agentic-sdlc 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (98) hide show
  1. package/.agent/ide-integration/README.md +298 -0
  2. package/.agent/ide-integration/aider-commands.md +40 -0
  3. package/.agent/ide-integration/cline-config.json +108 -0
  4. package/.agent/ide-integration/cursor-rules.md +63 -0
  5. package/.agent/ide-integration/github-copilot-instructions.md +75 -0
  6. package/.agent/ide-integration/vscode-commands.json +190 -0
  7. package/.agent/ide-integration/windsurf-cascade.md +125 -0
  8. package/.agent/knowledge-base/README.md +202 -0
  9. package/.agent/knowledge-base/architecture/.gitkeep +1 -0
  10. package/.agent/knowledge-base/bugs/.gitkeep +1 -0
  11. package/.agent/knowledge-base/features/.gitkeep +1 -0
  12. package/.agent/knowledge-base/index.md +202 -0
  13. package/.agent/knowledge-base/performance/.gitkeep +1 -0
  14. package/.agent/knowledge-base/platform-specific/.gitkeep +1 -0
  15. package/.agent/knowledge-base/security/.gitkeep +1 -0
  16. package/.agent/legacy/roles/designer.md +311 -0
  17. package/.agent/legacy/roles/dev.md +177 -0
  18. package/.agent/legacy/roles/devops.md +146 -0
  19. package/.agent/legacy/roles/orchestrator.md +339 -0
  20. package/.agent/legacy/roles/pm.md +120 -0
  21. package/.agent/legacy/roles/po.md +89 -0
  22. package/.agent/legacy/roles/qa.md +108 -0
  23. package/.agent/legacy/roles/reporter.md +70 -0
  24. package/.agent/legacy/roles/sa.md +118 -0
  25. package/.agent/legacy/roles/seca.md +112 -0
  26. package/.agent/legacy/roles/stakeholder.md +111 -0
  27. package/.agent/legacy/roles/tester.md +129 -0
  28. package/.agent/rules/artifacts.md +58 -0
  29. package/.agent/rules/git-workflow.md +65 -0
  30. package/.agent/rules/global.md +154 -0
  31. package/.agent/rules/global.md.bak +154 -0
  32. package/.agent/rules/knowledge-base.md +45 -0
  33. package/.agent/templates/Design-Verification-Report-Template.md +67 -0
  34. package/.agent/templates/DevOps-Plan-Template.md +90 -0
  35. package/.agent/templates/Development-Log-Template.md +51 -0
  36. package/.agent/templates/Final-Approval-Report-Template.md +82 -0
  37. package/.agent/templates/Final-Project-Report-Template.md +280 -0
  38. package/.agent/templates/Knowledge-Entry-Template.md +164 -0
  39. package/.agent/templates/Master-Documentation-Template.md +269 -0
  40. package/.agent/templates/Phase-Report-Template.md +70 -0
  41. package/.agent/templates/Product-Backlog-Template.md +84 -0
  42. package/.agent/templates/Project-Plan-Template.md +79 -0
  43. package/.agent/templates/Security-Review-Report-Template.md +80 -0
  44. package/.agent/templates/System-Design-Spec-Template.md +170 -0
  45. package/.agent/templates/Test-Report-Template.md +97 -0
  46. package/.agent/templates/UIUX-Design-Spec-Template.md +280 -0
  47. package/.agent/templates/definition-of-done.md +151 -0
  48. package/.agent/templates/incident-response.md +111 -0
  49. package/.agent/usage.md +653 -0
  50. package/.agent/workflows/auto.md +35 -0
  51. package/.agent/workflows/brain.md +56 -0
  52. package/.agent/workflows/dev.md +30 -0
  53. package/.agent/workflows/devops.md +28 -0
  54. package/.agent/workflows/kb-search.md +22 -0
  55. package/.agent/workflows/pm.md +42 -0
  56. package/.agent/workflows/po.md +21 -0
  57. package/.agent/workflows/qa.md +31 -0
