---
doc_id: MAP-CK8S-DOMAIN-RISK-AND-RELEASE-GOVERNANCE
type: issue-map
title: kodex — карта Issue домена рисков и релизов
status: active
owner_role: KM
created_at: 2026-04-25
updated_at: 2026-06-03
---

# Карта Issue — риски и релизы

## TL;DR

Долгоживущая карта домена `risk-and-release-governance`.

## Матрица

| Issue/PR | Документы | Волна | Статус | Примечание |
|---|---|---|---|---|
| #322 | `docs/domains/risk-and-release-governance/README.md`<br>`docs/domains/risk-and-release-governance/product/requirements.md`<br>`docs/domains/risk-and-release-governance/architecture/design.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/domains/agent-orchestration/README.md`<br>`docs/domains/agent-orchestration/product/requirements.md`<br>`docs/domains/agent-orchestration/architecture/design.md`<br>`docs/domains/agent-orchestration/architecture/data_model.md`<br>`docs/domains/agent-orchestration/architecture/api_contract.md`<br>`docs/domains/agent-orchestration/delivery/agent_manager_delivery.md`<br>`docs/domains/platform-mcp-server/README.md`<br>`docs/domains/platform-mcp-server/product/requirements.md`<br>`docs/domains/platform-mcp-server/architecture/design.md`<br>`docs/domains/platform-mcp-server/architecture/api_contract.md`<br>`docs/domains/platform-mcp-server/architecture/contract_strategy.md`<br>`docs/domains/platform-mcp-server/delivery/platform_mcp_server_delivery.md`<br>`docs/domains/projects-and-repositories/README.md`<br>`docs/platform/architecture/domain_map.md`<br>`docs/platform/architecture/service_boundaries.md`<br>`docs/platform/architecture/data_model.md`<br>`docs/platform/architecture/provider_integration_model.md`<br>`docs/platform/architecture/mcp_and_interaction_model.md`<br>`docs/platform/architecture/codex_hooks_and_skills.md` | wave 15 | active | Стартовый docs-first срез: отдельный `governance-manager`, risk gates, review signals, approvals, release decisions, release safety-loop и синхронизация Human gate границы с `agent-manager`, `platform-mcp-server`, `codex-hook-ingress`, `interaction-hub` и `project-catalog`. |
| #769 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`specs/asyncapi/governance-manager.v1.yaml`<br>`libs/go/platformevents/governance/events.gen.go`<br>`libs/go/accesscatalog/actions.go`<br>`docs/domains/risk-and-release-governance/README.md`<br>`docs/domains/risk-and-release-governance/product/requirements.md`<br>`docs/domains/risk-and-release-governance/architecture/design.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-1: gRPC/AsyncAPI контракты `governance-manager`, события `governance.*`, generated Go contracts и access actions; сервисная реализация, БД, миграции, evaluator, UI/gateway и интеграции остаются следующими срезами. |
| #790 | `services/internal/governance-manager/**`<br>`services.yaml`<br>`docs/domains/risk-and-release-governance/README.md`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-2: runnable service skeleton, config, health/readiness/metrics, gRPC registration, доменный backlog-use-case и repository stub; storage, migrations, evaluator, outbox publisher, UI/gateway и межсервисные интеграции остаются следующими срезами. |
| #802 | `services/internal/governance-manager/**`<br>`services.yaml`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-3: PostgreSQL-модель MVP-сущностей, repository слой, service-local outbox и gRPC handlers для поддержанных storage-операций; rule evaluator, release engine, UI/gateway, deploy manifests и межсервисные интеграции остаются следующими срезами. |
| #815 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`specs/asyncapi/governance-manager.v1.yaml`<br>`libs/go/platformevents/governance/events.gen.go`<br>`services/internal/governance-manager/**`<br>`services.yaml`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-4: gate request lifecycle `request/read/decision/cancel/expire`, access checks через `access-manager`, optimistic concurrency, idempotent replay и безопасные `governance.gate.*` outbox events. |
| #827 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/architecture/design.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-5: risk classifier и policy evaluator для `governance-manager` по safe summaries/refs, локальным risk profiles/rules, deterministic outcome, idempotent replay, expected version и safe `governance.risk_assessment.*` outbox events. |
| #845 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-6: release decision package, release decision, blocking signal и release safety-loop state работают на PostgreSQL repository с access checks, idempotent replay, expected version и safe `governance.release_*`/`governance.blocking_signal.*` outbox events; межсервисные интеграции остаются GOV-7. |
