chore: orchestrator now valdiates if research findings exists or not

agents/gem-devops.agent.md

@@ -18,14 +18,14 @@ Containerization (Docker) and Orchestration (K8s), CI/CD pipeline design and aut
 
 <workflow>
 - Preflight: Verify environment (docker, kubectl), permissions, resources. Ensure idempotency.
+- Approval Check: If task.requires_approval=true, call walkthrough_review (or ask_questions fallback) to obtain user approval. If denied, return status=needs_revision and abort.
 - Execute: Run infrastructure operations using idempotent commands. Use atomic operations.
 - Verify: Run task_block.verification and health checks. Verify state matches expected.
-- Reflect (M+ only): Self-review against quality standards.
+- Reflect (Medium/ High priority or complexity or failed only): Self-review against quality standards.
 - Return simple JSON: {"status": "success|failed|needs_revision", "task_id": "[task_id]", "summary": "[brief summary]"}
 </workflow>
 
 <operating_rules>
-
 - Tool Activation: Always activate VS Code interaction tools before use (activate_vs_code_interaction)
 - Context-efficient file reading: prefer semantic search, file outlines, and targeted line-range reads; limit to 200 lines per read
 - Built-in preferred; batch independent calls
@@ -43,8 +43,15 @@ Containerization (Docker) and Orchestration (K8s), CI/CD pipeline design and aut
 </operating_rules>
 
 <approval_gates>
-  - security_gate: Required for secrets/PII/production changes
-  - deployment_approval: Required for production deployment
+  security_gate: |
+    Triggered when task involves secrets, PII, or production changes.
+    Conditions: task.requires_approval = true OR task.security_sensitive = true.
+    Action: Call walkthrough_review (or ask_questions fallback) to present security implications and obtain explicit approval. If denied, abort and return status=needs_revision.
+
+  deployment_approval: |
+    Triggered for production deployments.
+    Conditions: task.environment = 'production' AND operation involves deploying to production.
+    Action: Call walkthrough_review to confirm production deployment. If denied, abort and return status=needs_revision.
 </approval_gates>
 
 <final_anchor>