  58. package/.agent/workflows/reporter.md +21 -0
  59. package/.agent/workflows/sa.md +51 -0
  60. package/.agent/workflows/seca.md +21 -0
  61. package/.agent/workflows/stakeholder.md +26 -0
  62. package/.agent/workflows/tester.md +21 -0
  63. package/.agent/workflows/uiux.md +38 -0
  64. package/.cursorrules +49 -0
  65. package/.env.template +10 -0
  66. package/.github/ISSUE_TEMPLATE/bug_report.yml +47 -0
  67. package/.github/ISSUE_TEMPLATE/config.yml +8 -0
  68. package/.github/ISSUE_TEMPLATE/feature_request.yml +33 -0
  69. package/.github/ISSUE_TEMPLATE/security_alert.yml +28 -0
  70. package/.github/ISSUE_TEMPLATE/task_implementation.yml +37 -0
  71. package/.github/copilot-instructions.md +60 -0
  72. package/CHANGELOG.md +13 -0
  73. package/README.md +136 -0
  74. package/bin/cli.js +104 -0
  75. package/bin/commands/create.js +96 -0
  76. package/bin/commands/help.js +69 -0
  77. package/bin/commands/ide.js +116 -0
  78. package/bin/commands/init-kb.js +74 -0
  79. package/bin/commands/install.js +68 -0
  80. package/bin/commands/list.js +35 -0
  81. package/bin/graph_brain.py +86 -0
  82. package/bin/sync_github.py +75 -0
  83. package/bin/utils/args-parser.js +33 -0
  84. package/bin/utils/colors.js +21 -0
  85. package/bin/verify_neo4j.py +25 -0
  86. package/docs/OUTLINE.md +23 -0
  87. package/docs/architecture/brain.md +36 -0
  88. package/docs/architecture/neo4j-learning-queries.md +49 -0
  89. package/docs/guides/CLI-EXAMPLES.md +649 -0
  90. package/docs/guides/INTEGRATION-GUIDE.md +709 -0
  91. package/docs/guides/MCP-GUIDE.md +53 -0
  92. package/docs/guides/QUICK-START.md +104 -0
  93. package/docs/reports/comparison-leann-neo4j.md +49 -0
  94. package/docs/setup/github-management.md +37 -0
  95. package/docs/sprints/sprint-github-issues.md +36 -0
  96. package/docs/sprints/sprint-leann-integration.md +41 -0
  97. package/docs/sprints/sprint-neo4j-brain.md +38 -0
  98. package/package.json +16 -0
@@ -0,0 +1,269 @@
1
+ # Master Documentation - [Project Name]
2
+
3
+ ## Document Info
4
+ | Field | Value |
5
+ |-------|-------|
6
+ | Project | [Project Name] |
7
+ | Version | [Current Version] |
8
+ | Last Updated | [YYYY-MM-DD] |
9
+ | Maintained By | @REPORTER |
10
+ | Status | Active / Complete / Archived |
11
+
12
+ ---
13
+
14
+ ## 📋 Table of Contents
15
+ 1. [Project Overview](#project-overview)
16
+ 2. [Project Timeline](#project-timeline)
17
+ 3. [Architecture](#architecture)
18
+ 4. [Key Decisions](#key-decisions)
19
+ 5. [Artifacts Index](#artifacts-index)
20
+ 6. [Team & Roles](#team--roles)
21
+ 7. [Current Status](#current-status)
22
+ 8. [Known Issues](#known-issues)
23
+ 9. [Future Roadmap](#future-roadmap)
24
+
25
+ ---
26
+
27
+ ## 1. Project Overview
28
+
29
+ ### Business Context
30
+ **Business Goals:**
31
+ - [Goal 1]
32
+ - [Goal 2]
33
+
34
+ **Target Users:**
35
+ - [User type 1]: [Description]
36
+ - [User type 2]: [Description]
37
+
38
+ **Success Criteria:**
39
+ - [Criterion 1]
40
+ - [Criterion 2]
41
+
42
+ ### Technical Summary
43
+ | Aspect | Details |
44
+ |--------|---------|
45
+ | Platform | [Web/Mobile/Desktop/Embedded/CLI/API/Library] |
46
+ | Tech Stack | [Technologies used] |
47
+ | Deployment | [Deployment target] |
48
+ | Repository | [Git URL] |
49
+ | Documentation | [Docs URL] |
50
+
51
+ ---
52
+
53
+ ## 2. Project Timeline
54
+
