Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ARCHITECTURE.md
Original file line number Diff line number Diff line change
Expand Up @@ -220,7 +220,7 @@ flowchart TB

Stewards do **not** review all Detection logic. They own catalog integrity and vocabulary discipline.

Deprecation: `deprecated` + `replacedBy` + N−1 MINOR support window; mandatory→recommended needs RFC.
Deprecation: `deprecated` + `replacedBy` + N−1 MINOR support window; mandatory→recommended needs RFC. **Pre-release exception** (no tagged versions yet): see [`id-gaps.md`](packages/aprf-engine/rules/_index/id-gaps.md) and [APRF-RFC-0002](rfcs/0002-incident-readiness-mandatory-to-recommended.md).

---

Expand Down
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ Format follows [Keep a Changelog](https://keepachangelog.com/). Versioning is Se
## [Unreleased]

### Changed
- Rewrote **incident-readiness** **INC-M1**–**INC-M2** and **INC-R1**/**INC-R3**; demoted **INC-M3 → INC-R2** and **INC-M4 → INC-R4** per [APRF-RFC-0002](rfcs/0002-incident-readiness-mandatory-to-recommended.md) (regulated 56→55, tier3-only 17→16; pre-release ID-removal exception in `id-gaps.md`); hybrid collectors; synced `aprf-spec.json`.
- Rewrote **change management** from template stub to hybrid Check + collectors; cleared `technologies` filter; synced `aprf-spec.json`.
- Rewrote **prompt-engineering** from template stub to hybrid Check + collectors; cleared `technologies` filter; synced `aprf-spec.json`.
- Rewrote **model-governance** from template stub to hybrid Check + collector; cleared cloud-only `technologies`; synced `aprf-spec.json`.
Expand Down
2 changes: 1 addition & 1 deletion CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ This repository is the **normative public home** for APRF:
1. Read [ARCHITECTURE.md](ARCHITECTURE.md) and [rfcs/0000-template.md](rfcs/0000-template.md).
2. For substantive normative changes (new Pillars, gate semantics, ID renumbers), open an RFC first.
3. For Check edits: follow the schema in `packages/aprf-engine/rules/_schema/rule.schema.json`.
4. Never reuse a published Check ID — deprecate with `replacedBy` instead.
4. Never reuse a published Check ID — deprecate with `replacedBy` instead. Before the first tagged release, M→R remaps may omit deprecated stubs only when documented in an RFC and [`id-gaps.md`](packages/aprf-engine/rules/_index/id-gaps.md).

## Local checks

Expand Down
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -131,7 +131,7 @@ Platform-specific **detections** (scanners, collectors) stay in product/plugin r
5. If the generated catalog changed, commit `packages/aprf-engine/src/generated/catalog.ts`.
6. Open a PR — CI will re-validate and fail on catalog drift.

Deprecate with `status: deprecated`, `replacedBy`, and `deprecationNote` — never reuse IDs. Numbering gaps are intentional — see [`packages/aprf-engine/rules/_index/id-gaps.md`](packages/aprf-engine/rules/_index/id-gaps.md).
Deprecate with `status: deprecated`, `replacedBy`, and `deprecationNote` — never reuse IDs. Numbering gaps are intentional — see [`packages/aprf-engine/rules/_index/id-gaps.md`](packages/aprf-engine/rules/_index/id-gaps.md). **Pre-release exception:** before the first tagged version, M→R remaps may remove IDs when an RFC and `id-gaps.md` record the change (see [APRF-RFC-0002](rfcs/0002-incident-readiness-mandatory-to-recommended.md)).

