spec_version: 1
name: securereview
type: space
runtime: fastapi
app: app.main:app
port: 7860
version: "1.0.0"
description: "AI Security Code Review Environment — evaluates an agent's ability to identify security vulnerabilities across dependency supply chains, infrastructure-as-code, and database migrations"
author: "Team CookHouse"

tasks:
  - id: dependency_review
    name: "Dependency & Supply Chain Review"
    description: "Review dependency files for hallucinated packages, typosquatting, and known vulnerabilities"
    difficulty: easy
    max_steps: 15

  - id: iac_review
    name: "Infrastructure-as-Code Security Review"
    description: "Review Terraform/Kubernetes configurations for security misconfigurations"
    difficulty: medium
    max_steps: 25

  - id: migration_review
    name: "Database Migration Safety Review"
    description: "Review SQL migration scripts for backward-incompatibility, safety risks, and production impact"
    difficulty: hard
    max_steps: 35