55
+ ### Milestones
56
+ | Phase | Start Date | End Date | Status | Key Deliverables |
57
+ |-------|------------|----------|--------|------------------|
58
+ | Planning | [Date] | [Date] | ✅ Complete | Project Plan v1 |
59
+ | Design | [Date] | [Date] | ✅ Complete | System Design, UI/UX Design |
60
+ | Development | [Date] | [Date] | 🔄 In Progress | Implementation |
61
+ | Testing | [Date] | [Date] | ⏳ Pending | Test Reports |
62
+ | Deployment | [Date] | [Date] | ⏳ Pending | Production Release |
63
+
64
+ ### Sprint Summary
65
+ | Sprint | Focus | Completed | Status |
66
+ |--------|-------|-----------|--------|
67
+ | Sprint 1 | [Focus area] | [X/Y items] | ✅ Complete |
68
+ | Sprint 2 | [Focus area] | [X/Y items] | 🔄 Active |
69
+
70
+ ---
71
+
72
+ ## 3. Architecture
73
+
74
+ ### High-Level Architecture
75
+ ```
76
+ ┌─────────────────────────────────────────────────────────┐
77
+ │ [System Name] │
78
+ │ ┌──────────┐ ┌──────────┐ ┌──────────┐ │
79
+ │ │Component │───▶│Component │───▶│Component │ │
80
+ │ │ A │ │ B │ │ C │ │
81
+ │ └──────────┘ └──────────┘ └──────────┘ │
82
+ └─────────────────────────────────────────────────────────┘
83
+ ```
84
+
85
+ ### Technology Stack
86
+ | Layer | Technology | Version | Purpose |
87
+ |-------|------------|---------|---------|
88
+ | [Layer] | [Tech] | [Version] | [Purpose] |
89
+
90
+ ### Key Components
91
+ | Component | Responsibility | Status |
92
+ |-----------|----------------|--------|
93
+ | [Component 1] | [Description] | ✅ Implemented |
94
+ | [Component 2] | [Description] | 🔄 In Progress |
95
+
96
+ ---
97
+
98
+ ## 4. Key Decisions
99
+
100
+ ### Technical Decisions
101
+ | Date | Decision | Rationale | Impact |
102
+ |------|----------|-----------|--------|
103
+ | [Date] | [Decision] | [Why] | [Impact] |
104
+
105
+ ### Design Decisions
106
+ | Date | Decision | Rationale | Impact |
107
+ |------|----------|-----------|--------|
108
+ | [Date] | [Decision] | [Why] | [Impact] |
109
+
110
+ ### Scope Changes
111
+ | Date | Change | Reason | Approved By |
112
+ |------|--------|--------|-------------|
113
+ | [Date] | [Change] | [Reason] | @PM + User |
114
+
115
+ ---
116
+
117
+ ## 5. Artifacts Index
118
+
119
+ ### Planning Documents
120
+ | Document | Version | Date | Location | Status |
121
+ |----------|---------|------|----------|--------|
122
+ | Project Plan | v[X] | [Date] | `docs/sprints/sprint-1/plans/` | ✅ Approved |
123
+ | Product Backlog | v[X] | [Date] | `docs/sprints/sprint-1/plans/` | 🔄 Active |
124
+
125
+ ### Design Documents
126
+ | Document | Version | Date | Location | Status |
127
+ |----------|---------|------|----------|--------|
128
+ | System Design Spec | v[X] | [Date] | `docs/sprints/sprint-1/designs/` | ✅ Approved |
129
+ | UI/UX Design Spec | v[X] | [Date] | `docs/sprints/sprint-1/designs/` | ✅ Approved |
130
+
131
+ ### Review Documents
132
+ | Document | Version | Date | Location | Status |
133
+ |----------|---------|------|----------|--------|
134
+ | Design Verification | v[X] | [Date] | `docs/sprints/sprint-1/reviews/` | ✅ Approved |
135
+ | Security Review | v[X] | [Date] | `docs/sprints/sprint-1/reviews/` | ✅ Approved |
136
+
137
+ ### Development Documents
138
+ | Document | Version | Date | Location | Status |
139
+ |----------|---------|------|----------|--------|
140
