security_review/production_deployment_evidence_template.json

5549 bytes
{
  "approved_genesis_allocation_sha256": "",
  "artifacts": [
    {
      "exists": true,
      "path": "docs/spacecash/PRODUCTION_DEPLOYMENT_RUNBOOK.md",
      "sha256": "20E41F3377AD31EC28BF4A48F0BE21D893D4A44AA0815C8787296D53D3C64A84"
    },
    {
      "exists": true,
      "path": "docs/spacecash/MAINNET_GATE.md",
      "sha256": "C41DAD804A8461829733E15722B1939123E3E4F3D4BC18E2080D5E397C0DEAB0"
    },
    {
      "exists": true,
      "path": "docs/spacecash/MANUAL_GATES.md",
      "sha256": "FFE1E93E26C1B2796B793E1B0C350A2F204581B875E51AF688CB5B1CD57CD3BA"
    },
    {
      "exists": true,
      "path": "docs/spacecash/THREAT_MODEL.md",
      "sha256": "AFD89190A4C0B763387E6358A242BBC047E2032568B64D6B792FD8715F77A46A"
    }
  ],
  "chain_id": "spacecash-devnet-1",
  "controls": {
    "backup_restore_rehearsal_path": "",
    "backup_restore_rehearsal_sha256": "",
    "bootstrap_peer_plan_path": "",
    "bootstrap_peer_plan_sha256": "",
    "deployment_runbook_path": "",
    "deployment_runbook_sha256": "",
    "incident_response_plan_path": "",
    "incident_response_plan_sha256": "",
    "monitoring_plan_path": "",
    "monitoring_plan_sha256": "",
    "node_setup_instructions_path": "",
    "node_setup_instructions_sha256": "",
    "post_deploy_audit_plan_path": "",
    "post_deploy_audit_plan_sha256": "",
    "production_http_controls_path": "",
    "production_http_controls_sha256": "",
    "release_bundle_path": "",
    "release_bundle_sha256": "",
    "release_manifest_path": "",
    "release_manifest_sha256": "",
    "rollback_plan_path": "",
    "rollback_plan_sha256": "",
    "sha256sums_path": "",
    "sha256sums_sha256": "",
    "validator_rollout_plan_path": "",
    "validator_rollout_plan_sha256": ""
  },
  "decisions": [
    {
      "evidence": "",
      "id": "source_freeze",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Source Freeze And Reviewed Source Hash"
    },
    {
      "evidence": "",
      "id": "release_bundle_archive",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Release Bundle Archive And Checksum Verification"
    },
    {
      "evidence": "",
      "id": "approved_genesis_allocation",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Approved Genesis Allocation And Migration Boundary"
    },
    {
      "evidence": "",
      "id": "node_setup",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Node Setup Instructions And Bootstrap Peer Plan"
    },
    {
      "evidence": "",
      "id": "validator_rollout",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Validator Rollout And Checkpoint Quorum Plan"
    },
    {
      "evidence": "",
      "id": "http_hardening",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Production HTTP Controls"
    },
    {
      "evidence": "",
      "id": "monitoring_alerting",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Monitoring, Alerting, And On-Call Coverage"
    },
    {
      "evidence": "",
      "id": "backup_restore",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Backup, Snapshot, And Restore Rehearsal"
    },
    {
      "evidence": "",
      "id": "rollback_plan",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Rollback Procedure"
    },
    {
      "evidence": "",
      "id": "incident_response",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Incident Response And Public Status Procedure"
    },
    {
      "evidence": "",
      "id": "post_deploy_audit",
      "notes": "",
      "owner": "",
      "status": "not_reviewed",
      "title": "Post-Deploy Audit And Readiness Verification"
    }
  ],
  "environment": {
    "bootstrap_peers": [],
    "deployment_target": "",
    "incident_contact": "",
    "monitoring_endpoints": [],
    "production_domain": "",
    "validator_count": 0,
    "validator_quorum": 0
  },
  "final_approval": {
    "approved": false,
    "approved_at": "",
    "approver": "",
    "backup_restore_rehearsed": false,
    "launch_window_approved": false,
    "monitoring_owner_confirmed": false,
    "post_deploy_audit_required": true,
    "release_artifacts_archived": false,
    "rollback_owner_confirmed": false,
    "statement": "",
    "write_route_controls_approved": false
  },
  "manual_gate": {
    "id": "production_deployment_runbook_complete",
    "reason": "Reproducible deployment, monitoring, rollback, incident response, archived artifacts, and post-deploy audit plan require approval.",
    "status": "not_complete"
  },
  "mode": "spacecash-production-deployment-evidence-v1",
  "readiness_inputs": {
    "genesis_allocation_check_sha256": "",
    "legal_compliance_evidence_sha256": "",
    "public_testnet_evidence_sha256": "",
    "security_review_evidence_sha256": "",
    "wallet_custody_evidence_sha256": ""
  },
  "release_bundle_sha256": "",
  "reviewed_source_hash": "",
  "reviewer": {
    "change_ticket": "",
    "contact": "",
    "name": "",
    "reviewed_at": "",
    "role": ""
  },
  "security_review_packet_sha256": "",
  "status": "not_started",
  "version": 1
}