chore: stage MISP severity parent restack

Author: seonghobae

.github/workflows/wardnet-child-restack.yml

@@ -0,0 +1,66 @@
+name: Wardnet MISP severity parent restack (temporary)
+
+on:
+  push:
+    branches:
+      - fix/misp-threat-level-severity
+    paths:
+      - .github/workflows/wardnet-child-restack.yml
+
+permissions:
+  contents: write
+
+concurrency:
+  group: wardnet-child-restack-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  restack:
+    runs-on: macos-15
+    steps:
+      - name: Checkout triggering child head
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.sha }}
+          fetch-depth: 0
+      - name: Adopt exact stable parent without rewriting history
+        shell: bash
+        env:
+          EXPECTED_PARENT: 0c83cd5956f512d79c6600e823fcfa6d6f32af4e
+          PARENT_BRANCH: fix/misp-to-ids-fail-closed
+        run: |
+          set -euo pipefail
+          git fetch origin "${PARENT_BRANCH}:refs/remotes/origin/${PARENT_BRANCH}" "${GITHUB_REF_NAME}:refs/remotes/origin/${GITHUB_REF_NAME}"
+          test "$(git rev-parse "origin/${PARENT_BRANCH}")" = "${EXPECTED_PARENT}"
+          test "$(git rev-parse "origin/${GITHUB_REF_NAME}")" = "${GITHUB_SHA}"
+          git merge --no-ff --no-commit "${EXPECTED_PARENT}"
+          git rm .github/workflows/wardnet-child-restack.yml
+          cargo fmt --all -- --check
+          git diff --check --cached
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+        with:
+          toolchain: stable
+      - name: Verify complete inherited parent and severity child
+        shell: bash
+        run: |
+          set -euo pipefail
+          cargo test --locked --workspace
+          cargo clippy --locked --workspace --all-targets -- -D warnings
+      - name: Commit, prove three-file child delta, and non-force push
+        shell: bash
+        env:
+          EXPECTED_PARENT: 0c83cd5956f512d79c6600e823fcfa6d6f32af4e
+          PARENT_BRANCH: fix/misp-to-ids-fail-closed
+        run: |
+          set -euo pipefail
+          git fetch origin "${PARENT_BRANCH}:refs/remotes/origin/${PARENT_BRANCH}" "${GITHUB_REF_NAME}:refs/remotes/origin/${GITHUB_REF_NAME}"
+          test "$(git rev-parse "origin/${PARENT_BRANCH}")" = "${EXPECTED_PARENT}"
+          test "$(git rev-parse "origin/${GITHUB_REF_NAME}")" = "${GITHUB_SHA}"
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git commit -m "chore: adopt MISP admission parent 0c83cd5"
+          actual="$(git diff --name-only "${EXPECTED_PARENT}"...HEAD | sort)"
+          expected=$'docs/doctoring/misp-threat-level-severity.md\nsrc/misp_import.rs\ntests/misp_threat_level_severity.rs'
+          test "${actual}" = "${expected}"
+          git push origin "HEAD:refs/heads/${GITHUB_REF_NAME}"