docs(23): gap-closure plan for AUTOGATE-03 idempotency defect (CR-01)

This commit is contained in:
lorentz 2026-07-16 22:54:19 -04:00
parent cc87607a58
commit a918b72d04
3 changed files with 247 additions and 8 deletions

View file

@ -654,7 +654,7 @@ Phases execute in numeric order. v1.0 (Phases 1-9.1) shipped 2026-07-10. v2.0 (P
**Goal:** Add a dedicated "User Awareness" verdict for confirmed phishing-simulation-vendor (KnowBe4/Breach Secure Now) reports — today forced into the generic UNWANTED bucket despite the classifier already detecting the simulation vendor and explicitly skipping the THREAT tier — and add an admin UI gate page letting an admin choose, per Autotask company, whether the phishing pipeline's parse/classify/report-to-ticket stages run automatically (now that the previously-dead Autotask webhook is fixed) or require the existing manual Analyze/Classify/triage-note triggers.
**Requirements**: CLASSDISP-01, CLASSDISP-02, CLASSDISP-03, AUTOGATE-01, AUTOGATE-02, AUTOGATE-03
**Depends on:** Phase 17, Phase 18, Phase 19, Phase 20, Phase 21, Phase 22
**Plans:** 5/5 plans complete
**Plans:** 6 plans (5 complete, 1 gap-closure pending)
Plans:
**Wave 1**
@ -668,6 +668,10 @@ Plans:
- [x] 23-04-PLAN.md — /admin/phishing-automation page (3-toggle company table) + admin index tile (AUTOGATE-02)
- [x] 23-05-PLAN.md — Gate reader + gated parse->classify->acknowledge webhook chain (D-04 carve-out) (AUTOGATE-03)
**Gap closure** *(from 23-VERIFICATION.md, Truth #18 / CR-01)*
- [ ] 23-06-PLAN.md — Idempotent + audited auto-post: autoPostAcknowledgment prevents duplicate customer-visible notes on repeat campaign webhooks (AUTOGATE-03)
---
*Roadmap created: 2026-05-03*
*v2.0 phases added: 2026-07-10*