AI review compliance matrix
Mandatory controls from policy, shown by stage and outcome: Hard Block, Policy Block, Merge Blocked, and Merge Allowed.
| Stage | Signal | Blocking condition | Seriousness | Count | % cohort |
|---|---|---|---|---|---|
| Secret Scan | secrets_found | secrets_found = true | Hard Block | 1 | 1 |
| Dependency Scan | has_critical | has_high | counts | critical/high flag or count > 0 | Hard Block | 86 | 85.1 |
| Code Review | code_review_verdict | CHANGES_REQUESTED with P0 findings | Policy Block | 27 | 26.7 |
| Security Review | security_review_verdict | CHANGES_REQUESTED with Critical/High findings | Policy Block | 31 | 30.7 |
| Final Decision | hasBlockingIssues() | Any blocking condition from the matrix | Merge Blocked | 93 | 92.1 |
| Final Decision | Clean aggregate | No blocking conditions | Merge Allowed | 8 | 7.9 |