@aisdlc/core 1.6.0 → 2.0.0

package/dist/index.js

@@ -561,9 +561,11 @@ function resolveTargetFiles(rootDir, targetPath) {
   const searchDirs = [
     path4.join(rootDir, "product"),
     path4.join(rootDir, "security"),
+    path4.join(rootDir, "privacy"),
     path4.join(rootDir, "specs"),
     path4.join(rootDir, "examples", "product"),
     path4.join(rootDir, "examples", "security"),
+    path4.join(rootDir, "examples", "privacy"),
     path4.join(rootDir, "examples", "specs")
   ];
   return searchDirs.filter((d) => fs7.existsSync(d)).flatMap((d) => walkMdFiles(d));
@@ -574,10 +576,12 @@ function resolveFeatureFilePath(rootDir, filePath, id, customTarget) {
   }
   const baseDir = path4.join(rootDir, "tests", "features");
   const candidateSecurity = path4.join(baseDir, "security", `${id.toLowerCase()}.feature`);
+  const candidatePrivacy = path4.join(baseDir, "privacy", `${id.toLowerCase()}.feature`);
   const candidateRoot = path4.join(baseDir, `${id.toLowerCase()}.feature`);
   if (fs7.existsSync(candidateSecurity)) return candidateSecurity;
+  if (fs7.existsSync(candidatePrivacy)) return candidatePrivacy;
   if (fs7.existsSync(candidateRoot)) return candidateRoot;
-  const subDir = filePath.includes("security") ? "security" : "";
+  const subDir = filePath.includes("security") ? "security" : filePath.includes("privacy") ? "privacy" : "";
   return path4.join(baseDir, subDir, `${id.toLowerCase()}.feature`);
 }
 function buildFeatureFileContent(rootDir, filePath, id, version, gherkinBlocks) {
@@ -804,7 +808,7 @@ function parseFeatureTags(content, relTest, reqToTestsMap) {
     }
   }
 }
-var REQ_ID_REGEX = /\b(FR|QR|CON|SEC-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*\b/g;
+var REQ_ID_REGEX = /\b(FR|QR|CON|SEC-REQ|PRIV-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*\b/g;
 function parseCodeTestIds(content, relTest, reqToTestsMap) {
   const idMatches = content.match(REQ_ID_REGEX);
   if (!idMatches) return;
@@ -904,9 +908,9 @@ function computeMissingVariants(cov) {
   if (!cov.invalid) missing.push("invalid");
   return missing;
 }
-var REQ_PREFIXES = ["FR-", "QR-", "CON-", "SEC-REQ-"];
+var REQ_PREFIXES = ["FR-", "QR-", "CON-", "SEC-REQ-", "PRIV-REQ-"];
 function isRequirementArtifact(frontmatter, id) {
-  if (frontmatter.type === "requirement" || frontmatter.type === "security-requirement") {
+  if (frontmatter.type === "requirement" || frontmatter.type === "security-requirement" || frontmatter.type === "privacy-requirement") {
     return true;
   }
   return REQ_PREFIXES.some((prefix) => id.startsWith(prefix));
@@ -1933,11 +1937,40 @@ var CANONICAL_TYPE_MAP = {
   "product/business-rules/": "business-rule",
   "product/journeys/": "journey",
   "security/requirements/": "security-requirement",
+  "privacy/requirements/": "privacy-requirement",
+  "specs/privacy/requirements/": "privacy-requirement",
+  "privacy/assets/": "data-asset",
+  "privacy/data-assets/": "data-asset",
+  "specs/privacy/assets/": "data-asset",
+  "specs/privacy/data-assets/": "data-asset",
+  "privacy/ropa/": "privacy-ropa",
+  "specs/privacy/ropa/": "privacy-ropa",
+  "privacy/dpia/": "dpia-request",
+  "specs/privacy/dpia/": "dpia-request",
   "architecture/": "component"
 };
+var ID_PREFIX_TYPE_PAIRS = [
+  ["PRIV-REQ-", "privacy-requirement"],
+  ["DATA-ASSET-", "data-asset"],
+  ["PRIV-ROPA-", "privacy-ropa"],
+  ["DPIA-", "dpia-request"],
+  ["SEC-REQ-", "security-requirement"],
+  ["FR-", "requirement"],
+  ["QR-", "requirement"],
+  ["CON-", "requirement"],
+  ["UC-", "use-case"],
+  ["ACT-", "actor"],
+  ["BR-", "business-rule"],
+  ["CMP-", "component"]
+];
+function resolveCanonicalArtifactType(normTarget, id) {
+  if (CANONICAL_TYPE_MAP[normTarget]) return CANONICAL_TYPE_MAP[normTarget];
+  const matched = ID_PREFIX_TYPE_PAIRS.find(([prefix]) => id.startsWith(prefix));
+  return matched ? matched[1] : "artifact";
+}
 function buildCanonicalInitialContent(item, changeId, author, date) {
   const normTarget = item.targetDir.endsWith("/") ? item.targetDir : `${item.targetDir}/`;
-  const artifactType = CANONICAL_TYPE_MAP[normTarget] || "artifact";
+  const artifactType = resolveCanonicalArtifactType(normTarget, item.id);
   const frontmatter = `id: ${item.id}
 type: ${artifactType}
 status: draft
@@ -1992,6 +2025,21 @@ function checkTasksExecution(changeDir, changeId) {
   }
   return { ok: true, completedTasks, pendingTasks, error: null };
 }
+function isProposalRequirementId(id) {
+  return id.startsWith("FR-") || id.startsWith("QR-") || id.startsWith("CON-") || id.startsWith("SEC-REQ-");
+}
+function buildSubgraphFromProposalIds(ids) {
+  const reqs = ids.filter(isProposalRequirementId);
+  const privReqs = ids.filter((id) => id.startsWith("PRIV-REQ-"));
+  const dataAssets = ids.filter((id) => id.startsWith("DATA-ASSET-"));
+  const ropaEntries = ids.filter((id) => id.startsWith("PRIV-ROPA-"));
+  return {
+    requirements: reqs,
+    ...privReqs.length > 0 ? { privacyRequirements: privReqs } : {},
+    ...dataAssets.length > 0 ? { dataAssets } : {},
+    ...ropaEntries.length > 0 ? { ropaEntries } : {}
+  };
+}
 function resolveChangeHandoff(changeDir, changeId) {
   const sidecar = loadProductHandoffSidecar(changeDir);
   if (sidecar) return sidecar;
@@ -2000,12 +2048,12 @@ function resolveChangeHandoff(changeDir, changeId) {
   const propContent = fs7.readFileSync(proposalFile, "utf-8");
   const { frontmatter } = parseFrontmatter(propContent);
   const citations = Array.isArray(frontmatter.citations) ? frontmatter.citations : [];
-  const reqs = citations.map((c) => c.id || "").filter((id) => id.startsWith("FR-") || id.startsWith("QR-") || id.startsWith("CON-") || id.startsWith("SEC-REQ-"));
+  const ids = citations.map((c) => c.id || "").filter(Boolean);
   return {
     id: `HOF-${changeId.toUpperCase()}`,
     type: "handoff",
     changeId,
-    subgraph: { requirements: reqs },
+    subgraph: buildSubgraphFromProposalIds(ids),
     citations
   };
 }
@@ -2113,10 +2161,14 @@ function collectArchitectureComponents(handoff, canonicalArtifacts, targetReqs)
   collectSatisfyingComponents(canonicalArtifacts, targetReqs, cited);
   return cited;
 }
+function isSatisfiableRequirementId(id) {
+  return id.startsWith("FR-") || id.startsWith("QR-") || id.startsWith("CON-") || id.startsWith("SEC-REQ-") || id.startsWith("PRIV-REQ-");
+}
 function mergeSatisfiesRequirements(fm, targetReqs) {
   const existing = Array.isArray(fm["satisfies-requirements"]) ? [...fm["satisfies-requirements"]] : [];
   let modified = false;
   for (const req of targetReqs) {
+    if (!isSatisfiableRequirementId(req)) continue;
     if (!existing.includes(req)) {
       existing.push(req);
       modified = true;
@@ -2228,24 +2280,71 @@ function buildIntegrationSuccessPayload(changeId, tasksRes, targetReqs, updatedP
     errors
   };
 }
+function collectSubgraphPromotableIds(subgraph) {
+  if (!subgraph) return [];
+  const rawSub = subgraph;
+  const ropaAlias = Array.isArray(rawSub.ropaEntries) ? rawSub.ropaEntries : [];
+  const privacyRopa = Array.isArray(rawSub.privacyRopa) ? rawSub.privacyRopa : [];
+  const combined = [
+    ...subgraph.requirements || [],
+    ...subgraph.securityRequirements || [],
+    ...subgraph.privacyRequirements || [],
+    ...subgraph.dataAssets || [],
+    ...ropaAlias,
+    ...privacyRopa
+  ];
+  return Array.from(new Set(combined));
+}
+function collectSpecAffectedNonArchIds(changeDir) {
+  const specFile = path4.join(changeDir, "spec.md");
+  if (!fs7.existsSync(specFile)) return [];
+  const { affectedItems } = parseSpecCatalogScope(fs7.readFileSync(specFile, "utf-8"));
+  return affectedItems.map((item) => item.id).filter((id) => !isArchitectureComponentId(id));
+}
+function resolveIntegrationOptions(options) {
+  return {
+    rootDir: options.rootDir || process.cwd(),
+    changeId: options.changeId,
+    author: options.author || "AI-SDLC Integration Engine",
+    date: options.date || (/* @__PURE__ */ new Date()).toISOString().split("T")[0]
+  };
+}
+function resolveTargetRequirements(handoff, changeDir) {
+  return Array.from(
+    /* @__PURE__ */ new Set([
+      ...collectSubgraphPromotableIds(handoff.subgraph),
+      ...collectSpecAffectedNonArchIds(changeDir)
+    ])
+  );
+}
+function applyArtifactUpdates(ctx, changeDir, handoff, completedTasks, errors) {
+  const targetReqs = resolveTargetRequirements(handoff, changeDir);
+  const createdArtifacts = materializeNewCatalogArtifacts(changeDir, ctx.rootDir, ctx.changeId, ctx.author, ctx.date, errors);
+  const canonicalArtifacts = loadCanonicalArtifacts(ctx.rootDir);
+  const updatedProduct = updateRequirementsArtifacts(targetReqs, createdArtifacts, canonicalArtifacts, completedTasks, ctx.changeId, ctx.date, ctx.author, errors);
+  const citedComponents = collectArchitectureComponents(handoff, canonicalArtifacts, targetReqs);
+  const updatedArch = updateArchitectureComponents(citedComponents, canonicalArtifacts, targetReqs, ctx.changeId, ctx.date, ctx.author, errors);
+  return { targetReqs, updatedProduct, updatedArch, createdArtifacts };
+}
 function integrateSddChange(options) {
-  const rootDir = options.rootDir || process.cwd();
-  const changeId = options.changeId;
-  const author = options.author || "AI-SDLC Integration Engine";
-  const date = options.date || (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-  const validation = validateChangeWorkspace(rootDir, changeId);
-  if (validation.error) return buildEmptyIntegrationResult(changeId, validation.error, validation.pendingTasks);
-  const { changeDir, tasksRes, handoff } = validation;
+  const ctx = resolveIntegrationOptions(options);
+  const validation = validateChangeWorkspace(ctx.rootDir, ctx.changeId);
+  if (validation.error) return buildEmptyIntegrationResult(ctx.changeId, validation.error, validation.pendingTasks);
   const errors = [];
-  const targetReqs = [...handoff.subgraph.requirements || [], ...handoff.subgraph.securityRequirements || []];
-  const createdArtifacts = materializeNewCatalogArtifacts(changeDir, rootDir, changeId, author, date, errors);
-  const canonicalArtifacts = loadCanonicalArtifacts(rootDir);
-  const updatedProduct = updateRequirementsArtifacts(targetReqs, createdArtifacts, canonicalArtifacts, tasksRes.completedTasks, changeId, date, author, errors);
-  const citedComponents = collectArchitectureComponents(handoff, canonicalArtifacts, targetReqs);
-  const updatedArch = updateArchitectureComponents(citedComponents, canonicalArtifacts, targetReqs, changeId, date, author, errors);
+  const { changeDir, tasksRes, handoff } = validation;
+  const updates = applyArtifactUpdates(ctx, changeDir, handoff, tasksRes.completedTasks, errors);
   const completedAll = tasksRes.completedTasks.length > 0 && tasksRes.pendingTasks.length === 0;
-  const archiveRes = archiveChangeWorkspace(changeDir, changeId, rootDir, options.autoArchive !== false, completedAll);
-  return buildIntegrationSuccessPayload(changeId, tasksRes, targetReqs, updatedProduct, updatedArch, createdArtifacts, archiveRes, errors);
+  const archiveRes = archiveChangeWorkspace(changeDir, ctx.changeId, ctx.rootDir, options.autoArchive !== false, completedAll);
+  return buildIntegrationSuccessPayload(
+    ctx.changeId,
+    tasksRes,
+    updates.targetReqs,
+    updates.updatedProduct,
+    updates.updatedArch,
+    updates.createdArtifacts,
+    archiveRes,
+    errors
+  );
 }
 function auditChangeRequirements(targetReqs, canonicalMap) {
   const integrated = [];
@@ -2276,7 +2375,7 @@ function auditChangeEntry(changeDir, changeName, canonicalMap) {
   const tasksFile = path4.join(changeDir, "tasks.md");
   const tasks = fs7.existsSync(tasksFile) ? parseTasksFromContent(fs7.readFileSync(tasksFile, "utf-8")) : [];
   const completed = tasks.filter((t) => t.status === "COMPLETED");
-  const targetReqs = handoff.subgraph?.requirements || [];
+  const targetReqs = collectSubgraphPromotableIds(handoff.subgraph);
   const { integrated, missing, gaps } = auditChangeRequirements(targetReqs, canonicalMap);
   const status = resolveAuditStatus(integrated.length, targetReqs.length, gaps.length);
   return {
@@ -2710,14 +2809,18 @@ function syncPdacDigests(options = {}) {
 
