From 4e4c26fbd997aba8e31d06171e8f33d1d8d52f7c Mon Sep 17 00:00:00 2001 From: DanFashauer Date: Tue, 19 May 2026 20:48:20 -0400 Subject: [PATCH 1/3] Disable auto-approve and auto-merge workflows for manual phase --- .github/workflows/auto-approve.yml | 15 +++------------ .github/workflows/auto-merge.yml | 5 +++-- docs/KNOWN_ISSUES.md | 10 +++++++++- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml index 2672a9e..985bc42 100644 --- a/.github/workflows/auto-approve.yml +++ b/.github/workflows/auto-approve.yml @@ -1,18 +1,9 @@ name: Auto-Approve +# Disabled during controlled-demo/manual-merge phase; manual runs only. on: - pull_request: - types: [opened, synchronize, labeled, unlabeled] - branches: - - main - - release - # SECURITY: Never run on changes to .github/ directory (workflows, policies) - # This prevents the workflow from approving itself - paths-ignore: - - ".github/**" - - "!.github/workflows/auto-approve.yml" - pull_request_review: - types: [dismissed] + workflow_dispatch: + # SECURITY: Least-privilege permissions # - contents: read - needed to check files diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index 24a221d..61a53b3 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -1,8 +1,9 @@ name: Auto-merge (no human approvals) +# Disabled during controlled-demo/manual-merge phase; manual runs only. on: - pull_request: - types: [opened, reopened, synchronize, ready_for_review, labeled] + workflow_dispatch: + permissions: contents: write diff --git a/docs/KNOWN_ISSUES.md b/docs/KNOWN_ISSUES.md index 200db27..5d246a3 100644 --- a/docs/KNOWN_ISSUES.md +++ b/docs/KNOWN_ISSUES.md @@ -59,7 +59,15 @@ Issues that do not break the demo but should be improved. ### Current Non-Blocking Items -(None yet - pending first manual review) + +- ID: AUTO_WORKFLOWS_MANUAL_PHASE +- Title: Auto-approve/auto-merge intentionally disabled +- Date: 2026-05-20 +- Severity: Low +- Area: repository workflow governance +- Suggested fix: Re-enable only after branch protection, labels, and permissions are reviewed. +- Status: Active (intentional) + --- From 6469b0e0e5386bd95350e6532d6ce260c102c7c1 Mon Sep 17 00:00:00 2001 From: DanFashauer Date: Thu, 21 May 2026 19:57:00 -0400 Subject: [PATCH 2/3] Archive auto-approve and auto-merge workflows --- .github/workflows-disabled/README.md | 9 +++++++++ .../{workflows => workflows-disabled}/auto-approve.yml | 0 .github/{workflows => workflows-disabled}/auto-merge.yml | 0 docs/KNOWN_ISSUES.md | 6 +++--- 4 files changed, 12 insertions(+), 3 deletions(-) create mode 100644 .github/workflows-disabled/README.md rename .github/{workflows => workflows-disabled}/auto-approve.yml (100%) rename .github/{workflows => workflows-disabled}/auto-merge.yml (100%) diff --git a/.github/workflows-disabled/README.md b/.github/workflows-disabled/README.md new file mode 100644 index 0000000..8082759 --- /dev/null +++ b/.github/workflows-disabled/README.md @@ -0,0 +1,9 @@ +# Disabled Workflow Archive + +These workflows are intentionally disabled during the controlled-demo/manual-review phase: +- `auto-approve.yml` +- `auto-merge.yml` + +Do not restore these workflows until branch protection, labels, app permissions, and merge policy are reviewed. + +If these workflows are restored later, they must be updated to use valid `pull_request` context or explicit `workflow_dispatch` inputs. diff --git a/.github/workflows/auto-approve.yml b/.github/workflows-disabled/auto-approve.yml similarity index 100% rename from .github/workflows/auto-approve.yml rename to .github/workflows-disabled/auto-approve.yml diff --git a/.github/workflows/auto-merge.yml b/.github/workflows-disabled/auto-merge.yml similarity index 100% rename from .github/workflows/auto-merge.yml rename to .github/workflows-disabled/auto-merge.yml diff --git a/docs/KNOWN_ISSUES.md b/docs/KNOWN_ISSUES.md index 5d246a3..a0926ee 100644 --- a/docs/KNOWN_ISSUES.md +++ b/docs/KNOWN_ISSUES.md @@ -61,12 +61,12 @@ Issues that do not break the demo but should be improved. - ID: AUTO_WORKFLOWS_MANUAL_PHASE -- Title: Auto-approve/auto-merge intentionally disabled +- Title: Auto-approve/auto-merge workflows archived (not active) - Date: 2026-05-20 - Severity: Low - Area: repository workflow governance -- Suggested fix: Re-enable only after branch protection, labels, and permissions are reviewed. -- Status: Active (intentional) +- Suggested fix: Restore only after branch protection, labels, app permissions, and merge policy are reviewed. +- Status: Archived (intentional) --- From a10be3ce700ad908cca7a15c3246ed0cb79123d1 Mon Sep 17 00:00:00 2001 From: DanFashauer Date: Thu, 21 May 2026 19:57:05 -0400 Subject: [PATCH 3/3] Add SignalGrid 30/60/90 activation plan --- .github/workflows-disabled/README.md | 9 - .../auto-approve.yml | 15 +- .../auto-merge.yml | 5 +- docs/ACTIVATION_PLAN_30_60_90.md | 190 ++++++++++++++++++ docs/KNOWN_ISSUES.md | 