## Continuous integration

Expand Down
8 changes: 7 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,12 @@
"aprf:ai-canary-progressive-delivery": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-canary-progressive-delivery",
"aprf:env-parity-model-tool-catalog": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins env-parity-model-tool-catalog",
"aprf:embedding-index-migration": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins embedding-index-migration",
"aprf:incident-playbooks": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins incident-playbooks",
"aprf:ai-containment-drill": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-containment-drill",
"aprf:post-incident-aprf-actions": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins post-incident-aprf-actions",
"aprf:ai-incident-tabletop": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-incident-tabletop",
"aprf:ai-safety-quality-alerts": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-safety-quality-alerts",
"aprf:ai-customer-notification-criteria": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-customer-notification-criteria",
"aprf:cost-alerts": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-cost-alerts",
"aprf:retry-amplification": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-retry-amplification",
"aprf:prompt-cache": "npx tsx skills/aprf-auditor/collectors/runner.ts --plugins ai-prompt-cache",
Expand Down Expand Up @@ -111,7 +117,7 @@
"aprf:report-html": "npx tsx skills/aprf-auditor/scripts/render-html-report.ts",
"aprf:verify-html": "npx tsx skills/aprf-auditor/scripts/verify-html-report.ts",
"test:unit": "npm run test:unit -w @stackrail-io/aprf-engine && npm run test:unit -w @stackrail-io/aprf-framework-definition",
"test:auditor-skill": "npx tsx skills/aprf-auditor/tests/validate-fixture.ts && npx tsx skills/aprf-auditor/tests/collectors-smoke.ts && npx tsx skills/aprf-auditor/tests/http-auth-probe-smoke.ts && npx tsx skills/aprf-auditor/tests/mcp-s2s-inventory-smoke.ts && npx tsx skills/aprf-auditor/tests/authz-entry-tests-smoke.ts && npx tsx skills/aprf-auditor/tests/cross-tenant-tests-smoke.ts && npx tsx skills/aprf-auditor/tests/secrets-hygiene-smoke.ts && npx tsx skills/aprf-auditor/tests/secret-redaction-smoke.ts && npx tsx skills/aprf-auditor/tests/injection-policy-gate-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-charter-inventory-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-loop-limits-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-kill-switch-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-goal-policy-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-sandbox-sim-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-raci-ownership-smoke.ts && npx tsx skills/aprf-auditor/tests/human-approval-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-spend-limits-smoke.ts && npx tsx skills/aprf-auditor/tests/context-budget-smoke.ts && npx tsx skills/aprf-auditor/tests/context-source-acl-smoke.ts && npx tsx skills/aprf-auditor/tests/context-sensitive-inclusion-smoke.ts && npx tsx skills/aprf-auditor/tests/context-budget-monitoring-smoke.ts && npx tsx skills/aprf-auditor/tests/context-compaction-evals-smoke.ts && npx tsx skills/aprf-auditor/tests/context-structured-blocks-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-suite-ci-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-release-gates-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-online-signals-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-shadow-cutover-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-track-catalog-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-human-review-smoke.ts && npx tsx skills/aprf-auditor/tests/model-pin-config-smoke.ts && npx tsx skills/aprf-auditor/tests/model-inventory-smoke.ts && npx tsx skills/aprf-auditor/tests/model-promotion-eval-smoke.ts && npx tsx skills/aprf-auditor/tests/model-deprecation-sunset-smoke.ts && npx tsx skills/aprf-auditor/tests/model-capability-allowlist-smoke.ts && npx tsx skills/aprf-auditor/tests/model-license-provenance-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-version-registry-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-change-review-eval-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-rollback-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-template-hygiene-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-lint-ci-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-ab-shadow-eval-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-model-version-retention-smoke.ts && npx tsx skills/aprf-auditor/tests/rollback-runbook-smoke.ts && npx tsx skills/aprf-auditor/tests/rollback-drill-smoke.ts && npx tsx skills/aprf-auditor/tests/quality-slo-auto-rollback-smoke.ts && npx tsx skills/aprf-auditor/tests/one-click-ai-rollback-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-behavior-feature-flags-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-artifact-promotion-path-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-artifact-change-records-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-config-as-code-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-canary-progressive-delivery-smoke.ts && npx tsx skills/aprf-auditor/tests/env-parity-model-tool-catalog-smoke.ts && npx tsx skills/aprf-auditor/tests/embedding-index-migration-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-cost-alerts-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-retry-amplification-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-prompt-cache-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-model-routing-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-finops-unit-economics-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-golden-path-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-ai-pipeline-gates-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-ownership-support-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-scaffolding-templates-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-inner-loop-evals-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-dx-metrics-smoke.ts && npx tsx skills/aprf-auditor/tests/rag-corpus-governance-smoke.ts && npx tsx skills/aprf-auditor/tests/dataset-provenance-governance-smoke.ts && npx tsx skills/aprf-auditor/tests/feedback-promotion-governance-smoke.ts && npx tsx skills/aprf-auditor/tests/corpus-freshness-metrics-smoke.ts && npx tsx skills/aprf-auditor/tests/train-serve-skew-monitor-smoke.ts && npx tsx skills/aprf-auditor/tests/dataset-cards-registry-smoke.ts && npx tsx skills/aprf-auditor/tests/model-payload-classification-smoke.ts && npx tsx skills/aprf-auditor/tests/model-payload-redaction-smoke.ts && npx tsx skills/aprf-auditor/tests/vendor-model-terms-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-deletion-export-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-residency-routing-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-dpia-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-isolation-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-retention-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-write-policy-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-integrity-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-poisoning-evals-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-promotion-architecture-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-obligations-register-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-control-evidence-matrix-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-control-plane-audit-logs-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-control-testing-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-trust-documentation-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-independent-assessment-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-acceptable-use-policy-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-domain-ownership-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-risk-acceptance-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-leadership-review-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-improvement-backlog-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-org-aprf-sampling-smoke.ts && npx tsx skills/aprf-auditor/tests/a2a-peer-auth-smoke.ts && npx tsx skills/aprf-auditor/tests/render-html-smoke.ts",