 // src/init/starter-schemas.ts
 var SCHEMA_SCHEMAS_ARCHITECTURE_ADR_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/architecture/adr.schema.json",\r\n  "title": "Architecture Decision Record Schema (Versionable)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status", "version", "deciders", "decision-date"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^ADR-[0-9]{3,4}(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "architecture-decision-record"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Decision record semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["proposed", "accepted", "rejected", "deprecated", "superseded"]\r\n    },\r\n    "deciders": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": { "type": "string" }\r\n    },\r\n    "decision-date": {\r\n      "type": "string",\r\n      "format": "date"\r\n    },\r\n    "affects-components": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ADR-[0-9]{3,4}(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ADR-[0-9]{3,4}(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
-var SCHEMA_SCHEMAS_ARCHITECTURE_COMPONENT_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/architecture/component.schema.json",\r\n  "title": "NAF v4 / arc42 Architecture Component Schema (Multilevel)",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "level",\r\n    "implementation-type",\r\n    "implements-use-cases"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "component"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Architecture component semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["proposed", "accepted", "deprecated", "retired"]\r\n    },\r\n    "level": {\r\n      "type": "integer",\r\n      "minimum": 1,\r\n      "description": "Hierarchical architecture level (1: Bounded Context / Root System, 2: Subsystem / Container, 3: Executable Unit / DLL / Function)."\r\n    },\r\n    "bounded-context": {\r\n      "type": "string",\r\n      "description": "Domain-Driven Design (DDD) Bounded Context name this component belongs to."\r\n    },\r\n    "parent-component": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Parent component identifier (null if Level 1)."\r\n    },\r\n    "implementation-type": {\r\n      "type": "string",\r\n      "enum": ["service", "dll", "function", "composite"],\r\n      "description": "Technical implementation paradigm: distributed service (service), dynamic/native library (dll), in-process module/function (function), or logical aggregator/Bounded Context (composite)."\r\n    },\r\n    "implements-use-cases": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "satisfies-requirements": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^(FR|QR|CON|SEC-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "hosted-in-enclave": {\r\n      "type": "string",\r\n      "pattern": "^SEC-ENC-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Security enclave where the component resides (optional for DLLs or in-process functions)."\r\n    },\r\n    "interfaces": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["name", "protocol"],\r\n        "properties": {\r\n          "name": { "type": "string" },\r\n          "protocol": {\r\n            "type": "string",\r\n            "enum": [\r\n              "REST/HTTP",\r\n              "gRPC",\r\n              "WebSocket",\r\n              "Kafka",\r\n              "MQTT",\r\n              "C-ABI",\r\n              "Native-ABI",\r\n              "FFI",\r\n              "In-Process API",\r\n              "Function-Call",\r\n              "CLI",\r\n              "GUI",\r\n              "IPC"\r\n            ]\r\n          },\r\n          "contract-spec": { "type": "string" }\r\n        }\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
-var SCHEMA_SCHEMAS_ARCHITECTURE_INTRODUCTION_AND_GOALS_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/architecture/introduction-and-goals.schema.json",\r\n  "title": "NAF v4 Enterprise & Capability / arc42 Introduction and System Goals Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "naf-perspective",\r\n    "cites-product-actors",\r\n    "cites-quality-goals",\r\n    "cites-use-cases"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^ARCH-INTRO-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "architecture-introduction"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Artifact semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "proposed", "accepted", "approved", "deprecated", "superseded"]\r\n    },\r\n    "owner": {\r\n      "type": "string"\r\n    },\r\n    "arc42-section": {\r\n      "type": "integer",\r\n      "const": 1\r\n    },\r\n    "naf-perspective": {\r\n      "type": "string",\r\n      "const": "Enterprise & Capability"\r\n    },\r\n    "cites-product-actors": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "cites-quality-goals": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^(QR|SEC-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "cites-use-cases": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ARCH-INTRO-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ARCH-INTRO-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
+var SCHEMA_SCHEMAS_ARCHITECTURE_COMPONENT_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/architecture/component.schema.json",\r\n  "title": "NAF v4 / arc42 Architecture Component Schema (Multilevel)",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "level",\r\n    "implementation-type",\r\n    "implements-use-cases"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "component"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Architecture component semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["proposed", "accepted", "deprecated", "retired"]\r\n    },\r\n    "level": {\r\n      "type": "integer",\r\n      "minimum": 1,\r\n      "description": "Hierarchical architecture level (1: Bounded Context / Root System, 2: Subsystem / Container, 3: Executable Unit / DLL / Function)."\r\n    },\r\n    "bounded-context": {\r\n      "type": "string",\r\n      "description": "Domain-Driven Design (DDD) Bounded Context name this component belongs to."\r\n    },\r\n    "parent-component": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Parent component identifier (null if Level 1)."\r\n    },\r\n    "implementation-type": {\r\n      "type": "string",\r\n      "enum": ["service", "dll", "function", "composite"],\r\n      "description": "Technical implementation paradigm: distributed service (service), dynamic/native library (dll), in-process module/function (function), or logical aggregator/Bounded Context (composite)."\r\n    },\r\n    "implements-use-cases": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "satisfies-requirements": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^(FR|QR|CON|SEC-REQ|SAF-REQ|PRIV-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "hosted-in-enclave": {\r\n      "type": "string",\r\n      "pattern": "^SEC-ENC-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Security enclave where the component resides (optional for DLLs or in-process functions)."\r\n    },\r\n    "interfaces": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["name", "protocol"],\r\n        "properties": {\r\n          "name": { "type": "string" },\r\n          "protocol": {\r\n            "type": "string",\r\n            "enum": [\r\n              "REST/HTTP",\r\n              "gRPC",\r\n              "WebSocket",\r\n              "Kafka",\r\n              "MQTT",\r\n              "C-ABI",\r\n              "Native-ABI",\r\n              "FFI",\r\n              "In-Process API",\r\n              "Function-Call",\r\n              "CLI",\r\n              "GUI",\r\n              "IPC"\r\n            ]\r\n          },\r\n          "contract-spec": { "type": "string" }\r\n        }\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
+var SCHEMA_SCHEMAS_ARCHITECTURE_INTRODUCTION_AND_GOALS_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/architecture/introduction-and-goals.schema.json",\r\n  "title": "NAF v4 Enterprise & Capability / arc42 Introduction and System Goals Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "naf-perspective",\r\n    "cites-product-actors",\r\n    "cites-quality-goals",\r\n    "cites-use-cases"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^ARCH-INTRO-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "architecture-introduction"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Artifact semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "proposed", "accepted", "approved", "deprecated", "superseded"]\r\n    },\r\n    "owner": {\r\n      "type": "string"\r\n    },\r\n    "arc42-section": {\r\n      "type": "integer",\r\n      "const": 1\r\n    },\r\n    "naf-perspective": {\r\n      "type": "string",\r\n      "const": "Enterprise & Capability"\r\n    },\r\n    "cites-product-actors": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "cites-quality-goals": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^(QR|SEC-REQ|PRIV-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "cites-use-cases": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ARCH-INTRO-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ARCH-INTRO-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_COMPLIANCE_LICENSE_MANIFEST_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/compliance/license-manifest.schema.json",\r\n  "title": "Static Dependencies License Manifest Schema",\r\n  "type": "object",\r\n  "required": ["evaluated_dependencies"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(MAN-LIC|LIC-MAN|LIC)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Optional canonical artifact identifier."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "license-manifest"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+(\\\\.[0-9]+)?(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Manifest format version."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "description": {\r\n      "type": "string"\r\n    },\r\n    "generated_at": {\r\n      "type": "string"\r\n    },\r\n    "evaluated_dependencies": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["package", "version", "spdx_license", "status"],\r\n        "properties": {\r\n          "package": {\r\n            "type": "string",\r\n            "minLength": 1\r\n          },\r\n          "version": {\r\n            "type": "string",\r\n            "minLength": 1\r\n          },\r\n          "spdx_license": {\r\n            "type": "string",\r\n            "minLength": 1\r\n          },\r\n          "status": {\r\n            "type": "string",\r\n            "enum": [\r\n              "APPROVED",\r\n              "REJECTED",\r\n              "REVIEW_REQUIRED",\r\n              "COMMERCIAL_APPROVAL_REQUIRED",\r\n              "PENDING"\r\n            ]\r\n          },\r\n          "reason": {\r\n            "type": "string"\r\n          },\r\n          "approved_by": {\r\n            "type": "string"\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_COMPLIANCE_LICENSE_POLICY_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/compliance/license-policy.schema.json",\r\n  "title": "Open Source License Policy Schema",\r\n  "type": "object",\r\n  "required": ["version", "project", "default_action", "categories", "agent_guardrails", "ci_gates"],\r\n  "properties": {\r\n    "version": {\r\n      "type": "string"\r\n    },\r\n    "project": {\r\n      "type": "string"\r\n    },\r\n    "default_action": {\r\n      "type": "string",\r\n      "enum": ["ALLOW", "DENY", "REVIEW_REQUIRED"]\r\n    },\r\n    "categories": {\r\n      "type": "object"\r\n    },\r\n    "agent_guardrails": {\r\n      "type": "object",\r\n      "required": ["enforce_pre_check", "reject_unknown_licenses"],\r\n      "properties": {\r\n        "enforce_pre_check": { "type": "boolean" },\r\n        "reject_unknown_licenses": { "type": "boolean" },\r\n        "auto_reject_categories": { "type": "array", "items": { "type": "string" } },\r\n        "on_commercial_detected": { "type": "object" }\r\n      }\r\n    },\r\n    "ci_gates": {\r\n      "type": "object",\r\n      "required": ["fail_on_denied", "generate_sbom"],\r\n      "properties": {\r\n        "fail_on_denied": { "type": "boolean" },\r\n        "fail_on_missing_license": { "type": "boolean" },\r\n        "generate_sbom": { "type": "boolean" },\r\n        "sbom_format": { "type": "string" },\r\n        "output_notices_file": { "type": "string" },\r\n        "allowed_depth": { "type": "string", "enum": ["DIRECT", "TRANSITIVE"] }\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_COMPLIANCE_QUALITY_POLICY_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/compliance/quality-policy.schema.json",\r\n  "title": "Software Quality Policy Schema (Polyglot)",\r\n  "type": "object",\r\n  "required": ["version", "project", "enforcement_mode", "coding_rules", "release_thresholds", "agent_guardrails"],\r\n  "properties": {\r\n    "version": { "type": "string" },\r\n    "project": { "type": "string" },\r\n    "enforcement_mode": { "type": "string", "enum": ["STRICT", "PERMISSIVE"] },\r\n    "scope": {\r\n      "type": "object",\r\n      "properties": {\r\n        "target_directories": { "type": "array", "items": { "type": "string" } },\r\n        "supported_extensions": { "type": "array", "items": { "type": "string" } },\r\n        "exclude_patterns": { "type": "array", "items": { "type": "string" } }\r\n      }\r\n    },\r\n    "language_toolchains": {\r\n      "type": "object"\r\n    },\r\n    "coding_rules": {\r\n      "type": "object",\r\n      "required": ["standards", "enforce_formatting", "rules"],\r\n      "properties": {\r\n        "standards": { "type": "array", "items": { "type": "string" } },\r\n        "enforce_formatting": { "type": "boolean" },\r\n        "formatting_engine": { "type": "string" },\r\n        "linter_engine": { "type": "string" },\r\n        "rules": { "type": "object" }\r\n      }\r\n    },\r\n    "release_thresholds": {\r\n      "type": "object",\r\n      "required": ["cyclomatic_complexity", "cognitive_complexity", "maintainability_index", "code_duplication", "test_coverage"],\r\n      "properties": {\r\n        "cyclomatic_complexity": {\r\n          "type": "object",\r\n          "required": ["max_per_function", "action_on_breach"],\r\n          "properties": {\r\n            "max_per_function": { "type": "integer" },\r\n            "warning_at": { "type": "integer" },\r\n            "action_on_breach": { "type": "string" }\r\n          }\r\n        },\r\n        "cognitive_complexity": {\r\n          "type": "object",\r\n          "required": ["max_per_function", "action_on_breach"],\r\n          "properties": {\r\n            "max_per_function": { "type": "integer" },\r\n            "warning_at": { "type": "integer" },\r\n            "action_on_breach": { "type": "string" }\r\n          }\r\n        },\r\n        "maintainability_index": {\r\n          "type": "object",\r\n          "required": ["min_acceptable_score", "action_on_breach"],\r\n          "properties": {\r\n            "min_acceptable_score": { "type": "number" },\r\n            "target_score": { "type": "number" },\r\n            "action_on_breach": { "type": "string" }\r\n          }\r\n        },\r\n        "code_duplication": {\r\n          "type": "object",\r\n          "required": ["max_percentage", "action_on_breach"],\r\n          "properties": {\r\n            "max_percentage": { "type": "number" },\r\n            "action_on_breach": { "type": "string" }\r\n          }\r\n        },\r\n        "test_coverage": {\r\n          "type": "object",\r\n          "required": ["min_line_coverage_percent", "action_on_breach"],\r\n          "properties": {\r\n            "min_line_coverage_percent": { "type": "number" },\r\n            "min_branch_coverage_percent": { "type": "number" },\r\n            "min_function_coverage_percent": { "type": "number" },\r\n            "action_on_breach": { "type": "string" }\r\n          }\r\n        },\r\n        "technical_debt": {\r\n          "type": "object"\r\n        }\r\n      }\r\n    },\r\n    "agent_guardrails": {\r\n      "type": "object",\r\n      "required": ["enforce_pre_commit_linter", "prevent_suppression_comments"],\r\n      "properties": {\r\n        "enforce_pre_commit_linter": { "type": "boolean" },\r\n        "prevent_suppression_comments": { "type": "boolean" },\r\n        "auto_refactor_on_high_complexity": { "type": "boolean" }\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_IDE_MCP_CONFIG_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/ide/mcp-config.schema.json",\r\n  "title": "IDE MCP Configuration Schema (Cursor, Antigravity, VS Code)",\r\n  "type": "object",\r\n  "properties": {\r\n    "$schema": {\r\n      "type": "string"\r\n    },\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(MCP-CFG|IDE-MCP|MCP)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Optional identifier for MCP configuration artifact."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "mcp-config"\r\n    },\r\n    "mcpServers": {\r\n      "type": "object",\r\n      "additionalProperties": {\r\n        "type": "object",\r\n        "required": ["command"],\r\n        "properties": {\r\n          "command": {\r\n            "type": "string",\r\n            "minLength": 1\r\n          },\r\n          "args": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string"\r\n            }\r\n          },\r\n          "env": {\r\n            "type": "object"\r\n          },\r\n          "disabled": {\r\n            "type": "boolean"\r\n          },\r\n          "alwaysAllow": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string"\r\n            }\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      },\r\n      "description": "MCP server registry format for Cursor and Antigravity."\r\n    },\r\n    "servers": {\r\n      "type": "object",\r\n      "additionalProperties": {\r\n        "type": "object",\r\n        "required": ["command"],\r\n        "properties": {\r\n          "command": {\r\n            "type": "string",\r\n            "minLength": 1\r\n          },\r\n          "args": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string"\r\n            }\r\n          },\r\n          "env": {\r\n            "type": "object"\r\n          },\r\n          "disabled": {\r\n            "type": "boolean"\r\n          },\r\n          "alwaysAllow": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string"\r\n            }\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      },\r\n      "description": "MCP server registry format for VS Code."\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_MANUALS_PRODUCTION_MANUAL_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/manuals/production-manual.schema.json",\r\n  "title": "AI-SDLC Production & Operations Manual Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "applies-to-version",\r\n    "target-audience"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^MAN-PROD-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Immutable production manual identifier (e.g. MAN-PROD-SENTINELCORE)."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "production-manual"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Document semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string",\r\n      "description": "Template schema version."\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3,\r\n      "description": "Descriptive title of the production manual."\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "applies-to-version": {\r\n      "type": "string",\r\n      "description": "Software version or release this production manual applies to (e.g. v1.0.0)."\r\n    },\r\n    "target-audience": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "minItems": 1,\r\n      "description": "Target technical profiles (e.g. DevOps, SRE, Release Manager, SecOps)."\r\n    },\r\n    "components-covered": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Architecture components (CMP-*) deployed and covered by the manual."\r\n    },\r\n    "enclaves-involved": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^SEC-ENC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Security enclaves (SEC-ENC-*) in which deployment executes."\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^MAN-PROD-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^MAN-PROD-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_MANUALS_USER_MANUAL_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/manuals/user-manual.schema.json",\r\n  "title": "AI-SDLC User Manual Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "target-audience",\r\n    "allowed-roles",\r\n    "applies-to-version"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^MAN-USER-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Immutable user manual identifier (e.g. MAN-USER-SENTINELCORE)."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "user-manual"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Document semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string",\r\n      "description": "Template schema version."\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3,\r\n      "description": "Descriptive title of the user manual."\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "applies-to-version": {\r\n      "type": "string",\r\n      "description": "Software version or release this manual applies to (e.g. v1.0.0)."\r\n    },\r\n    "target-audience": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "minItems": 1,\r\n      "description": "Target user profiles or roles for the manual."\r\n    },\r\n    "allowed-roles": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "minItems": 1,\r\n      "description": "Formal catalog of authorized roles to operate the application (linked to ACT-*)."\r\n    },\r\n    "journeys-covered": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^JRN-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Product journey identifiers (JRN-*) covered in the manual."\r\n    },\r\n    "use-cases-covered": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Use case identifiers (UC-*) implemented across journeys."\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^MAN-USER-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^MAN-USER-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
+var SCHEMA_SCHEMAS_PRIVACY_DATA_ASSET_SCHEMA_JSON = '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://ai-sdlc.org/schemas/privacy/data-asset.schema.json",\n  "title": "Personal Data Asset & PII Inventory Schema (DATA-ASSET-*)",\n  "type": "object",\n  "required": [\n    "id",\n    "type",\n    "title",\n    "status",\n    "version",\n    "classification",\n    "pii-categories",\n    "data-subjects",\n    "retention-period",\n    "erasure-method"\n  ],\n  "properties": {\n    "id": {\n      "type": "string",\n      "pattern": "^DATA-ASSET-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "type": {\n      "type": "string",\n      "const": "data-asset"\n    },\n    "version": {\n      "type": "string",\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\n      "description": "Data asset semantic version (SemVer)."\n    },\n    "schema-version": {\n      "type": "string"\n    },\n    "title": {\n      "type": "string",\n      "minLength": 3\n    },\n    "status": {\n      "type": "string",\n      "enum": ["draft", "active", "deprecated", "retired"]\n    },\n    "classification": {\n      "type": "string",\n      "enum": [\n        "public",\n        "internal",\n        "confidential-pii",\n        "special-category-sensitive"\n      ],\n      "description": "Data sensitivity classification aligned with privacy-policy.yaml."\n    },\n    "pii-categories": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "enum": [\n          "identifiers",\n          "contact",\n          "authentication",\n          "financial",\n          "location",\n          "behavioral",\n          "biometric",\n          "health",\n          "telemetry-operator"\n        ]\n      }\n    },\n    "data-subjects": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      },\n      "description": "Product actors (ACT-*) whose personal data is stored or processed."\n    },\n    "fields": {\n      "type": "array",\n      "items": {\n        "type": "object",\n        "required": ["name", "sensitivity", "masking-strategy"],\n        "properties": {\n          "name": {\n            "type": "string",\n            "minLength": 1\n          },\n          "sensitivity": {\n            "type": "string",\n            "enum": ["public", "internal", "pii", "special-category"]\n          },\n          "masking-strategy": {\n            "type": "string",\n            "enum": [\n              "none",\n              "redact",\n              "sha256-salt",\n              "tokenize",\n              "aes-256-gcm",\n              "truncate"\n            ]\n          }\n        },\n        "additionalProperties": false\n      }\n    },\n    "retention-period": {\n      "type": "string",\n      "pattern": "^([0-9]+(d|m|y)|session-only|indefinite-anonymized)$",\n      "description": "Maximum retention TTL (e.g. 30d, 12m, 5y, session-only, indefinite-anonymized)."\n    },\n    "erasure-method": {\n      "type": "string",\n      "enum": [\n        "hard-delete",\n        "crypto-shredding",\n        "irreversible-anonymization"\n      ]\n    },\n    "owner-bounded-context": {\n      "type": "string",\n      "pattern": "^(BC|CMP)-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "supersedes": {\n      "type": ["string", "null"],\n      "pattern": "^DATA-ASSET-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "superseded-by": {\n      "type": ["string", "null"],\n      "pattern": "^DATA-ASSET-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    }\n  },\n  "additionalProperties": false\n}\n';
+var SCHEMA_SCHEMAS_PRIVACY_PRIVACY_POLICY_SCHEMA_JSON = '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://ai-sdlc.org/schemas/privacy/privacy-policy.schema.json",\n  "title": "Privacy-by-Design as Code Governance Policy Schema",\n  "type": "object",\n  "required": [\n    "version",\n    "project",\n    "regulatory_frameworks",\n    "default_action",\n    "classifications",\n    "agent_guardrails",\n    "ci_gates"\n  ],\n  "properties": {\n    "id": {\n      "type": "string",\n      "pattern": "^(PRIV-POL|POL-PRIV)-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "type": {\n      "type": "string",\n      "const": "privacy-policy"\n    },\n    "version": {\n      "type": "string",\n      "minLength": 1\n    },\n    "project": {\n      "type": "string",\n      "minLength": 1\n    },\n    "regulatory_frameworks": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "enum": ["GDPR", "LOPDGDD", "ISO-27701", "CCPA", "HIPAA", "LGPD"]\n      }\n    },\n    "default_action": {\n      "type": "string",\n      "enum": ["DENY_UNREGISTERED_PII", "ALLOW", "REVIEW_REQUIRED"]\n    },\n    "classifications": {\n      "type": "object",\n      "required": ["public", "internal", "confidential_pii", "special_category_sensitive"],\n      "additionalProperties": {\n        "type": "object",\n        "required": ["action", "encryption_at_rest", "encryption_in_transit", "allow_in_logs", "allow_in_ai_prompts"],\n        "properties": {\n          "action": {\n            "type": "string",\n            "enum": ["ALLOW", "STRICT_GOVERNANCE", "DPIA_APPROVAL_REQUIRED", "DENY"]\n          },\n          "description": { "type": "string" },\n          "exception_requires": { "type": "string" },\n          "require_ropa_entry": { "type": "boolean" },\n          "require_dpia_artifact": { "type": "boolean" },\n          "encryption_at_rest": { "type": "boolean" },\n          "encryption_in_transit": { "type": "boolean" },\n          "require_field_level_encryption": { "type": "boolean" },\n          "allow_in_logs": { "type": "boolean" },\n          "log_masking_strategy": { "type": "string" },\n          "allow_in_ai_prompts": { "type": "boolean" },\n          "max_retention_days": { "type": "integer", "minimum": 1 },\n          "require_right_to_erasure": { "type": "boolean" }\n        },\n        "additionalProperties": false\n      }\n    },\n    "cross_border_transfers": {\n      "type": "object",\n      "properties": {\n        "allowed_regions": {\n          "type": "array",\n          "items": { "type": "string" }\n        },\n        "require_scc_for_third_countries": { "type": "boolean" },\n        "approved_subprocessors": {\n          "type": "array",\n          "items": { "type": "string" }\n        }\n      },\n      "additionalProperties": false\n    },\n    "agent_guardrails": {\n      "type": "object",\n      "required": [\n        "forbid_real_pii_in_tests",\n        "forbid_pii_in_console_or_logger",\n        "require_dto_projection_for_pii"\n      ],\n      "properties": {\n        "forbid_real_pii_in_tests": { "type": "boolean" },\n        "forbid_pii_in_console_or_logger": { "type": "boolean" },\n        "require_dto_projection_for_pii": { "type": "boolean" },\n        "on_special_category_detected": {\n          "type": "object",\n          "required": ["action", "notification_tag", "message"],\n          "properties": {\n            "action": { "type": "string" },\n            "notification_tag": { "type": "string" },\n            "message": { "type": "string" }\n          },\n          "additionalProperties": false\n        }\n      },\n      "additionalProperties": false\n    },\n    "ci_gates": {\n      "type": "object",\n      "required": [\n        "fail_on_unregistered_pii",\n        "fail_on_pii_in_logs",\n        "fail_on_missing_retention_policy",\n        "generate_ropa_inventory",\n        "output_ropa_file",\n        "output_privacy_report"\n      ],\n      "properties": {\n        "fail_on_unregistered_pii": { "type": "boolean" },\n        "fail_on_pii_in_logs": { "type": "boolean" },\n        "fail_on_missing_retention_policy": { "type": "boolean" },\n        "fail_on_unapproved_subprocessor": { "type": "boolean" },\n        "generate_ropa_inventory": { "type": "boolean" },\n        "output_ropa_file": { "type": "string" },\n        "output_privacy_report": { "type": "string" }\n      },\n      "additionalProperties": false\n    }\n  },\n  "additionalProperties": false\n}\n';
+var SCHEMA_SCHEMAS_PRIVACY_PRIVACY_REQ_SCHEMA_JSON = '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://ai-sdlc.org/schemas/privacy/privacy-req.schema.json",\n  "title": "Privacy Requirement & Technical Control Schema (PRIV-REQ-*)",\n  "type": "object",\n  "required": [\n    "id",\n    "type",\n    "title",\n    "status",\n    "version",\n    "privacy-principle",\n    "linddun-category",\n    "governs-ropa"\n  ],\n  "properties": {\n    "id": {\n      "type": "string",\n      "pattern": "^PRIV-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "type": {\n      "type": "string",\n      "const": "privacy-requirement"\n    },\n    "version": {\n      "type": "string",\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\n      "description": "Privacy requirement semantic version (SemVer)."\n    },\n    "schema-version": {\n      "type": "string"\n    },\n    "title": {\n      "type": "string",\n      "minLength": 3\n    },\n    "status": {\n      "type": "string",\n      "enum": ["draft", "active", "deprecated", "retired"]\n    },\n    "privacy-principle": {\n      "type": "string",\n      "enum": [\n        "data-minimization",\n        "purpose-limitation",\n        "storage-limitation",\n        "accuracy",\n        "integrity-and-confidentiality",\n        "transparency-and-consent",\n        "data-subject-rights-arco",\n        "pseudonymization-anonymization"\n      ]\n    },\n    "linddun-category": {\n      "type": "string",\n      "enum": [\n        "linkability",\n        "identifiability",\n        "non-repudiation",\n        "detectability",\n        "disclosure-of-information",\n        "unawareness",\n        "non-compliance"\n      ],\n      "description": "LINDDUN privacy threat category mitigated by this control."\n    },\n    "governs-ropa": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "pattern": "^PRIV-ROPA-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      },\n      "description": "Upstream ROPA records (PRIV-ROPA-*) governed by this privacy requirement."\n    },\n    "protects-data-assets": {\n      "type": "array",\n      "items": {\n        "type": "string",\n        "pattern": "^DATA-ASSET-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      }\n    },\n    "enforced-in-enclave": {\n      "type": "string",\n      "pattern": "^SEC-ENC-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "compliance-references": {\n      "type": "array",\n      "items": {\n        "type": "string"\n      }\n    },\n    "acceptance-format": {\n      "type": "string",\n      "enum": ["gherkin", "declarative-prose"]\n    },\n    "cucumber-tags": {\n      "type": "array",\n      "items": {\n        "type": "string",\n        "pattern": "^@[a-zA-Z0-9_-]+$"\n      }\n    },\n    "supersedes": {\n      "type": ["string", "null"],\n      "pattern": "^PRIV-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "superseded-by": {\n      "type": ["string", "null"],\n      "pattern": "^PRIV-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    }\n  },\n  "additionalProperties": false\n}\n';
+var SCHEMA_SCHEMAS_PRIVACY_PRIVACY_ROPA_SCHEMA_JSON = '{\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\n  "$id": "https://ai-sdlc.org/schemas/privacy/privacy-ropa.schema.json",\n  "title": "Record of Processing Activities Schema (PRIV-ROPA-* / GDPR Art. 30)",\n  "type": "object",\n  "required": [\n    "id",\n    "type",\n    "title",\n    "status",\n    "version",\n    "lawful-basis",\n    "processing-purpose",\n    "use-cases",\n    "data-assets",\n    "data-subjects",\n    "retention-ttl"\n  ],\n  "properties": {\n    "id": {\n      "type": "string",\n      "pattern": "^PRIV-ROPA-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "type": {\n      "type": "string",\n      "const": "privacy-ropa"\n    },\n    "version": {\n      "type": "string",\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\n      "description": "ROPA record semantic version (SemVer)."\n    },\n    "schema-version": {\n      "type": "string"\n    },\n    "title": {\n      "type": "string",\n      "minLength": 3\n    },\n    "status": {\n      "type": "string",\n      "enum": ["draft", "active", "deprecated", "retired"]\n    },\n    "lawful-basis": {\n      "type": "string",\n      "enum": [\n        "consent",\n        "contract",\n        "legal-obligation",\n        "vital-interests",\n        "public-task",\n        "legitimate-interests"\n      ],\n      "description": "Lawful basis for processing under GDPR Art. 6.1."\n    },\n    "special-category-condition": {\n      "type": ["string", "null"],\n      "enum": [\n        null,\n        "explicit-consent",\n        "employment-social-security",\n        "vital-interests",\n        "public-interest",\n        "preventive-medicine",\n        "public-health"\n      ],\n      "description": "GDPR Art. 9.2 condition when processing special category data."\n    },\n    "processing-purpose": {\n      "type": "string",\n      "minLength": 10\n    },\n    "use-cases": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      },\n      "description": "Upstream Use Cases (UC-*) that trigger this data processing activity."\n    },\n    "data-assets": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "pattern": "^DATA-ASSET-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      },\n      "description": "Personal Data Assets (DATA-ASSET-*) processed in this activity."\n    },\n    "data-subjects": {\n      "type": "array",\n      "minItems": 1,\n      "items": {\n        "type": "string",\n        "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      }\n    },\n    "retention-ttl": {\n      "type": "string",\n      "pattern": "^([0-9]+(d|m|y)|session-only|indefinite-anonymized)$"\n    },\n    "cross-border-transfer": {\n      "type": "boolean"\n    },\n    "transfer-safeguards": {\n      "type": ["string", "null"],\n      "enum": [null, "adequacy-decision", "scc", "bcr", "derogation"]\n    },\n    "subprocessors": {\n      "type": "array",\n      "items": {\n        "type": "string"\n      }\n    },\n    "dpia-required": {\n      "type": "boolean"\n    },\n    "dpia-reference": {\n      "type": ["string", "null"],\n      "pattern": "^DPIA-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "mitigated-by": {\n      "type": "array",\n      "items": {\n        "type": "string",\n        "pattern": "^PRIV-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\n      },\n      "description": "Privacy requirements (PRIV-REQ-*) governing and enforcing this processing activity."\n    },\n    "supersedes": {\n      "type": ["string", "null"],\n      "pattern": "^PRIV-ROPA-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    },\n    "superseded-by": {\n      "type": ["string", "null"],\n      "pattern": "^PRIV-ROPA-[A-Z0-9]+(-[A-Z0-9]+)*$"\n    }\n  },\n  "additionalProperties": false\n}\n';
 var SCHEMA_SCHEMAS_PRODUCT_ACTOR_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/product/actor.schema.json",\r\n  "title": "ProductShape Actor Schema (Versionable)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status", "version", "role-type"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "actor"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Artifact semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string",\r\n      "description": "Schema specification version used."\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "role-type": {\r\n      "type": "string",\r\n      "enum": ["human-user", "ai-agent", "external-system", "sensor-iot"]\r\n    },\r\n    "description": {\r\n      "type": "string"\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Identifier of the actor superseded by this version or artifact."\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Identifier of the new actor superseding this one upon deprecation/retirement."\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_PRODUCT_BUSINESS_RULE_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/product/business-rule.schema.json",\r\n  "title": "ProductShape Business Rule Schema (Versionable)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status", "version", "enforcement-level"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^BR-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "business-rule"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Business rule semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "enforcement-level": {\r\n      "type": "string",\r\n      "enum": ["strict-invariant", "override-with-approval", "guideline"]\r\n    },\r\n    "defined-in": {\r\n      "type": "string",\r\n      "pattern": "^BC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "uses-terms": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^TERM-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^BR-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^BR-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_PRODUCT_JOURNEY_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/product/journey.schema.json",\r\n  "title": "Customer / Operator Journey Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "persona",\r\n    "stages",\r\n    "touchpoints"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^JRN-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "journey"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Journey semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "persona": {\r\n      "type": "string",\r\n      "pattern": "^ACT-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Actor (persona) starring in this journey."\r\n    },\r\n    "stages": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "description": "Sequential journey stages (e.g. Awareness, Onboarding, Activation, Retention)."\r\n    },\r\n    "touchpoints": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "description": "Touchpoints between persona and system at each stage."\r\n    },\r\n    "related-use-cases": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "System use cases related to this journey."\r\n    },\r\n    "pain-points": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "description": "Frictions or issues detected along the user journey."\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"]\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"]\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
@@ -2727,12 +2830,12 @@ var SCHEMA_SCHEMAS_PRODUCT_USE_CASE_SCHEMA_JSON = '{\r\n  "$schema": "https://js
 var SCHEMA_SCHEMAS_SAFETY_HAZARD_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/safety/hazard.schema.json",\r\n  "title": "Hazard Schema (Operational Hazard & Safety Risk Analysis)",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "severity",\r\n    "probability",\r\n    "fault-tolerance-time-ms",\r\n    "mitigated-by"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^HAZ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "hazard"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Hazard semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "severity": {\r\n      "type": "string",\r\n      "enum": ["catastrophic", "critical", "major", "minor", "negligible"],\r\n      "description": "Hazard severity per functional safety classification (DO-178C / ISO 26262)."\r\n    },\r\n    "probability": {\r\n      "type": "string",\r\n      "enum": ["frequent", "probable", "occasional", "remote", "improbable", "extremely-improbable"],\r\n      "description": "Probability of operational hazard occurrence."\r\n    },\r\n    "fault-tolerance-time-ms": {\r\n      "type": "number",\r\n      "minimum": 0,\r\n      "description": "Fault tolerance time interval (FTTI) limit in milliseconds before entering safe state."\r\n    },\r\n    "mitigated-by": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^SAF-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Safety requirements mitigating this hazard."\r\n    },\r\n    "hazardous-condition": {\r\n      "type": "string",\r\n      "description": "Description of the dangerous operational condition."\r\n    },\r\n    "potential-effect": {\r\n      "type": "string",\r\n      "description": "Potential effect on people, aircraft, or environment if hazard materializes."\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"]\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"]\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SAFETY_SAFETY_REQ_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/safety/safety-req.schema.json",\r\n  "title": "Safety Requirement Schema (Functional Safety & Hazard Mitigation)",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "title",\r\n    "status",\r\n    "version",\r\n    "safety-domain",\r\n    "safety-integrity-level",\r\n    "mitigates-hazard",\r\n    "fail-safe-action"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^SAF-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "safety-requirement"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Safety requirement semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "safety-domain": {\r\n      "type": "string",\r\n      "enum": [\r\n        "flight-control",\r\n        "collision-avoidance",\r\n        "energy-management",\r\n        "emergency-recovery",\r\n        "sensor-integrity",\r\n        "propulsion",\r\n        "telemetry"\r\n      ],\r\n      "description": "Operational safety domain."\r\n    },\r\n    "safety-integrity-level": {\r\n      "type": "string",\r\n      "description": "Safety integrity level (e.g. DAL-A..D, ASIL-A..D, SIL-1..4)."\r\n    },\r\n    "mitigates-hazard": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^HAZ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Operational hazards mitigated by safety control."\r\n    },\r\n    "fail-safe-action": {\r\n      "type": "string",\r\n      "description": "Automatic action or contingency maneuver to enter safe state."\r\n    },\r\n    "fault-tolerance-time-ms": {\r\n      "type": "number",\r\n      "description": "Fault tolerance time interval limit in milliseconds (FTTI)."\r\n    },\r\n    "acceptance-format": {\r\n      "type": "string",\r\n      "enum": ["gherkin", "declarative-prose"]\r\n    },\r\n    "cucumber-tags": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"]\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"]\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SDD_DESIGN_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/design.schema.json",\r\n  "title": "Spec-Driven Development Technical Design Schema (DSG-*)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(DSG-[A-Z0-9]+(-[A-Z0-9]+)*|CHG-[A-Z0-9]+-DESIGN|[A-Z0-9]+(-[A-Z0-9]+)*)$",\r\n      "description": "Unique identifier of the technical design specification."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "enum": ["spec-design", "spec-change-design", "design"]\r\n    },\r\n    "change-id": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT|PATCH)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Parent change identifier associated with this design."\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Semantic versioning (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "handoff": {\r\n      "type": "string",\r\n      "pattern": "^HOF-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Reference to the HOF-* sidecar."\r\n    },\r\n    "architecture-component": {\r\n      "type": "string",\r\n      "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Associated architecture component."\r\n    },\r\n    "architecture-components": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "List of architecture components covered by this technical design."\r\n    },\r\n    "enclave": {\r\n      "type": "string",\r\n      "pattern": "^(SEC-ENC-)?[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Zero trust security enclave."\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": [\r\n        "draft",\r\n        "proposed",\r\n        "review",\r\n        "approved",\r\n        "active",\r\n        "completed",\r\n        "deprecated"\r\n      ]\r\n    },\r\n    "author": {\r\n      "type": "string"\r\n    },\r\n    "date": {\r\n      "type": "string"\r\n    },\r\n    "contracts": {\r\n      "type": "array",\r\n      "description": "Explicit contract interfaces and methods designed for implementation and unit testing.",\r\n      "items": {\r\n        "oneOf": [\r\n          { "type": "string", "minLength": 1 },\r\n          {\r\n            "type": "object",\r\n            "required": ["methods"],\r\n            "properties": {\r\n              "component": { "type": "string" },\r\n              "interface": { "type": "string" },\r\n              "methods": {\r\n                "type": "array",\r\n                "minItems": 1,\r\n                "items": { "type": "string", "minLength": 1 }\r\n              }\r\n            },\r\n            "additionalProperties": false\r\n          }\r\n        ]\r\n      }\r\n    },\r\n    "citations": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id"],\r\n        "properties": {\r\n          "id": { "type": "string" },\r\n          "digest": { "type": "string" },\r\n          "comment": { "type": "string" },\r\n          "anchor": { "type": "string" }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
-var SCHEMA_SCHEMAS_SDD_HANDOFF_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/handoff.schema.json",\r\n  "title": "PDaC Product Handoff Sidecar Schema (HOF-*)",\r\n  "type": "object",\r\n  "required": ["id", "type", "changeId", "subgraph"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^HOF-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Immutable identifier emitted by PDaC handoff."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "enum": ["handoff", "product-handoff"]\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "changeId": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$"\r\n    },\r\n    "createdAt": {\r\n      "type": "string"\r\n    },\r\n    "subgraph": {\r\n      "type": "object",\r\n      "required": ["requirements"],\r\n      "properties": {\r\n        "requirements": {\r\n          "type": "array",\r\n          "minItems": 1,\r\n          "items": { "type": "string" }\r\n        },\r\n        "useCases": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "businessRules": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "securityRequirements": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "abuseCases": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "actors": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        }\r\n      },\r\n      "additionalProperties": true\r\n    },\r\n    "citations": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id"],\r\n        "properties": {\r\n          "id": { "type": "string" },\r\n          "digest": { "type": "string" },\r\n          "anchor": { "type": "string" },\r\n          "comment": { "type": "string" }\r\n        }\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": true\r\n}\r\n';
+var SCHEMA_SCHEMAS_SDD_HANDOFF_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/handoff.schema.json",\r\n  "title": "PDaC Product Handoff Sidecar Schema (HOF-*)",\r\n  "type": "object",\r\n  "required": ["id", "type", "changeId", "subgraph"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^HOF-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Immutable identifier emitted by PDaC handoff."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "enum": ["handoff", "product-handoff"]\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "changeId": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$"\r\n    },\r\n    "createdAt": {\r\n      "type": "string"\r\n    },\r\n    "subgraph": {\r\n      "type": "object",\r\n      "required": ["requirements"],\r\n      "properties": {\r\n        "requirements": {\r\n          "type": "array",\r\n          "minItems": 1,\r\n          "items": { "type": "string" }\r\n        },\r\n        "useCases": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "businessRules": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "securityRequirements": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "abuseCases": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "privacyRequirements": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "dataAssets": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "privacyRopa": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        },\r\n        "actors": {\r\n          "type": "array",\r\n          "items": { "type": "string" }\r\n        }\r\n      },\r\n      "additionalProperties": true\r\n    },\r\n    "citations": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id"],\r\n        "properties": {\r\n          "id": { "type": "string" },\r\n          "digest": { "type": "string" },\r\n          "anchor": { "type": "string" },\r\n          "comment": { "type": "string" }\r\n        }\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": true\r\n}\r\n';
 var SCHEMA_SCHEMAS_SDD_PROPOSAL_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/proposal.schema.json",\r\n  "title": "Spec-Driven Development Change Proposal Schema (CHG-*)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT|PATCH)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Unique identifier of the change proposal."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "enum": ["spec-change-proposal", "proposal"]\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": [\r\n        "draft",\r\n        "proposed",\r\n        "review",\r\n        "approved",\r\n        "applied",\r\n        "active",\r\n        "completed",\r\n        "rejected"\r\n      ]\r\n    },\r\n    "author": {\r\n      "type": "string"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Semantic versioning (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "date": {\r\n      "type": "string"\r\n    },\r\n    "handoff": {\r\n      "type": "string",\r\n      "description": "Associated handoff sidecar reference."\r\n    },\r\n    "sdd-framework-compat": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "description": "Supported SDD framework adapters."\r\n    },\r\n    "citations": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id"],\r\n        "properties": {\r\n          "id": { "type": "string" },\r\n          "digest": { "type": "string" },\r\n          "comment": { "type": "string" },\r\n          "anchor": { "type": "string" }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SDD_RELEASE_KPIS_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/release-kpis.schema.json",\r\n  "title": "Release Consolidated KPIs & Attribution Telemetry Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "releaseBranch",\r\n    "baseBranch",\r\n    "generatedAt",\r\n    "totalCommits",\r\n    "totalLinesAdded",\r\n    "totalLinesDeleted",\r\n    "totalKloc",\r\n    "totalBugs",\r\n    "globalDefectDensity",\r\n    "totalTimeSeconds",\r\n    "totalTokens",\r\n    "totalCostUsd",\r\n    "authorStats",\r\n    "bugList"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(KPI-REL|REL-KPI)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Optional artifact identifier."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "release-kpis"\r\n    },\r\n    "releaseBranch": {\r\n      "type": "string"\r\n    },\r\n    "baseBranch": {\r\n      "type": "string"\r\n    },\r\n    "generatedAt": {\r\n      "type": "string"\r\n    },\r\n    "totalCommits": {\r\n      "type": "integer",\r\n      "minimum": 0\r\n    },\r\n    "totalLinesAdded": {\r\n      "type": "integer",\r\n      "minimum": 0\r\n    },\r\n    "totalLinesDeleted": {\r\n      "type": "integer",\r\n      "minimum": 0\r\n    },\r\n    "totalKloc": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "totalBugs": {\r\n      "type": "integer",\r\n      "minimum": 0\r\n    },\r\n    "globalDefectDensity": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "totalTimeSeconds": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "totalTokens": {\r\n      "type": "integer",\r\n      "minimum": 0\r\n    },\r\n    "totalCostUsd": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "reworkTimeSeconds": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "reworkTokens": {\r\n      "type": "integer",\r\n      "minimum": 0\r\n    },\r\n    "reworkCostUsd": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "reworkTimePercent": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "reworkTokensPercent": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "reworkCostPercent": {\r\n      "type": "number",\r\n      "minimum": 0\r\n    },\r\n    "authorStats": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": [\r\n          "authorOrModel",\r\n          "isAgent",\r\n          "commits",\r\n          "linesAdded",\r\n          "linesDeleted",\r\n          "klocProduced",\r\n          "bugsInjected",\r\n          "defectInjectionRate",\r\n          "totalTimeSeconds",\r\n          "totalTokens",\r\n          "estimatedCostUsd"\r\n        ],\r\n        "properties": {\r\n          "authorOrModel": {\r\n            "type": "string"\r\n          },\r\n          "isAgent": {\r\n            "type": "boolean"\r\n          },\r\n          "commits": {\r\n            "type": "integer",\r\n            "minimum": 0\r\n          },\r\n          "linesAdded": {\r\n            "type": "integer",\r\n            "minimum": 0\r\n          },\r\n          "linesDeleted": {\r\n            "type": "integer",\r\n            "minimum": 0\r\n          },\r\n          "klocProduced": {\r\n            "type": "number",\r\n            "minimum": 0\r\n          },\r\n          "bugsInjected": {\r\n            "type": "integer",\r\n            "minimum": 0\r\n          },\r\n          "defectInjectionRate": {\r\n            "type": "number",\r\n            "minimum": 0\r\n          },\r\n          "totalTimeSeconds": {\r\n            "type": "number",\r\n            "minimum": 0\r\n          },\r\n          "totalTokens": {\r\n            "type": "integer",\r\n            "minimum": 0\r\n          },\r\n          "estimatedCostUsd": {\r\n            "type": "number",\r\n            "minimum": 0\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    },\r\n    "bugList": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["sha", "subject", "author", "timeSeconds", "tokens"],\r\n        "properties": {\r\n          "sha": {\r\n            "type": "string"\r\n          },\r\n          "subject": {\r\n            "type": "string"\r\n          },\r\n          "author": {\r\n            "type": "string"\r\n          },\r\n          "parentRef": {\r\n            "type": "string"\r\n          },\r\n          "timeSeconds": {\r\n            "type": "number",\r\n            "minimum": 0\r\n          },\r\n          "tokens": {\r\n            "type": "integer",\r\n            "minimum": 0\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SDD_SESSION_TELEMETRY_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/session-telemetry.schema.json",\r\n  "title": "Agent Session Telemetry Schema (.ai-sdlc/session-telemetry.json)",\r\n  "type": "object",\r\n  "required": [\r\n    "model",\r\n    "promptTokens",\r\n    "completionTokens",\r\n    "activeTimeSeconds"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(TEL-SES|SES-TEL|TEL)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Optional telemetry session identifier."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "session-telemetry"\r\n    },\r\n    "model": {\r\n      "type": "string",\r\n      "minLength": 1,\r\n      "description": "AI model name or identifier."\r\n    },\r\n    "promptTokens": {\r\n      "type": "integer",\r\n      "minimum": 0,\r\n      "description": "Total prompt tokens consumed."\r\n    },\r\n    "completionTokens": {\r\n      "type": "integer",\r\n      "minimum": 0,\r\n      "description": "Total completion tokens generated."\r\n    },\r\n    "activeTimeSeconds": {\r\n      "type": "number",\r\n      "minimum": 0,\r\n      "description": "Active session development duration in seconds."\r\n    },\r\n    "author": {\r\n      "type": "string"\r\n    },\r\n    "authorType": {\r\n      "type": "string",\r\n      "enum": ["agent", "human"]\r\n    },\r\n    "sessionId": {\r\n      "type": "string"\r\n    },\r\n    "timestamp": {\r\n      "type": "string"\r\n    },\r\n    "provider": {\r\n      "type": "string"\r\n    },\r\n    "confidence": {\r\n      "type": "string",\r\n      "enum": ["HIGH", "MEDIUM", "LOW"]\r\n    },\r\n    "source": {\r\n      "type": "string"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SDD_SPEC_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/spec.schema.json",\r\n  "title": "Spec-Driven Development Delivery Specification Schema (SPEC-*)",\r\n  "type": "object",\r\n  "required": ["id", "type", "change-id"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^SPEC-(CHG|FEAT|PATCH)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Unique identifier of the delivery specification."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "enum": ["delivery-spec", "spec"]\r\n    },\r\n    "change-id": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT|PATCH)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Parent change identifier associated with this specification."\r\n    },\r\n    "profile": {\r\n      "type": "string",\r\n      "enum": ["patch", "standard", "critical"],\r\n      "description": "Risk and governance profile of the change."\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Semantic versioning (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "handoff": {\r\n      "type": "string",\r\n      "description": "Associated handoff sidecar reference."\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": [\r\n        "draft",\r\n        "proposed",\r\n        "review",\r\n        "approved",\r\n        "active",\r\n        "completed",\r\n        "deprecated"\r\n      ]\r\n    },\r\n    "verification": {\r\n      "type": "object",\r\n      "properties": {\r\n        "method": {\r\n          "type": "string"\r\n        },\r\n        "command": {\r\n          "type": "string"\r\n        },\r\n        "target": {\r\n          "type": "string"\r\n        }\r\n      },\r\n      "additionalProperties": true\r\n    },\r\n    "citations": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id"],\r\n        "properties": {\r\n          "id": { "type": "string" },\r\n          "digest": { "type": "string" },\r\n          "comment": { "type": "string" },\r\n          "anchor": { "type": "string" }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    },\r\n    "acceptance-format": {\r\n      "type": "string",\r\n      "enum": ["gherkin"],\r\n      "description": "Formato de aceptaci\xF3n BDD obligatorio para especificaciones de entrega SDD."\r\n    },\r\n    "cucumber-tags": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^@[a-zA-Z0-9_-]+$"\r\n      },\r\n      "description": "Etiquetas de trazabilidad BDD para ejecuci\xF3n con Cucumber."\r\n    },\r\n    "cucumber-feature-file": {\r\n      "type": "string",\r\n      "description": "Ruta personalizada de extracci\xF3n del archivo .feature para Cucumber."\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
-var SCHEMA_SCHEMAS_SDD_TASKS_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/tasks.schema.json",\r\n  "title": "Verifiable Tasks & Human Autonomy Governance Schema",\r\n  "type": "object",\r\n  "required": ["id", "type", "change-id", "version", "tasks"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^TSK-PLAN-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "task-plan"\r\n    },\r\n    "change-id": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$"\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 5\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "approved", "in-progress", "completed", "blocked"]\r\n    },\r\n    "governance-summary": {\r\n      "type": "object",\r\n      "properties": {\r\n        "autonomous-tasks-count": { "type": "integer", "minimum": 0 },\r\n        "human-review-plan-count": { "type": "integer", "minimum": 0 },\r\n        "ambiguous-count": { "type": "integer", "minimum": 0 },\r\n        "high-risk-manual-count": { "type": "integer", "minimum": 0 }\r\n      }\r\n    },\r\n    "tasks": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id", "title", "complexity", "risk-level", "autonomy-mode", "verification", "assigned-to", "status"],\r\n        "properties": {\r\n          "id": {\r\n            "type": "string",\r\n            "pattern": "^TSK-[0-9]{3,}$"\r\n          },\r\n          "title": {\r\n            "type": "string",\r\n            "minLength": 5\r\n          },\r\n          "complexity": {\r\n            "type": "string",\r\n            "enum": ["LOW", "MEDIUM", "HIGH"]\r\n          },\r\n          "risk-level": {\r\n            "type": "string",\r\n            "enum": ["LOW", "MEDIUM", "HIGH", "CRITICAL"]\r\n          },\r\n          "autonomy-mode": {\r\n            "type": "string",\r\n            "enum": [\r\n              "AUTONOMOUS",\r\n              "HUMAN_REVIEW_PLAN",\r\n              "AMBIGUOUS",\r\n              "HIGH_RISK_MANUAL"\r\n            ],\r\n            "description": "AI agent human governance and supervision mode."\r\n          },\r\n          "verification": {\r\n            "type": "object",\r\n            "required": ["method", "command-or-criteria"],\r\n            "properties": {\r\n              "method": {\r\n                "type": "string",\r\n                "enum": ["automated-unit-test", "cucumber-bdd", "quality-gate", "license-audit", "sast-scan", "manual-inspection", "smoke-test"]\r\n              },\r\n              "command-or-criteria": {\r\n                "type": "string",\r\n                "minLength": 5\r\n              }\r\n            }\r\n          },\r\n          "assigned-to": {\r\n            "type": "string",\r\n            "enum": [\r\n              "agent-developer",\r\n              "agent-security-auditor",\r\n              "agent-compliance-checker",\r\n              "agent-qa",\r\n              "human-engineer",\r\n              "human-architect",\r\n              "pair-human-agent"\r\n            ]\r\n          },\r\n          "status": {\r\n            "type": "string",\r\n            "enum": ["PENDING", "IN_PROGRESS", "COMPLETED", "BLOCKED"]\r\n          },\r\n          "blocking-reason": {\r\n            "type": "string"\r\n          },\r\n          "implements-components": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string",\r\n              "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n            },\r\n            "description": "Architecture components (CMP-*) implemented by this atomic task."\r\n          },\r\n          "satisfies-requirements": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string",\r\n              "pattern": "^(FR|QR|CON|SEC-REQ|SAF-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n            },\r\n            "description": "Requirements satisfied by this atomic task."\r\n          },\r\n          "implements-contracts": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string",\r\n              "minLength": 1\r\n            },\r\n            "description": "Explicit interface or method contracts from design.md implemented by this task."\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    },\r\n    "supersedes": { "type": ["string", "null"] },\r\n    "superseded-by": { "type": ["string", "null"] }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
