chore: protect external runtime connection settings

2026-07-12 12:19:34 +09:00
parent a7f9b27a55
commit 606664404b
6 changed files with 58 additions and 14 deletions
@@ -0,0 +1,12 @@
+formula_id: RUNTIME_CONNECTION_SETTINGS_IMMUTABILITY_V1
+version: 1
+authority: AGENTS.md
+setting_key: ConnectionStrings__DefaultConnection
+owner: operations
+policy:
+  source: runtime_environment_or_external_settings
+  application_may_read: true
+  application_may_write: false
+  secret_value_in_repository: forbidden
+evidence: Temp/runtime_connection_settings_immutability_v1.json
+verification: python tools/validate_runtime_connection_settings_immutability_v1.py