ADR 0156 — ASVS scorecard as data: derived count, verified evidence anchors, fail-closed drift gate - #120

Merged

wshallwshall merged 10 commits into

mainfrom

claude/adr-asvs-scorecard-as-data

Aug 1, 2026

Commits on Aug 1, 2026

docs(adr): ADR 0156 -- ASVS scorecard as data, so a re-score stops costing 23M tokens
wshallwshall
committed
feat(asvs): scorecard verifier -- derived count, verified anchors, fail-closed (ADR 0156)
wshallwshall
committed
docs(adr): ratify ADR 0156, amending section 7 -- the vault CI premise was false
wshallwshall
committed
docs(adr): repair the 0156 index row -- a backtick was command-substituted away
wshallwshall
committed
feat(asvs): phase 0+1 -- publish survey progress, and make the rubric a spec
wshallwshall
committed
Merge branch 'main' into claude/adr-asvs-scorecard-as-data
wshallwshall
authored
fix(asvs): the drift gate could never pass -- the anchor was CI-injected
wshallwshall
committed
fix(asvs): declare the corpus-pin hashlib use in the crypto inventory
wshallwshall
committed
fix(asvs): register the corpus pin in the remaining two crypto registries
wshallwshall
committed
Merge branch 'main' into claude/adr-asvs-scorecard-as-data
wshallwshall
authored