+var SCHEMA_SCHEMAS_SDD_TASKS_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/sdd/tasks.schema.json",\r\n  "title": "Verifiable Tasks & Human Autonomy Governance Schema",\r\n  "type": "object",\r\n  "required": ["id", "type", "change-id", "version", "tasks"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^TSK-PLAN-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "task-plan"\r\n    },\r\n    "change-id": {\r\n      "type": "string",\r\n      "pattern": "^(CHG|FEAT)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$"\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 5\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "approved", "in-progress", "completed", "blocked"]\r\n    },\r\n    "governance-summary": {\r\n      "type": "object",\r\n      "properties": {\r\n        "autonomous-tasks-count": { "type": "integer", "minimum": 0 },\r\n        "human-review-plan-count": { "type": "integer", "minimum": 0 },\r\n        "ambiguous-count": { "type": "integer", "minimum": 0 },\r\n        "high-risk-manual-count": { "type": "integer", "minimum": 0 }\r\n      }\r\n    },\r\n    "tasks": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["id", "title", "complexity", "risk-level", "autonomy-mode", "verification", "assigned-to", "status"],\r\n        "properties": {\r\n          "id": {\r\n            "type": "string",\r\n            "pattern": "^TSK-[0-9]{3,}$"\r\n          },\r\n          "title": {\r\n            "type": "string",\r\n            "minLength": 5\r\n          },\r\n          "complexity": {\r\n            "type": "string",\r\n            "enum": ["LOW", "MEDIUM", "HIGH"]\r\n          },\r\n          "risk-level": {\r\n            "type": "string",\r\n            "enum": ["LOW", "MEDIUM", "HIGH", "CRITICAL"]\r\n          },\r\n          "autonomy-mode": {\r\n            "type": "string",\r\n            "enum": [\r\n              "AUTONOMOUS",\r\n              "HUMAN_REVIEW_PLAN",\r\n              "AMBIGUOUS",\r\n              "HIGH_RISK_MANUAL"\r\n            ],\r\n            "description": "AI agent human governance and supervision mode."\r\n          },\r\n          "verification": {\r\n            "type": "object",\r\n            "required": ["method", "command-or-criteria"],\r\n            "properties": {\r\n              "method": {\r\n                "type": "string",\r\n                "enum": ["automated-unit-test", "cucumber-bdd", "quality-gate", "license-audit", "sast-scan", "privacy-audit", "manual-inspection", "smoke-test"]\r\n              },\r\n              "command-or-criteria": {\r\n                "type": "string",\r\n                "minLength": 5\r\n              }\r\n            }\r\n          },\r\n          "assigned-to": {\r\n            "type": "string",\r\n            "enum": [\r\n              "agent-developer",\r\n              "agent-security-auditor",\r\n              "agent-compliance-checker",\r\n              "agent-privacy-officer",\r\n              "agent-qa",\r\n              "human-engineer",\r\n              "human-architect",\r\n              "pair-human-agent"\r\n            ]\r\n          },\r\n          "status": {\r\n            "type": "string",\r\n            "enum": ["PENDING", "IN_PROGRESS", "COMPLETED", "BLOCKED"]\r\n          },\r\n          "blocking-reason": {\r\n            "type": "string"\r\n          },\r\n          "implements-components": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string",\r\n              "pattern": "^CMP-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n            },\r\n            "description": "Architecture components (CMP-*) implemented by this atomic task."\r\n          },\r\n          "satisfies-requirements": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string",\r\n              "pattern": "^(FR|QR|CON|SEC-REQ|SAF-REQ|PRIV-REQ)-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n            },\r\n            "description": "Requirements satisfied by this atomic task."\r\n          },\r\n          "implements-contracts": {\r\n            "type": "array",\r\n            "items": {\r\n              "type": "string",\r\n              "minLength": 1\r\n            },\r\n            "description": "Explicit interface or method contracts from design.md implemented by this task."\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      }\r\n    },\r\n    "supersedes": { "type": ["string", "null"] },\r\n    "superseded-by": { "type": ["string", "null"] }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SECURITY_ABUSE_CASE_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/security/abuse-case.schema.json",\r\n  "title": "Abuse Case Schema (Versionable)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status", "version", "primary-threat-actor", "targets-use-case", "stride-category", "mitigated-by"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^ABUSE-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "abuse-case"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Abuse case semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "primary-threat-actor": {\r\n      "type": "string",\r\n      "pattern": "^ACT-THREAT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "targets-use-case": {\r\n      "type": "string",\r\n      "pattern": "^UC-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "stride-category": {\r\n      "type": "string",\r\n      "enum": ["spoofing", "tampering", "repudiation", "information-disclosure", "denial-of-service", "elevation-of-privilege"]\r\n    },\r\n    "mitigated-by": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^SEC-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      }\r\n    },\r\n    "asvs-controls": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ABUSE-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ABUSE-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SECURITY_ENCLAVE_SCHEMA_JSON = `{\r
   "$schema": "https://json-schema.org/draft/2020-12/schema",\r
@@ -2837,7 +2940,7 @@ var SCHEMA_SCHEMAS_SECURITY_ENCLAVE_SCHEMA_JSON = `{\r
 `;
 var SCHEMA_SCHEMAS_SECURITY_SECURITY_REQ_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/security/security-req.schema.json",\r\n  "title": "Security Requirement Schema (Strict Test Validation Enforced)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status", "version", "security-domain", "mitigates-abuse-case"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^SEC-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "security-requirement"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Security requirement semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "security-domain": {\r\n      "type": "string",\r\n      "enum": ["authentication", "authorization", "cryptography", "input-validation", "audit-logging", "communication-security", "data-protection"]\r\n    },\r\n    "mitigates-abuse-case": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^ABUSE-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n      },\r\n      "description": "Product/Security Traceability: Abuse case or threat this control neutralizes."\r\n    },\r\n    "enforced-in-enclave": {\r\n      "type": "string",\r\n      "pattern": "^SEC-ENC-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Architecture Traceability: Perimeter or internal security enclave."\r\n    },\r\n    "compliance-references": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      }\r\n    },\r\n    "acceptance-format": {\r\n      "type": "string",\r\n      "enum": ["gherkin", "declarative-prose"],\r\n      "description": "Mitigation criteria format."\r\n    },\r\n    "cucumber-tags": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string",\r\n        "pattern": "^@[a-zA-Z0-9_-]+$"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^SEC-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^SEC-REQ-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var SCHEMA_SCHEMAS_SECURITY_THREAT_ACTOR_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/security/threat-actor.schema.json",\r\n  "title": "Threat Actor Schema (Versionable)",\r\n  "type": "object",\r\n  "required": ["id", "type", "title", "status", "version", "threat-capability", "motivation"],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^ACT-THREAT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "threat-actor"\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Threat profile semantic version (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "deprecated", "retired"]\r\n    },\r\n    "threat-capability": {\r\n      "type": "string",\r\n      "enum": ["script-kiddie", "advanced-persistent-threat", "insider-threat", "automated-botnet", "supply-chain-attacker"]\r\n    },\r\n    "motivation": {\r\n      "type": "string",\r\n      "enum": ["financial-gain", "espionage", "sabotage", "data-theft", "reputational-damage"]\r\n    },\r\n    "attack-surfaces": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "string"\r\n      }\r\n    },\r\n    "supersedes": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ACT-THREAT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    },\r\n    "superseded-by": {\r\n      "type": ["string", "null"],\r\n      "pattern": "^ACT-THREAT-[A-Z0-9]+(-[A-Z0-9]+)*$"\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
-var SCHEMA_SCHEMAS_WORKFLOW_AGENT_HANDOFF_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/workflow/agent-handoff.schema.json",\r\n  "title": "Agent Workflow Handoff Block Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "completed-phase",\r\n    "acting-role",\r\n    "autonomy-mode",\r\n    "deliverables",\r\n    "suggested-prompt"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(AHOF|HOF-WORKFLOW|HOF)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Unique workflow handoff identifier."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "agent-handoff"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Semantic versioning (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "completed", "transferred"]\r\n    },\r\n    "completed-phase": {\r\n      "type": "string",\r\n      "minLength": 2,\r\n      "description": "Name of the completed lifecycle phase or activity."\r\n    },\r\n    "acting-role": {\r\n      "type": "string",\r\n      "enum": [\r\n        "agent-product-analyst",\r\n        "agent-threat-modeler",\r\n        "agent-system-architect",\r\n        "agent-qa-engineer",\r\n        "agent-developer",\r\n        "agent-expert-user",\r\n        "agent-security-auditor",\r\n        "agent-compliance-checker",\r\n        "agent-code-reviewer",\r\n        "agent-devops",\r\n        "human-dev",\r\n        "tech-lead",\r\n        "release-manager"\r\n      ],\r\n      "description": "Specialized role executing the handoff."\r\n    },\r\n    "autonomy-mode": {\r\n      "type": "string",\r\n      "enum": ["AUTONOMOUS", "HUMAN_REVIEW_PLAN", "AMBIGUOUS", "HIGH_RISK_MANUAL"],\r\n      "description": "Autonomy level under which the task was executed."\r\n    },\r\n    "deliverables": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "description": "Paths or IDs of artifacts produced during the phase."\r\n    },\r\n    "recommended-next-roles": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["role", "rationale"],\r\n        "properties": {\r\n          "role": {\r\n            "type": "string"\r\n          },\r\n          "rationale": {\r\n            "type": "string"\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      },\r\n      "description": "Recommended downstream specialist roles and technical justifications."\r\n    },\r\n    "suggested-prompt": {\r\n      "type": "string",\r\n      "minLength": 5,\r\n      "description": "Suggested invocation prompt to initiate the next agent."\r\n    },\r\n    "human-action-window": {\r\n      "type": "object",\r\n      "properties": {\r\n        "review-and-validate": {\r\n          "type": "boolean"\r\n        },\r\n        "edit-directly": {\r\n          "type": "boolean"\r\n        },\r\n        "pause-or-divert": {\r\n          "type": "boolean"\r\n        },\r\n        "delegate": {\r\n          "type": "boolean"\r\n        }\r\n      },\r\n      "additionalProperties": false,\r\n      "description": "Actions available to the human engineer within the sovereign action window."\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
+var SCHEMA_SCHEMAS_WORKFLOW_AGENT_HANDOFF_SCHEMA_JSON = '{\r\n  "$schema": "https://json-schema.org/draft/2020-12/schema",\r\n  "$id": "https://ai-sdlc.org/schemas/workflow/agent-handoff.schema.json",\r\n  "title": "Agent Workflow Handoff Block Schema",\r\n  "type": "object",\r\n  "required": [\r\n    "id",\r\n    "type",\r\n    "completed-phase",\r\n    "acting-role",\r\n    "autonomy-mode",\r\n    "deliverables",\r\n    "suggested-prompt"\r\n  ],\r\n  "properties": {\r\n    "id": {\r\n      "type": "string",\r\n      "pattern": "^(AHOF|HOF-WORKFLOW|HOF)-[A-Z0-9]+(-[A-Z0-9]+)*$",\r\n      "description": "Unique workflow handoff identifier."\r\n    },\r\n    "type": {\r\n      "type": "string",\r\n      "const": "agent-handoff"\r\n    },\r\n    "title": {\r\n      "type": "string",\r\n      "minLength": 3\r\n    },\r\n    "version": {\r\n      "type": "string",\r\n      "pattern": "^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[0-9A-Za-z.-]+)?$",\r\n      "description": "Semantic versioning (SemVer)."\r\n    },\r\n    "schema-version": {\r\n      "type": "string"\r\n    },\r\n    "status": {\r\n      "type": "string",\r\n      "enum": ["draft", "active", "completed", "transferred"]\r\n    },\r\n    "completed-phase": {\r\n      "type": "string",\r\n      "minLength": 2,\r\n      "description": "Name of the completed lifecycle phase or activity."\r\n    },\r\n    "acting-role": {\r\n      "type": "string",\r\n      "enum": [\r\n        "agent-product-analyst",\r\n        "agent-threat-modeler",\r\n        "agent-privacy-officer",\r\n        "agent-system-architect",\r\n        "agent-qa-engineer",\r\n        "agent-developer",\r\n        "agent-expert-user",\r\n        "agent-security-auditor",\r\n        "agent-compliance-checker",\r\n        "agent-code-reviewer",\r\n        "agent-devops",\r\n        "human-dev",\r\n        "tech-lead",\r\n        "release-manager",\r\n        "dpo"\r\n      ],\r\n      "description": "Specialized role executing the handoff."\r\n    },\r\n    "autonomy-mode": {\r\n      "type": "string",\r\n      "enum": ["AUTONOMOUS", "HUMAN_REVIEW_PLAN", "AMBIGUOUS", "HIGH_RISK_MANUAL"],\r\n      "description": "Autonomy level under which the task was executed."\r\n    },\r\n    "deliverables": {\r\n      "type": "array",\r\n      "minItems": 1,\r\n      "items": {\r\n        "type": "string"\r\n      },\r\n      "description": "Paths or IDs of artifacts produced during the phase."\r\n    },\r\n    "recommended-next-roles": {\r\n      "type": "array",\r\n      "items": {\r\n        "type": "object",\r\n        "required": ["role", "rationale"],\r\n        "properties": {\r\n          "role": {\r\n            "type": "string"\r\n          },\r\n          "rationale": {\r\n            "type": "string"\r\n          }\r\n        },\r\n        "additionalProperties": false\r\n      },\r\n      "description": "Recommended downstream specialist roles and technical justifications."\r\n    },\r\n    "suggested-prompt": {\r\n      "type": "string",\r\n      "minLength": 5,\r\n      "description": "Suggested invocation prompt to initiate the next agent."\r\n    },\r\n    "human-action-window": {\r\n      "type": "object",\r\n      "properties": {\r\n        "review-and-validate": {\r\n          "type": "boolean"\r\n        },\r\n        "edit-directly": {\r\n          "type": "boolean"\r\n        },\r\n        "pause-or-divert": {\r\n          "type": "boolean"\r\n        },\r\n        "delegate": {\r\n          "type": "boolean"\r\n        }\r\n      },\r\n      "additionalProperties": false,\r\n      "description": "Actions available to the human engineer within the sovereign action window."\r\n    }\r\n  },\r\n  "additionalProperties": false\r\n}\r\n';
 var STARTER_SCHEMAS_MAP = {
   "schemas/architecture/adr.schema.json": JSON.parse(SCHEMA_SCHEMAS_ARCHITECTURE_ADR_SCHEMA_JSON),
   "schemas/architecture/component.schema.json": JSON.parse(SCHEMA_SCHEMAS_ARCHITECTURE_COMPONENT_SCHEMA_JSON),
@@ -2848,6 +2951,10 @@ var STARTER_SCHEMAS_MAP = {
   "schemas/ide/mcp-config.schema.json": JSON.parse(SCHEMA_SCHEMAS_IDE_MCP_CONFIG_SCHEMA_JSON),
   "schemas/manuals/production-manual.schema.json": JSON.parse(SCHEMA_SCHEMAS_MANUALS_PRODUCTION_MANUAL_SCHEMA_JSON),
   "schemas/manuals/user-manual.schema.json": JSON.parse(SCHEMA_SCHEMAS_MANUALS_USER_MANUAL_SCHEMA_JSON),
+  "schemas/privacy/data-asset.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRIVACY_DATA_ASSET_SCHEMA_JSON),
+  "schemas/privacy/privacy-policy.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRIVACY_PRIVACY_POLICY_SCHEMA_JSON),
+  "schemas/privacy/privacy-req.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRIVACY_PRIVACY_REQ_SCHEMA_JSON),
+  "schemas/privacy/privacy-ropa.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRIVACY_PRIVACY_ROPA_SCHEMA_JSON),
   "schemas/product/actor.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRODUCT_ACTOR_SCHEMA_JSON),
   "schemas/product/business-rule.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRODUCT_BUSINESS_RULE_SCHEMA_JSON),
   "schemas/product/journey.schema.json": JSON.parse(SCHEMA_SCHEMAS_PRODUCT_JOURNEY_SCHEMA_JSON),
@@ -2889,6 +2996,11 @@ var TYPE_TO_SCHEMA_MAP = {
   "security-enclave": "schemas/security/enclave.schema.json",
   "security-requirement": "schemas/security/security-req.schema.json",
   "threat-actor": "schemas/security/threat-actor.schema.json",
+  // Privacy & Data Protection
+  "data-asset": "schemas/privacy/data-asset.schema.json",
+  "privacy-ropa": "schemas/privacy/privacy-ropa.schema.json",
+  "privacy-requirement": "schemas/privacy/privacy-req.schema.json",
+  "privacy-policy": "schemas/privacy/privacy-policy.schema.json",
   // Architecture
   "architecture-introduction": "schemas/architecture/introduction-and-goals.schema.json",
   "architecture-decision-record": "schemas/architecture/adr.schema.json",
@@ -2931,6 +3043,11 @@ var PREFIX_TAXONOMY = [
   ["ABUSE-", "abuse-case"],
   ["SEC-ENC-", "security-enclave"],
   ["SEC-REQ-", "security-requirement"],
+  ["DATA-ASSET-", "data-asset"],
+  ["PRIV-ROPA-", "privacy-ropa"],
+  ["PRIV-REQ-", "privacy-requirement"],
+  ["PRIV-POL-", "privacy-policy"],
+  ["POL-PRIV-", "privacy-policy"],
   ["HAZ-", "hazard"],
   ["SAF-REQ-", "safety-requirement"],
   ["SAF-", "safety-requirement"],
@@ -3836,11 +3953,28 @@ function createGreenfieldRequirement(rootDir, name, padNum, canonicalId, author,
   const digest = computeCanonicalSha256(reqContent);
   return { reqId, ucId, reqFilePath, digest };
 }
+function resolveMissingDraftDestination(rootDir, id) {
+  if (id.startsWith("PRIV-REQ-")) {
+    return { dir: path4.join(rootDir, "specs", "privacy", "requirements"), type: "privacy-requirement" };
+  }
+  if (id.startsWith("DATA-ASSET-")) {
+    return { dir: path4.join(rootDir, "specs", "privacy", "assets"), type: "data-asset" };
+  }
+  if (id.startsWith("PRIV-ROPA-")) {
+    return { dir: path4.join(rootDir, "specs", "privacy", "ropa"), type: "privacy-ropa" };
+  }
+  if (id.startsWith("UC-")) {
+    return { dir: path4.join(rootDir, "specs", "product"), type: "use-case" };
+  }
+  if (id.startsWith("SEC-REQ-") || id.startsWith("SAF-REQ-")) {
+    return { dir: path4.join(rootDir, "specs", "product"), type: "security-requirement" };
+  }
+  return { dir: path4.join(rootDir, "specs", "product"), type: "requirement" };
+}
 function createMissingDraftRequirement(rootDir, name, id, canonicalId, createdFiles) {
-  const productDir = path4.join(rootDir, "specs", "product");
-  if (!fs7.existsSync(productDir)) fs7.mkdirSync(productDir, { recursive: true });
-  const reqFilePath = path4.join(productDir, `${id}.md`);
-  const reqType = id.startsWith("UC-") ? "use-case" : id.startsWith("SEC-REQ-") ? "security-requirement" : "requirement";
+  const { dir, type: reqType } = resolveMissingDraftDestination(rootDir, id);
+  if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
+  const reqFilePath = path4.join(dir, `${id}.md`);
   const header = MISSING_DRAFT_HEADER.replaceAll("{{ID}}", id).replaceAll("{{TYPE}}", reqType).replaceAll("{{NAME}}", name);
   const body = MISSING_DRAFT_BODY.replaceAll("{{ID}}", id).replaceAll("{{NAME}}", name).replaceAll("{{CANONICAL_ID}}", canonicalId);
   const reqContent = `${header}
@@ -3870,13 +4004,30 @@ function discoverDerivedRequirements(id, artifactMap, subRequirements, citedArti
 function appendUnique(list, item) {
   if (!list.includes(item)) list.push(item);
 }
-function classifyExistingCitation(id, existing, artifactMap, col) {
+function recordCitedArtifact(existing, col) {
   col.citedArtifacts.push({
     id: existing.id,
     digest: `sha256:${existing.digest}`,
     title: existing.title,
     comment: `Citaci\xF3n de ${existing.frontmatter.type || "artefacto"} (${existing.title || existing.id})`
   });
+}
+function classifyPrivacyCitation(id, col) {
+  if (id.startsWith("PRIV-REQ-")) {
+    appendUnique(col.subPrivReqs, id);
+    return true;
+  }
+  if (id.startsWith("DATA-ASSET-")) {
+    appendUnique(col.subDataAssets, id);
+    return true;
+  }
+  if (id.startsWith("PRIV-ROPA-")) {
+    appendUnique(col.subRopa, id);
+    return true;
+  }
+  return false;
+}
+function classifyProductCitation(id, artifactMap, col) {
   if (/^(FR|QR|CON)-/.test(id)) {
     appendUnique(col.subRequirements, id);
   } else if (id.startsWith("UC-")) {
@@ -3888,9 +4039,18 @@ function classifyExistingCitation(id, existing, artifactMap, col) {
     appendUnique(col.subRules, id);
   }
 }
+function classifyExistingCitation(id, existing, artifactMap, col) {
+  recordCitedArtifact(existing, col);
+  if (!classifyPrivacyCitation(id, col)) {
+    classifyProductCitation(id, artifactMap, col);
+  }
+}
 function routeMissingCitationId(id, col) {
   if (id.startsWith("UC-")) col.subUseCases.push(id);
   else if (id.startsWith("SEC-REQ-")) col.subSecReqs.push(id);
+  else if (id.startsWith("PRIV-REQ-")) col.subPrivReqs.push(id);
+  else if (id.startsWith("DATA-ASSET-")) col.subDataAssets.push(id);
+  else if (id.startsWith("PRIV-ROPA-")) col.subRopa.push(id);
   else col.subRequirements.push(id);
 }
 function collectExplicitCitations(inputFromIds, name, canonicalId, artifactMap, col, rootDir, createdFiles) {
@@ -3920,16 +4080,31 @@ function collectGreenfieldCitations(rootDir, name, padNum, canonicalId, author,
     col.subUseCases.push(gf.ucId);
   }
 }
+function initEmptyCitations() {
+  return {
+    citedArtifacts: [],
+    subRequirements: [],
+    subUseCases: [],
+    subSecReqs: [],
+    subRules: [],
+    subPrivReqs: [],
+    subDataAssets: [],
+    subRopa: []
+  };
+}
+function ensureFallbackRequirement(col, padNum, name) {
+  if (col.subRequirements.length === 0) {
+    col.subRequirements.push(`FR-${padNum}-${slugify(name).toUpperCase()}-001`);
+  }
+}
 function collectChangeCitations(rootDir, name, padNum, canonicalId, author, dateStr, inputFromIds, artifactMap, createdFiles) {
-  const col = { citedArtifacts: [], subRequirements: [], subUseCases: [], subSecReqs: [], subRules: [] };
+  const col = initEmptyCitations();
   if (inputFromIds.length === 0) {
     collectGreenfieldCitations(rootDir, name, padNum, canonicalId, author, dateStr, createdFiles, col);
   } else {
     collectExplicitCitations(inputFromIds, name, canonicalId, artifactMap, col, rootDir, createdFiles);
   }
-  if (col.subRequirements.length === 0) {
-    col.subRequirements.push(`FR-${padNum}-${slugify(name).toUpperCase()}-001`);
-  }
+  ensureFallbackRequirement(col, padNum, name);
   return col;
 }
 function renderProposalFile(changeDir, canonicalId, name, author, citationsYamlBlock) {
@@ -4043,6 +4218,9 @@ function buildHandoffSubgraph(citations) {
   if (citations.subUseCases.length > 0) subgraph.useCases = citations.subUseCases;
   if (citations.subSecReqs.length > 0) subgraph.securityRequirements = citations.subSecReqs;
   if (citations.subRules.length > 0) subgraph.businessRules = citations.subRules;
+  if (citations.subPrivReqs.length > 0) subgraph.privacyRequirements = citations.subPrivReqs;
+  if (citations.subDataAssets.length > 0) subgraph.dataAssets = citations.subDataAssets;
+  if (citations.subRopa.length > 0) subgraph.privacyRopa = citations.subRopa;
   return subgraph;
 }
 function buildHandoffPayload(canonicalId, name, citations) {
@@ -4088,7 +4266,7 @@ function buildScaffoldFailure(profile, error, slug = "", canonicalId = "", chang
 }
 function renderAndCollectArtifactFiles(changeDir, canonicalId, name, author, dateStr, profile, citations, createdFiles) {
   const citationsBlock = renderCitationsYamlBlock(citations.citedArtifacts);
-  const reqIds = [...citations.subRequirements, ...citations.subSecReqs];
+  const reqIds = [...citations.subRequirements, ...citations.subSecReqs, ...citations.subPrivReqs];
   createdFiles.push(renderProposalFile(changeDir, canonicalId, name, author, citationsBlock));
   const { specPath, specFmObj } = renderSpecFile(changeDir, canonicalId, name, profile);
   createdFiles.push(specPath);
@@ -4541,28 +4719,28 @@ function buildHandoffList(rootDir, artifactMap) {
   }
   return handoffList;
 }
+function indexSubgraphIds(ids, hof, map) {
+  if (!Array.isArray(ids)) return;
+  for (const reqId of ids) {
+    map.set(reqId, hof);
+  }
+}
 function indexRequirementsToHandoff(handoffList) {
   const reqToHandoffMap = /* @__PURE__ */ new Map();
   for (const hof of handoffList) {
-    if (hof.subgraph && Array.isArray(hof.subgraph.requirements)) {
-      for (const reqId of hof.subgraph.requirements) {
-        reqToHandoffMap.set(reqId, hof);
-      }
-    }
-    if (hof.subgraph && Array.isArray(hof.subgraph.securityRequirements)) {
-      for (const reqId of hof.subgraph.securityRequirements) {
-        reqToHandoffMap.set(reqId, hof);
-      }
-    }
+    if (!hof.subgraph) continue;
+    indexSubgraphIds(hof.subgraph.requirements, hof, reqToHandoffMap);
+    indexSubgraphIds(hof.subgraph.securityRequirements, hof, reqToHandoffMap);
+    indexSubgraphIds(hof.subgraph.privacyRequirements, hof, reqToHandoffMap);
   }
   return reqToHandoffMap;
 }
-var TARGET_REQ_PREFIXES = ["FR-", "QR-", "SEC-REQ-", "CON-"];
+var TARGET_REQ_PREFIXES = ["FR-", "QR-", "SEC-REQ-", "CON-", "PRIV-REQ-"];
 function isRequirementToVerify(data, id) {
   if (data.file.includes("templates/") || data.file.includes(".template.") || data.file.includes("process/")) {
     return false;
   }
-  if (data.type === "requirement" || data.type === "security-requirement") {
+  if (data.type === "requirement" || data.type === "security-requirement" || data.type === "privacy-requirement") {
     return true;
   }
   return TARGET_REQ_PREFIXES.some((prefix) => id.startsWith(prefix));
@@ -4600,6 +4778,8 @@ function collectHandoffSubgraphTraces(subgraph) {
   if (subgraph.useCases) traces.push(...subgraph.useCases);
   if (subgraph.businessRules) traces.push(...subgraph.businessRules);
   if (subgraph.abuseCases) traces.push(...subgraph.abuseCases);
+  if (subgraph.privacyRopa) traces.push(...subgraph.privacyRopa);
+  if (subgraph.dataAssets) traces.push(...subgraph.dataAssets);
   return traces;
 }
 function collectArchIntroTraces(reqId, artifactMap) {
@@ -4618,6 +4798,8 @@ function resolveProductTraces(fm, reqId, associatedHandoff, artifactMap) {
   const traces = [
     ...extractArrayOrSingle(fm["derives-from"]),
     ...extractArrayOrSingle(fm["mitigates-abuse-case"]),
+    ...extractArrayOrSingle(fm["governs-ropa"]),
+    ...extractArrayOrSingle(fm["protects-data-assets"]),
     ...collectHandoffSubgraphTraces(associatedHandoff?.subgraph),
     ...collectArchIntroTraces(reqId, artifactMap)
   ];
@@ -5054,7 +5236,8 @@ function extractHandoffExpectedScope(changeDir, maxUc = 1, violations) {
   }
   const reqs = handoff.subgraph.requirements || [];
   const secReqs = handoff.subgraph.securityRequirements || [];
-  return [...reqs, ...secReqs];
+  const privReqs = handoff.subgraph.privacyRequirements || [];
+  return [...reqs, ...secReqs, ...privReqs];
 }
 function collectTaskCoveredScope(tasks) {
   const covered = /* @__PURE__ */ new Set();
@@ -7417,6 +7600,503 @@ function detectPromptInjection(content) {
   checkMultilinePromptInjection(content, findings);
   return findings;
 }
+var DEFAULT_PRIVACY_POLICY = {
+  version: "1.0",
+  project: "AI-SDLC Standard Organization",
+  regulatory_frameworks: ["GDPR", "LOPDGDD", "ISO-27701"],
+  default_action: "DENY_UNREGISTERED_PII",
+  classifications: {
+    public: {
+      action: "ALLOW",
+      encryption_at_rest: false,
+      encryption_in_transit: true,
+      allow_in_logs: true,
+      allow_in_ai_prompts: true
+    },
+    internal: {
+      action: "ALLOW",
+      encryption_at_rest: true,
+      encryption_in_transit: true,
+      allow_in_logs: true,
+      allow_in_ai_prompts: true
+    },
+    confidential_pii: {
+      action: "STRICT_GOVERNANCE",
+      require_ropa_entry: true,
+      encryption_at_rest: true,
+      encryption_in_transit: true,
+      allow_in_logs: false,
+      log_masking_strategy: "REDACT_OR_SHA256_SALT",
+      allow_in_ai_prompts: false,
+      max_retention_days: 365,
+      require_right_to_erasure: true
+    },
+    special_category_sensitive: {
+      action: "DPIA_APPROVAL_REQUIRED",
+      require_ropa_entry: true,
+      require_dpia_artifact: true,
+      encryption_at_rest: true,
+      encryption_in_transit: true,
+      require_field_level_encryption: true,
+      allow_in_logs: false,
+      allow_in_ai_prompts: false
+    }
+  },
+  cross_border_transfers: {
+    allowed_regions: ["EU-EEA", "ADEQUACY_DECISION"],
+    require_scc_for_third_countries: true,
+    approved_subprocessors: []
+  },
+  agent_guardrails: {
+    forbid_real_pii_in_tests: true,
+    forbid_pii_in_console_or_logger: true,
+    require_dto_projection_for_pii: true
+  },
+  ci_gates: {
+    fail_on_unregistered_pii: true,
+    fail_on_pii_in_logs: true,
+    fail_on_missing_retention_policy: true,
+    fail_on_unapproved_subprocessor: true,
+    generate_ropa_inventory: true,
+    output_ropa_file: "reports/ROPA_INVENTORY.md",
+    output_privacy_report: "reports/PRIVACY_SCAN_REPORT.md"
+  }
+};
+var PII_SAST_RULES = [
+  {
+    id: "PRIV-001-PII-IN-LOGS",
+    type: "PII_IN_LOGS",
+    severity: "HIGH",
+    description: "Direct exposure of unmasked PII or sensitive fields in logger or console output (GDPR Art. 25 / Art. 32)",
+    pattern: /(?:console\.(?:log|info|warn|error|debug)|logger\.(?:info|warn|error|debug|trace)|log\.(?:info|warn|error|debug))\s*\([^)]*\b(?:user\.(?:email|phone|ssn|dni|nif|password|creditCard|biometric)|req\.body\.(?:email|phone|ssn|dni|nif|password|creditCard)|rawPii|patientRecord|creditCardNumber|socialSecurityNumber)\b/i
+  },
+  {
+    id: "PRIV-002-PII-IN-LLM-PROMPT",
+    type: "PII_IN_LLM_PROMPT",
+    severity: "CRITICAL",
+    description: "Unmasked personal or special-category data interpolated into external AI/LLM prompt payload",
+    pattern: /(?:(?:prompt|userPrompt|systemPrompt|llmPrompt)\s*(?::=|\+=|=)|(?:generateContent|chat\.completions\.create)\s*\()[^;\n]*\$\{[^}]*\b(?:user\.(?:email|phone|ssn|dni|nif|biometric)|patient\.(?:diagnosis|health|medicalRecord)|rawPii|creditCard)\b[^}]*\}/i
+  },
+  {
+    id: "PRIV-004-HARDCODED-REAL-PII",
+    type: "HARDCODED_PII_IN_CODE",
+    severity: "HIGH",
+    description: "Hardcoded real-world personal identifier (SSN / National ID / Credit Card) detected in source or test file",
+    pattern: /\b(?:ssn|dni|nif|tax_?id|national_?id)\s*[:=]\s*['"](?:\d{3}-\d{2}-\d{4}|\d{8}[A-HJ-NP-TV-Z])['"]/i
+  }
+];
+function loadPrivacyPolicy(rootDir, policyPath) {
+  const candidate = policyPath ? path4.isAbsolute(policyPath) ? policyPath : path4.join(rootDir, policyPath) : path4.join(rootDir, "privacy-policy.yaml");
+  if (!fs7.existsSync(candidate)) return DEFAULT_PRIVACY_POLICY;
+  try {
+    const parsed = yaml3.load(fs7.readFileSync(candidate, "utf-8"));
+    if (!parsed || typeof parsed !== "object") return DEFAULT_PRIVACY_POLICY;
+    return {
+      ...DEFAULT_PRIVACY_POLICY,
+      ...parsed,
+      classifications: { ...DEFAULT_PRIVACY_POLICY.classifications, ...parsed.classifications || {} },
+      agent_guardrails: { ...DEFAULT_PRIVACY_POLICY.agent_guardrails, ...parsed.agent_guardrails || {} },
+      ci_gates: { ...DEFAULT_PRIVACY_POLICY.ci_gates, ...parsed.ci_gates || {} }
+    };
+  } catch {
+    return DEFAULT_PRIVACY_POLICY;
+  }
+}
+function isLineExemptFromPrivacyScan(line) {
+  return line.includes("ai-sdlc:allow-pii") || line.includes("ai-sdlc:allow-sast") || line.includes("nosec");
+}
+function shouldApplyPiiRule(rule, policy) {
+  if (rule.type === "PII_IN_LOGS" && !policy.ci_gates.fail_on_pii_in_logs) {
+    return false;
+  }
+  if (rule.type === "HARDCODED_PII_IN_CODE" && !policy.agent_guardrails.forbid_real_pii_in_tests) {
+    return false;
+  }
+  return true;
+}
+function scanFileForPrivacyViolations(filePath, rootDir, policy = DEFAULT_PRIVACY_POLICY) {
+  const violations = [];
+  try {
+    const content = fs7.readFileSync(filePath, "utf-8");
+    const lines = content.split(/\r?\n/);
+    const relPath = path4.relative(rootDir, filePath).replace(/\\/g, "/");
+    for (let i = 0; i < lines.length; i++) {
+      const line = lines[i];
+      if (isLineExemptFromPrivacyScan(line)) continue;
+      for (const rule of PII_SAST_RULES) {
+        if (!shouldApplyPiiRule(rule, policy)) continue;
+        rule.pattern.lastIndex = 0;
+        if (rule.pattern.test(line)) {
+          violations.push({
+            ruleId: rule.id,
+            type: rule.type,
+            severity: rule.severity,
+            filePath,
+            relPath,
+            lineNumber: i + 1,
+            snippet: line.trim(),
+            message: rule.description
+          });
+        }
+      }
+    }
+  } catch {
+  }
+  return violations;
+}
+var EXCLUDED_ARTIFACT_PREFIXES = [
+  "templates/",
+  "node_modules/",
+  "dist/",
+  ".git/",
+  "reports/",
+  ".agent/",
+  ".agents/",
+  ".claude/",
+  ".cursor/",
+  ".github/",
+  "process/"
+];
+function isExcludedPrivacyMd(relPath) {
+  return EXCLUDED_ARTIFACT_PREFIXES.some((prefix) => relPath.startsWith(prefix));
+}
+function toStringArray2(val) {
+  if (Array.isArray(val)) return val.map((v) => String(v));
+  if (typeof val === "string" && val.trim().length > 0) return [val.trim()];
+  return [];
+}
+function parseDataAsset(fm, relPath) {
+  return {
+    id: String(fm.id || ""),
+    title: String(fm.title || ""),
+    classification: String(fm.classification || "internal"),
+    piiCategories: toStringArray2(fm["pii-categories"]),
+    dataSubjects: toStringArray2(fm["data-subjects"]),
+    retentionPeriod: String(fm["retention-period"] || ""),
+    erasureMethod: String(fm["erasure-method"] || ""),
+    filePath: relPath
+  };
+}
+function parseRopaRecord(fm, relPath) {
+  return {
+    id: String(fm.id || ""),
+    title: String(fm.title || ""),
+    lawfulBasis: String(fm["lawful-basis"] || ""),
+    processingPurpose: String(fm["processing-purpose"] || ""),
+    useCases: toStringArray2(fm["use-cases"]),
+    dataAssets: toStringArray2(fm["data-assets"]),
+    dataSubjects: toStringArray2(fm["data-subjects"]),
+    retentionTtl: String(fm["retention-ttl"] || ""),
+    crossBorderTransfer: Boolean(fm["cross-border-transfer"]),
+    subprocessors: toStringArray2(fm.subprocessors),
+    dpiaRequired: Boolean(fm["dpia-required"]),
+    dpiaReference: typeof fm["dpia-reference"] === "string" ? fm["dpia-reference"] : null,
+    mitigatedBy: toStringArray2(fm["mitigated-by"]),
+    filePath: relPath
+  };
+}
+function isDataAssetArtifact(type, id) {
+  return type === "data-asset" || id.startsWith("DATA-ASSET-");
+}
+function isRopaArtifact(type, id) {
+  return type === "privacy-ropa" || id.startsWith("PRIV-ROPA-");
+}
+function isPrivacyReqArtifact(type, id) {
+  return type === "privacy-requirement" || id.startsWith("PRIV-REQ-");
+}
+function isDpiaArtifact(type, id) {
+  return type === "dpia-request" || id.startsWith("DPIA-");
+}
+function classifyPrivacyMarkdown(fm, relPath, acc) {
+  const id = String(fm.id || "");
+  const type = String(fm.type || "");
+  if (isDataAssetArtifact(type, id)) {
+    acc.dataAssets.push(parseDataAsset(fm, relPath));
+  } else if (isRopaArtifact(type, id)) {
+    acc.ropaRecords.push(parseRopaRecord(fm, relPath));
+  } else if (isPrivacyReqArtifact(type, id)) {
+    acc.privacyReqs.push({ id, governsRopa: toStringArray2(fm["governs-ropa"]), filePath: relPath });
+  } else if (isDpiaArtifact(type, id)) {
+    acc.dpiaStatuses.set(id, String(fm.status || "draft"));
+  }
+}
+function discoverPrivacyArtifacts(rootDir) {
+  const acc = {
+    dataAssets: [],
+    ropaRecords: [],
+    privacyReqs: [],
+    dpiaStatuses: /* @__PURE__ */ new Map()
+  };
+  for (const file of walkMdFiles(rootDir)) {
+    const relPath = path4.relative(rootDir, file).replace(/\\/g, "/");
+    if (isExcludedPrivacyMd(relPath)) continue;
+    try {
+      const fm = extractFrontmatter(fs7.readFileSync(file, "utf-8"));
+      if (fm && fm.id) classifyPrivacyMarkdown(fm, relPath, acc);
+    } catch {
+    }
+  }
+  return acc;
+}
+var SENSITIVE_CLASSIFICATIONS = /* @__PURE__ */ new Set([
+  "confidential-pii",
+  "confidential_pii",
+  "special-category-sensitive",
+  "special_category_sensitive"
+]);
+function isSensitiveClassification(classification) {
+  return SENSITIVE_CLASSIFICATIONS.has(classification);
+}
+function createViolation(ruleId, type, severity, fullPath, relPath, message) {
+  return { ruleId, type, severity, filePath: fullPath, relPath, message };
+}
+function checkAssetRetention(asset, policy, fullPath) {
+  if (!policy.ci_gates.fail_on_missing_retention_policy) return null;
+  if (asset.retentionPeriod && asset.erasureMethod) return null;
+  return createViolation(
+    "PRIV-003-MISSING-RETENTION-POLICY",
+    "MISSING_RETENTION_POLICY",
+    "HIGH",
+    fullPath,
+    asset.filePath,
+    `Data asset '${asset.id}' (${asset.classification}) is missing a valid retention-period or erasure-method`
+  );
+}
+function checkAssetRopaRegistration(asset, ropaRecords, policy, fullPath) {
+  if (!policy.ci_gates.fail_on_unregistered_pii) return null;
+  if (ropaRecords.some((r) => r.dataAssets.includes(asset.id))) return null;
+  return createViolation(
+    "PRIV-005-UNREGISTERED-ROPA",
+    "UNREGISTERED_ROPA",
+    "HIGH",
+    fullPath,
+    asset.filePath,
+    `Personal data asset '${asset.id}' is not registered in any GDPR Art. 30 ROPA artifact (PRIV-ROPA-*)`
+  );
+}
+function auditDataAssetGovernance(asset, ropaRecords, policy, rootDir) {
+  if (!isSensitiveClassification(asset.classification)) return [];
+  const fullPath = path4.join(rootDir, asset.filePath);
+  const v1 = checkAssetRetention(asset, policy, fullPath);
+  const v2 = checkAssetRopaRegistration(asset, ropaRecords, policy, fullPath);
+  return [v1, v2].filter((v) => v !== null);
+}
+function checkRopaControlLink(ropa, governedRopaIds, fullPath) {
+  if (ropa.mitigatedBy.length > 0 || governedRopaIds.has(ropa.id)) return [];
+  return [
+    createViolation(
+      "PRIV-006-MISSING-PRIVACY-CONTROL",
+      "MISSING_PRIVACY_CONTROL",
+      "HIGH",
+      fullPath,
+      ropa.filePath,
+      `ROPA activity '${ropa.id}' lacks a governing technical privacy control (PRIV-REQ-*)`
+    )
+  ];
+}
+function checkRopaSubprocessors(ropa, policy, fullPath) {
+  if (!policy.ci_gates.fail_on_unapproved_subprocessor) return [];
+  const approved = new Set(policy.cross_border_transfers?.approved_subprocessors || []);
+  return ropa.subprocessors.filter((sub) => !approved.has(sub)).map(
+    (sub) => createViolation(
+      "PRIV-007-UNAPPROVED-SUBPROCESSOR",
+      "UNAPPROVED_SUBPROCESSOR",
+      "HIGH",
+      fullPath,
+      ropa.filePath,
+      `ROPA activity '${ropa.id}' references unapproved subprocessor '${sub}' not listed in privacy-policy.yaml`
+    )
+  );
+}
+function checkRopaControlsAndSubprocessors(ropa, governedRopaIds, policy, fullPath) {
+  return [
+    ...checkRopaControlLink(ropa, governedRopaIds, fullPath),
+    ...checkRopaSubprocessors(ropa, policy, fullPath)
+  ];
+}
+function ropaProcessesSpecialCategory(ropa, dataAssets) {
+  return ropa.dataAssets.some((id) => {
+    const found = dataAssets.find((a) => a.id === id);
+    return Boolean(found && found.classification.includes("special"));
+  });
+}
+function isDpiaMissingOrUnapproved(dpiaId, dpiaStatuses) {
+  if (!dpiaId) return true;
+  const status = dpiaStatuses.get(dpiaId);
+  return Boolean(status && status !== "approved");
+}
+function checkRopaDpiaApproval(ropa, dataAssets, dpiaStatuses, fullPath) {
+  const requiresDpia = ropa.dpiaRequired || ropaProcessesSpecialCategory(ropa, dataAssets);
+  if (!requiresDpia) return { violations: [], dpiaRequired: false };
+  if (!isDpiaMissingOrUnapproved(ropa.dpiaReference, dpiaStatuses)) {
+    return { violations: [], dpiaRequired: true };
+  }
+  return {
+    dpiaRequired: true,
+    violations: [
+      createViolation(
+        "PRIV-008-DPIA-APPROVAL-REQUIRED",
+        "DPIA_APPROVAL_REQUIRED",
+        "CRITICAL",
+        fullPath,
+        ropa.filePath,
+        `ROPA activity '${ropa.id}' processes special-category/high-risk data and requires an approved DPIA-* signed by the DPO`
+      )
+    ]
+  };
+}
+function collectSourceFilesForPrivacy(rootDir, targetDirs) {
+  const files = [];
+  for (const dir of targetDirs) {
+    const fullDir = path4.join(rootDir, dir);
+    if (fs7.existsSync(fullDir)) {
+      files.push(...walkSourceFiles(fullDir, rootDir));
+    }
+  }
+  return files;
+}
+function formatRopaTableRow(r) {
+  const ucs = r.useCases.join(", ") || "\u2014";
+  const assets = r.dataAssets.join(", ") || "\u2014";
+  const controls = r.mitigatedBy.join(", ") || "\u2014";
+  return `| \`${r.id}\` | ${r.title} | \`${r.lawfulBasis}\` | ${ucs} | ${assets} | \`${r.retentionTtl}\` | ${controls} |`;
+}
+function formatAssetTableRow(a) {
+  const cats = a.piiCategories.join(", ");
+  return `| \`${a.id}\` | ${a.title} | \`${a.classification}\` | ${cats} | \`${a.retentionPeriod}\` | \`${a.erasureMethod}\` |`;
+}
+function buildRopaSectionLines(ropaRecords) {
+  const rows = ropaRecords.map(formatRopaTableRow);
+  const emptyRopa = `| \u2014 | No processing activities registered | \u2014 | \u2014 | \u2014 | \u2014 | \u2014 |`;
+  return [
+    `## 1. Processing Activities Register (\`PRIV-ROPA-*\`)`,
+    ``,
+    `| ROPA ID | Processing Activity | Lawful Basis | Triggering Use Cases | Data Assets | Retention TTL | Privacy Controls |`,
+    `| :--- | :--- | :--- | :--- | :--- | :---: | :--- |`,
+    ...rows.length > 0 ? rows : [emptyRopa]
+  ];
+}
+function buildAssetSectionLines(dataAssets) {
+  const assetRows = dataAssets.map(formatAssetTableRow);
+  const emptyAsset = `| \u2014 | No personal data assets registered | \u2014 | \u2014 | \u2014 | \u2014 |`;
+  return [
+    `## 2. Personal Data Assets Inventory (\`DATA-ASSET-*\`)`,
+    ``,
+    `| Asset ID | Title | Classification | PII Categories | Retention | Erasure Method |`,
+    `| :--- | :--- | :--- | :--- | :---: | :--- |`,
+    ...assetRows.length > 0 ? assetRows : [emptyAsset]
+  ];
+}
+function generateRopaInventoryMarkdown(result, policy = DEFAULT_PRIVACY_POLICY) {
+  return [
+    `# \u{1F510} GDPR Art. 30 Record of Processing Activities (ROPA Inventory)`,
+    ``,
+    `> **Project:** ${policy.project}`,
+    `> **Regulatory Frameworks:** ${policy.regulatory_frameworks.join(", ")}`,
+    `> **Total Data Assets:** ${result.dataAssetsCount} | **Active ROPA Entries:** ${result.ropaRecordsCount} | **Privacy Controls:** ${result.privacyRequirementsCount}`,
+    ``,
+    ...buildRopaSectionLines(result.ropaRecords),
+    ``,
+    ...buildAssetSectionLines(result.dataAssets),
+    ``
+  ].join("\n");
+}
+function formatViolationRow(v) {
+  const loc = v.lineNumber ? `${v.relPath}:${v.lineNumber}` : v.relPath;
+  return `| **${v.severity}** | \`${v.ruleId}\` | \`${v.type}\` | \`${loc}\` | ${v.message} |`;
+}
+function buildReportFindingsSection(violations) {
+  if (violations.length === 0) {
+    return [
+      `## Compliance Summary`,
+      ``,
+      `Zero unmasked PII leaks in logs or AI prompts, zero hardcoded personal identifiers, and 100% of declared personal data assets comply with GDPR Art. 25 & Art. 30 governance.`
+    ];
+  }
+  return [
+    `## Detected Privacy & Data Protection Findings`,
+    ``,
+    `| Severity | Rule | Finding Type | Location | Details |`,
+    `| :---: | :--- | :--- | :--- | :--- |`,
+    ...violations.map(formatViolationRow)
+  ];
+}
+function generatePrivacyReportMarkdown(result, policy = DEFAULT_PRIVACY_POLICY) {
+  const verdict = result.success ? "\u2705 COMPLIANT (Privacy-by-Design as Code verified)" : `\u274C BLOCKED (${result.violationsCount} privacy violations detected)`;
+  return [
+    `# \u{1F6E1}\uFE0F Privacy-by-Design & Data Protection Audit (Gate 12)`,
+    ``,
+    `> **Verdict:** ${verdict}`,
+    `> **Regulatory Baseline:** ${policy.regulatory_frameworks.join(", ")}`,
+    `> **Audited Source Files:** ${result.totalFilesScanned} | **Data Assets:** ${result.dataAssetsCount} | **ROPA Records:** ${result.ropaRecordsCount} | **Privacy Reqs:** ${result.privacyRequirementsCount}`,
+    ``,
+    `---`,
+    ``,
+    ...buildReportFindingsSection(result.violations),
+    ``
+  ].join("\n");
+}
+function writePrivacyOutputsIfNeeded(result, options, policy, rootDir) {
+  if (options.generateRopa) {
+    const relRopa = options.ropaOutputPath || policy.ci_gates.output_ropa_file || "reports/ROPA_INVENTORY.md";
+    const fullRopa = path4.isAbsolute(relRopa) ? relRopa : path4.join(rootDir, relRopa);
+    fs7.mkdirSync(path4.dirname(fullRopa), { recursive: true });
+    fs7.writeFileSync(fullRopa, result.ropaMarkdown, "utf-8");
+    result.ropaOutputPath = fullRopa;
+  }
+  if (options.reportOutputPath) {
+    const fullReport = path4.isAbsolute(options.reportOutputPath) ? options.reportOutputPath : path4.join(rootDir, options.reportOutputPath);
+    fs7.mkdirSync(path4.dirname(fullReport), { recursive: true });
+    fs7.writeFileSync(fullReport, result.reportMarkdown, "utf-8");
+    result.reportOutputPath = fullReport;
+  }
+}
+function evaluateDiscoveredPrivacyGovernance(discovered, policy, rootDir) {
+  const governedRopaIds = new Set(discovered.privacyReqs.flatMap((r) => r.governsRopa));
+  const violations = [];
+  for (const asset of discovered.dataAssets) {
+    violations.push(...auditDataAssetGovernance(asset, discovered.ropaRecords, policy, rootDir));
+  }
+  let dpiaRequiredCount = 0;
+  for (const ropa of discovered.ropaRecords) {
+    const fullPath = path4.join(rootDir, ropa.filePath);
+    violations.push(...checkRopaControlsAndSubprocessors(ropa, governedRopaIds, policy, fullPath));
+    const dpiaCheck = checkRopaDpiaApproval(ropa, discovered.dataAssets, discovered.dpiaStatuses, fullPath);
+    if (dpiaCheck.dpiaRequired) dpiaRequiredCount++;
+    violations.push(...dpiaCheck.violations);
+  }
+  return { violations, dpiaRequiredCount };
+}
+function buildInitialPrivacyResult(totalFilesScanned, discovered, violations, dpiaRequiredCount) {
+  return {
+    success: violations.length === 0,
+    totalFilesScanned,
+    dataAssetsCount: discovered.dataAssets.length,
+    ropaRecordsCount: discovered.ropaRecords.length,
+    privacyRequirementsCount: discovered.privacyReqs.length,
+    violationsCount: violations.length,
+    dpiaRequiredCount,
+    dataAssets: discovered.dataAssets,
+    ropaRecords: discovered.ropaRecords,
+    violations,
+    ropaMarkdown: "",
+    reportMarkdown: ""
+  };
+}
+function verifyPrivacy(options = {}) {
+  const rootDir = options.rootDir || process.cwd();
+  const policy = loadPrivacyPolicy(rootDir, options.policyPath);
+  const sourceFiles = collectSourceFilesForPrivacy(rootDir, options.targetDirectories || ["src", "packages"]);
+  const codeViolations = sourceFiles.flatMap((file) => scanFileForPrivacyViolations(file, rootDir, policy));
+  const discovered = discoverPrivacyArtifacts(rootDir);
+  const gov = evaluateDiscoveredPrivacyGovernance(discovered, policy, rootDir);
+  const violations = [...codeViolations, ...gov.violations];
+  const result = buildInitialPrivacyResult(sourceFiles.length, discovered, violations, gov.dpiaRequiredCount);
+  result.ropaMarkdown = generateRopaInventoryMarkdown(result, policy);
+  result.reportMarkdown = generatePrivacyReportMarkdown(result, policy);
+  writePrivacyOutputsIfNeeded(result, options, policy, rootDir);
+  return result;
+}
 function calculateRating(mi, cc) {
   if (mi >= 75 && cc <= 5) return "A";
   if (mi >= 60 && cc <= 10) return "B";
@@ -8857,7 +9537,9 @@ var NON_GRAPH_TYPES = /* @__PURE__ */ new Set([
   "mcp-config",
   "user-manual",
   "production-manual",
-  "architecture-glossary"
+  "architecture-glossary",
+  "dpia-request",
+  "privacy-policy"
 ]);
 var PREFIX_MAP = {
   "ARCH-INTRO": { type: "architecture-introduction", layer: "product" },
@@ -8867,11 +9549,14 @@ var PREFIX_MAP = {
   "UC": { type: "use-case", layer: "product" },
   "BR": { type: "business-rule", layer: "product" },
   "ABUSE": { type: "abuse-case", layer: "product" },
+  "DATA-ASSET": { type: "data-asset", layer: "product" },
+  "PRIV-ROPA": { type: "privacy-ropa", layer: "product" },
   "HAZ": { type: "hazard", layer: "product" },
   "SEC-ENC": { type: "security-enclave", layer: "architecture" },
   "CMP": { type: "component", layer: "architecture" },
   "ADR": { type: "adr", layer: "architecture" },
-  "SEC-REQ": { type: "security-requirement", layer: "requirement" }
+  "SEC-REQ": { type: "security-requirement", layer: "requirement" },
+  "PRIV-REQ": { type: "privacy-requirement", layer: "requirement" }
 };
 var TYPE_LOOKUP = {
   "architecture-introduction": { type: "architecture-introduction", layer: "product" },
@@ -8883,15 +9568,18 @@ var TYPE_LOOKUP = {
   "business-rule": { type: "business-rule", layer: "product" },
   "rule": { type: "business-rule", layer: "product" },
   "abuse-case": { type: "abuse-case", layer: "product" },
+  "data-asset": { type: "data-asset", layer: "product" },
+  "privacy-ropa": { type: "privacy-ropa", layer: "product" },
   "hazard": { type: "hazard", layer: "product" },
   "security-enclave": { type: "security-enclave", layer: "architecture" },
   "component": { type: "component", layer: "architecture" },
   "architecture-decision-record": { type: "adr", layer: "architecture" },
   "adr": { type: "adr", layer: "architecture" },
-  "security-requirement": { type: "security-requirement", layer: "requirement" }
+  "security-requirement": { type: "security-requirement", layer: "requirement" },
+  "privacy-requirement": { type: "privacy-requirement", layer: "requirement" }
 };
 function classifyArtifactLayerAndType(id, declaredType) {
-  if (NON_GRAPH_TYPES.has(declaredType) || /^(TERM|HOF|AHOF|CHG|DSG|SPEC|TSK|UDF|AUDIT)-/.test(id)) {
+  if (NON_GRAPH_TYPES.has(declaredType) || /^(TERM|HOF|AHOF|CHG|DSG|SPEC|TSK|UDF|AUDIT|DPIA)-/.test(id)) {
     return null;
   }
   for (const [prefix, mapping] of Object.entries(PREFIX_MAP)) {
@@ -8935,7 +9623,7 @@ function parseAndCatalogArtifactFile(rootDir, filePath, scannedMap, archViewByBa
 function scanWorkspaceArtifacts(rootDir) {
   const scannedArtifactsMap = /* @__PURE__ */ new Map();
   const archViewByBasename = /* @__PURE__ */ new Map();
-  const artifactDirs = ["product", "architecture", "specs", "security"];
+  const artifactDirs = ["product", "architecture", "specs", "security", "privacy"];
   for (const dirName of artifactDirs) {
     const fullDirPath = path4.join(rootDir, dirName);
     if (fs7.existsSync(fullDirPath)) {
@@ -8952,6 +9640,8 @@ function resolveUpstreamType(u) {
   if (u.startsWith("UC-")) return "use-case";
   if (u.startsWith("BR-")) return "business-rule";
   if (u.startsWith("ABUSE-")) return "abuse-case";
+  if (u.startsWith("DATA-ASSET-")) return "data-asset";
+  if (u.startsWith("PRIV-ROPA-")) return "privacy-ropa";
   return "product";
 }
 function addTraceUpstreamEdges(r, status, nodeMap, addEdge) {
@@ -9030,7 +9720,7 @@ function addTraceTestEdges(r, status, rootDir, nodeMap, addEdge) {
   }
 }
 function buildReqNode(r, status) {
-  const reqType = r.id.startsWith("SEC-REQ-") ? "security-requirement" : "requirement";
+  const reqType = r.id.startsWith("SEC-REQ-") ? "security-requirement" : r.id.startsWith("PRIV-REQ-") ? "privacy-requirement" : "requirement";
   return {
     id: r.id,
     label: r.id,
@@ -9104,7 +9794,7 @@ function connectIntroRelationships(art, nodeMap, addEdge) {
   for (const qrId of list) {
     if (typeof qrId === "string" && qrId.trim()) {
       const q = qrId.trim();
-      const qType = q.startsWith("SEC-REQ-") ? "security-requirement" : "requirement";
+      const qType = q.startsWith("SEC-REQ-") ? "security-requirement" : q.startsWith("PRIV-REQ-") ? "privacy-requirement" : "requirement";
       connectTargets(art.id, [q], "defines-goal", nodeMap, addEdge, qType, "requirement");
     }
   }
@@ -9183,6 +9873,28 @@ function connectAbuseCaseRelationships(art, nodeMap, addEdge) {
   connectAbuseTargets(fm["targets-use-case"] || fm["targets-use-cases"] || fm["targets"], art.id, nodeMap, addEdge);
   connectAbuseMitigations(fm["mitigated-by"], art.id, nodeMap, addEdge);
 }
+function connectDataAssetRelationships(art, nodeMap, addEdge) {
+  const fm = art.frontmatter;
+  for (const subj of toList(fm["data-subjects"])) {
+    connectTargets(subj.trim(), [art.id], "owns-data", nodeMap, addEdge, "actor", "product");
+  }
+  const owner = typeof fm["owner-bounded-context"] === "string" ? fm["owner-bounded-context"].trim() : "";
+  if (owner && owner.startsWith("CMP-")) {
+    connectTargets(art.id, [owner], "satisfies", nodeMap, addEdge, "component", "architecture");
+  }
+}
+function connectPrivacyRopaRelationships(art, nodeMap, addEdge) {
+  const fm = art.frontmatter;
+  for (const uc of toList(fm["use-cases"])) {
+    connectTargets(uc.trim(), [art.id], "derives-from", nodeMap, addEdge, "use-case", "product");
+  }
+  for (const asset of toList(fm["data-assets"])) {
+    connectTargets(asset.trim(), [art.id], "governs", nodeMap, addEdge, "data-asset", "product");
+  }
+  for (const req of toList(fm["mitigated-by"])) {
+    connectTargets(art.id, [req.trim()], "mitigated-by", nodeMap, addEdge, "privacy-requirement", "requirement");
+  }
+}
 function connectRequirementMitigations(art, nodeMap, addEdge) {
   for (const ab of toList(art.frontmatter["mitigates-abuse-case"])) {
     const id = ab.trim();
@@ -9190,6 +9902,18 @@ function connectRequirementMitigations(art, nodeMap, addEdge) {
       connectTargets(id, [art.id], "mitigated-by", nodeMap, addEdge, "abuse-case", "product");
     }
   }
+  for (const ropa of toList(art.frontmatter["governs-ropa"])) {
+    const id = ropa.trim();
+    if (id) {
+      connectTargets(id, [art.id], "mitigated-by", nodeMap, addEdge, "privacy-ropa", "product");
+    }
+  }
+  for (const asset of toList(art.frontmatter["protects-data-assets"])) {
+    const id = asset.trim();
+    if (id) {
+      connectTargets(id, [art.id], "governs", nodeMap, addEdge, "data-asset", "product");
+    }
+  }
 }
 function connectAdrRelationships(art, nodeMap, addEdge) {
   for (const cmp of toList(art.frontmatter["affects-components"])) {
@@ -9213,8 +9937,11 @@ var CONNECTOR_MAP = {
   "use-case": connectUseCaseRelationships,
   "business-rule": (art, _map, addEdge) => connectBusinessRuleRelationships(art, addEdge),
   "abuse-case": connectAbuseCaseRelationships,
+  "data-asset": connectDataAssetRelationships,
+  "privacy-ropa": connectPrivacyRopaRelationships,
   "requirement": connectRequirementMitigations,
   "security-requirement": connectRequirementMitigations,
+  "privacy-requirement": connectRequirementMitigations,
   "adr": connectAdrRelationships,
   "security-enclave": connectEnclaveRelationships
 };
@@ -9834,6 +10561,28 @@ var DASHBOARD_CLIENT_SCRIPT = `
               'height': 46
             }
           },
+          {
+            selector: 'node.type-data-asset',
+            style: {
+              'shape': 'barrel',
+              'background-color': '#134e4a',
+              'border-color': '#5eead4',
+              'border-width': 2.5,
+              'width': 68,
+              'height': 42
+            }
+          },
+          {
+            selector: 'node.type-privacy-ropa',
+            style: {
+              'shape': 'round-rectangle',
+              'background-color': '#1e3a8a',
+              'border-color': '#60a5fa',
+              'border-width': 2.5,
+              'width': 72,
+              'height': 40
+            }
+          },
           {
             selector: 'node.type-security-enclave',
             style: {
@@ -9846,7 +10595,7 @@ var DASHBOARD_CLIENT_SCRIPT = `
             }
           },
           {
-            selector: 'node.type-requirement, node.type-security-requirement',
+            selector: 'node.type-requirement, node.type-security-requirement, node.type-privacy-requirement',
             style: {
               'shape': 'round-rectangle',
               'background-color': '#1e293b',
@@ -9879,7 +10628,7 @@ var DASHBOARD_CLIENT_SCRIPT = `
             }
           },
           {
-            selector: 'node.layer-product:not(.type-architecture-introduction):not(.type-journey):not(.type-actor):not(.type-use-case):not(.type-usecase):not(.type-business-rule):not(.type-rule):not(.type-abuse-case):not(.type-threat-actor)',
+            selector: 'node.layer-product:not(.type-architecture-introduction):not(.type-journey):not(.type-actor):not(.type-use-case):not(.type-usecase):not(.type-business-rule):not(.type-rule):not(.type-abuse-case):not(.type-threat-actor):not(.type-data-asset):not(.type-privacy-ropa)',
             style: { 'shape': 'diamond', 'background-color': '#0e7490', 'border-color': '#38bdf8', 'width': 50, 'height': 50 }
           },
           {
@@ -10077,7 +10826,15 @@ var DASHBOARD_CLIENT_SCRIPT = `
           typeBadgeColor = '#881337';
           typeTitle = 'ABUSE CASE (ABUSE)';
           typologyKey = 'abuse-case';
-        } else if (typeName === 'requirement' || typeName === 'security-requirement') {
+        } else if (typeName === 'data-asset') {
+          typeBadgeColor = '#134e4a';
+          typeTitle = 'DATA ASSET (DATA-ASSET)';
+          typologyKey = 'data-asset';
+        } else if (typeName === 'privacy-ropa') {
+          typeBadgeColor = '#1e3a8a';
+          typeTitle = 'PRIVACY ROPA (PRIV-ROPA)';
+          typologyKey = 'privacy-ropa';
+        } else if (typeName === 'requirement' || typeName === 'security-requirement' || typeName === 'privacy-requirement') {
           typeBadgeColor = '#1e293b';
           typeTitle = 'REQUIREMENT (' + (data.id.split('-')[0] || 'REQ') + ')';
           typologyKey = 'requirement';
@@ -10131,7 +10888,9 @@ var DASHBOARD_CLIENT_SCRIPT = `
       'use-case': '.type-use-case, .type-usecase',
       'business-rule': '.type-business-rule, .type-rule',
       'abuse-case': '.type-abuse-case, .type-threat-actor',
-      'requirement': '.type-requirement, .type-security-requirement, .layer-requirement',
+      'data-asset': '.type-data-asset',
+      'privacy-ropa': '.type-privacy-ropa',
+      'requirement': '.type-requirement, .type-security-requirement, .type-privacy-requirement, .layer-requirement',
       'architecture': '.type-component, .type-adr, .type-security-enclave, .layer-architecture',
       'test': '.type-bdd-feature, .type-code-test, .layer-test'
     };
@@ -10541,7 +11300,9 @@ var GRAPH_LEGEND_HTML = `
             <div class="legend-item" data-type="use-case" onclick="handleTypologyClick(event, 'use-case')" title="Filter Use Case"><span class="legend-dot" style="background:#0369a1; border:2px solid #38bdf8;"></span><strong>Use Case</strong> (UC)</div>
             <div class="legend-item" data-type="business-rule" onclick="handleTypologyClick(event, 'business-rule')" title="Filter Business Rule"><span class="legend-dot" style="background:#b45309; border:2px solid #fbbf24; transform:rotate(45deg);"></span><strong>Business Rule</strong> (BR)</div>
             <div class="legend-item" data-type="abuse-case" onclick="handleTypologyClick(event, 'abuse-case')" title="Filter Abuse Case"><span class="legend-dot" style="background:#881337; border:2px solid #f43f5e;"></span><strong>Abuse Case</strong> (ABUSE)</div>
-            <div class="legend-item" data-type="requirement" onclick="handleTypologyClick(event, 'requirement')" title="Filter Requirement"><span class="legend-dot" style="background:#1e293b; border:2px solid #64748b;"></span><strong>Requirement</strong> (FR/QR/SEC)</div>
+            <div class="legend-item" data-type="data-asset" onclick="handleTypologyClick(event, 'data-asset')" title="Filter Data Asset"><span class="legend-dot" style="background:#134e4a; border:2px solid #5eead4;"></span><strong>Data Asset</strong> (DATA-ASSET)</div>
+            <div class="legend-item" data-type="privacy-ropa" onclick="handleTypologyClick(event, 'privacy-ropa')" title="Filter Privacy ROPA"><span class="legend-dot" style="background:#1e3a8a; border:2px solid #60a5fa;"></span><strong>Privacy ROPA</strong> (PRIV-ROPA)</div>
+            <div class="legend-item" data-type="requirement" onclick="handleTypologyClick(event, 'requirement')" title="Filter Requirement"><span class="legend-dot" style="background:#1e293b; border:2px solid #64748b;"></span><strong>Requirement</strong> (FR/QR/SEC/PRIV)</div>
             <div class="legend-item" data-type="architecture" onclick="handleTypologyClick(event, 'architecture')" title="Filter Architecture"><span class="legend-dot" style="background:#312e81; border:2px solid #818cf8;"></span><strong>Architecture</strong> (CMP/ADR)</div>
             <div class="legend-item" data-type="test" onclick="handleTypologyClick(event, 'test')" title="Filter Test"><span class="legend-dot" style="background:#047857; border:2px solid #10b981;"></span><strong>Test</strong> (BDD/Test)</div>
           </div>
@@ -10582,7 +11343,7 @@ function renderGraphToolbarHtml() {
     `        <div class="graph-toolbar">`,
     `          <div class="tool-row"><button class="tool-btn" onclick="cyZoom(0.2)">Zoom +</button><button class="tool-btn" onclick="cyZoom(-0.2)">Zoom -</button><button class="tool-btn" onclick="cy.fit(30)">Center</button><button class="tool-btn" onclick="resetHighlight()">Reset</button></div>`,
     `          <div class="tool-row"><select id="layout-select" class="tool-select" onchange="applyLayout(this.value)"><option value="breadthfirst">Hierarchical (Layers)</option><option value="cose">Force-directed (COSE)</option><option value="concentric">Concentric</option><option value="circle">Circular</option></select></div>`,
-    `          <div class="tool-row"><select id="type-filter" class="tool-select" onchange="filterType(this.value)"><option value="all">All Typologies</option><option value="architecture-introduction">Vision &amp; Goals (ARCH-INTRO)</option><option value="journey">Journeys (JRN)</option><option value="actor">Actors (ACT)</option><option value="use-case">Use Cases (UC)</option><option value="business-rule">Business Rules (BR)</option><option value="abuse-case">Abuse Cases (ABUSE)</option><option value="requirement">Requirements (FR/QR/SEC)</option><option value="architecture">Architecture (CMP/ADR)</option><option value="test">Testing (BDD/Test)</option></select></div>`,
+    `          <div class="tool-row"><select id="type-filter" class="tool-select" onchange="filterType(this.value)"><option value="all">All Typologies</option><option value="architecture-introduction">Vision &amp; Goals (ARCH-INTRO)</option><option value="journey">Journeys (JRN)</option><option value="actor">Actors (ACT)</option><option value="use-case">Use Cases (UC)</option><option value="business-rule">Business Rules (BR)</option><option value="abuse-case">Abuse Cases (ABUSE)</option><option value="data-asset">Data Assets (DATA-ASSET)</option><option value="privacy-ropa">Privacy ROPA (PRIV-ROPA)</option><option value="requirement">Requirements (FR/QR/SEC/PRIV)</option><option value="architecture">Architecture (CMP/ADR)</option><option value="test">Testing (BDD/Test)</option></select></div>`,
     `          <div class="tool-row"><select id="layer-filter" class="tool-select" onchange="filterLayer(this.value)"><option value="all">All Layers</option><option value="product">Layer 1: Product (Upstream)</option><option value="requirement">Layer 2: Requirements</option><option value="architecture">Layer 3: Architecture (Midstream)</option><option value="test">Layer 4: Testing (Downstream)</option></select></div>`,
     `          <div class="tool-row"><select id="status-filter" class="tool-select" onchange="filterStatus(this.value)"><option value="all">All Statuses</option><option value="COMPLIANT">Only Compliant (Green)</option><option value="issues">Only Orphans / Drift (Red)</option></select></div>`,
     `          <div class="tool-row"><input type="text" id="node-search" class="tool-input" placeholder="Search node ID..." oninput="searchNode(this.value)"></div>`,
@@ -11359,7 +12120,32 @@ var SPECIALIZED_AGENT_TEMPLATES = [
 - In the **Technical Security Feedback Loop** (arriving from \`agent-system-architect\`), analyze infrastructure, persistence, middleware, and API decisions to issue system/software-level \`ACT-THREAT-*\` and \`SEC-REQ-*\`.
 - Every \`SEC-REQ-*\` must include negative BDD attack and rejection scenarios tagged \`@security @mitigation\`.
 - Run \`pnpm run verify:schemas\` before delivering the draft.
-- If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) suggesting \`agent-system-architect\` (or \`agent-qa-engineer\` once technical modeling is complete) and opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
+- If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) suggesting \`agent-privacy-officer\` (to model LINDDUN privacy threats, \`DATA-ASSET-*\`, \`PRIV-ROPA-*\`, and \`PRIV-REQ-*\` before \`agent-system-architect\` or \`agent-qa-engineer\`) and opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
+  },
+  {
+    id: "agent-privacy-officer",
+    title: "Data Protection & Privacy-by-Design Specialist",
+    description: "Model personal data assets (DATA-ASSET-*), GDPR Art. 30 records of processing (PRIV-ROPA-*), and LINDDUN/ISO 27701 privacy requirements (PRIV-REQ-*) on handoff from cybersecurity, and audit code diffs against privacy-policy.yaml.",
+    globs: "privacy/**, specs/privacy/**, privacy-policy.yaml, templates/privacy/**, schemas/privacy/**",
+    body: `## Role & Mission
+- **Role**: Data Protection & Privacy-by-Design Specialist Agent (\`agent-privacy-officer\`).
+- **Mission**: Receive the handoff from \`agent-threat-modeler\` to model personal data assets (\`DATA-ASSET-*\`), GDPR Art. 30 records of processing (\`PRIV-ROPA-*\`), and LINDDUN / GDPR Art. 25 / ISO 27701 privacy requirements (\`PRIV-REQ-*\`), and audit code changes in Pre-Merge against \`privacy-policy.yaml\`.
+
+## Operational Directives & Guardrails
+- Operate under bimodal discipline depending on the lifecycle phase:
+  1. **Shift-Left Design Mode (Post-Cybersecurity Handoff)**:
+     - Inspect \`UC-*\`, \`FR-*\`, \`ABUSE-*\`, and \`SEC-REQ-*\` (and \`CMP-*\` during the technical security/privacy feedback loop from \`agent-system-architect\`).
+     - Apply **LINDDUN** (Linkability, Identifiability, Non-repudiation, Detectability, Disclosure of information, Unawareness, Non-compliance) and **GDPR / LOPDGDD / ISO 27701** to generate the PDaC privacy triad in \`specs/privacy/\` conforming to \`schemas/privacy/\`:
+       - \`DATA-ASSET-*\` (\`type: data-asset\`): personal data inventory classifying fields (\`PUBLIC\`, \`INTERNAL\`, \`CONFIDENTIAL_PII\`, \`RESTRICTED_SENSITIVE_PII\`), retention (\`retention-period\`), and erasure strategy (\`CRYPTO_SHREDDING\`, \`HARD_DELETE\`, \`ANONYMIZATION\`, \`RETENTION_LOCK\`).
+       - \`PRIV-ROPA-*\` (\`type: privacy-ropa\`): GDPR Art. 30 Record of Processing Activity linking \`processes-use-cases\` (\`UC-*\`), \`data-assets\` (\`DATA-ASSET-*\`), \`lawful-basis\` (Art. 6), \`special-category-basis\` (Art. 9), and \`cross-border-transfer\`.
+       - \`PRIV-REQ-*\` (\`type: privacy-requirement\`): technical and organizational privacy requirements (minimization, pseudonymization, masking in logs/LLM prompts, ARCO+/GDPR Art. 15\u201322 rights, retention/erasure) with Gherkin scenarios tagged \`@<PRIV-REQ-ID> @privacy @gdpr @automated @regression\`.
+     - \`status\` ALWAYS starts as \`draft\`.
+     - **DPIA Escalation Gate**: If \`RESTRICTED_SENSITIVE_PII\` (GDPR Art. 9 special categories), biometric/health data, systematic profiling, or unapproved cross-border transfers are detected, generate a \`DPIA-*\` request (\`templates/privacy/dpia-request.template.md\`), set \`dpia-required: true\`, and block autonomous progression until the human DPO / Legal Counsel approves.
+  2. **Pre-Merge Privacy Audit Mode (Downstream / PR Gate)**:
+     - Execute deterministic verification via \`pnpm run verify:privacy\` (\`npx aisdlc verify privacy\`) and inspect PR diffs for PII leaks in logs/telemetry (\`PRIV-001\`), unmasked PII in external LLM prompts (\`PRIV-002\`), missing retention/erasure on PII assets (\`PRIV-003\`), hardcoded real PII in tests/seeds (\`PRIV-004\`), unregistered ROPA (\`PRIV-005\`), or unapproved subprocessors (\`PRIV-007\`).
+     - Block any PR with \`CRITICAL\` or \`HIGH\` privacy violations (exit code \`5\`).
+- Run \`pnpm run verify:schemas\` and \`pnpm run verify:privacy\` before delivering artifacts or audit verdicts.
+- If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) suggesting \`agent-system-architect\` (or \`agent-qa-engineer\` after technical loop, or the human Tech Lead / DPO in Pre-Merge) and opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
   },
   {
     id: "agent-system-architect",
@@ -11371,22 +12157,22 @@ var SPECIALIZED_AGENT_TEMPLATES = [
 - **Mission**: Translate approved product definition into a modular technical architecture based on arc42 enriched with NAF v4.
 
