generated from amazon-archives/__template_Apache-2.0
-
Notifications
You must be signed in to change notification settings - Fork 639
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Problem Statement
There is no mechanism to enforce hook execution order at the framework level. Even with a priority API, users could potentially override or circumvent security-critical hook ordering. Security hooks need guaranteed execution order that cannot be bypassed.
Proposed Solution
Provide a mechanism for "system" or "framework" level hooks with enforced priority:
- Reserved priority levels that user hooks cannot access
- A separate registration path for framework-enforced hooks
- Configuration to lock certain priority ranges
Use Case
For enterprise and compliance use cases:
- Security scanning hooks must always run first—users should not be able to register hooks that run before them
- Audit logging hooks must always run last—users should not be able to suppress or run after them
- Compliance checks must have deterministic, tamper-proof execution order
Alternatives Solutions
Without framework enforcement, we must rely on documentation and trust, which is insufficient for security-critical scenarios.
Additional Context
No response
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request