7 docs tagged with "revisão"

Instrument for binary and auditable verification of the practical adoption of continuous security validation practices.

Binary control checklist of the application of governance practices per project

Organisational policy that defines the requirements for the controlled use of development support tools, including generative AI assistants (GenAI/Copilot) and autonomous agents with tool-use (A0–A4), with a focus on mandatory review of output, traceability, licence validation, autonomy mandates and the maintenance of human responsibility, proportional to the criticality level (L1, L2, L3).

Binary and auditable checklist to verify the practical application of the security prescriptions for IaC.

Rules for the secure construction and review of pipelines as code, with controlled triggers and predictable environments.

Practices to protect branches, control changes and ensure traceable versioning of the code used in pipelines.

Good practices and controls for the secure use of generative AI tools in code writing and automated review