feat(domain): add policy-driven supply chain security subsystem#527

Open

arielshad wants to merge 37 commits intomainfrom

feat/supply-chain-security

Commits on Apr 6, 2026

docs(specs): analyze supply-chain security feature
arielshad
committed
docs(specs): define supply chain security requirements
arielshad
committed
docs(specs): research technical decisions for supply chain security

arielshad
and
claude
committed
docs(specs): create implementation plan and task breakdown for supply chain security

arielshad
and
claude
committed
feat(tsp): add supply-chain security domain models and settings config
arielshad
committed
feat(domain): add sqlite migrations for security settings and events
arielshad
committed
feat(domain): extend settings mapper and defaults for security config

arielshad
and
claude
committed
feat(domain): add policy engine service with file reader and validator

arielshad
and
claude
committed
feat(domain): add security event mapper and sqlite repository

arielshad
and
claude
committed
feat(domain): register security services in di container

arielshad
and
claude
committed
feat(domain): add dependency risk and release integrity evaluators

arielshad
and
claude
committed
feat(domain): add security enforcement and policy use cases

arielshad
and
claude
committed
feat(cli): add shep security enforce command and di registrations

arielshad
and
claude
committed
feat(domain): add security constraints to agent executor interface

arielshad
and
claude
committed
feat(domain): add security policy channels to feature agent state

arielshad
and
claude
committed
feat(agents): thread security mode through all spawn sites

arielshad
and
claude
committed
feat(agents): add pre-execution security checks in executenode

arielshad
and
claude
committed
feat(domain): add github governance audit to security enforcement flow

arielshad
and
claude
committed
feat(web): add security ui surfaces to control center and settings

arielshad
and
claude
committed
feat(ci): add security enforcement job and policy scaffold

arielshad
and
claude
committed
fix(web): use type imports and string tokens in security server actions

arielshad
and
claude
committed
chore(specs): capture evidence for supply chain security feature

arielshad
and
claude
committed
fix(web): add storybook security action mock and i18n initialization

arielshad
and
claude
committed
chore(specs): recapture evidence for supply chain security feature

arielshad
and
claude
committed
chore(specs): recapture evidence for supply chain security feature

arielshad
and
claude
committed
chore(specs): mark evidence phase complete for supply chain security

arielshad
and
claude
committed
fix(ci): attempt 1/10 — format long import line in settings-defaults test

arielshad
and
claude
committed
fix(web): show security badge on canvas feature cards

arielshad
and
claude
committed
chore(specs): capture ui visibility evidence for supply chain security

arielshad
and
claude
committed
fix(tests): complete github service mock after rebase onto main

arielshad
and
claude
committed
feat(domain): add supply chain security feature flag kill switch

arielshad
and
claude
committed
chore(ci): whitelist fake api key fingerprint in gitleaksignore

arielshad
and
claude
committed

Commits on Apr 13, 2026