+ | Development Log | v[X] | [Date] | `docs/sprints/sprint-1/logs/` | 🔄 Active |
141
+ | DevOps Plan | v[X] | [Date] | `docs/sprints/sprint-1/logs/` | 🔄 Active |
142
+
143
+ ### Testing Documents
144
+ | Document | Version | Date | Location | Status |
145
+ |----------|---------|------|----------|--------|
146
+ | Test Report | v[X] | [Date] | `docs/sprints/sprint-1/tests/` | ⏳ Pending |
147
+
148
+ ### Reports
149
+ | Document | Version | Date | Location | Status |
150
+ |----------|---------|------|----------|--------|
151
+ | Phase Report | v[X] | [Date] | `docs/sprints/sprint-1/reports/` | ✅ Complete |
152
+ | Final Project Report | v[X] | [Date] | `docs/global/reports/` | ⏳ Pending |
153
+
154
+ ---
155
+
156
+ ## 6. Team & Roles
157
+
158
+ | Role | Responsibilities | Current Status |
159
+ |------|------------------|----------------|
160
+ | @PM | Project management, planning | Active |
161
+ | @PO | Product ownership, backlog | Active |
162
+ | @SA | System architecture | Complete |
163
+ | @UIUX | UI/UX design | Complete |
164
+ | @QA | Quality assurance | Active |
165
+ | @SECA | Security analysis | Complete |
166
+ | @DEV | Development | Active |
167
+ | @DEVOPS | Infrastructure, deployment | Active |
168
+ | @TESTER | Testing | Pending |
169
+ | @REPORTER | Documentation | Active |
170
+ | @STAKEHOLDER | Final approval | Pending |
171
+
172
+ ---
173
+
174
+ ## 7. Current Status
175
+
176
+ ### Overall Progress
177
+ | Category | Progress | Status |
178
+ |----------|----------|--------|
179
+ | Planning | 100% | ✅ Complete |
180
+ | Design | 100% | ✅ Complete |
181
+ | Development | [X]% | 🔄 In Progress |
182
+ | Testing | [X]% | ⏳ Pending |
183
+ | Deployment | [X]% | ⏳ Pending |
184
+
185
+ ### Feature Status
186
+ | Feature | Priority | Status | Notes |
187
+ |---------|----------|--------|-------|
188
+ | [Feature 1] | Must-Have | ✅ Complete | [Notes] |
189
+ | [Feature 2] | Must-Have | 🔄 In Progress | [Notes] |
190
+ | [Feature 3] | Should-Have | ⏳ Pending | [Notes] |
191
+
192
+ ### Current Sprint
193
+ **Sprint [N]:** [Focus area]
194
+ - **Start Date:** [Date]
195
+ - **End Date:** [Date]
196
+ - **Items:** [X/Y completed]
197
+ - **Blockers:** [None / List]
198
+
199
+ ---
200
+
201
+ ## 8. Known Issues
202
+
203
+ ### Active Bugs
204
+ | Bug ID | Title | Severity | Status | Assigned | ETA |
205
+ |--------|-------|----------|--------|----------|-----|
206
+ | BUG-001 | [Title] | High | Open | @DEV | [Date] |
207
+
208
+ ### Technical Debt
209
+ | Item | Priority | Impact | Plan |
210
+ |------|----------|--------|------|
211
+ | [Debt item] | Medium | [Impact] | [Plan] |
212
+
213
+ ### Risks
214
+ | Risk | Likelihood | Impact | Mitigation |
215
+ |------|------------|--------|------------|
216
+ | [Risk] | High/Med/Low | High/Med/Low | [Mitigation] |
217
+
218
+ ---
219
+
220
+ ## 9. Future Roadmap
221
+
222
+ ### Planned Features (Post-Launch)
223
+ | Feature | Priority | Target Version | Notes |
224
+ |---------|----------|----------------|-------|
225
+ | [Feature] | Could-Have | v2.0 | [Notes] |
226
+
227
+ ### Improvement Areas
228
+ - [Improvement 1]
229
+ - [Improvement 2]
230
+
231
+ ### Maintenance Plan
232
+ - **Regular Updates:** [Frequency]
233
+ - **Security Patches:** [Process]
234
+ - **Bug Fixes:** [SLA]
235
+
236
+ ---
237
+
238
+ ## 10. Quick Reference
239
+
240
