AI review compliance matrix
Mandatory controls from policy, shown by stage and outcome: Hard Block, Policy Block, Merge Blocked, and Merge Allowed.
| Stage | Signal | Blocking condition | Seriousness | Count | % cohort |
|---|---|---|---|---|---|
| Secret Scan | secrets_found | secrets_found = true | Hard Block | 1 | 1 |
| Dependency Scan | has_critical | has_high | counts | critical/high flag or count > 0 | Hard Block | 87 | 85.3 |
| Code Review | code_review_verdict | CHANGES_REQUESTED with P0 findings | Policy Block | 27 | 26.5 |
| Security Review | security_review_verdict | CHANGES_REQUESTED with Critical/High findings | Policy Block | 31 | 30.4 |
| Final Decision | hasBlockingIssues() | Any blocking condition from the matrix | Merge Blocked | 94 | 92.2 |
| Final Decision | Clean aggregate | No blocking conditions | Merge Allowed | 8 | 7.8 |