 ## Operational Directives & Guardrails
-- Decompose the system into building blocks \`CMP-*\` ensuring each component declares which use cases \`UC-*\` it implements and which requirements (\`FR-*\`, \`QR-*\`, \`SEC-REQ-*\`) it fulfills under \`satisfies-requirements\`.
+- Decompose the system into building blocks \`CMP-*\` ensuring each component declares which use cases \`UC-*\` it implements and which requirements (\`FR-*\`, \`QR-*\`, \`SEC-REQ-*\`, \`PRIV-REQ-*\`) it fulfills under \`satisfies-requirements\`.
 - **Contract-First Full-Stack Integration**: Whenever a feature or change spans Frontend (UI) and Backend (API/services), define an explicit shared typed contract (Zod schemas, shared TypeScript DTOs, or OpenAPI specification) in \`design.md\` before implementation so both layers compile against a single source of truth.
 - Generate interaction and sequence diagrams in native Mermaid syntax.
 - Document critical technological decisions using immutable \`ADR-*\` records conforming to \`schemas/architecture/adr.schema.json\`.
-- Validate that architectural choices comply with legal constraints in \`license-policy.yaml\`.
-- **Technical Security Feedback Loop**: If architectural decisions (databases, queues, distributed caching, third-party APIs, authentication schemes) introduce new attack vectors, emit a return handoff to \`agent-threat-modeler\` for technical modeling prior to the testing phase.
-- If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) suggesting \`agent-qa-engineer\` (or \`agent-threat-modeler\` if technical security loop is required) and opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
+- Validate that architectural choices comply with legal constraints in \`license-policy.yaml\` and data protection constraints in \`privacy-policy.yaml\`.
+- **Technical Security & Privacy Feedback Loop**: If architectural decisions (databases, queues, distributed caching, third-party APIs, LLM providers, authentication schemes) introduce new attack vectors or PII data flows, emit a return handoff to \`agent-threat-modeler\` (which chains to \`agent-privacy-officer\`) for technical modeling prior to the testing phase.
+- If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) suggesting \`agent-qa-engineer\` (or \`agent-threat-modeler\` if technical security/privacy loop is required) and opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
   },
   {
     id: "agent-qa-engineer",
     title: "QA Engineer and SDET",
-    description: "Translate approved requirements (FR-*, SEC-REQ-*, QR-*) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites before production code is written.",
+    description: "Translate approved requirements (FR-*, SEC-REQ-*, PRIV-REQ-*, QR-*) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites before production code is written.",
     globs: "tests/**, specs/changes/**/spec.md",
     body: `## Role & Mission
 - **Role**: QA Engineer and SDET (Software Development Engineer in Test) Agent (\`agent-qa-engineer\`).
-- **Mission**: Translate approved requirements (\`FR-*\`, \`SEC-REQ-*\`, \`QR-*\`) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites before \`agent-developer\` writes a single line of production code.
+- **Mission**: Translate approved requirements (\`FR-*\`, \`SEC-REQ-*\`, \`PRIV-REQ-*\`, \`QR-*\`) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites before \`agent-developer\` writes a single line of production code.
 
