tier-authority.mdc
39 lines 1.4 KB
Raw
sha256:4671b7f787ddbe63ced31c895b688c77ab495653b65a730b423329f26b3c1439 feat: K1-P1 complete — agent provenance, build-verification… Sonnet 4.6 patch 57 days ago
1 ---
2 description: Tier 1/2/3 decision authority — when to act vs ask (policy/tiers.yaml)
3 alwaysApply: true
4 ---
5
6 # Decision authority tiers
7
8 Machine-readable source: `policy/tiers.yaml`. Standing Decisions: `{{docs.standing_decisions_path}}`.
9
10 ## Tier 1 — just do it (no per-time ask)
11
12 - Feature-branch commits (docs **or** code) — SD-1
13 - `git push` to feature branch, open feature-branch PR — SD-17
14 - Run tests; update `.gitignore` / `.museignore`
15 - Governance sync doc updates in the closing commit — SD-17
16
17 **Never** Tier 1 on `{{vcs.git.main_branch}}`, staging push, or merge.
18
19 ## Tier 2 — recommend, confirm once, record
20
21 - Persistence shape, adapter contracts, schema-version choices
22 - Record the decision in `{{docs.standing_decisions_path}}` (append-only ADR log)
23
24 ## Tier 3 — stop for operator authorization
25
26 - Merge to `{{vcs.git.main_branch}}` (Muse or GitHub)
27 - `muse push {{vcs.muse.staging_remote}}` when applicable
28 - Live capability / posture gate flips
29 - Real payments, secrets, data deletion, cross-repo merges
30
31 ## VCS regime: {{vcs.regime}}
32
33 | Regime | Extra hard stop |
34 | --- | --- |
35 | `muse+git-mirror` | Muse `{{vcs.git.main_branch}}` before GitHub; mirror via `{{vcs.git.mirror_branch}}` only (SD-14) |
36 | `muse-only` | Never run `git` / `gh` in this repo |
37 | `git-only` | Never `git push {{vcs.git.remote}} {{vcs.git.main_branch}}` without Tier 3 |
38
39 A **dirty tree at session end is a failure**, not a safe default.
File History 1 commit
sha256:4671b7f787ddbe63ced31c895b688c77ab495653b65a730b423329f26b3c1439 feat: K1-P1 complete — agent provenance, build-verification… Sonnet 4.6 patch 57 days ago