vc-risk-evidence-pack

Generate a structured risk evidence pack for high-risk software changes by classifying risk levels and producing artifacts like risk-gate.json and context-snippets.json to ensure compliance with risk management protocols.

A risk evidence pack is a structured collection of artifacts, including risk-gate.json and context-snippets.json, used to classify changes by risk level and document verification checks for high-risk software development.

Create a risk-gate.json file by running the evidence pack command with parameters for feature name, risk class, work description, and plan path to classify the change and generate required compliance artifacts.

No, this approach requires manual review and validation of risk classes and artifacts to ensure high-risk work is thoroughly reviewed, utilizing a manual-first approach for high-risk tasks.

Yes, it integrates into existing workflows by accepting plan paths and work descriptions to classify changes and track approval status, ensuring high-risk changes meet compliance protocols.

Classifying changes by risk level is necessary to identify high-risk work, generate appropriate evidence pack artifacts, and facilitate a structured review process to ensure the change is safe to proceed.