Follow-on update to SIG process (#202)

* Follow-on update to SIG process based on feedback from #182
* Standardize SIG stages to other Technical Initiatives: Sandbox, Incubating, Graduated, and Archived

---------

Signed-off-by: Zach Steindler <steiza@github.com>

process/sig-lifecycle.md

@@ -6,32 +6,48 @@ It is expected that the primary output of a SIG is not software. If the primary
 
 SIG process should be minimal, however we do need some process to at least ensure we have an accurate list of all the active SIGs in the OpenSSF. This document uses "must" to describe what items are required, "should" to suggest items that should be strongly considered (but not required), and "may" for suggested guidance.
 
-The SIG life cycle begins with interested contributors deciding to undertake this process, at which time the SIG is `Tentative`. A SIG becomes `Active` when a governing body agrees to take it on, at which point the SIG goes about achieving its goals and deliverables. Once that work is completed, or if the effort stalls out, the SIG becomes `End-of-Life` and some administrative cleanup will be done. The details for each phase follow.
+The SIG life cycle begins with interested contributors deciding to undertake this process, starting with the steps listed under "To become `Sandbox`". A SIG becomes `Sandbox` when a governing body determines the SIG has completed the listed steps, and the governing body agrees to take on the SIG. Then the SIG goes about achieving its goals and deliverables. Once that work is completed, or if the effort stalls out, the SIG becomes `Archived` and the listed administrative cleanup will be done. Here are the details for how to move through the phases:
 
-## To become `Tentative`:
-
-* This is the default state of a new SIG that is not yet active
-
-## To become `Active`:
+## To become `Sandbox`:
 
+* There must be a proposal of the focus, intent, goals, and/or deliverables of the SIG
+  * This could be in an Issue of the governing body's repository, a shared document, or in a README of the SIGs repository (if they have one)
+* The initial membership should be at least 3 individuals from 2 different organizations
 * A governing body must agree to govern the SIG
   * The governing body may have its membership vote, with notice given at the meeting prior to the vote
 
-## Once `Active`:
+## Once `Sandbox`:
 
 * The governing body must list information about the SIG on its README, including current state, chairs, and a statement of focus, intent, goals, and/or deliverables
 * SIGs may have regular meetings separate from their governing body, if so:
   * They should appear on the OpenSSF calendar
   * They should have a document with upcoming agendas and notes from past meetings
+* If the SIG starts to produce code or specifications, they should consider becoming a [project](./project-lifecycle.md) instead
+
+## To become `Incubating`:
+
+* The governing body must agree that the SIG has made substantial progress on a deliverable
+
+## Once `Incubating`:
+
+* The governing body should update the state of the SIG on its README
+
+## To become `Graduated`:
+
+* The governing body must agree that the SIG has completed a major deliverable
+
+## Once `Graduated`:
+
+* The governing body should update the state of the SIG on its README
 
-## To become `End-of-Life`:
+## To become `Archived`:
 
 * The chairs of a SIG can decide to conclude their work, in which case they must notify their governing body
 * The chairs of the governing body must periodically review their active SIGs and determine if any should end
   * This review should happen at least annually
   * The chairs of the governing body may have its membership vote, with notice given at the meeting prior to the vote
 
-## Once `End-of-Life`
+## Once `Archived`
 
 * The governing body must update their README to reflect that the SIG has ended
   * They should list the SIG as end-of-life instead of removing it completely