Running dtc risk --diff in pull requests is the natural team on-ramp, and it stays advisory (the project trust stance).
Suggested scope:
- Prototype an Action that runs
dtc init, dtc scan, dtc risk --diff on a PR.
- Post advisory comments only.
What not to do yet: no blocking by default, no blocking on weak claims, no cloud service. Keep it advisory and opt-in.
See ROADMAP.md (v0.3) and PUBLIC_FEEDBACK_PLAN.md.
Running
dtc risk --diffin pull requests is the natural team on-ramp, and it stays advisory (the project trust stance).Suggested scope:
dtc init,dtc scan,dtc risk --diffon a PR.What not to do yet: no blocking by default, no blocking on weak claims, no cloud service. Keep it advisory and opt-in.
See ROADMAP.md (v0.3) and PUBLIC_FEEDBACK_PLAN.md.