| Phase | Topic |
|---|---|
| 01-enterprise-audit | Enterprise hardening audit |
The allowed-locations policy assignment in
impl/azure/landing-zone/bicep/modules/policy-assignments.bicep
is set to enforcementMode: 'DoNotEnforce' (audit-only rollout) on main today. The formal ADR
capturing the rationale is being written in open PR #13
(fix(bicep): pin API versions and record DoNotEnforce ADR) and had not merged to main as of
this writing — gh pr view 13 reports state: OPEN, mergedAt: null. Once merged, this page
should be updated to link the landed ADR file directly.
docs/adr/ is the formal ADR home for this repo, governed by the rule that
any major technical decision or new dependency must be recorded there (Context / Decision /
Consequences, sequentially numbered: 001-record-architecture-decisions.md,
002-use-azure-functions.md, etc.). No ADR files exist on main as of this writing — the
directory holds only the governance README.