postrc_configure
Idempotent
Set validation policy before running scans: select modules, set block thresholds, suppress known false positives, and configure compliance checks (monitoring, legal) to match your risk tolerance.
Instructions
[Pro] OPTIONAL - configure validation policy BEFORE running postrc_scan. Sets: which modules are active (security, monitoring, legal-claims, legal-product), whether to block on critical/high findings, CWE suppressions (known false positives), monitoring requirements, and legal review settings (Pro tier: product domain, jurisdiction, license/accessibility checks). Defaults are reasonable - only call this if the user has specific compliance or risk tolerance requirements. Saved to post-rc/ state.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| modules | No | Active validation modules | |
| jurisdiction | No | Jurisdiction for compliance checks (e.g., eu triggers GDPR checks) | |
| project_name | No | Project name | |
| project_path | Yes | Absolute path to the project directory | |
| block_on_high | No | Block deployment on High findings | |
| legal_enabled | No | Enable legal review modules | |
| check_licenses | No | Check dependency license compliance | |
| product_domain | No | Product domain for regulatory detection (e.g., healthcare triggers HIPAA checks) | |
| suppressed_cwes | No | CWE IDs to suppress | |
| block_on_critical | No | Block deployment on Critical findings | |
| edge_case_enabled | No | Enable edge case analysis module (Pro tier) | |
| require_analytics | No | Require analytics instrumentation | |
| legal_claims_audit | No | Enable framework claims audit (self-audit) | |
| app_security_skills | No | Audit skills to run: 1=Auth+Abuse, 2=AuthZ+RLS, 3=Validation, 4=Search+Query, 5=Admin | |
| check_accessibility | No | Check accessibility compliance (ADA/WCAG) | |
| legal_product_audit | No | Enable product legal review | |
| app_security_enabled | No | Enable application security auditor module | |
| edge_case_categories | No | Edge case categories to scan (default: all) | |
| require_error_tracking | No | Require error tracking instrumentation | |
| edge_case_block_on_critical | No | Block ship gate on critical edge case findings | |
| app_security_block_on_critical | No | Block ship gate on critical app security findings |