[PR] feat(project-agnosticism): add cve-allocation-config.md capability-flag vocabulary [airflow-steward]

["justinmclean (via GitHub)" <gi...@apache.org>]

justinmclean opened a new pull request, #562:
URL: https://github.com/apache/airflow-steward/pull/562

   ## Summary
   
   Documents the three workflow-diverging capability flags for the security-cve-allocate skill: cve_authority.tool (vulnogram / mitre-form / cve-org-direct / ghsa / none), governance.cve_allocation_gate (pmc-member / security-team-member / maintainer / none), and cve_authority.reviewer_channel (mailing-list / github-pr / none).
   
   Closes the third and final gap in project-agnosticism.md Known Gaps ("capability-flag vocabulary is defined only for release-management"): capability-flags-committer-intake and capability-flags-security-intake cover the other two gaps; this branch covers CVE allocation.
   
   Generated-by: Claude (Opus 4.7)
   
   ## Type of change
   
   <!-- Tick all that apply. -->
   
   - [ ] Skill change (`.claude/skills/<name>/`) — eval fixtures updated below
   - [ ] Tool / bridge contract (`tools/<system>/*.md`)
   - [ ] Python package (`tools/*/` with `pyproject.toml`)
   - [ ] Groovy reference impl
   - [ ] Cross-cutting (RFC, AGENTS.md, sandbox, privacy-LLM)
   - [X] Documentation (`docs/`, `README.md`, `CONTRIBUTING.md`)
   - [ ] Project template (`projects/_template/`)
   - [ ] CI / dev loop (`prek`, workflows, validators)
   - [ ] Other:
   
   ## Test plan
   
   - [X] `prek run --all-files` passes
   - [ ] For Python packages touched: `uv run pytest` / `ruff check` / `mypy` passes
   - [ ] For Groovy bridges touched: command-line invocation tested end-to-end
   - [ ] For skill changes: eval suite passes for the affected skill
         (`PYTHONPATH=tools/skill-evals/src python3 -m skill_evals.runner tools/skill-evals/evals/<skill>/`)
   - [ ] For skill *behaviour* changes: a new or updated eval fixture is included in this PR
         (a regression test for the bug fixed / the behaviour added — see CONTRIBUTING.md)
   - [ ] Other:
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] feat(project-agnosticism): add cve-allocation-config.md capability-flag vocabulary [airflow-steward]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk merged PR #562:
URL: https://github.com/apache/airflow-steward/pull/562


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org