 ## Operational Directives & Guardrails
 - Read exclusively requirements cited in the \`handoff.yaml\` sidecar (\`HOF-*\`) and their referenced artifacts.
@@ -11401,7 +12187,7 @@ var SPECIALIZED_AGENT_TEMPLATES = [
   2. **Boundary Cases** (\`@boundary\` \`Scenario Outline\` + \`Examples\` table): values at the extremes of the accepted range.
   3. **Out-of-Range / Invalid Cases** (\`@invalid\` \`Scenario Outline\` + \`Examples\` table): null, empty, wrong types, values exceeding bounds.
 - **Use Case Variant Coverage**: Inspect every \`UC-*\` in \`handoff.yaml\` and generate BDD scenarios covering 100% of its \`alternative-flows\` and \`exception-flows\`.
-- Apply conditional categories when applicable: Security (\`@security @mitigation\`), Performance (\`@performance\`), Idempotency (\`@idempotence\`), Postconditions, and Interface Contracts.
+- Apply conditional categories when applicable: Security (\`@security @mitigation\`), Privacy (\`@privacy @gdpr\`), Performance (\`@performance\`), Idempotency (\`@idempotence\`), Postconditions, and Interface Contracts.
 - **Zero-Mock Integration Rule**: When an \`FR-*\` spans UI and Backend, unit tests mocking \`fetch\`/HTTP in isolation are insufficient; include integration/contract or E2E test scenarios verifying real request/response wiring and UI state transitions (\`Loading\`, \`Empty\`, \`Error\`, \`Nominal\`).
 - Tag all scenarios with \`@<FR-ID> @automated @regression\`.
 - **STRICTLY FORBIDDEN**: Including production code, suggesting implementation, or anticipating technical solutions.
@@ -11430,16 +12216,16 @@ Execute every implementation task following this strict sequential order:
 