"test:auditor-skill": "npx tsx skills/aprf-auditor/tests/validate-fixture.ts && npx tsx skills/aprf-auditor/tests/collectors-smoke.ts && npx tsx skills/aprf-auditor/tests/http-auth-probe-smoke.ts && npx tsx skills/aprf-auditor/tests/mcp-s2s-inventory-smoke.ts && npx tsx skills/aprf-auditor/tests/authz-entry-tests-smoke.ts && npx tsx skills/aprf-auditor/tests/cross-tenant-tests-smoke.ts && npx tsx skills/aprf-auditor/tests/secrets-hygiene-smoke.ts && npx tsx skills/aprf-auditor/tests/secret-redaction-smoke.ts && npx tsx skills/aprf-auditor/tests/injection-policy-gate-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-charter-inventory-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-loop-limits-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-kill-switch-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-goal-policy-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-sandbox-sim-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-raci-ownership-smoke.ts && npx tsx skills/aprf-auditor/tests/human-approval-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-spend-limits-smoke.ts && npx tsx skills/aprf-auditor/tests/context-budget-smoke.ts && npx tsx skills/aprf-auditor/tests/context-source-acl-smoke.ts && npx tsx skills/aprf-auditor/tests/context-sensitive-inclusion-smoke.ts && npx tsx skills/aprf-auditor/tests/context-budget-monitoring-smoke.ts && npx tsx skills/aprf-auditor/tests/context-compaction-evals-smoke.ts && npx tsx skills/aprf-auditor/tests/context-structured-blocks-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-suite-ci-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-release-gates-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-online-signals-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-shadow-cutover-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-track-catalog-smoke.ts && npx tsx skills/aprf-auditor/tests/eval-human-review-smoke.ts && npx tsx skills/aprf-auditor/tests/model-pin-config-smoke.ts && npx tsx skills/aprf-auditor/tests/model-inventory-smoke.ts && npx tsx skills/aprf-auditor/tests/model-promotion-eval-smoke.ts && npx tsx skills/aprf-auditor/tests/model-deprecation-sunset-smoke.ts && npx tsx skills/aprf-auditor/tests/model-capability-allowlist-smoke.ts && npx tsx skills/aprf-auditor/tests/model-license-provenance-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-version-registry-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-change-review-eval-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-rollback-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-template-hygiene-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-lint-ci-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-ab-shadow-eval-smoke.ts && npx tsx skills/aprf-auditor/tests/prompt-model-version-retention-smoke.ts && npx tsx skills/aprf-auditor/tests/rollback-runbook-smoke.ts && npx tsx skills/aprf-auditor/tests/rollback-drill-smoke.ts && npx tsx skills/aprf-auditor/tests/quality-slo-auto-rollback-smoke.ts && npx tsx skills/aprf-auditor/tests/one-click-ai-rollback-smoke.ts && npx tsx skills/aprf-auditor/tests/agent-behavior-feature-flags-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-artifact-promotion-path-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-artifact-change-records-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-config-as-code-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-canary-progressive-delivery-smoke.ts && npx tsx skills/aprf-auditor/tests/env-parity-model-tool-catalog-smoke.ts && npx tsx skills/aprf-auditor/tests/embedding-index-migration-smoke.ts && npx tsx skills/aprf-auditor/tests/incident-playbooks-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-containment-drill-smoke.ts && npx tsx skills/aprf-auditor/tests/post-incident-aprf-actions-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-incident-tabletop-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-safety-quality-alerts-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-customer-notification-criteria-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-cost-alerts-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-retry-amplification-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-prompt-cache-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-model-routing-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-finops-unit-economics-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-golden-path-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-ai-pipeline-gates-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-ownership-support-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-scaffolding-templates-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-inner-loop-evals-smoke.ts && npx tsx skills/aprf-auditor/tests/platform-dx-metrics-smoke.ts && npx tsx skills/aprf-auditor/tests/rag-corpus-governance-smoke.ts && npx tsx skills/aprf-auditor/tests/dataset-provenance-governance-smoke.ts && npx tsx skills/aprf-auditor/tests/feedback-promotion-governance-smoke.ts && npx tsx skills/aprf-auditor/tests/corpus-freshness-metrics-smoke.ts && npx tsx skills/aprf-auditor/tests/train-serve-skew-monitor-smoke.ts && npx tsx skills/aprf-auditor/tests/dataset-cards-registry-smoke.ts && npx tsx skills/aprf-auditor/tests/model-payload-classification-smoke.ts && npx tsx skills/aprf-auditor/tests/model-payload-redaction-smoke.ts && npx tsx skills/aprf-auditor/tests/vendor-model-terms-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-deletion-export-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-residency-routing-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-dpia-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-isolation-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-retention-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-write-policy-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-integrity-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-poisoning-evals-smoke.ts && npx tsx skills/aprf-auditor/tests/memory-promotion-architecture-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-obligations-register-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-control-evidence-matrix-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-control-plane-audit-logs-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-control-testing-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-trust-documentation-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-independent-assessment-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-acceptable-use-policy-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-domain-ownership-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-risk-acceptance-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-leadership-review-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-improvement-backlog-smoke.ts && npx tsx skills/aprf-auditor/tests/ai-org-aprf-sampling-smoke.ts && npx tsx skills/aprf-auditor/tests/a2a-peer-auth-smoke.ts && npx tsx skills/aprf-auditor/tests/render-html-smoke.ts",
"build": "npm run build -w @stackrail-io/aprf-engine && npm run build -w @stackrail-io/aprf-framework-definition",
"validate": "npm run aprf:validate && npm run aprf:catalog && npm run aprf:integrity && npm run test:unit && npm run test:auditor-skill",
"publish:packages": "npm run build && npm publish -w @stackrail-io/aprf-framework-definition --access public && npm publish -w @stackrail-io/aprf-engine --access public"
Expand Down
19 changes: 19 additions & 0 deletions packages/aprf-engine/rules/_index/id-gaps.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
# Check ID gaps