+ ### Important Links
241
+ - **Repository:** [URL]
242
+ - **Staging:** [URL]
243
+ - **Production:** [URL]
244
+ - **Documentation:** [URL]
245
+ - **CI/CD:** [URL]
246
+ - **Monitoring:** [URL]
247
+
248
+ ### Key Contacts
249
+ | Role | Contact | Availability |
250
+ |------|---------|--------------|
251
+ | Project Lead | [Name] | [Hours] |
252
+ | Technical Lead | [Name] | [Hours] |
253
+
254
+ ### Emergency Procedures
255
+ - **Incident Response:** See `incident-response.md`
256
+ - **Rollback Procedure:** See `DevOps-Plan.md`
257
+ - **On-Call:** [Contact info]
258
+
259
+ ---
260
+
261
+ ## Document History
262
+ | Version | Date | Author | Changes |
263
+ |---------|------|--------|---------|
264
+ | 1.0 | [Date] | @REPORTER | Initial version |
265
+ | 1.1 | [Date] | @REPORTER | Updated status |
266
+
267
+ ---
268
+
269
+ #reporting #master-documentation
@@ -0,0 +1,70 @@
1
+ # Phase Report - [Phase Name]
2
+
3
+ ## Document Info
4
+ | Field | Value |
5
+ |-------|-------|
6
+ | Phase | [Planning/Design/Development/Testing/Deployment] |
7
+ | Date | [YYYY-MM-DD] |
8
+ | Author | @REPORTER |
9
+ | Status | Complete / In Progress |
10
+
11
+ ---
12
+
13
+ ## 1. Phase Summary
14
+ | Metric | Planned | Actual |
15
+ |--------|---------|--------|
16
+ | Duration | [X days] | [X days] |
17
+ | Items | [X] | [X] |
18
+ | On Schedule | ✅/❌ | - |
19
+
20
+ ## 2. Completed Deliverables
21
+ | Deliverable | Owner | Version | Status |
22
+ |-------------|-------|---------|--------|
23
+ | [Artifact name] | @[ROLE] | v[X] | ✅ Complete |
24
+
25
+ ## 3. Key Accomplishments
26
+ - [Accomplishment 1]
27
+ - [Accomplishment 2]
28
+
29
+ ## 4. Issues & Resolutions
30
+ | Issue | Impact | Resolution | Status |
31
+ |-------|--------|------------|--------|
32
+ | [Issue 1] | [Impact] | [How resolved] | Resolved |
33
+
34
+ ## 5. Risks Identified
35
+ | Risk | Likelihood | Impact | Mitigation |
36
+ |------|------------|--------|------------|
37
+ | [Risk description] | High/Med/Low | High/Med/Low | [Action] |
38
+
39
+ ## 6. Metrics
40
+
41
+ ### Development Metrics (if applicable)
42
+ | Metric | Value |
43
+ |--------|-------|
44
+ | Features Completed | [X/Y] |
45
+ | Code Coverage | [X]% |
46
+ | Technical Debt Items | [X] |
47
+
48
+ ### Testing Metrics (if applicable)
49
+ | Metric | Value |
50
+ |--------|-------|
51
+ | Test Pass Rate | [X]% |
52
+ | Bugs Found | [X] |
53
+ | Bugs Fixed | [X] |
54
+
55
+ ## 7. Lessons Learned
56
+ - [Lesson 1]
57
+ - [Lesson 2]
58
+
59
+ ## 8. Next Phase Preview
60
+ | Phase | Start Date | Key Activities |
61
+ |-------|------------|----------------|
62
+ | [Next phase] | [Date] | [Activities] |
63
+
64
+ ---
65
+
66
+ ### Next Step:
67
+ - @[NEXT_ROLE] - Begin [next phase activities]
68
+ - @STAKEHOLDER - Review phase completion (if final phase)
69
+
70
+ #reporting
@@ -0,0 +1,84 @@
1
+ # Product Backlog - Version [X]
2
+
3
+ ## Document Info
4
+ | Field | Value |
5
+ |-------|-------|
6
+ | Version | [X.0] |
7
+ | Date | [YYYY-MM-DD] |
8
+ | Author | @PO |
9
+ | Status | Draft / Active |
10
+
11
+ ---
12
+
13
+ ## Backlog Summary
14
+ | Priority | Count | Status |
15
+ |----------|-------|--------|
16
+ | Must-Have | [X] | [X] Done |
17
+ | Should-Have | [X] | [X] Done |
18
+ | Could-Have | [X] | [X] Done |
19
+
20
+ ---
21
+
22
+ ## Must-Have Items
23
