[spdd] Daily spec work plan - 2026-10-05 #65898

Summary

Reviewed 5 spec files (rotation indices 5-9 of 20) through the SPDD stages. Findings are mostly maintenance: duplicated version data between spec and changelog, a contradictory fixture note, and a manual-only drift guard not enforced in CI.

Priority Work Queue

• P0: Fix contradictory total_aic fixture description in specs/forecast-compliance-fixtures/README.md.
• P1: Enforce the MCP access control pinned-spec drift check in CI; add a mechanical spec-version vs changelog sync check.
• P2: Clarify non-sequential CTR to T-CTR mapping and add an ID allocation rule.

SPDD Checklist

• [Analysis] specs/forecast-compliance-fixtures/README.md: resolve conflicting bullets (total_aic: 0.0054 vs 5400) against the fixture JSON. Done when one value is documented and matches the fixture.
• [Analysis] specs/compiler-threat-detection-spec.md (Section 2): compare the version table with the changelog Version History. Done when every changelog version has a row or documented range.
• [REASONS: Safeguards] specs/github-mcp-access-control-compliance/README.md: move the manual drift check into a script under scripts/ and call it from .github/workflows/. Done when a mismatched pin fails CI.
• [REASONS: Norms] specs/compiler-threat-detection-compliance/README.md: add an ID allocation rule for new T-CTR-* IDs and document CTR-024 status. Done when both are stated.
• [REASONS: Operations] specs/forecast-compliance-fixtures/README.md: add a numbered pipeline order (filter, sample cap, Poisson, Bernoulli, bootstrap) tied to T-FC IDs. Done when each step has a test ID.
• [Generate] pkg/workflow/ tests: add a test asserting spec Section 2 versions equal changelog versions. Done when go test ./pkg/workflow/... covers it.
• [Generate] specs/compiler-threat-detection-compliance/: add a CTR-031 (T-CTR-046) fixture stub for strict vs non-strict behavior. Done when the file exists and is linked from the README.
• [Sync] specs/compiler-threat-detection-changelog.md: add an audit entry template (date, files, disposition, CTR impact, linked issues). Done when the template precedes Mapping Audits.
• [Sync] specs/github-mcp-access-control-compliance/README.md: re-pin the commit after any change to scratchpad/github-mcp-access-control-specification.md. Done when the pin equals the current tip commit.

Per-Spec Findings

Sync Follow-ups

• Spec edits to compiler-threat-detection-spec.md: bump version, update Section 2, add changelog entry in the same PR.
• Edits to scratchpad/github-mcp-access-control-specification.md: re-pin the compliance README.
• Fixture changes in specs/forecast-compliance-fixtures/: re-verify T-FC-020 to T-FC-040 mappings in pkg/cli/ tests.
• Next run starts at rotation index 10 (specs/intent-attribution-agent-governance.md).

Context

• Files reviewed: specs/compiler-threat-detection-changelog.md, specs/compiler-threat-detection-compliance/README.md, specs/compiler-threat-detection-spec.md, specs/forecast-compliance-fixtures/README.md, specs/github-mcp-access-control-compliance/README.md
• Rotation index: 5-9 of 20 (last_index=9, next=10)
• Run URL: https://github.com/github/gh-aw/actions/runs/37336568239

Generated by 📋 Daily SPDD Spec Planner · copilot · auto · 23 AIC · ⌖ 5.72 AIC · ⊞ 7.1K · ◷

• expires on Oct 8, 2026, 7:59 AM UTC-08:00