a827b56260
- Add step banners with emojis for each patrol step - Add startup banner for Refinery initialization - Add patrol summary banner at end of cycle - Document wisp-based execution pattern (spawn/squash) - Add Propulsion Principle for startup protocol - Update refinery.md.tmpl template - Update prompts/roles/refinery.md - Update gastown refinery CLAUDE.md 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
32 lines
966 B
YAML
32 lines
966 B
YAML
formula: security-audit
|
|
type: aspect
|
|
description: >
|
|
Cross-cutting security concern. Applies security scanning before and
|
|
after implementation steps.
|
|
version: 1
|
|
pointcuts:
|
|
- glob: "*.implement"
|
|
- glob: "*.submit"
|
|
advice:
|
|
around:
|
|
before:
|
|
- id: security-prescan
|
|
description: >
|
|
Pre-implementation security check. Review for secrets/credentials
|
|
in scope. Check dependencies for known vulnerabilities.
|
|
args:
|
|
target: "{step.id}"
|
|
after:
|
|
- id: security-postscan
|
|
description: >
|
|
Post-implementation security scan. Scan new code for vulnerabilities
|
|
(SAST). Check for hardcoded secrets. Review for OWASP Top 10 issues.
|
|
args:
|
|
target: "{step.id}"
|
|
output:
|
|
approved: boolean
|
|
findings: list
|
|
- gate:
|
|
condition: "security-postscan.output.approved == true"
|
|
message: Security approval required before proceeding
|