19 lines
710 B
Markdown
19 lines
710 B
Markdown
# M13-05D Status
|
|
|
|
status: done
|
|
task: dependency severity gates and exceptions
|
|
updated: 2026-08-19 America/New_York
|
|
enablingTask: false
|
|
parityStateChange: false
|
|
|
|
The severity policy is machine-readable: BLOCKER/HIGH block, MEDIUM requires review and LOW is tracked.
|
|
Exceptions require a non-empty owner, non-expired ISO date, reason and alternative control. Production
|
|
inventory has zero findings and zero exceptions, while four negative/positive exception cases are checked.
|
|
|
|
- `npm --prefix web run test:dependency-severity-policy` passed.
|
|
- `npm --prefix web run typecheck` passed.
|
|
- `npm --prefix web run build` passed.
|
|
- `git diff --check` passed.
|
|
|
|
Next task: `M13-05E`, SBOM/license/source-offer binding.
|