gatekeeper-azure

What problem does it solve?

Gatekeeper-azure prevents incomplete, insecure, or incorrect Azure provisioning work from advancing by adversarially validating deliverables across the full Azure pipeline and enforcing a strict approve/revise/escalate gate. It reduces deployment risk, unintended cost exposure, and security misconfigurations by applying professional skepticism and evidence-driven checks before consolidation.

Core Features & Use Cases

• Per-phase validation: Review and validate artifacts from azure-planner, azure-architect, azure-configurator, azure-deployer, and azure-verifier against the original intent and upstream approvals.
• Final adversarial sweep: During Phase 5 perform a cross-package adversarial audit covering architecture, configuration, deployment, verification fidelity, and key attack surfaces.
• Structured verdicts and delegation: Produce APPROVED/REVISE/ESCALATE reports with evidence, findings classified by severity, and formal delegation requests for remediation with round limits.
• Practical checks: Enforce checks for Azure alignment, infrastructure correctness, RBAC/Key Vault practices, cost proportionality, naming rules, operational readiness, and documentation quality.
• Use case: Validate a Phase 5 verification bundle to ensure no over-privileged identities, missing secrets, or unverified resources exist before production consolidation.

Quick Start

Run gatekeeper-azure to validate the provided Azure deliverable package and return a structured APPROVED, REVISE, or ESCALATE verdict with findings and evidence.