Skip to content

[spdd] Daily spec work plan - 2026-11-05 #75197

Closed

Description

@github-actions

Summary

SPDD review of 5 specs (rotation continued after index 4). No blocking defects found; plan focuses on REASONS-canvas gaps (Safeguards/Operations/Norms), spec-to-implementation traceability, and sync notes. Priorities: P0 x1, P1 x3, P2 x3.

Priority Work Queue

  • P0: specs/otel-observability-spec.md consolidate fail-closed safeguards and cross-reference with specs/safe-output-outcome-evaluation.md OTLP-unavailable safeguards.
  • P1: specs/safe-output-outcome-evaluation.md (1001 lines, v1.0.2 Working Draft) per-type operation ordering; specs/replace-label-spec.md error-handling/safeguard mapping; specs/security-architecture-spec.md Appendix G test-coverage table.
  • P2: specs/compiler-threat-detection-changelog.md pruning/summary; norms wording; sync notes.

SPDD Checklist

  • (/spdd-analysis) specs/otel-observability-spec.md: list ambiguous MUST/SHOULD in section 6 and Safeguards (line ~906). Done when each ambiguity has a resolved-wording proposal in a PR description.
  • (/spdd-reasons-canvas) specs/safe-output-outcome-evaluation.md: add explicit Entities and Structure subsections (outcome categories, per-type evaluators). Done when each of the 20 safe-output sections names its entity and evaluator.
  • (/spdd-reasons-canvas) specs/replace-label-spec.md: add a Safeguards table mapping each error category (section 7.1) to a stage (5.1-5.8). Done when every error category has one owning stage.
  • (/spdd-reasons-canvas) specs/security-architecture-spec.md: verify Appendix G checklist-to-test mapping table (line ~1925) covers every category. Done when no checklist row lacks a test reference.
  • (/spdd-generate) pkg/cli/outcome_conformance_test.go and pkg/cli/testdata/outcome_conformance.json: add cases for OTLP-unavailable safeguards. Done when tests fail on removal of the fail-closed behavior.
  • (/spdd-generate) specs/replace-label-compliance/: add fixtures for each replace-label error category. Done when the README lists a fixture per category.
  • (/spdd-generate) specs/otel-observability-spec.md: tighten Operations ordering for export, fan-out, shutdown. Done when a numbered sequence exists and is testable.
  • (/spdd-sync) specs/compiler-threat-detection-changelog.md: collapse mapping audits older than 30 days into a summary. Done when only recent audits remain in detail.
  • (/spdd-sync) specs/safe-output-outcome-evaluation.md: re-verify the implementation-locations table against pkg/cli/. Done when every path exists.

Per-Spec Findings

specs/safe-output-outcome-evaluation.md
  • Analysis: large Working Draft; goals are clear per safe-output type; risk is drift between 20 type sections and the Current Default Acceptance Map.
  • Canvas: Requirements, Norms and Safeguards present; Entities and Structure are implicit.
  • Generate: add conformance cases; Sync: re-verify path table.
specs/security-architecture-spec.md
  • Analysis: comprehensive (2276 lines, appendices A-G); risk is checklist/test drift.
  • Canvas: strong on Safeguards and Norms; Operations spread across layers.
  • Generate: audit Appendix G mapping; Sync: update on layer changes.
specs/otel-observability-spec.md
  • Analysis: v0.5.0 Working Draft; fail-closed safeguards recently consolidated.
  • Canvas: Operations ordering for export/fan-out/shutdown could be more explicit.
  • Generate: add ordered procedure; Sync: align with outcome-evaluation spec.
specs/replace-label-spec.md
  • Analysis: 8-stage processing model is clear; error categories need stage ownership.
  • Canvas: add explicit Safeguards table.
  • Generate: fixtures; Sync: match the compliance README.
specs/compiler-threat-detection-changelog.md
  • Analysis: 309 lines of mapping audits; CTR-001-026 have references and no TODOs.
  • Canvas: Norms for audit cadence and retention are missing.
  • Generate: add retention rule; Sync: keep consistent with the spec.

Sync Follow-ups

  • After any change to specs/otel-observability-spec.md, update the cross-references in specs/safe-output-outcome-evaluation.md and bump the versions and changelog.
  • After replace-label edits, update specs/replace-label-compliance/README.md.
  • After conformance test changes, update the implementation-location tables in the specs.

Context

  • Files reviewed: specs/safe-output-outcome-evaluation.md, specs/security-architecture-spec.md, specs/otel-observability-spec.md, specs/replace-label-spec.md, specs/compiler-threat-detection-changelog.md
  • Rotation index: previous last_index=4 (2026-11-04); this run covered the next 5 spec files. The rotation state could not be persisted because no write tool was available this run, so the next run may repeat this window.
  • Run: https://github.com/github/gh-aw/actions/runs/42059377792

Generated by 📋 Daily SPDD Spec Planner · copilot · auto · ~19 AIC · ⌖ ~1 AIC · ⊞ 8.6K · ◷

  • expires on Nov 8, 2026, 7:59 AM UTC-08:00

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions