2025-11-22 – Decision 007
Title: Social Red-Team Program (Quarterly)
Proposal: Enact recurring social engineering red-team tests to audit governance resilience to non-technical manipulation.
Rationale: Most real-world attacks involve humans, not code.
Proposed by: Social Risk + Governance Team
Vote: Unanimous
Alternatives considered: None with equivalent coverage.
Outcome: Approved; first exercise scheduled Q1 2026.
References: SOCIAL_REDTEAM_PLAYBOOK.md
Commit: filled on merge