| #856 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/architecture/design.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7a: release decision package хранит safe integration refs/summaries для project/provider/agent/runtime/governance связей без provider write, deploy orchestration, delivery callbacks и владения чужой доменной истиной. |
| #869 | `services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7b: release package enrichment валидирует и обогащает локальные governance refs ограниченным snapshot, а project/provider/agent/runtime refs сохраняет как explicit refs с safe summary diagnostic до отдельных service-client интеграций. |
| #886 | `services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/README.md`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/architecture/design.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7c: review signal refs intake принимает provider/agent/interaction evidence refs как safe owner-domain refs, проверяет `governance.signal.record`, дедуплицирует запись по source fingerprint и не копирует provider-native или agent run state. |
| #907 | `specs/asyncapi/governance-manager.v1.yaml`<br>`libs/go/platformevents/governance/events.gen.go`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-9: governance decision lifecycle events дополнены safe metadata/refs/summary/idempotency correlation для consumers через `platform-event-log`; authoritative reads остаются через gRPC, соседние сервисы не читают БД governance. |
| #919 | `services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7d: `governance-manager` потребляет `provider.comment.synced` и идемпотентно пишет локальный review signal для approved/changes_requested provider review refs без чтения БД/API `provider-hub` и без копирования provider-native state. |
| #930 | `services/internal/governance-manager/**`<br>`deploy/base/governance-manager/governance-manager.yaml.tpl`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/domains/risk-and-release-governance/ops/governance_manager_runbook.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7e: `governance-manager` потребляет `interaction.request.response_recorded` для `owner_service=governance_manager` и `human_gate`, затем идемпотентно пишет локальный gate decision через `SubmitGateDecision` по safe refs/outcome/digest без копирования delivery/callback state. |
| без отдельного Issue | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`specs/asyncapi/governance-manager.v1.yaml`<br>`libs/go/platformevents/governance/events.gen.go`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7f: `governance-manager` принимает safe runtime/deploy evidence refs через `RecordReleaseRuntimeEvidence`, обновляет существующий release package с expected version и публикует safe event без чтения Kubernetes, БД `runtime-manager` или deploy scripts. |
| без отдельного Issue | `services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7g: `governance-manager` возвращает safe runtime/deploy evidence через `GetReleaseDecisionPackage`/`ListReleaseDecisionPackages`, проверяет typed runtime statuses, идемпотентный повтор fingerprint, конфликтующий fingerprint и устаревший status без чтения runtime/Kubernetes state. |
| #957 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`specs/asyncapi/governance-manager.v1.yaml`<br>`libs/go/platformevents/governance/events.gen.go`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7h: `governance-manager` принимает safe agent evidence refs через `RecordReleaseAgentEvidence`, обновляет существующий release package с expected version и публикует safe event без чтения БД `agent-manager`, prompt/transcript, stdout/stderr, логов или workspace paths. |
| #972 | `services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7i: `governance-manager` потребляет `agent.acceptance.completed`/`failed` только при явном `governance_release_decision_package_ref` и дозаписывает safe acceptance/runtime job evidence через `RecordReleaseAgentEvidence` без implicit lookup по project/run и без чтения БД `agent-manager`. |
| #976 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | wave 15 | active | GOV-7j: `GetGovernanceSummary` даёт безопасную модель чтения для владельца и персонала по target/project/release/package/integration ref: pending/completed decisions, risk class, gate/release outcomes, linked provider/agent/runtime evidence refs и partial diagnostics без доменной логики в gateway. |
| не назначено | `specs/openapi/staff-gateway.v1.yaml`<br>`services/staff/staff-gateway/**`<br>`deploy/base/staff-gateway/staff-gateway.yaml.tpl`<br>`services.yaml`<br>`docs/domains/console-and-operations-ux/README.md`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md` | SGW-5 | active | Операторский endpoint `GET /v1/governance/summary` в `staff-gateway` вызывает `governance-manager.GetGovernanceSummary`, возвращает safe pending/completed decisions и evidence summaries по одному selector и не переносит governance-логику в gateway. |
