ci: add OpenSpec auto-approval workflow
Automatically approves and labels OpenSpec proposal/spec PRs from Claude agents.
Features:
- Auto-approves PRs that only modify openspec/ directory
- Adds 'openspec' and 'auto-approved' labels
- Posts confirmation comment
- Only applies to claude/ branches and fullsizemalt user
This removes the approval bottleneck for infrastructure proposals and allows faster iteration on specs.
docs(openspec): approve and apply infrastructure proposals
Approve and apply 3 critical infrastructure proposals:
- Data Model v1: Consolidated schema with PHI/PII classification
- Authentication System: OAuth2/OIDC with RBAC & pseudonym support
- Design System: Unified components with WCAG 2.2 AA+ compliance
All infrastructure proposals now approved and ready for implementation.
Automatically approves and labels OpenSpec proposal/spec PRs from Claude agents.
Features:
- Auto-approves PRs that only modify openspec/ directory
- Adds 'openspec' and 'auto-approved' labels
- Posts confirmation comment
- Only applies to claude/ branches and fullsizemalt user
This removes the approval bottleneck for infrastructure proposals and allows faster iteration on specs.
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
Approved proposals:
- Data Model v1: Consolidated schema with PHI/PII classification
- Authentication System: OAuth2/OIDC with RBAC & pseudonym support
- Design System: Unified components with WCAG 2.2 AA+ compliance
Applied to specs:
- openspec/specs/data-model.md (updated with full schema)
- openspec/specs/authentication.md (new)
- openspec/specs/design-system.md (new)
- openspec/specs/architecture.md (added infrastructure references)
All infrastructure proposals now approved and ready for implementation.
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
Complete lifecycle for:
- Web Stack Decision → merged to main
- Profiles MVP → merged to main
- Resources MVP → merged to main
All proposals now marked as archived.
- Add PR template with OpenSpec compliance checklist
- Enforces spec-first workflow and lifecycle commands
- Includes accessibility, privacy, security gates
- Requires platform parity verification
- Add CODEOWNERS for automated review routing
- Routes a11y changes to accessibility reviewers
- Routes PHI/PII changes to compliance + security
- Routes API/backend changes to security reviewers
- Placeholder @fullsizemalt (expand to teams later)
- Add AI_HANDOFF.md for agent collaboration
- Documents current session state and decisions
- Provides context for future AI collaborators
- Lists next steps and open questions
