Skip to content

DEMO Beat 3 — override layering (DO NOT MERGE)#14

Draft
danielmeppiel wants to merge 2 commits into
mainfrom
d2-demo/beat3-override-layering
Draft

DEMO Beat 3 — override layering (DO NOT MERGE)#14
danielmeppiel wants to merge 2 commits into
mainfrom
d2-demo/beat3-override-layering

Conversation

@danielmeppiel
Copy link
Copy Markdown
Contributor

Storefront repo override adds */operate-kit to its deny list while apm.yml still pins operate-kit. Demo expectation: dependency-denylist check fails — proving repo override layers on top of org policy and CI gates on the union.

@danielmeppiel danielmeppiel force-pushed the d2-demo/beat3-override-layering branch 2 times, most recently from 19b5562 to b217968 Compare May 7, 2026 23:55
Org policy allows DevExpGbb/**. Storefront repo override denies
**/modernize-kit pending security review. Effective policy = org +
override. Expected: apm audit --ci fails on dependency-denylist at
the REPO OVERRIDE layer (requires v5.1.1 layered enforcement).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@danielmeppiel danielmeppiel force-pushed the d2-demo/beat3-override-layering branch from b217968 to 1dd2117 Compare May 8, 2026 00:01
@danielmeppiel
Copy link
Copy Markdown
Contributor Author

Closing as DO-NOT-MERGE demo artifact. PR is wired for D2 governance demo (PLATFORM.md §D2) — kept open as a reference; closing to avoid accidental merge. Re-open from the same branch for the live demo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants