Security: incident communications templates for SEC-G05 (#438) #970
No reviewers
Labels
No labels
agent:fix_bugfix
agent:fix_conflicts
agent:fix_security
agent:gap_analysis
agent:implement
agent:implement
agent:implement
agent:open_issues
agent:ready
agent:research
agent:security_audit
agent:verify
architecture
backend
blocker:hybrid
blocker:launch
blocker:limit-orders
blocker:v2
block:log_only
block:security
bug
ci
contracts
correctness
deploy
dev
devops
docs
documentation
duplicate
e2e
enhancement
epic
feature
frontend
functional-completion
gas
good first issue
governance
help wanted
high-risk
hooks
hybrid
indexer
infra
infrastructure
integrators
invalid
launch-blocker
limit-orders
localnet
localterra
low priority
missing-implementation
needs-design
ops
performance
priority
high
priority
medium
product
qa
QA
question
ready
ready
research
scripts
security
security-hardening
smartcontracts
tech-debt
testing
ux
UX
v2
verification
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
code/cl8y-dex-terraclassic!970
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "issue-438-incident-comms-templates"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
Implements GitLab #438 (SEC-G05): adds five paste-ready communications templates to the incident tracker for pair pause, blacklist applied, exploit-under-investigation interim notice, false-alarm retraction, and postmortem summary. Each template includes fill-in placeholders for address, impact, timestamp, resolution/actions, and contact channel.
Also adds a drift guard (
make check-incident-comms-templates-docs),make verify-issue-438, agent playbookskills/AGENTS_INCIDENT_COMMS_TEMPLATES.md, and cross-links from emergency/blacklist runbooks, user FAQ, SECURITY.md, and docs README.Acceptance checklist
grep '### 1. Pair paused' docs/templates/incident-dex-indexer.mdgrep '### 2. Blacklist applied' docs/templates/incident-dex-indexer.mdgrep '### 3. Exploit under investigation' docs/templates/incident-dex-indexer.mdgrep '### 4. False alarm retraction' docs/templates/incident-dex-indexer.mdgrep '### 5. Postmortem summary' docs/templates/incident-dex-indexer.mdmake check-incident-comms-templates-docsmake verify-issue-438Third-party verification
Manual spot-check: open
docs/templates/incident-dex-indexer.md→ Appendix: Communications templates (SEC-G05) and confirm each of the five sections has Public + Internal copy blocks with bracketed placeholders.Related
Security review — MR !970
Commit reviewed:
5b299b1fbde3df1c3cddea95ea9c9948cbd9e314Scope: SEC-G05 incident communications templates (#438) — markdown templates, runbook cross-links, drift guard (
scripts/check_incident_comms_templates_docs.py), QA script (scripts/qa/verify-issue-438.sh), Makefile targets, agent playbook.Outcome:
FINDINGS: 0medium+Security review: no medium+ findings on this diff.
Method
Prior threads
No prior security-review notes on this MR; nothing to re-report.
Inline findings
None — no
block:securitylabel applied.mentioned in issue #438
added 12 commits
mainfd681aaa- Merge origin/main into issue-438-incident-comms-templatesCompare with previous version
Resolved merge conflicts with
origin/main(mergedfd681aaa).Conflicts resolved (5 files):
Makefile— kept bothcheck-incident-comms-templates-docs(SEC-G05) andcheck-incident-template-docs(SEC-G06); mergedlintdeps and.PHONYwith main'scheck-launch-monitoring-docsandverify-issue-{416,439,440}targets.docs/README.md— combined incident template entry (timeline + communications templates + both agent playbooks).docs/runbooks/blacklist-decision.md— timeline anchor links from main + SEC-G05 communications appendix from this branch.skills/AGENTS_BLACKLIST_DECISION.md/skills/AGENTS_EMERGENCY_COMMANDS.md— merged incident template references (timeline + comms templates).Sanity checks:
make verify-issue-438,make verify-issue-439, and related doc drift guards all pass.Security review — MR !970 (re-review)
Commit reviewed:
fd681aaa99efe3afa7f91910066aa671473c0c08Scope: SEC-G05 incident communications templates (#438) — 12 files: markdown templates/runbook cross-links, drift guard (
scripts/check_incident_comms_templates_docs.py), QA script (scripts/qa/verify-issue-438.sh), Makefile targets, agent playbook. Includes post-merge conflict resolution withorigin/main(Makefilelint/.PHONY, docs README, runbook anchors).Outcome:
FINDINGS: 0medium+Security review: no medium+ findings on this diff.
