delimit_deploy_plan
Generates a deploy plan after security audit and governance checks; halts on critical findings to block unsafe builds.
Instructions
Generate a deploy plan with security preflight (Pro).
When to use: as the first step in the deploy chain. The plan enumerates build steps and bakes in a security audit + governance evaluation before any artifact is produced. When NOT to use: to actually build images (use delimit_deploy_build) or to ship code (use delimit_deploy_publish).
Sibling contrast: this is the planning gate; delimit_deploy_build and delimit_deploy_publish are the execution steps that follow.
Side effects: auto-chains delimit_security_audit (fail-closed on critical findings), then delimit_gov_evaluate, then the underlying deploy_plan handler. Halts and returns status="blocked" on any critical security finding without producing a plan.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | Application name (project key in the deploy backend). Required. | |
| env | No | Target environment, typically "staging" or "production". | |
| git_ref | No | Git ref (branch/tag/SHA). Optional; defaults to the backend's notion of HEAD when omitted. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||