← Policy gallery

cert_no_open_l1_at_release

coding-standards security pure_temporal secure-codingcertseirisk-basedprioritized-remediationrag-red

No Level L1 finding remains open at release.

Formula

G(Release → ¬open_l1)

Why it matters

SEI CERT prioritization: L1 risks are remediated before lower-priority work and must not ship; an open L1 at release is a critical security gap.

Examples

passes the risk/remediation step is evidenced

fails the required assessment/remediation is absent

Use it

ponens policies add cert_no_open_l1_at_release --into ./trace.json
ponens trace check ./trace.json