| без отдельного Issue | `services/internal/platform-mcp-server/**`<br>`docs/domains/platform-mcp-server/architecture/api_contract.md`<br>`docs/domains/platform-mcp-server/delivery/platform_mcp_server_delivery.md`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md` | GOV-MCP-1 | active | MCP-инструмент `governance.summary.get` вызывает `governance-manager.GetGovernanceSummary`, принимает ровно один selector и возвращает safe pending/completed decisions, evidence summaries и diagnostics без хранения governance state в MCP. |
| #380 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`services/internal/platform-mcp-server/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/domains/platform-mcp-server/architecture/api_contract.md`<br>`docs/domains/platform-mcp-server/delivery/platform_mcp_server_delivery.md`<br>`docs/platform/architecture/mcp_and_interaction_model.md` | GOV-SEC-1 | active | Первый security/governance baseline для живого операторского контура: `GetGovernanceSummary.status` и `governance.summary.get` показывают общий attention, максимальный риск, pending/blocked/completed counts, открытые gates, активные blocking signals, evidence/diagnostic counts и `next_action_code`. Сканеры зависимостей, container images и runtime/infra probes остаются открытой частью #380. |
| #380 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`services/internal/platform-mcp-server/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/domains/platform-mcp-server/architecture/api_contract.md`<br>`docs/domains/platform-mcp-server/delivery/platform_mcp_server_delivery.md`<br>`docs/platform/architecture/mcp_and_interaction_model.md`<br>`docs/platform/architecture/repository_onboarding.md` | GOV-SEC-2 | active | Self-deploy gate baseline: risk evaluator классифицирует safe deploy-plan factors для `codex-k8s/kodex` merge, summary показывает required gate counts и `request_governance_gate`, а deploy job остаётся запрещён до owner/governance decision. Сканеры зависимостей, container images и runtime/infra probes остаются открытой частью #380. |
| #380 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/domains/agent-orchestration/architecture/api_contract.md`<br>`docs/platform/architecture/repository_onboarding.md` | GOV-SEC-3 | active | Self-deploy plan gate wiring: `PrepareSelfDeployPlanGate` принимает safe `SelfDeployPlan` refs/factors/fingerprint от `agent-manager`, создаёт или находит risk assessment и gate request по target `self_deploy_plan`, учитывает существующий gate decision и возвращает `pending`/`approved`/`rejected`/`request_changes`/`blocked` без запуска runtime jobs. Сканеры зависимостей, container images и runtime/infra probes остаются открытой частью #380. |
| #380 | `proto/kodex/governance/v1/governance_manager.proto`<br>`proto/gen/go/kodex/governance/v1/**`<br>`services/internal/governance-manager/**`<br>`docs/domains/risk-and-release-governance/architecture/api_contract.md`<br>`docs/domains/risk-and-release-governance/architecture/data_model.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md` | GOV-SEC-4 | active | Self-deploy owner gate outcome: `SubmitGateDecision` фиксирует `approve`/`reject`/`revise`, replay сравнивает safe command payload и конфликтующие повторы отклоняет; `PrepareSelfDeployPlanGate` возвращает `request_changes` для `revise`, а `governance.gate.resolved` публикует только safe refs/outcome/summary без запуска runtime jobs. Сканеры зависимостей, container images и runtime/infra probes остаются открытой частью #380. |
| без отдельного Issue | `services/internal/governance-manager/Dockerfile`<br>`deploy/base/governance-manager/**`<br>`deploy/base/postgres/**`<br>`bootstrap/host/config.env.example`<br>`bootstrap/local/steps/45_prepare_runtime_env.sh`<br>`bootstrap/host/smoke_backend_contour.sh`<br>`scripts/smoke-governance-manager.sh`<br>`services.yaml`<br>`docs/domains/risk-and-release-governance/README.md`<br>`docs/domains/risk-and-release-governance/ops/governance_manager_runbook.md`<br>`docs/domains/risk-and-release-governance/ops/governance_manager_monitoring.md`<br>`docs/domains/risk-and-release-governance/delivery/risk_governance_delivery.md`<br>`docs/delivery/coordination/agent-6-risk-governance.md` | MVP backend deploy | active | GOV-8: эксплуатационный контур `governance-manager` готов для первого backend deploy: service/migrations Dockerfile stages, Kubernetes manifests, PostgreSQL database bootstrap, runtime env/secret inventory, smoke `/health/readyz`, runbook и monitoring. |
