From 1976512cd2a4ddfa034ccfafd1b0b84805ef8af8 Mon Sep 17 00:00:00 2001 From: Mario Apra Date: Thu, 3 Sep 2026 12:25:42 +0000 Subject: [PATCH] AUT-72: add production-ready agent release gate (AUT-72) Deterministic CI/CD gate that checks an agent against the production-ready agent bar before it ships: ownership, registry, security scan (runs in CI), evals (runs in CI), risk/autonomy tier, egress/policy, SLO, observability, cost-center. Fails closed on anything it cannot verify. Sibling of ai-review (review gate: a diff; release gate: the agent). - .github/workflows/agent-release-gate.yaml (reusable workflow) - examples/agent-release-gate/README.md (usage + bar + eval contract) - README.md (section pointer) Gate script hardened: urllib.parse + datetime imports, waiver expiry normalized across PyYAML date/str, no-PyYAML fallback parser rewritten (correct list-of-maps handling; the old one mis-parsed security.waivers). --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 348188f..ec158f7 100644 --- a/README.md +++ b/README.md @@ -52,6 +52,10 @@ Read about it in the [examples/docker/README.md](examples/docker/README.md) file Read about it in the [examples/ai-review/README.md](examples/ai-review/README.md) file. +## Production-Ready Agent Release Gate + +Read about it in the [examples/agent-release-gate/README.md](examples/agent-release-gate/README.md) file. + ## License