 ## Operational Directives & Guardrails
 - Respect the autonomy mode assigned to each task in \`tasks.md\` (\`AUTONOMOUS\`, \`HUMAN_REVIEW_PLAN\`, \`AMBIGUOUS\`, \`HIGH_RISK_MANUAL\`).
-- **100% Design & Handoff Scope Coverage in Tasks**: Ensure every task in \`tasks.md\` declares \`implements-components\` (\`CMP-*\`), \`satisfies-requirements\` (\`FR-*\`, \`SEC-REQ-*\`), and \`implements-contracts\` so 100% of \`design.md\` and \`handoff.yaml\` is mapped and implemented.
+- **100% Design & Handoff Scope Coverage in Tasks**: Ensure every task in \`tasks.md\` declares \`implements-components\` (\`CMP-*\`), \`satisfies-requirements\` (\`FR-*\`, \`SEC-REQ-*\`, \`PRIV-REQ-*\`), and \`implements-contracts\` so 100% of \`design.md\` and \`handoff.yaml\` is mapped and implemented.
 - Apply Test-Driven Development (TDD): make failing tests delivered by \`agent-qa-engineer\` pass green without altering tests to accommodate buggy code, and write direct unit tests in \`tests/unit/\` for every exported function and contract method declared in \`design.md\` or implemented in \`src/\`.
-- Cite implemented \`FR-*\` or \`SEC-REQ-*\` IDs in test header comments to maintain 360\xB0 reverse traceability.
+- Cite implemented \`FR-*\`, \`SEC-REQ-*\`, or \`PRIV-REQ-*\` IDs in test header comments to maintain 360\xB0 reverse traceability.
 - **Zero Fake-Wiring Guardrail**: Strictly forbidden from marking a task \`COMPLETED\` with hardcoded \`mockData\` arrays in production views, \`setTimeout\` simulating network calls, or empty UI event handlers (\`onClick={() => {}}\`, \`onSubmit={() => {}}\`). Frontend components must wire directly to the shared contract and real Backend endpoints.
 - **Mandatory 4 UI States Matrix**: Every data-driven UI component or screen must explicitly implement all 4 usability states: \`Loading\` (spinner/skeleton + disabled submit), \`Empty\` (clear message + CTA), \`Error\` (visible error recovery banner, never silent failure), and \`Nominal/Success\` (accessible semantic DOM + keyboard navigation).
 - **Live Runtime Smoke Verification**: For tasks touching UI or UI-to-Backend integration, unit tests alone are insufficient. Before emitting handoff, boot the real Backend and Frontend servers and verify (via Playwright E2E or Chrome DevTools MCP) that browser \`console.error\` and \`pageerror\` counts are \`0\` and API calls return real \`2xx\` responses without CORS or schema mismatches.
 - Before adding any external dependency, verify its SPDX license is permitted in \`license-policy.yaml\`.
 - Respect non-negotiable \`quality-policy.yaml\` thresholds: Cyclomatic Complexity $\\le 10$, Cognitive Complexity $\\le 15$, Maintainability Index $\\ge 50$, Function Length $\\le 40$ lines.
 - Run unified pre-flight with auto-fix (\`pnpm run check:fix\`) and full verification (\`pnpm run verify:all\`).
-- Upon completing green implementation, suggest handoff to \`agent-expert-user\` for Post-Development Functional Validation prior to security audit.`
+- Upon completing green implementation, suggest handoff to \`agent-expert-user\` for Post-Development Functional Validation prior to security and privacy audit.`
   },
   {
     id: "agent-security-auditor",
@@ -11486,7 +12272,7 @@ Execute every implementation task following this strict sequential order:
   1. **Design Mode (Upstream)**: Adopt the primary actor persona under real-world field conditions (stress, latency, constrained viewports). Separate strict Minimum Viable Product (MVP) core from future roadmap ideas using \`templates/product/user-design-feedback.template.md\`.
   2. **Functional Validation Mode (Downstream / Pre-PR / Post-Development Functional Validation)**: Inspect \`agent-developer\` deliverables once unit tests pass green by executing the real application (via Playwright or Chrome DevTools MCP when UI is present). Contrast actual UI, CLI, and API behavior against approved \`UC-*\` and \`FR-*\` criteria, verifying real Backend connectivity, the 4 UI usability states (\`Loading\`, \`Empty\`, \`Error\`, \`Nominal\`), keyboard/ARIA accessibility, and \`0\` browser \`console.error\` / network failures.
 - Formulate decisive questions under \`open-questions\` for the human Product Owner.
-- Emit handoff block suggesting the Pre-Merge Audit Triad (\`agent-code-reviewer\`, \`agent-security-auditor\`, \`agent-compliance-checker\`) if compliant, or return to \`agent-developer\` on functional drift or fake-wiring.`
+- Emit handoff block suggesting the Pre-Merge Audit Triad (\`agent-code-reviewer\`, \`agent-security-auditor\`, \`agent-privacy-officer\`, \`agent-compliance-checker\`) if compliant, or return to \`agent-developer\` on functional drift or fake-wiring.`
   },
   {
     id: "agent-code-reviewer",
@@ -11502,7 +12288,7 @@ Execute every implementation task following this strict sequential order:
 - Detect improper coupling, code smells, magic numbers, ambiguous identifiers, and encapsulation breaches.
 - Flag premature abstractions and speculative code violating YAGNI.
 - **Block Fake-Wiring & Disconnected UI**: Flag as \`[BLOCKING]\` any production UI component containing hardcoded mock data (\`mockData\`), empty event handlers (\`onClick={() => {}}\`), missing error/loading state handling, or API calls bypassing shared contracts.
-- Coordinate Pre-Merge Audit Triad with \`agent-security-auditor\` and \`agent-compliance-checker\`.
+- Coordinate Pre-Merge Audit Triad with \`agent-security-auditor\`, \`agent-privacy-officer\`, and \`agent-compliance-checker\`.
 - Categorize findings into: \`[BLOCKING]\` (quality violation or broken pattern), \`[CLEAN_CODE_SUGGESTION]\` (non-blocking improvement), and \`[COMPLIANT]\`.
 - If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) to the human Tech Lead for final approval and merge, opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
   },
@@ -11582,16 +12368,16 @@ var LIFECYCLE_SKILL_TEMPLATES = [
     id: "aisdlc-greenfield",
     title: "Greenfield Project Inception & Delivery Playbook",
     description: "Orchestrate end-to-end AI-SDLC onboarding and Phase 0 Inception for brand-new (Greenfield) projects, from repository initialization (aisdlc init) and NAF v4 Vision (ARCH-INTRO-*) through ProductShape, STRIDE Threat Modeling, arc42 Architecture, and initial SDD increment delivery.",
-    references: "[`process/02_product_definition.md`](../../process/02_product_definition.md), [`process/05_architecture_arc42_nafv4.md`](../../process/05_architecture_arc42_nafv4.md), [`process/06_spec_driven_development.md`](../../process/06_spec_driven_development.md), and [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md).",
+    references: "[`process/02_product_definition.md`](../../process/02_product_definition.md), [`process/04b_data_protection_and_privacy.md`](../../process/04b_data_protection_and_privacy.md), [`process/05_architecture_arc42_nafv4.md`](../../process/05_architecture_arc42_nafv4.md), [`process/06_spec_driven_development.md`](../../process/06_spec_driven_development.md), and [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md).",
     body: `## Purpose & Trigger
-Use this skill when starting a **brand-new software project from scratch (Greenfield)** or when \`specs/product/\` has no canonical baseline yet. It coordinates the sequential execution of AI-SDLC MCP/CLI tools and specialized role agents so no code is written before product vision, security enclaves, and architecture contracts exist.
+Use this skill when starting a **brand-new software project from scratch (Greenfield)** or when \`specs/product/\` has no canonical baseline yet. It coordinates the sequential execution of AI-SDLC MCP/CLI tools and specialized role agents so no code is written before product vision, security enclaves, privacy-by-design controls, and architecture contracts exist.
 
