← ClaudeAtlas

id-impactlisted

Two advisory pre-merge reads of an infra-delivery change. (v2) The POLICY-RISK read — surface foundry_plan_model.parse_policy_findings output {rule, resource, severity, gating} and distinguish hard-FAIL-shaped (gating==deny) vs ackable-shaped (gating==warn ∧ severity==high ⇒ freeze a policy:high-blast-ack {rule, resource}) vs advisory, per the ADR C1 gating table. (v1, KEPT) The fast pre-policy blast_radius tier hint LOW / MEDIUM / HIGH (Karpenter-aware) — match each plan action against the active profile's machine-evaluable blast_radius rules. ADVISORY + read-only; it surfaces the findings + the tier hint for the operator/reviewer to weigh at the merge floor — the bespoke verdict machinery that once mechanically enforced the gating table was retired, so this read is not machine-enforced today (see docs/merge-floor.md).
lukasrepublic/agentic-foundry · ★ 1 · AI & Automation · score 67
Install: claude install-skill lukasrepublic/agentic-foundry
# id-impact — two advisory pre-merge reads (policy-risk findings + the KEPT blast-radius tier hint) > **v2 amendment (additive).** `id-impact` now gives the operator **two advisory pre-merge reads** of a > change, BEFORE authorize: **(1)** the **policy-risk findings** (the REAL change-risk) — surface > `foundry_plan_model.parse_policy_findings` output and distinguish, per the corrected gating table, which > findings are HARD-FAIL-shaped (no ack path) vs. ackable-shaped vs. advisory; and **(2)** the > **KEPT v1 `blast_radius` fast tier hint** (the pre-policy heuristic, untouched, below). It is **advisory > + read-only** — `id-impact` reads the real `parse_policy_findings` output directly (no second > computation, no divergent re-implementation). > > **Honest disclosure — no live enforcer.** Earlier design intent named a `feat-foundry-infra-change-verdict` > component that would mechanically ENFORCE this gating table at merge time. **That verdict-enforcement > machinery does not exist in `scripts/`** — it was part of the bespoke merge-gate stack retired in the > **earlier realignment** (see `docs/DESIGN.md`, `docs/merge-floor.md`). Today `id-impact`'s > two reads are **surfaced for the operator/reviewer to weigh at the merge floor** (the adopter's branch > protection + CI checks + human review) — nothing currently blocks a merge on a `deny` finding or an > un-acked HIGH finding automatically. Wiring that as a required CI check is the adopter's own > policy-as-code job, per `do