{
  "id": "page:docs-harness-features-backlog-gaps-security-gap-sec-005",
  "_kind": "Page",
  "_file": "wiki/docs/harness-features-backlog/gaps/security/gap-sec-005.md",
  "_cluster": "wiki",
  "attributes": {
    "nodeKind": "Page",
    "sourcePath": "docs/harness-features-backlog/gaps/security/GAP-SEC-005.md",
    "sourceKind": "repo-docs",
    "title": "GAP-SEC-005: Approval Posture Model",
    "displayName": "GAP-SEC-005: Approval Posture Model",
    "slug": "docs/harness-features-backlog/gaps/security/gap-sec-005",
    "articlePath": "wiki/docs/harness-features-backlog/gaps/security/GAP-SEC-005.md",
    "article": "\n# GAP-SEC-005: Approval Posture Model\n\n| Field | Value |\n|-------|-------|\n| Category | security |\n| Priority | High |\n| Effort | M |\n| Status | Partial |\n\n## Description\nFormalize approval postures per action category so that different types of operations have appropriate approval requirements. A destructive file operation should have a different posture than a read operation.\n\n## Current State\nThe breakpoint system supports auto-approval rules with glob patterns, autoApproveAfterN, alwaysBreakOn profile tags. The pattern language is expressive but postures are not formalized by action type.\n\n## Target State\nApproval posture templates per action category (read, write, execute, destroy). Postures define: auto-approve threshold, escalation rules, required approver level. Integrated with governance policy engine.\n\n## Dependencies\n- [GAP-SEC-001](../security/GAP-SEC-001.md) -- governance policy for posture enforcement\n- [GAP-SEC-003](../security/GAP-SEC-003.md) -- typed interactions for posture-aware UX\n\n## Key Files\n| Component | Path |\n|-----------|------|\n| Breakpoint patterns | `packages/babysitter-sdk/src/breakpoints/patterns.ts` |\n| Breakpoint evaluator | `packages/babysitter-sdk/src/breakpoints/evaluator.ts` |\n\n## Recommendation\nPhase 2 implementation. Define approval posture templates per action category and wire into breakpoint evaluation.\n",
    "documents": []
  },
  "outgoingEdges": [],
  "incomingEdges": [
    {
      "from": "page:docs-harness-features-backlog",
      "to": "page:docs-harness-features-backlog-gaps-security-gap-sec-005",
      "kind": "contains_page"
    }
  ]
}