feat: scaffold deployment-policies monorepo

OPA/Rego deployment gateway policies: 5 rules (valid-environment, require-approvals, no-self-approval, block-weekends, freeze-window), a deploy-gate combining them, JSON schemas, scenario-driven tests, Gitea Actions CI (verify + publish to generic registry), changesets versioning, Makefile and scripts.
2026-09-15 19:05:03 +02:00
commit 59cacfdfab
48 changed files with 1703 additions and 0 deletions
@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "additionalProperties": true,
+  "properties": {
+    "deployment": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["environment", "service", "requested_by", "created_at"],
+      "properties": {
+        "environment": {"type": "string"},
+        "service": {"type": "string"},
+        "requested_by": {"type": "string"},
+        "created_at": {"type": "string", "format": "date-time"}
+      }
+    },
+    "approvals": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": true,
+        "required": ["by", "active"],
+        "properties": {
+          "by": {"type": "string"},
+          "active": {"type": "boolean"},
+          "at": {"type": "string", "format": "date-time"}
+        }
+      }
+    }
+  }
+}