions require owner review and, where locked inputs change, a
new context followed by closure, audit and gate regeneration. The roundup
does not mutate prior evidence or overwrite the context lock.
Regenerate it with:
```bash
python3 scripts/generate_remediation_evidence_roundup.py
```