Summary
Validate every entry in the rad_commands input against an allowed-command enum before executing anything in the run-rad-commands action.
Part of the Repo Radius feature specification (PR #12078).
Details
Because run-rad-commands runs an arbitrary ordered list of rad commands, the action must accept only commands from an allowed set. Validation happens up front, before any command runs, so a disallowed command fails fast with a clear "Command not allowed" outcome and nothing is executed (see User Story 1.2). Constraining operations to an allowed enum is also what lets new operations ship as backward compatible additions to the enum rather than as new actions (see Appendix 3).
Requirements
- FR7:
run-rad-commands shall validate each entry in rad_commands against an allowed-command enum before executing anything.
Acceptance criteria
Summary
Validate every entry in the
rad_commandsinput against an allowed-command enum before executing anything in therun-rad-commandsaction.Part of the Repo Radius feature specification (PR #12078).
Details
Because
run-rad-commandsruns an arbitrary ordered list ofradcommands, the action must accept only commands from an allowed set. Validation happens up front, before any command runs, so a disallowed command fails fast with a clear "Command not allowed" outcome and nothing is executed (see User Story 1.2). Constraining operations to an allowed enum is also what lets new operations ship as backward compatible additions to the enum rather than as new actions (see Appendix 3).Requirements
run-rad-commandsshall validate each entry inrad_commandsagainst an allowed-command enum before executing anything.Acceptance criteria
rad_commandsis validated against an allowed-command enum before any command runs.