docs(23): add Classification Disposition + Per-Client Automation Gate phase

Scoping a dedicated "User Awareness" verdict for confirmed phishing-simulation
reports (KnowBe4/Breach Secure Now) plus a per-company automation gate for the
parse/classify/report-to-ticket pipeline stages. Surfaced live during Phase 22
review of a real Breach Secure Now report (ticket 699415).
This commit is contained in:
lorentz 2026-07-16 18:25:27 -04:00
parent 1c9ce682e0
commit 8a11a9f331
3 changed files with 18 additions and 0 deletions

View file

@ -99,6 +99,13 @@ Recent decisions affecting current work:
classification, with approve/remediate/mark-false-positive wired to the
Phase 20 APIs. Depends on Phase 19 + Phase 20 only; not functionally
dependent on Phase 21 despite being numbered after it.
- Phase 23 added: Classification Disposition + Per-Client Automation Gate —
dedicated "User Awareness" verdict for confirmed phishing-simulation-vendor
reports (currently forced into generic UNWANTED), plus an admin UI gate
for per-company automatic vs. manual phishing pipeline execution. Surfaced
live during Phase 22 review of a real Breach Secure Now report (ticket
699415) — the classifier already detects the simulation vendor and skips
the THREAT tier, but has no distinct outcome to reflect it.
### Pending Todos