Recipes

Each recipe names which rubric criteria it advances and to what level. Recipes are portable: the same pattern should generalise across projects. Platform-specific wiring lives in integrations, kept separate from recipes on purpose.

Proven (3)

Bot-token credential tenancy — family: credential-tenancy · complexity: low
Indexed per-entry registry with YAML frontmatter — family: filing · complexity: low
Observe-before-enforce gate promotion — family: gate · complexity: low

Proposed (8)

Deterministic browser automation — family: browser-automation · complexity: medium
Dynamic debug logging — family: observability · complexity: low
Feature-authoring process with scoped writer role — family: authoring · complexity: medium
GitHub Actions scheduler — family: scheduling · complexity: medium
GitOps JIT privilege elevation — family: gate · complexity: high
Ingestion as PR — family: ingestion · complexity: medium
Project-scoped reader account for shared content ingestion — family: credential-tenancy · complexity: low
Rubric → SOC 2 alignment — family: alignment · complexity: low