speckit-red-team-gate

What problem does it solve?

It prevents a qualifying feature spec from moving forward without a red team findings report on record, reducing the risk of missing security, compliance, or contractual safeguards.

Core Features & Use Cases

• Spec qualification gate: Scans the target spec for red team trigger criteria (e.g., money/regulatory content, LLM involvement, immutability/audit requirements, multi-party approvals, and contract/API boundary language).
• Findings report enforcement: Verifies that a matching findings report exists in the expected repository locations, including archived paths.
• Explicit waiver support: Allows an intentional opt-out via a skip token that must be recorded as an accepted risk in the plan output.

Quick Start

Ask the system to run the gate before planning a feature spec named by your current branch or by a provided spec path.