+
24
+ ### [ITEM-001] [Item Title]
25
+ | Field | Value |
26
+ |-------|-------|
27
+ | Priority | Must-Have |
28
+ | Status | Todo / In Progress / Done |
29
+ | Assigned | @[ROLE] |
30
+ | Sprint | [Sprint #] |
31
+
32
+ **Description:** [Brief description]
33
+
34
+ **Acceptance Criteria:**
35
+ - [ ] Criteria 1
36
+ - [ ] Criteria 2
37
+
38
+ ---
39
+
40
+ ## Should-Have Items
41
+
42
+ ### [ITEM-002] [Item Title]
43
+ | Field | Value |
44
+ |-------|-------|
45
+ | Priority | Should-Have |
46
+ | Status | Todo |
47
+ | Assigned | @[ROLE] |
48
+ | Sprint | [Sprint #] |
49
+
50
+ **Description:** [Brief description]
51
+
52
+ **Acceptance Criteria:**
53
+ - [ ] Criteria 1
54
+
55
+ ---
56
+
57
+ ## Could-Have Items
58
+
59
+ ### [ITEM-003] [Item Title]
60
+ | Field | Value |
61
+ |-------|-------|
62
+ | Priority | Could-Have |
63
+ | Status | Todo |
64
+ | Assigned | Unassigned |
65
+ | Sprint | Backlog |
66
+
67
+ **Description:** [Brief description]
68
+
69
+ ---
70
+
71
+ ## Sprint Planning
72
+
73
+ ### Sprint 1: [Focus Area]
74
+ | Item ID | Title | Assigned | Status |
75
+ |---------|-------|----------|--------|
76
+ | ITEM-001 | [Title] | @DEV | Todo |
77
+
78
+ ---
79
+
80
+ ### Next Step:
81
+ - @DEV - Begin development of Sprint 1 items
82
+ - @TESTER - Prepare test cases for Sprint 1
83
+
84
+ #product-owner #backlog
@@ -0,0 +1,79 @@
1
+ # Project Plan - Version [X]
2
+
3
+ ## Document Info
4
+ | Field | Value |
5
+ |-------|-------|
6
+ | Version | [X.0] |
7
+ | Date | [YYYY-MM-DD] |
8
+ | Author | @PM |
9
+ | Status | Draft / Approved |
10
+
11
+ ---
12
+
13
+ ## Project Title
14
+ [Project name]
15
+
16
+ ## Business Goals
17
+ - [Goal 1]
18
+ - [Goal 2]
19
+
20
+ ## Scope & Features
21
+
22
+ ### Must-Have
23
+ - [ ] Feature 1: [Description]
24
+ - [ ] Feature 2: [Description]
25
+
26
+ ### Should-Have
27
+ - [ ] Feature 1: [Description]
28
+
29
+ ### Could-Have (if time permits)
30
+ - [ ] Feature 1: [Description]
31
+
32
+ ## User Stories / Use Cases
33
+ | ID | As a... | I want... | So that... | Priority |
34
+ |----|---------|-----------|------------|----------|
35
+ | US-01 | [User type] | [Feature] | [Benefit] | Must |
36
+ | US-02 | [User type] | [Feature] | [Benefit] | Should |
37
+
38
+ ## Target Platforms & Tech Stack
39
+ | Layer | Technology |
40
+ |-------|------------|
41
+ | Frontend | [e.g., SvelteKit, React] |
42
+ | Backend | [e.g., Node.js, Python] |
43
+ | Database | [e.g., PostgreSQL, Supabase] |
44
+ | Deployment | [e.g., Vercel, AWS] |
45
+
46
+ ## High-Level Timeline
47
+ | Phase | Duration | Target Date |
48
+ |-------|----------|-------------|
49
+ | Planning | Complete | [Date] |
50
+ | Design | [X days] | [Date] |
51
+ | Development | [X days] | [Date] |
52
+ | Testing | [X days] | [Date] |
53
+ | Deployment | [X days] | [Date] |
54
+
55
+ ## Risks & Assumptions
56
+ | Type | Description | Mitigation |
57
+ |------|-------------|------------|
58
+ | Risk | [Risk description] | [Mitigation plan] |
59
+ | Assumption | [Assumption] | - |
60
+
61
+ ## Task Assignments
62
+ | Role | Responsibility |
63
+ |------|----------------|
64
+ | @SA | Backend architecture |
65
+ | @UIUX | UI/UX design |
66
+ | @DEV | Implementation |
67
+ | @DEVOPS | CI/CD, deployment |
68
+ | @TESTER | Testing |
69
+
70
+ ## Approval Status
71
+ ⏳ Awaiting user approval.
