Self-documenting Makefile and read-only query CLI

`make` now lists targets grouped by use with examples. New read-only
tools/risk.py backs list/all/show/waits/escalations/policies; checked accepts
ID/OUTCOME/NOTE (ARGS still works). Adds CLI tests.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 6903@bnt-lap001
Assistant-Session: 8319e8a8-ffa6-4eb3-b8bf-b29945628f89
This commit is contained in:
tegwick 2026-09-22 10:19:49 +02:00
parent 228116926b
commit 2d60312bd1
4 changed files with 220 additions and 21 deletions

View file

@ -32,10 +32,23 @@ does not host: `policy-nexus` is the publication surface.
## Using it
```
make register # rebuild REGISTER.md from findings/
make check # verify the index, then report what is going quiet
make # list every target with an example
make list # live findings, most severe first
make list SEV=high # filter by severity (or SYSTEM=qonto-assistant)
make all # include fixed and withdrawn
make show ID=RISK-F-0012 # one finding or regulatory record
make waits # who owes what, by default date
make escalations # escalations and their delivery state
make policies # regulatory records and next reviews
make check # full sweep: index, due work, inbox
make checked ID=RISK-F-0012 OUTCOME=clean NOTE="what was seen"
make register # rebuild REGISTER.md from findings/
```
The query targets use `tools/risk.py`, which is read-only. Its verbs (`list`,
`show`) are generic so that a future common nexus interface can map onto them.
Writes go only through `make checked`.
`make check` reports ungraded findings, overdue reviews, stalled remediation,
embargoes due for re-decision, escalations awaiting the operator, and what is
owed at the production transition. It changes nothing.