10 +- 5 files changed, 205 insertions(+), 24 deletions(-) delete mode 100644 .github/workflows-disabled/README.md rename .github/{workflows-disabled => workflows}/auto-approve.yml (93%) rename .github/{workflows-disabled => workflows}/auto-merge.yml (88%) create mode 100644 docs/ACTIVATION_PLAN_30_60_90.md diff --git a/.github/workflows-disabled/README.md b/.github/workflows-disabled/README.md deleted file mode 100644 index 8082759..0000000 --- a/.github/workflows-disabled/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Disabled Workflow Archive - -These workflows are intentionally disabled during the controlled-demo/manual-review phase: -- `auto-approve.yml` -- `auto-merge.yml` - -Do not restore these workflows until branch protection, labels, app permissions, and merge policy are reviewed. - -If these workflows are restored later, they must be updated to use valid `pull_request` context or explicit `workflow_dispatch` inputs. diff --git a/.github/workflows-disabled/auto-approve.yml b/.github/workflows/auto-approve.yml similarity index 93% rename from .github/workflows-disabled/auto-approve.yml rename to .github/workflows/auto-approve.yml index 985bc42..2672a9e 100644 --- a/.github/workflows-disabled/auto-approve.yml +++ b/.github/workflows/auto-approve.yml @@ -1,9 +1,18 @@ name: Auto-Approve -# Disabled during controlled-demo/manual-merge phase; manual runs only. on: - workflow_dispatch: - + pull_request: + types: [opened, synchronize, labeled, unlabeled] + branches: + - main + - release + # SECURITY: Never run on changes to .github/ directory (workflows, policies) + # This prevents the workflow from approving itself + paths-ignore: + - ".github/**" + - "!.github/workflows/auto-approve.yml" + pull_request_review: + types: [dismissed] # SECURITY: Least-privilege permissions # - contents: read - needed to check files diff --git a/.github/workflows-disabled/auto-merge.yml b/.github/workflows/auto-merge.yml similarity index 88% rename from .github/workflows-disabled/auto-merge.yml rename to .github/workflows/auto-merge.yml index 61a53b3..24a221d 100644 --- a/.github/workflows-disabled/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -1,9 +1,8 @@ name: Auto-merge (no human approvals) -# Disabled during controlled-demo/manual-merge phase; manual runs only. on: - workflow_dispatch: - + pull_request: + types: [opened, reopened, synchronize, ready_for_review, labeled] permissions: contents: write diff --git a/docs/ACTIVATION_PLAN_30_60_90.md b/docs/ACTIVATION_PLAN_30_60_90.md new file mode 100644 index 0000000..2c98c62 --- /dev/null +++ b/docs/ACTIVATION_PLAN_30_60_90.md @@ -0,0 +1,190 @@ +# SignalGrid 30/60/90 Activation Plan + +## 1) Current State + +SignalGrid is in a **controlled-demo-ready** stage and is positioning as a: +- runtime decision layer, +- Zero Trust orchestration capability, +- for shared-device/mobile frontline environments, +- combining identity + device posture + session context for access decisions. + +### What is ready now +- Narrative and demo framing for runtime decisioning. +- Controlled demo flow suitable for discovery conversations. +- Initial outreach assets and objection themes drafted. + +### What is not validated yet +- No production-ready claims are made. +- No compliance guarantees are made. +- No replacement claim is made against IAM/UEM/ITSM platforms. +- Remediation actions remain simulated unless validated with real integration evidence. + +--- + +## 2) 30-Day Goals (Days 1–30) + +### Primary objective +Start external validation immediately while tightening messaging based on real discovery input. + +### Targets +1. Send first 20 outreach messages to qualified prospects/partners. +2. Book 1–3 discovery calls. +3. Capture top 5 recurring objections and buying criteria. +4. Confirm first integration proof target and acceptance criteria. +5. Produce one concise follow-up artifact for call participants (1-page overview). + +### Exit criteria for day 30 +- Outreach activity is consistent (not ad hoc). +- At least one live discovery conversation completed. +- Clear short list of integration proof requirements documented. + +--- + +## 3) 60-Day Goals (Days 31–60) + +### Primary objective +Convert early discovery into one concrete technical credibility signal. + +### Targets +1. Complete one integration proof-of-concept path. +2. Refine demo sequence using discovery objections and language. +3. Document 3 scenario-based decision outcomes (allow/deny/unknown) using external posture signals. +4. Identify at least one serious design-partner candidate. + +### Exit criteria for day 60 +- Integration proof demonstrates ingestion of at least one real posture source. +- Messaging is updated with explicit “what we are / what we are not” boundaries. +- At least one design-partner conversation reaches next-step planning. + +--- + +## 4) 90-Day Goals (Days 61–90) + +### Primary