Hello TOC,

Hopefully this is an easy question to answer 😅

Background:

- We're in the process of preparing a proposal for OPA to graduate from Incubation. As part of the process, we're putting together a due diligence document for review. We'll be able to share that soon.

- SIG-Security completed an assessment of OPA in October 2019: https://github.com/cncf/sig-security/pull/275. The assessment yielded useful feedback that has since been addressed. There haven't been any significant (design or architectural) changes to the project since the assessment (nor are there any planned).

The question to the TOC:

- What action is required from SIG-Security in the context of OPA's graduation process given they completed the assessment of OPA in October 2019?

Any guidance would be appreciated.