Method
base_sha1921c81f→head_shafd681aaa) after merge; prior review covered pre-merge tip5b299b1f.make check-incident-comms-templates-docsandmake verify-issue-438— PASS.Prior threads
Prior top-level security review on
5b299b1freported zero medium+ findings; merge commit changes are conflict-resolution cross-links only — no new attack surface identified.Inline findings
None — no
block:securitylabel applied.added 4 commits
main69f99024- Merge origin/main into issue-438-incident-comms-templatesCompare with previous version
Resolved merge conflicts with
main(issue #435 / SEC-G02 anomaly signals landed after the prior merge).Makefile: kept both sides —
check-anomaly-signals-docs+check-incident-comms-templates-docs,verify-issue-435+verify-issue-438, and both targets in.PHONY/lint/help.Sanity:
make verify-issue-438passes locally.Security review — MR !970
Commit reviewed:
69f990245821e0efd5d95826a85f02118db8d60fScope: SEC-G05 incident communications templates (#438) — 12 files: markdown templates/runbook cross-links, drift guard (
scripts/check_incident_comms_templates_docs.py), QA script (scripts/qa/verify-issue-438.sh), Makefile targets, agent playbook.Outcome:
FINDINGS: 0medium+Security review: no medium+ findings on this diff.
Method
base_shaba73247a→head_sha69f99024); prior reviews on5b299b1fandfd681aaaalso reported zero medium+.make check-incident-comms-templates-docsandmake verify-issue-438— PASS.Prior threads
Prior top-level security reviews on
5b299b1fandfd681aaareported zero medium+ findings; current tip is a further merge/rebase with no new attack surface identified.Inline findings
None — no
block:securitylabel applied.added 10 commits
main234de8ee- Merge origin/main into issue-438-incident-comms-templatesCompare with previous version
Resolved merge conflicts with
main(mergedorigin/mainintoissue-438-incident-comms-templates).Conflicts resolved:
Makefile— kept both SEC-G05 (check-incident-comms-templates-docs,verify-issue-438) and main additions (check-suspicious-activity-queries-docs,check-pool-triage-docs,verify-issue-437,verify-issue-436).docs/README.md— listed suspicious-activity runbook (#437) and incident comms templates (SEC-G05) cross-links.docs/runbooks/emergency-commands.md— combined pool-triage workflow (#436) with communications-templates appendix pointer (SEC-G05).Sanity:
make verify-issue-438passes locally.Security review — MR !970 (re-review)
Commit reviewed:
234de8ee6a67225f121c4c8ff76b1a3d8102a58bScope: SEC-G05 incident communications templates (#438) — 12 files: markdown templates/runbook cross-links, drift guard (
scripts/check_incident_comms_templates_docs.py), QA script (scripts/qa/verify-issue-438.sh), Makefile targets, agent playbook. Tip includes merge oforigin/main(2f966c04); MR diff unchanged in attack surface vs prior reviews.Outcome:
FINDINGS: 0medium+Security review: no medium+ findings on this diff.
Method
base_sha2f966c04→head_sha234de8ee); prior reviews on5b299b1f,fd681aaa, and69f99024also reported zero medium+.make check-incident-comms-templates-docsandmake verify-issue-438— PASS.Prior threads
Prior top-level security reviews on
5b299b1f,fd681aaa, and69f99024reported zero medium+ findings; current tip is a further merge/rebase with no new attack surface identified.Inline findings
None — no
block:securitylabel applied.mentioned in commit
20b6526de9