## {{spec_title}}

**Risk tier:** {{risk_tier}} (mandatory frontmatter)
**Codex passes run:** {{codex_pass_count}} (3 per tier)
**Audit log:** `.claude/audit/{{run_ulid}}.jsonl`

## Summary

<!-- 1-3 bullets describing the change. -->

## Risk assessment

<!-- Required for `enterprise` profile. State the risk tier and rationale. -->

- **Tier:** {{risk_tier}}
- **Rationale:**

## Compliance checklist

- [ ] Risk frontmatter present in spec (enforced — autopilot refused to
      start without it)
- [ ] Codex review (3 passes) recorded in audit log
- [ ] Bugbot triage recorded in audit log
- [ ] No new secrets, broken RLS, or unguarded `SELECT *`
- [ ] Change conforms to internal SDLC controls

## Reviewer checklist

- [ ] At least one CODEOWNER approval
- [ ] Branch protection rules satisfied
- [ ] Audit log line count matches expected events

## Test plan

- [ ] CI green
- [ ] Manual smoke test on staging
- [ ] Rollback plan documented if change is non-trivial

---
Generated by Cadence (`enterprise` profile). Audit log is append-only and
must not be rewritten or deleted by automation. Log rotation/archival is
operator responsibility.
