From 47b4946b0cee5fd6c10f9abe5238437c4ff54a01 Mon Sep 17 00:00:00 2001
From: SakuraCianna <153083908+SakuraCianna@users.noreply.github.com>
Date: Tue, 4 Aug 2026 09:25:39 +0800
Subject: [PATCH] Add agentic-sdlc-mcp integration proposal documentation

Describe a potential third-party MCP integration for Buzz-connected coding agents.

Signed-off-by: SakuraCianna <754515922@qq.com>
---
 docs/integrations/agentic-sdlc-mcp.md | 58 +++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 docs/integrations/agentic-sdlc-mcp.md

diff --git a/docs/integrations/agentic-sdlc-mcp.md b/docs/integrations/agentic-sdlc-mcp.md
new file mode 100644
index 0000000000..cdcf644710
--- /dev/null
+++ b/docs/integrations/agentic-sdlc-mcp.md
@@ -0,0 +1,58 @@
+# agentic-sdlc-mcp community integration proposal
+
+[`agentic-sdlc-mcp`](https://github.com/SakuraCianna/agentic-sdlc-mcp)
+is a third-party MCP server that provides GitHub-based SDLC governance
+and evidence controls for AI coding agents.
+
+It is intended to complement Buzz rather than replace any Buzz component.
+
+## Responsibility split
+
+Buzz provides:
+
+- agent collaboration and identity;
+- channels and shared workflows;
+- event history and human coordination.
+
+`agentic-sdlc-mcp` provides:
+
+- bounded GitHub repository context;
+- risk-aware preparation of GitHub work items;
+- pull-request quality-gate evidence;
+- repository governance and security evidence;
+- release-readiness and agent-handoff packets;
+- explicit human approval checkpoints.
+
+Coding and execution tools continue to perform code changes, tests,
+commits, and pull-request operations.
+
+## Example composition
+
+```text
+Buzz channel or workflow
+→ Buzz-connected coding agent
+→ agentic-sdlc-mcp
+→ bounded GitHub context and SDLC decision artifacts
+→ coding or execution tools
+→ pull request, checks, review, and human approval in Buzz
+```
+
+## Safety boundary
+
+The MCP currently exposes 13 workflow-level tools.
+
+Twelve tools are read-only.
+The only GitHub write tool creates Issues.
+The write tool uses a dry-run preview by default.
+The MCP does not write code, merge pull requests, create releases,
+deploy software, or replace human security review.
+Project links
+GitHub: https://github.com/SakuraCianna/agentic-sdlc-mcp
+npm: https://www.npmjs.com/package/agentic-sdlc-mcp
+MCP Registry: https://registry.modelcontextprotocol.io/v0.1/servers?search=io.github.SakuraCianna%2Fagentic-sdlc-mcp
+```
+
+## Status
+
+This is a proposed third-party community integration, not an official
+Buzz component or a dependency maintained by the Buzz project.