docs: add Secure Software Development Lifecycle policy - #3033

Queued

Erik Osterman (Cloud Posse) (osterman) wants to merge 9 commits into

mainfrom

docs/ssdlc-policy

Commits on Sep 2, 2026

docs: add Secure Software Development Lifecycle policy

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
570f884
docs: correct where the release environment applies

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
e860384
docs: address CodeRabbit review on SSDLC accuracy

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
d7f07a0
docs: drop the transient build failure from the SSDLC

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
96ac791
docs: fix editorconfig violation in SSDLC

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
56b67b3
docs: address review comments on SSDLC

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
583e674
docs: state the harden-runner coverage boundary

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
c2ede6c
docs: narrow the runner-isolation claim in the SSDLC

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
c57348c
docs: state cache isolation as a control, not a caveat

Erik Osterman (Cloud Posse) (osterman)
and
Claude (claude)
committed
073f808