Delimit Deploy Plan
delimit_deploy_planGenerate a deploy plan with built-in security preflight and governance checks, halting on critical findings before any artifact is produced. Use as the first step before building or shipping code.
Instructions
Generate a deploy plan with security preflight (Pro).
When to use: as the first step in the deploy chain. The plan enumerates build steps and bakes in a security audit + governance evaluation before any artifact is produced. When NOT to use: to actually build images (use delimit_deploy_build) or to ship code (use delimit_deploy_publish).
Sibling contrast: this is the planning gate; delimit_deploy_build and delimit_deploy_publish are the execution steps that follow.
Side effects: auto-chains delimit_security_audit (fail-closed on critical findings), then delimit_gov_evaluate, then the underlying deploy_plan handler. Halts and returns status="blocked" on any critical security finding without producing a plan.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | Application identity (not a filesystem path). Required. | |
| env | No | Target environment, typically "staging" or "production". | |
| git_ref | No | Git ref (branch/tag/SHA). Optional; defaults to HEAD. | |
| venture | No | Optional ledger venture identity; repository context remains authoritative. | |
| repo_path | No | Explicit Git worktree root used for health, security, governance, evidence, and attribution. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||