Numbering gaps in Check IDs are **intentional**. Do not fill gaps by reusing retired IDs.

## Policy

- After a **tagged release**, never delete a published Check ID. Deprecate with `status: deprecated`, `replacedBy`, and `deprecationNote` (N−1 MINOR support window). See `CONTRIBUTING.md` and `ARCHITECTURE.md`.
- **Mandatory → recommended** always needs an RFC (`ARCHITECTURE.md`).

## Pre-release exception (before first tagged version)

APRF `0.10.x` is a working draft; **no release versions have been tagged yet**. For this window only, stewards may remove a Check ID when remapping M→R **if** an RFC records the remapping and this file lists the gap.

| Retired ID | Replaced by | RFC | Notes |
| --- | --- | --- | --- |
| `INC-M3` | `INC-R2` | [APRF-RFC-0002](../../../rfcs/0002-incident-readiness-mandatory-to-recommended.md) | Post-incident APRF-pillar actions; was never on Core/Regulated |
| `INC-M4` | `INC-R4` | [APRF-RFC-0002](../../../rfcs/0002-incident-readiness-mandatory-to-recommended.md) | AI-focused tabletop ≤180d; removed from Regulated mandatories |

**After the first tagged release**, this exception closes. New demotions must keep deprecated stubs (pattern: `INF-R1` → `SCI-R1`).
Loading
Loading