feat(ai-judge): rework enforce mode as user-assumed-risk contract

- add config v2 with fixed judge model selection and fail-closed v1 enforce migration to shadow
- add built-in high-risk override for irreversible, publish, system, and credential shapes that always defers to the human
- remove the promotion gate, promotion records tool, and their tests
- fail closed with judge_model_unavailable when a configured judge model cannot be resolved
- notify once per session in enforce mode with the judge model and risk contract
- add ADR 0008 and update README and CONTEXT
This commit is contained in:
2026-08-21 23:11:40 +08:00
parent f4ba739878
commit 061c60c344
17 changed files with 1372 additions and 1137 deletions
+7
View File
@@ -1,3 +1,10 @@
> **Status note (2026-08-21):** superseded as a runtime governance
> mechanism by [ADR 0008](../adr/0008-enforce-user-assumed-risk.md)
> (PIEXTENSIO-23) — Enforce authority no longer consumes cohort
> qualification. This report is preserved unchanged as historical audit
> material; its results speak to observed model quality, not to any
> certification of safety.
# PIEXTENSIO-22 v4 Enforce promotion cohort report
## Decision