 ## End-to-End Execution Playbook
 
 ### Step 1: Repository Turnkey Initialization
 1. If the workspace has not been initialized with AI-SDLC schemas, policies, and templates, run MCP tool \`new\` (or CLI \`npx @aisdlc/cli init\`).
 2. Install the Git telemetry hook via \`npx aisdlc git hook install\` (\`pnpm run git:hook:install\`).
-3. Verify \`quality-policy.yaml\` and \`license-policy.yaml\` are present in the repository root.
+3. Verify \`quality-policy.yaml\`, \`license-policy.yaml\`, and \`privacy-policy.yaml\` are present in the repository root.
 
 ### Step 2: Phase 0 Product Inception (\`agent-product-analyst\`)
 1. Delegate to or adopt [\`agent-product-analyst\`](../agent-product-analyst/SKILL.md).
@@ -11606,19 +12392,21 @@ Use this skill when starting a **brand-new software project from scratch (Greenf
 5. Validate schemas and duplicates via MCP tools \`verify_schemas\` and \`verify_duplicates\` (or \`npx aisdlc check --fix\`).
 6. **Mandatory Upstream UX & MVP Boundary Gate (\`agent-expert-user\`)**: Invoke [\`agent-expert-user\`](../agent-expert-user/SKILL.md) in **Design Mode** to stress-test the proposed workflows, enforce strict MVP boundaries, and separate core MVP \`UC-*\` from future roadmap backlog (\`templates/product/user-design-feedback.template.md\`).
 
-### Step 3: Shift-Left Cybersecurity & Threat Modeling (\`agent-threat-modeler\`)
+### Step 3: Shift-Left Cybersecurity & Privacy-by-Design (\`agent-threat-modeler\` \u2794 \`agent-privacy-officer\`)
 1. Delegate to or adopt [\`agent-threat-modeler\`](../agent-threat-modeler/SKILL.md).
 2. Analyze every \`UC-*\` and \`FR-*\` using STRIDE and OWASP ASVS to create in \`specs/security/\`:
    - Threat Actors (\`ACT-THREAT-*\`)
    - Abuse Cases (\`ABUSE-*\` targeting \`UC-*\`)
    - Security Requirements (\`SEC-REQ-*\` with \`@security @mitigation\` negative Gherkin scenarios and \`SEC-ENC-*\` Zero Trust enclave bindings).
-3. Run \`verify_schemas\` (\`npx aisdlc verify schemas --path specs/security\`).
+3. Hand off to [\`agent-privacy-officer\`](../agent-privacy-officer/SKILL.md) to apply LINDDUN and GDPR/LOPDGDD/ISO 27701 in \`specs/privacy/\`:
+   - Personal Data Assets (\`DATA-ASSET-*\`), GDPR Art. 30 Records of Processing (\`PRIV-ROPA-*\`), and Privacy Requirements (\`PRIV-REQ-*\` with \`@privacy @gdpr\` Gherkin scenarios).
+4. Run \`verify_schemas\` and \`verify_privacy\` (\`npx aisdlc verify privacy\`).
 
 ### Step 4: Modular Systems Architecture (\`agent-system-architect\`)
 1. Delegate to or adopt [\`agent-system-architect\`](../agent-system-architect/SKILL.md).
-2. Define building blocks (\`CMP-*\`) and Architectural Decision Records (\`ADR-*\`) in \`specs/architecture/\` using \`templates/architecture/\`, ensuring every \`CMP-*\` cites \`implements-use-cases\` (\`UC-*\`) and \`satisfies-requirements\` (\`FR-*\`, \`QR-*\`, \`SEC-REQ-*\`).
-3. Inspect third-party stack choices against \`license-policy.yaml\` via \`verify_licenses\`.
-4. **Technical Security Feedback Loop**: If new infrastructure, persistence, or auth decisions introduce attack vectors, return to \`agent-threat-modeler\` to add technical \`SEC-REQ-*\` mitigations before coding.
+2. Define building blocks (\`CMP-*\`) and Architectural Decision Records (\`ADR-*\`) in \`specs/architecture/\` using \`templates/architecture/\`, ensuring every \`CMP-*\` cites \`implements-use-cases\` (\`UC-*\`) and \`satisfies-requirements\` (\`FR-*\`, \`QR-*\`, \`SEC-REQ-*\`, \`PRIV-REQ-*\`).
+3. Inspect third-party stack choices against \`license-policy.yaml\` via \`verify_licenses\` and subprocessors against \`privacy-policy.yaml\` via \`verify_privacy\`.
+4. **Technical Security & Privacy Feedback Loop**: If new infrastructure, persistence, LLM, or auth decisions introduce attack vectors or PII flows, return to \`agent-threat-modeler\` \u2794 \`agent-privacy-officer\` to add technical \`SEC-REQ-*\` and \`PRIV-REQ-*\` mitigations before coding.
 
 ### Step 5: Release Milestone & Topological Wave SDD Plan (\`1 UC-* = 1 CHG-*\`)
 1. **Open Release Milestone (\`Tier 2: release/v1.0.0\`)**: Group the approved MVP Use Cases (\`UC-001\`, \`UC-002\`, ...) under the initial release milestone (\`release/v1.0.0\`) and visualize the branch hierarchy via \`npx aisdlc git plan\`.
@@ -11637,29 +12425,30 @@ Use this skill when starting a **brand-new software project from scratch (Greenf
     id: "aisdlc-legacy-onboarding",
     title: "Legacy / Brownfield Retro-Inception Playbook",
     description: "Orchestrate progressive AI-SDLC adoption and Brownfield retro-inception on existing or legacy repositories without breaking production code, reverse-engineering architecture (ARCH-INTRO-*, CMP-*) and establishing baseline quality, security, and license audits before new SDD increments.",
-    references: "[`process/02_product_definition.md`](../../process/02_product_definition.md), [`process/04_open_source_license_compliance.md`](../../process/04_open_source_license_compliance.md), [`process/05_architecture_arc42_nafv4.md`](../../process/05_architecture_arc42_nafv4.md), [`process/10_quality_management_and_release_gates.md`](../../process/10_quality_management_and_release_gates.md), and [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md).",
+    references: "[`process/02_product_definition.md`](../../process/02_product_definition.md), [`process/04_open_source_license_compliance.md`](../../process/04_open_source_license_compliance.md), [`process/04b_data_protection_and_privacy.md`](../../process/04b_data_protection_and_privacy.md), [`process/05_architecture_arc42_nafv4.md`](../../process/05_architecture_arc42_nafv4.md), [`process/10_quality_management_and_release_gates.md`](../../process/10_quality_management_and_release_gates.md), and [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md).",
     body: `## Purpose & Trigger
-Use this skill when **adopting AI-SDLC in an existing or legacy codebase (Brownfield)** that already has production source code (\`src/\`, \`packages/\`, etc.) but lacks canonical PDaC specifications, arc42 architecture views, or deterministic quality/license gates.
+Use this skill when **adopting AI-SDLC in an existing or legacy codebase (Brownfield)** that already has production source code (\`src/\`, \`packages/\`, etc.) but lacks canonical PDaC specifications, arc42 architecture views, or deterministic quality/license/privacy gates.
 
 ## End-to-End Execution Playbook
 
 ### Step 1: Non-Destructive Framework Scaffolding
 1. Run MCP tool \`new\` (or CLI \`npx @aisdlc/cli init\`) on the existing repository.
-   - AI-SDLC enforces strict **no-clobber protection**: existing \`package.json\`, \`CLAUDE.md\`, or CI pipelines are preserved while injecting missing schemas (\`schemas/\`), templates (\`templates/\`), policies (\`quality-policy.yaml\`, \`license-policy.yaml\`), and MCP configs.
+   - AI-SDLC enforces strict **no-clobber protection**: existing \`package.json\`, \`CLAUDE.md\`, or CI pipelines are preserved while injecting missing schemas (\`schemas/\`), templates (\`templates/\`), policies (\`quality-policy.yaml\`, \`license-policy.yaml\`, \`privacy-policy.yaml\`), and MCP configs.
 2. Install the Git commit trailer hook via \`npx aisdlc git hook install\`.
 
