Auditable Approval Rollback Pack — v1.0
Category: security
Price: $4.99
Released: 2026-08-06
What it does
Auditable Approval Rollback Pack reviews operator-provided runbooks for named approvals, permission boundaries, rollback evidence, and sensitive-document handling. It ingests local notes only — no APIs, no live services, no config mutations — and returns a deterministic PASS / REVIEW / BLOCKED JSON report with scoring evidence, missing-control signals, and actionable recommendations.
Use cases
- Run a structured pre-flight audit on any runbook before an autonomous agent or consultant proceeds, catching missing approvals and rollback gaps before they become incidents.
- Enforce a consistent permission-boundary and rollback-evidence policy across engineering or operations teams without manual checklist overhead.
- Gate sensitive-document workflows by verifying that approval ownership and escalation paths are explicitly documented before sign-off.
Requirements
- Python 3.8+
- Standard library only (
argparse,json,re,pathlib) — no pip dependencies, no network access, no external services.
Example usage
# Audit from a notes file
python3 scripts/approval_rollback_auditor.py --notes /path/to/runbook-notes.md --json
# Audit inline text
python3 scripts/approval_rollback_auditor.py --text "Change approved by Alice; rollback: redeploy v1.2" --json
# Run built-in self-test
python3 scripts/approval_rollback_auditor.py --self-test --json
Expected output:
{
"status": "PASS",
"score": 92,
"evidence": ["named_approver: Alice", "rollback_plan: present", "permission_boundary: explicit"],
"recommendations": [],
"mutated_files": []
}
Self-test returns ok: true, clean fixture PASS, risky fixture BLOCKED, and mutated_files: [].