72
+
73
+ ---
74
+
75
+ ### Next Step After Approval:
76
+ - @SA @UIUX @PO - Start design phase (in parallel)
77
+ - @REPORTER - Begin progress tracking
78
+
79
+ #planning
@@ -0,0 +1,80 @@
1
+ # Security Review Report - Version [X]
2
+
3
+ ## Document Info
4
+ | Field | Value |
5
+ |-------|-------|
6
+ | Version | [X.0] |
7
+ | Date | [YYYY-MM-DD] |
8
+ | Author | @SECA |
9
+ | Status | Pass / Fail / Conditional Pass |
10
+
11
+ ---
12
+
13
+ ## 1. Scope of Review
14
+ | Area | Reviewed |
15
+ |------|----------|
16
+ | Authentication | ✅/❌ |
17
+ | Authorization | ✅/❌ |
18
+ | Data Validation | ✅/❌ |
19
+ | API Security | ✅/❌ |
20
+ | Data Storage | ✅/❌ |
21
+ | Dependencies | ✅/❌ |
22
+
23
+ ## 2. Security Summary
24
+ | Severity | Count | Status |
25
+ |----------|-------|--------|
26
+ | Critical | [X] | [X] Resolved |
27
+ | High | [X] | [X] Resolved |
28
+ | Medium | [X] | [X] Resolved |
29
+ | Low | [X] | [X] Resolved |
30
+
31
+ ## 3. Findings
32
+
33
+ ### 3.1 Critical
34
+ | ID | Finding | OWASP Ref | Status |
35
+ |----|---------|-----------|--------|
36
+ | SEC-001 | [Description] | [A01-A10] | Open/Resolved |
37
+
38
+ ### 3.2 High
39
+ | ID | Finding | OWASP Ref | Status |
40
+ |----|---------|-----------|--------|
41
+ | SEC-002 | [Description] | [A01-A10] | Open/Resolved |
42
+
43
+ ### 3.3 Medium
44
+ | ID | Finding | OWASP Ref | Status |
45
+ |----|---------|-----------|--------|
46
+ | SEC-003 | [Description] | [A01-A10] | Open/Resolved |
47
+
48
+ ### 3.4 Low
49
+ | ID | Finding | OWASP Ref | Status |
50
+ |----|---------|-----------|--------|
51
+ | SEC-004 | [Description] | [A01-A10] | Open/Resolved |
52
+
53
+ ## 4. Security Checklist
54
+ - [ ] Input validation on all endpoints
55
+ - [ ] SQL injection prevention (parameterized queries)
56
+ - [ ] XSS prevention (output encoding)
57
+ - [ ] CSRF protection
58
+ - [ ] Authentication tokens properly secured
59
+ - [ ] Authorization checks on all protected resources
60
+ - [ ] Sensitive data encrypted at rest
61
+ - [ ] Sensitive data encrypted in transit (HTTPS)
62
+ - [ ] No secrets in source code
63
+ - [ ] Dependency vulnerabilities addressed
64
+
65
+ ## 5. Recommendations
66
+ 1. [Security recommendation 1]
67
+ 2. [Security recommendation 2]
68
+
69
+ ## 6. Verdict
70
+ ☐ **PASS** - No blocking security issues
71
+ ☐ **CONDITIONAL PASS** - Proceed with noted mitigations
72
+ ☐ **FAIL** - Critical/High issues must be resolved
73
+
74
+ ---
75
+
76
+ ### Next Step:
77
+ - @SA @DEV - Address security findings (if any)
78
+ - @DEV - Proceed with development (if approved)
79
+
80
+ #security-review