feat: seed Lariza feature demonstration

Add synthetic fixtures and proposed policy contracts for safely demonstrating future Lariza capabilities. Assisted-by: Codex: GPT-5.6
2026-07-18 20:21:38 +08:00
commit 8b6e3b4919
7 changed files with 96 additions and 0 deletions
@@ -0,0 +1,17 @@
+apiVersion: security.lariza.dev/v1alpha1
+kind: SecurityPolicyIntent
+metadata:
+  name: default-security-gate
+spec:
+  mode: audit
+  trustedPublishers: [lariza-security-demo]
+  mergeGate:
+    blockNewSeverities: [critical, high]
+    requireTriageFor: [medium]
+    dismissedFindingsRequire:
+      reason: true
+      expiresAt: true
+      approverRole: security-owner
+  evidence:
+    acceptedFormats: [sarif-2.1.0, cyclonedx-1.5, junit]
+    retainDays: 90