Repository navigation
[Preset]: Update Secure Development Assurance Governance to v0.1.8 #5136
Copy link
Copy link
Closed
Labels
preset-submissiontriage-must-haveVerdict: high-value, important work for Spec Kit — do firstVerdict: high-value, important work for Spec Kit — do firstvalidation-passed
Description
Preset ID
secure-development-assurance-governance
Preset Name
Secure Development Assurance Governance
Version
0.1.8
Description
Validates project-owned secure-development manifest, version, normalized hash, checklist, review, risk, closure, and image-impact evidence without granting human approvals or certifications.
Author
Thorsten Hindermann
Repository URL
https://github.com/hindermath/spec-kit-preset-secure-development-assurance-governance
Download URL
Documentation URL
License
MIT
Required Spec Kit Version
=0.8.3
Required Extensions (optional)
Templates Provided
- secure-development-assurance-governance-model-routing — model-routing.json; stable provider-neutral command-to-role contract.
- secure-development-evidence-contract — templates/secure-development-evidence-contract.md; portable evidence and decision-boundary contract.
Commands Provided
- speckit.secure-development-status — inspect a secure-development evidence directory without changing files.
- speckit.secure-development-review — validate a named gate and record only explicitly authorized review evidence.
Number of Scripts (optional)
2
Tags
security, governance, assurance, evidence, cross-platform
Key Features
- Updates the existing community catalog entry from v0.1.3 to the regular release v0.1.8.
- Checks project-owned manifest/version bindings, normalized hashes, checklist applicability, reviews, risks, closure, and image-impact evidence. Missing or inconsistent required evidence fails closed.
- Separates read-only status and direct model-free validators from explicitly authorized gate-review evidence. Technical checks do not grant human, product, risk, compliance, certification, or release approval.
- Includes the stable Schema 1.0 routing contract: status uses fast-mechanical; review uses frontier-reasoning. No experimental dynamic-routing redevelopment is included.
- German-first and equivalent English user guidance explains setup, examples, troubleshooting, composition, and decision boundaries for apprentices and developers without specialist governance knowledge.
- Archive SHA-256:
bce2969fa25b8753199ef40730037fedc7689971e6a54cc3a9da4ef0f64762dc(downloaded and rechecked for this submission). - Release commit:
100ff9e6e037b0d162bdadd8bfd0bf30520ff7b6; source release PR: chore: prepare v0.1.8 documentation publication hindermath/spec-kit-preset-secure-development-assurance-governance#13 . Existing tags and archives remain unchanged. - Previously completed archive-installation and template-resolution checks and native macOS/Linux/Windows contract CI are documented in the release evidence. Real-project delivery evidence: chore(presets): deliver fourteen documentation patch releases hindermath/TinyCalc#117 , docs: roll out fourteen stable documentation packages to Show pilot hindermath/Show-CommandTui400#55 , chore: align sandbox fourteen stable preset patches hindermath/absdd-image-sandbox#99 . Central technical closeout: chore(presets): roll out fourteen documentation patch releases to Level 0 hindermath/home-baseline#345 (comment) . These are technical delivery records, not product or accessibility certification.
- Only this preset update is submitted in this issue.
Testing Checklist
- Preset installs successfully via
specify preset add - Template resolution works correctly after installation
- Documentation is complete and accurate
- Tested on at least one real project
Submission Requirements
- Valid
preset.ymlmanifest included - Linked README (Documentation URL) explains how to use this preset and includes a valid
specify preset add ...command (preferablyspecify preset add --from <download-url>using the exact download URL) - LICENSE file included
- GitHub release created with version tag
- Preset ID follows naming conventions (lowercase-with-hyphens)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
preset-submissiontriage-must-haveVerdict: high-value, important work for Spec Kit — do firstVerdict: high-value, important work for Spec Kit — do firstvalidation-passed
Activity
github-actions commentedon Oct 27, 2026
cc @github/spec-kit-maintainers — new catalog submission for review.
Update Secure Development Assurance Governance preset to v0.1.8
github-actions commentedon Oct 27, 2026
Pull request created: #5139
Update Secure Development Assurance Governance preset to v0.1.8 (gith…