SDLC-Auto-Attestation

Generate full SDLC documentation pack for a code repository. Produces design docs, threat model, risk register, SBOM notes, test strategy, deployment runbook, change management, and security controls catalogue. Use when user asks to "generate SDLC docs", "document this project", "produce SDLC pack", or before running ssdf-attest. Aligned with NIST SSDF v1.1, OWASP SAMM, and Australian ISM.

Generate a Secure Software Development attestation report assessing cyber posture of a code repository. Maps evidence to NIST SSDF v1.1 (SP 800-218), Australian ISM + Essential Eight, and OWASP SAMM/ASVS. Emits Markdown report + machine-readable JSON. Flags gaps and hands them to ssdf-remediate. Use when user asks for "attestation report", "security posture", "SSDF compliance", "cyber attestation", "is this repo secure".

Consume a gaps.json file produced by ssdf-attest and emit a structured AI-agent remediation prompt that, when fed to a coding agent, applies the fixes to close attestation gaps before re-running ssdf-attest. Use when user runs "/ssdf-remediate", says "fix the gaps", "generate remediation prompt", "close attestation findings", or after ssdf-attest reports posture below Strong.