objective +Run a constrained design-partner/pilot evaluation with clear evidence output. + +### Targets +1. Execute one constrained pilot/design-partner evaluation scope. +2. Produce one proof artifact (demo evidence package, case note, integration evidence, or signed interest). +3. Define go/no-go criteria for post-pilot expansion. +4. Create a prioritized backlog of product and integration improvements from pilot feedback. + +### Exit criteria for day 90 +- At least one external proof artifact exists and can be shared with qualified prospects. +- Decision made: continue current motion, narrow focus, or pivot segment/integration emphasis. + +--- + +## 5) Weekly Operating Cadence + +### Monday (Plan) +- Review prior week metrics. +- Confirm outreach targets for the week. +- Choose one messaging or demo refinement objective. + +### Tuesday–Wednesday (Execution) +- Send outreach messages. +- Run discovery calls. +- Capture objections, language, and integration asks. + +### Thursday (Build + Validate) +- Progress integration proof tasks. +- Update demo script based on discovery findings. + +### Friday (Synthesize + Decide) +- Publish weekly scorecard. +- Record risks, blockers, and decisions. +- Set next-week priorities and owner commitments. + +--- + +## 6) Outreach Targets + +### ICP emphasis +- Security, identity, and IT operators supporting frontline/shared-device environments. +- Teams managing identity and device posture fragmentation across multiple systems. + +### 30-day outreach targets +- 20 outbound messages sent. +- 1–3 discovery calls booked. +- At least 10 meaningful response datapoints (positive, neutral, or objection-based). + +### Message discipline +- Lead with runtime decision-gap problem. +- Avoid claims of replacing IAM/UEM/ITSM. +- Invite feedback on real operational blockers. + +--- + +## 7) First Integration Proof Recommendation + +### Recommended first proof +**Microsoft Intune / Entra ID posture proof** + +### Why this first +- Strong fit with shared/mobile frontline environment use cases. +- Clear posture signal source for decisioning. +- High credibility gain with minimal proof scope. + +### Minimal proof flow +1. Device identifier submitted to SignalGrid decision flow. +2. Intune/Entra posture/compliance state looked up. +3. SignalGrid decision input combines identity + posture + session context. +4. Decision result returned as allow / deny / unknown. + +### Scope guardrails +- Do not position as full production integration. +- Keep remediation actions simulated unless specifically validated. + +--- + +## 8) Success Metrics + +### Activity metrics +- Outreach messages sent per week. +- Discovery calls booked and completed. +- Follow-up artifact delivery rate. + +### Learning metrics +- Number of recurring objections captured. +- Number of messaging refinements applied. +- Number of integration requirements confirmed by prospects. + +### Evidence metrics +- Integration proof milestone completion. +- Design-partner progression stage. +- Existence of shareable proof artifact by day 90. + +--- + +## 9) Kill/Pivot Signals + +Trigger reassessment if 2+ conditions persist for two consecutive review cycles: + +1. Outreach conversion remains near zero despite message iteration. +2. Discovery calls consistently indicate no meaningful pain in target segment. +3. Integration proof cannot be completed within constrained scope. +4. Core objection repeatedly becomes “existing tools already solve this fully” without rebuttal traction. +5. No design-partner path emerges after sustained outreach and demo iteration. + +### Pivot options +- Narrow target segment further. +- Shift first integration proof target. +- Reframe value proposition around strongest validated use case. + +--- + +## 10) Owner Checklist + +### Weekly checklist +- [ ] Outreach target count set and executed. +- [ ] Discovery insights logged within 24 hours. +- [ ] Objection tracker updated. +- [ ] Integration proof next task assigned. +- [ ] Demo/messaging delta documented. +- [ ] Friday scorecard published. + +### Monthly checkpoint checklist +- [ ] 30/60/90 milestones reviewed against exit criteria. +- [ ] Risks and assumptions updated. +- [ ] Go/hold/pivot decision recorded with rationale. diff --git a/docs/KNOWN_ISSUES.md b/docs/KNOWN_ISSUES.md index a0926ee..200db27 100644 --- a/docs/KNOWN_ISSUES.md +++ b/docs/KNOWN_ISSUES.md @@ -59,15 +59,7 @@ Issues that do not break the demo but should be improved. ### Current Non-Blocking Items - -- ID: AUTO_WORKFLOWS_MANUAL_PHASE -- Title: Auto-approve/auto-merge workflows archived (not active) -- Date: 2026-05-20 -- Severity: Low -- Area: repository workflow governance -- Suggested fix: Restore only after branch protection, labels, app permissions, and merge policy are reviewed. -- Status: Archived (intentional) - +(None yet - pending first manual review) ---