AI review compliance matrix
Mandatory controls from policy, shown by stage and outcome: Hard Block, Policy Block, Merge Blocked, and Merge Allowed.
| Stage | Signal | Blocking condition | Seriousness | Count | % cohort |
|---|---|---|---|---|---|
| Secret Scan | secrets_found | secrets_found = true | Hard Block | 0 | 0 |
| Dependency Scan | has_critical | has_high | counts | critical/high flag or count > 0 | Hard Block | 6 | 100 |
| Code Review | code_review_verdict | CHANGES_REQUESTED with P0 findings | Policy Block | 0 | 0 |
| Security Review | security_review_verdict | CHANGES_REQUESTED with Critical/High findings | Policy Block | 0 | 0 |
| Final Decision | hasBlockingIssues() | Any blocking condition from the matrix | Merge Blocked | 6 | 100 |
| Final Decision | Clean aggregate | No blocking conditions | Merge Allowed | 0 | 0 |