From 526a11bd70a998c6aa7acdf5db13f89d933e46e0 Mon Sep 17 00:00:00 2001 From: Paulo Lacerda Date: Sat, 10 Oct 2026 13:23:30 -0300 Subject: [PATCH] docs: remove stale independent-review blocker from policy adoption guidance Correct docs/python-development.md to state that recorded exception decisions are governed by their technical evidence (exact fingerprints, same-source bound tests, unexpired stage validation) rather than a separate independent human review step. The prior text incorrectly stated that independent human review (issue #695) remained outstanding, which resurrected a bureaucracy requirement explicitly removed by the repository owner. Integrity/fingerprint/expiry/check-validation language is preserved unchanged. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- docs/python-development.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/python-development.md b/docs/python-development.md index 0d015a9..f4ee840 100644 --- a/docs/python-development.md +++ b/docs/python-development.md @@ -284,9 +284,11 @@ unexpired records with same-source passing evidence can authorize an exception. The initial PR (#144) reported a missing protected policy as `bootstrap-review` because its base predated adoption; candidate data still cannot change the evaluator's rules. This reference PR runs against the adopted `develop` base, -exercising coordinator-owned required-check controls. Independent human -review of the recorded exception decisions remains outstanding (see -issue #695); this PR demonstrates base adoption, not completed review. +exercising coordinator-owned required-check controls. The recorded exception +decisions are governed by their technical evidence — exact fingerprints, +same-source bound tests and unexpired stage validation — not by a separate +independent human review step; this PR demonstrates base adoption with that +technical governance already in force. Installed acceptance covers real auth order, upload writes/cleanup and standalone download/OpenAPI failures outside the checkout. Linux acceptance is supplied by the actual `container-tests` job for the PR head, not inferred