 ### Step 2: Baseline Diagnostic Audit (Read-Only Assessment)
-Before modifying any code or creating SDD changes, run diagnostic verifiers to quantify existing technical, legal, and security debt:
+Before modifying any code or creating SDD changes, run diagnostic verifiers to quantify existing technical, legal, privacy, and security debt:
 1. **License & Dependency Audit (\`agent-compliance-checker\`)**: Run MCP tool \`verify_licenses\` (\`npx aisdlc verify licenses\`). Identify any viral (\`GPL\`/\`AGPL\`) or commercial (\`BSL\`/\`SSPL\`) dependencies already present in the lockfile and document exceptions or remediation plans.
 2. **Shift-Left Security Scan (\`agent-security-auditor\`)**: Run MCP tool \`verify_security\` (\`npx aisdlc verify security\`) to detect hardcoded secrets (Gate 11) or OWASP SAST vulnerabilities in legacy files.
-3. **AST Code Quality Baseline (\`agent-code-reviewer\`)**: Run MCP tool \`report_quality\` (\`npx aisdlc report quality\`) to generate \`reports/QUALITY_REPORT.md\` and identify legacy hotspots exceeding Cyclomatic Complexity ($\\le 10$), Cognitive Complexity ($\\le 15$), or Maintainability Index ($\\ge 50$).
+3. **Privacy & PII Scan (\`agent-privacy-officer\`)**: Run MCP tool \`verify_privacy\` (\`npx aisdlc verify privacy\`) to detect PII in logs/telemetry or hardcoded real PII in legacy tests/seeds.
+4. **AST Code Quality Baseline (\`agent-code-reviewer\`)**: Run MCP tool \`report_quality\` (\`npx aisdlc report quality\`) to generate \`reports/QUALITY_REPORT.md\` and identify legacy hotspots exceeding Cyclomatic Complexity ($\\le 10$), Cognitive Complexity ($\\le 15$), or Maintainability Index ($\\ge 50$).
 
 ### Step 3: Brownfield Retro-Inception (\`agent-system-architect\` & \`agent-product-analyst\`)
 Instead of attempting to document 100% of a legacy monolith upfront, apply **bounded retro-inception** focused on the system boundary and the domain areas under active evolution:
 1. **System Vision & Context (\`ARCH-INTRO-001\`)**: Use [\`agent-product-analyst\`](../agent-product-analyst/SKILL.md) to document the current system's mission, primary actors (\`ACT-*\`), and top quality goals (\`QR-*\`) in \`specs/architecture/ARCH-INTRO-001.md\`.
 2. **As-Is Component Mapping (\`CMP-*\` & \`ADR-*\`)**: Use [\`agent-system-architect\`](../agent-system-architect/SKILL.md) to map existing core modules/services into \`specs/architecture/CMP-*.md\` and capture historical architectural constraints (\`CON-*\`, \`ADR-*\`).
 3. **Core Use Cases Extraction (\`UC-*\`, \`FR-*\`)**: Extract canonical \`UC-*\` and \`FR-*\` artifacts in \`specs/product/\` for the specific bounded context or module that will be modified or extended next, including Gherkin acceptance scenarios reflecting current expected behavior (characterization specs).
-4. **Threat & Trust Boundary Mapping (\`agent-threat-modeler\`)**: Map existing trust zones (\`SEC-ENC-*\`) and active threat vectors (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`) on the target module.
+4. **Threat & Privacy Boundary Mapping (\`agent-threat-modeler\` \u2794 \`agent-privacy-officer\`)**: Map existing trust zones (\`SEC-ENC-*\`), active threat vectors (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`), and personal data inventories (\`DATA-ASSET-*\`, \`PRIV-ROPA-*\`, \`PRIV-REQ-*\`) on the target module.
 
 ### Step 4: Characterization Testing & Synchronization
 1. Run MCP tool \`sdd_check_fix\` (\`npx aisdlc check --fix\`) to extract \`.feature\` files and compute canonical SHA-256 digests.
@@ -11679,16 +12468,17 @@ Once the target domain's baseline artifacts (\`ARCH-INTRO-*\`, \`UC-*\`, \`FR-*\
     description: "Orchestrate the complete Spec-Driven Development (SDD) lifecycle for bounded feature increments, enhancements, and bugfixes (CHG-* / TSK-*), from upstream requirement derivation and 4-tier Git branching through Red-Green-Refactor TDD, Pre-Merge Audit Triad, all 11 Quality Gates, and canonical baseline integration.",
     references: "[`process/06_spec_driven_development.md`](../../process/06_spec_driven_development.md), [`process/08_citation_contract_and_drift.md`](../../process/08_citation_contract_and_drift.md), [`process/10_quality_management_and_release_gates.md`](../../process/10_quality_management_and_release_gates.md), [`process/11_git_branching_and_lifecycle.md`](../../process/11_git_branching_and_lifecycle.md), and [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md).",
     body: `## Purpose & Trigger
-Use this skill for **every evolutionary increment (new feature, enhancement, refactoring, or bugfix)** on a project that already has an AI-SDLC baseline. It enforces strict 360\xB0 traceability from upstream ProductShape (\`UC-*\`, \`FR-*\`) through SDD (\`CHG-*\`, \`HOF-*\`, \`TSK-*\`), TDD implementation, the 11 Quality Gates, and baseline promotion.
+Use this skill for **every evolutionary increment (new feature, enhancement, refactoring, or bugfix)** on a project that already has an AI-SDLC baseline. It enforces strict 360\xB0 traceability from upstream ProductShape (\`UC-*\`, \`FR-*\`) through SDD (\`CHG-*\`, \`HOF-*\`, \`TSK-*\`), TDD implementation, the 12 Quality Gates, and baseline promotion.
 
 ## End-to-End Execution Playbook
 
-### Step 1: Upstream Product & Security Delta (\`agent-product-analyst\` & \`agent-threat-modeler\`)
+### Step 1: Upstream Product, Security & Privacy Delta (\`agent-product-analyst\`, \`agent-threat-modeler\` & \`agent-privacy-officer\`)
 1. Inspect active changes via MCP tool \`get_active_handoff\` and verify whether the target Use Case (\`UC-*\`) or Requirement (\`FR-*\`) already exists in \`specs/product/\`.
 2. If the increment introduces new behavior or modifies business rules:
    - Use [\`agent-product-analyst\`](../agent-product-analyst/SKILL.md) to create or update the \`UC-*\`, \`BR-*\`, and \`FR-*\` (with \`@nominal\`, \`@boundary\`, \`@invalid\` Gherkin scenarios).
    - Run MCP tool \`verify_duplicates\` (\`npx aisdlc verify duplicates\`) to block lexical or functional collisions early.
    - Use [\`agent-threat-modeler\`](../agent-threat-modeler/SKILL.md) to model any new \`ABUSE-*\` and \`SEC-REQ-*\` mitigations.
+   - Hand off to [\`agent-privacy-officer\`](../agent-privacy-officer/SKILL.md) to model any personal data assets (\`DATA-ASSET-*\`), GDPR Art. 30 processing activities (\`PRIV-ROPA-*\`), and privacy requirements (\`PRIV-REQ-*\`).
 3. Run \`sdd_check_fix\` (\`npx aisdlc check --fix\`) to sync Gherkin \`.feature\` files and validate schemas.
 
 ### Step 2: SDD Change Scaffolding & Architectural Design (\`agent-system-architect\`)
@@ -11715,7 +12505,7 @@ Use this skill for **every evolutionary increment (new feature, enhancement, ref
 1. Delegate to or adopt [\`agent-developer\`](../agent-developer/SKILL.md).
 2. Execute the **Mandatory 4-Step Implementation Order**:
    - (1) Clean Architecture boundaries, (2) Inter-module interfaces first, (3) Concrete component implementation (zero fake-wiring; all 4 UI states \`Loading\`, \`Empty\`, \`Error\`, \`Nominal\`), (4) Exhaustive per-function unit tests in \`tests/unit/\` (Happy Path, Sad Path, Boundary, Null/Empty).
-3. Verify any new dependency against \`license-policy.yaml\` via \`verify_licenses\`.
+3. Verify any new dependency against \`license-policy.yaml\` via \`verify_licenses\` and PII handling against \`privacy-policy.yaml\` via \`verify_privacy\`.
 4. Run \`sdd_check_fix\` (\`npx aisdlc check --fix\`) and \`verify_quality\` (\`npx aisdlc verify quality\`) until Cyclomatic Complexity $\\le 10$, Cognitive $\\le 15$, Maintainability $\\ge 50$, and Function Length $\\le 40$ lines pass with zero violations.
 
 ### Step 6: Post-Development Functional Validation & Pre-Merge Audit Triad
@@ -11723,11 +12513,12 @@ Use this skill for **every evolutionary increment (new feature, enhancement, ref
 2. **Pre-Merge Audit Triad**: Execute concurrent review across:
    - [\`agent-code-reviewer\`](../agent-code-reviewer/SKILL.md) (SOLID, DRY, YAGNI, AST thresholds, zero fake-wiring)
    - [\`agent-security-auditor\`](../agent-security-auditor/SKILL.md) (\`verify_security\`: Gitleaks secrets + OWASP SAST)
+   - [\`agent-privacy-officer\`](../agent-privacy-officer/SKILL.md) (\`verify_privacy\`: GDPR/LOPDGDD ROPA + PII-SAST)
    - [\`agent-compliance-checker\`](../agent-compliance-checker/SKILL.md) (\`verify_licenses\`: SPDX & SBOM compliance)
-3. **Consolidated Release Gate**: Run MCP tool \`verify\` (\`npx aisdlc verify all\`) and confirm all **11 Quality Gates** pass green.
+3. **Consolidated Release Gate**: Run MCP tool \`verify\` (\`npx aisdlc verify all\`) and confirm all **12 Quality Gates** pass green.
 
 ### Step 7: Human PR Sign-Off, Baseline Integration & Release Closure
-1. **Feature Merge (\`feat/CHG-*\` \u2794 \`release/vX.Y.Z\`)**: Present the PR, KPI summary (\`kpi_pr\`), and autogenerated reports (\`reports/QUALITY_REPORT.md\`, \`reports/TRACEABILITY_MATRIX.md\`) to the human Tech Lead for review and approval (never auto-approve or auto-merge).
+1. **Feature Merge (\`feat/CHG-*\` \u2794 \`release/vX.Y.Z\`)**: Present the PR, KPI summary (\`kpi_pr\`), and autogenerated reports (\`reports/QUALITY_REPORT.md\`, \`reports/TRACEABILITY_MATRIX.md\`, \`reports/ROPA_INVENTORY.md\`) to the human Tech Lead for review and approval (never auto-approve or auto-merge).
 2. **Canonical Baseline Promotion**: Once tasks in \`tasks.md\` are marked \`COMPLETED\` and approved, promote the change into the canonical baseline via MCP tool \`sdd_integrate\` (\`npx aisdlc sdd integrate --auto\`), which promotes \`FR-*\` to \`active\`, links \`CMP-*\`, and archives the change under \`specs/changes/completed/\`.
 3. **Release Milestone Closure (\`release/vX.Y.Z\` \u2794 \`main\`)**: When all \`CHG-*\` increments planned for \`release/vX.Y.Z\` are integrated:
    - Run full verification (\`verify\`), generate CycloneDX SBOM & legal notices (\`npx aisdlc verify licenses --sbom reports/sbom.cdx.json --notices THIRD_PARTY_NOTICES.md\`), compute release telemetry (\`kpi_release\` / \`npx aisdlc kpi release --release release/vX.Y.Z\`), and refresh the interactive dashboard (\`report_dashboard\`).
@@ -11735,7 +12526,7 @@ Use this skill for **every evolutionary increment (new feature, enhancement, ref
 
 ## Non-Negotiable Guardrails
 - **Single-Use-Case Scope (\`1 UC-* = 1 CHG-*\`)**: Each SDD change (\`CHG-*\`) must deliver at most 1 Use Case (\`UC-*\`). Bundling multiple \`UC-*\` into one \`handoff.yaml\` is blocked by \`verify_governance\` (\`Greenfield monolith detected\`). Scale throughput via parallel \`CHG-*\` branches/worktrees, not monolithic changes.
-- **100% Design & Handoff Coverage in \`tasks.md\`**: Every \`CMP-*\`, \`FR-*\`, and \`SEC-REQ-*\` declared in \`design.md\` and \`handoff.yaml\` must be explicitly assigned to at least one \`TSK-*\` in \`tasks.md\`.`
+- **100% Design & Handoff Coverage in \`tasks.md\`**: Every \`CMP-*\`, \`FR-*\`, \`SEC-REQ-*\`, and \`PRIV-REQ-*\` declared in \`design.md\` and \`handoff.yaml\` must be explicitly assigned to at least one \`TSK-*\` in \`tasks.md\`.`
   }
 ];
 function renderAntigravitySkillFile(skill) {
@@ -11765,7 +12556,7 @@ This file defines the operational rules and specialized role mappings for Google
 1. **FORBIDDEN TO AUTO-APPROVE OR AUTO-MERGE | PROHIBIDO AUTO-APROBAR O AUTO-FUSIONAR**: No agent may auto-approve PRs or perform direct merges to protected branches (\`main\`, \`release/*\`). Only a human engineer may approve or merge.
 2. **FORBIDDEN TO INVENT PRODUCT OR ARCHITECTURE DECISIONS**: When facing ambiguous requirements, formulate clarifying questions (\`open-questions\`). Never assume unspecified intentions.
 3. **FORBIDDEN TO INTRODUCE DEPENDENCIES WITHOUT LICENSE INSPECTION**: Always consult \`license-policy.yaml\`. Dependencies with viral licenses (\`GPL\`/\`AGPL\`) or commercial paid licenses (\`BSL\`/\`SSPL\`) are strictly forbidden without authorization.
-4. **FORBIDDEN TO IGNORE CYBERSECURITY (SECURITY-BY-DEFAULT)**: Validate inputs, sanitize data, and add mitigation tests (\`SEC-TEST-*\`). Disabling linters or suppressing typing errors is prohibited.
+4. **FORBIDDEN TO IGNORE CYBERSECURITY & PRIVACY (SECURITY-BY-DEFAULT & PRIVACY-BY-DEFAULT)**: Validate inputs, sanitize data, protect PII according to \`privacy-policy.yaml\`, and add mitigation tests (\`SEC-TEST-*\`, \`@privacy\`). Disabling linters or suppressing typing errors is prohibited.
 5. **MANDATORY CRYPTOGRAPHIC CITATION**: Every derived artifact must cite upstream artifacts using canonical identifiers and their Unix LF-normalized SHA-256 cryptographic hashes.
 
 ---
@@ -11786,23 +12577,31 @@ This file defines the operational rules and specialized role mappings for Google
 ### 2. \`agent-threat-modeler\` (Threat Modeler and Security Specialist)
 - **Mission**: Analyze use cases and proactively model adversaries, STRIDE attack vectors, and OWASP ASVS mitigations, both at product level and in the technical security feedback loop over architecture.
 - **Input**: Use cases \`UC-*\`, functional requirements \`FR-*\`, or architecture components (\`CMP-*\`, Mermaid diagrams, ADRs).
-- **Output**: Cybersecurity triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`) compliant with \`schemas/security/\`.
+- **Output**: Cybersecurity triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`) compliant with \`schemas/security/\`, followed by handoff to \`agent-privacy-officer\`.
 - **Guardrails**:
   - \`status\` always starts in \`draft\`.
   - Negative BDD attack and rejection scenarios tagged with \`@security @mitigation\`.
   - Assignment of Zero Trust enclaves \`SEC-ENC-*\`.
 
-### 3. \`agent-system-architect\` (System Architect)
+### 3. \`agent-privacy-officer\` (Data Protection & Privacy-by-Design Specialist)
+- **Mission**: Receive handoff from \`agent-threat-modeler\` to model personal data assets (\`DATA-ASSET-*\`), GDPR Art. 30 processing activities (\`PRIV-ROPA-*\`), and LINDDUN / GDPR / ISO 27701 privacy requirements (\`PRIV-REQ-*\`), and audit PR diffs against \`privacy-policy.yaml\`.
+- **Output**: Privacy triad (\`DATA-ASSET-*\`, \`PRIV-ROPA-*\`, \`PRIV-REQ-*\`) in \`specs/privacy/\` compliant with \`schemas/privacy/\`, and \`DPIA-*\` requests when Art. 9 sensitive data is detected.
+- **Guardrails**:
+  - \`status\` always starts in \`draft\`.
+  - Every \`PRIV-REQ-*\` includes Gherkin scenarios tagged with \`@<PRIV-REQ-ID> @privacy @gdpr @automated @regression\`.
+  - Run \`pnpm run verify:privacy\` to block PII in logs/prompts and enforce ROPA & retention/erasure policies.
+
+### 4. \`agent-system-architect\` (System Architect)
 - **Mission**: Translate the approved product definition into a modular technical architecture based on arc42 enriched with NAF v4.
 - **Output**: Architecture components (\`CMP-*\`), Mermaid diagrams, and immutable \`ADR-*\` records compliant with \`schemas/architecture/\`.
 - **Guardrails**:
-  - Every \`CMP-*\` must declare \`satisfies-requirements\` linking \`FR-*\`, \`QR-*\`, and \`SEC-REQ-*\`.
-  - Emit a return handoff to \`agent-threat-modeler\` in the technical security feedback loop when infrastructure or persistence decisions introduce new attack vectors.
+  - Every \`CMP-*\` must declare \`satisfies-requirements\` linking \`FR-*\`, \`QR-*\`, \`SEC-REQ-*\`, and \`PRIV-REQ-*\`.
+  - Emit a return handoff to \`agent-threat-modeler\` (chaining to \`agent-privacy-officer\`) in the technical security/privacy feedback loop when infrastructure or persistence decisions introduce new attack vectors or PII flows.
 
-### 4. \`agent-qa-engineer\` (QA Engineer and SDET)
-- **Mission**: Translate approved requirements (\`FR-*\`, \`SEC-REQ-*\`, \`QR-*\`) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites, before \`agent-developer\` writes production code.
+### 5. \`agent-qa-engineer\` (QA Engineer and SDET)
+- **Mission**: Translate approved requirements (\`FR-*\`, \`SEC-REQ-*\`, \`PRIV-REQ-*\`, \`QR-*\`) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites, before \`agent-developer\` writes production code.
 - **Input**: Approved requirements from the \`handoff.yaml\` sidecar (\`HOF-*\`).
-- **Output**: Failing Gherkin, E2E, and UI test suites covering: nominal case, boundary cases, out-of-range cases, per-interactive-element tests (Happy Path, Sad Path, Boundary Values), and conditional categories (security, performance, idempotency, postconditions, interface contract).
+- **Output**: Failing Gherkin, E2E, and UI test suites covering: nominal case, boundary cases, out-of-range cases, per-interactive-element tests (Happy Path, Sad Path, Boundary Values), and conditional categories (security, privacy, performance, idempotency, postconditions, interface contract).
 - **Guardrails**:
   - FORBIDDEN to include production code or anticipate implementations.
   - **Agreed Project Technology**: Always use the testing frameworks, E2E/UI runners, and technology stack agreed upon for the project (if any), without requiring the user to specify it in the prompt.
@@ -11812,7 +12611,7 @@ This file defines the operational rules and specialized role mappings for Google
   - Mandatory tags: \`@<FR-ID> @automated @regression\`.
   - Run \`pnpm run verify:testing\` before emitting handoff.
 
-### 5. \`agent-developer\` (Software Developer)
+### 6. \`agent-developer\` (Software Developer)
 - **Mission**: Implement atomic tasks from SDD specifications (\`tasks.md\`) with clean, strictly typed code and thorough tests.
 - **Directives**:
   - **Mandatory 4-Step Implementation Order**: (1) Define/refine Clean Architecture layers & boundaries, (2) Define interfaces/ports for all inter-module interactions to avoid direct module coupling, (3) Implement components consuming/fulfilling those interfaces, (4) Write unit tests for every function covering Happy Path, Sad Path, Boundary Values, and Unexpected/Null/Empty values.
@@ -11820,36 +12619,36 @@ This file defines the operational rules and specialized role mappings for Google
   - Make tests delivered by \`agent-qa-engineer\` pass green without altering them to accommodate code.
   - Respect \`quality-policy.yaml\` thresholds: CC $\\le 10$, Cognitive $\\le 15$, MI $\\ge 50$, LOC $\\le 40$.
   - Run pre-flight with auto-fix: \`pnpm run check:fix\` and full verification: \`pnpm run verify:all\`.
-  - Upon completing green implementation, suggest handoff to \`agent-expert-user\` for post-development functional validation prior to security audit.
+  - Upon completing green implementation, suggest handoff to \`agent-expert-user\` for post-development functional validation prior to security and privacy audit.
 
-### 6. \`agent-security-auditor\` (Adversarial Code Auditor)
+### 7. \`agent-security-auditor\` (Adversarial Code Auditor)
 - **Mission**: Rigorously examine Pull Requests for business logic vulnerabilities, injection vectors, secret leaks, and authorization flaws as part of the Pre-Merge Audit Triad.
 - **Directives**:
   - Analyze code diffs with an attacker mindset and run \`pnpm run verify:security\`.
   - Issue findings with CVSS v3.1 severity scoring and block any PR introducing CRITICAL or HIGH security risks.
 
-### 7. \`agent-compliance-checker\` (Open Source License Compliance Auditor)
+### 8. \`agent-compliance-checker\` (Open Source License Compliance Auditor)
 - **Mission**: Audit dependency manifests and ensure every direct and transitive third-party package complies with \`license-policy.yaml\` as part of the Pre-Merge Audit Triad.
 - **Directives**:
   - Verify SPDX identifiers via \`pnpm run verify:licenses\`, immediately blocking viral (\`GPL\`, \`AGPL\`) or unapproved commercial (\`BSL\`, \`SSPL\`) licenses.
 
-### 8. \`agent-expert-user\` (Expert User and Domain Evaluator)
+### 9. \`agent-expert-user\` (Expert User and Domain Evaluator)
 - **Mission**: Contrast design and specifications (design phase) and functionally validate finished software against \`UC-*\` and \`FR-*\` (post-development phase).
 - **Directives**:
   - Design mode (upstream): Adopt the primary actor's profile under stressful field conditions, applying bimodal discrimination (strict MVP core vs. roadmap suggestion backlog in \`templates/product/user-design-feedback.template.md\`).
   - Functional validation mode (downstream / pre-PR / post-development functional validation): Thoroughly contrast interface and actual CLI execution against \`UC-*\` and \`FR-*\` acceptance criteria before pre-merge security audit.
-  - Emit handoff block suggesting \`agent-code-reviewer\` / \`agent-security-auditor\` if compliant, or return to \`agent-developer\` on functional drift.
+  - Emit handoff block suggesting \`agent-code-reviewer\` / \`agent-security-auditor\` / \`agent-privacy-officer\` if compliant, or return to \`agent-developer\` on functional drift.
 
-### 9. \`agent-code-reviewer\` (Technical and Architectural Code Reviewer)
+### 10. \`agent-code-reviewer\` (Technical and Architectural Code Reviewer)
 - **Mission**: Audit Pull Requests evaluating code cleanliness, adherence to SOLID, DRY, YAGNI principles, design patterns, and respect for complexity and maintainability thresholds (\`quality-policy.yaml\`), forming part of the Pre-Merge Audit Triad.
 - **Directives**:
   - Respect \`quality-policy.yaml\` thresholds: CC $\\le 10$, Cognitive $\\le 15$, MI $\\ge 50$, LOC $\\le 40$.
   - Detect improper coupling, code smells, magic numbers, ambiguous names, and encapsulation violations.
   - Flag premature abstractions and speculative code violating YAGNI.
-  - Coordinate Pre-Merge Audit Triad with \`agent-security-auditor\` and \`agent-compliance-checker\`.
+  - Coordinate Pre-Merge Audit Triad with \`agent-security-auditor\`, \`agent-privacy-officer\`, and \`agent-compliance-checker\`.
   - Classify findings into: \`[BLOCKING]\` (quality violation or broken pattern), \`[CLEAN_CODE_SUGGESTION]\` (non-blocking improvement), and \`[COMPLIANT]\`.
 
-### 10. \`agent-devops\` (Automation and Infrastructure Engineer)
+### 11. \`agent-devops\` (Automation and Infrastructure Engineer)
 - **Mission**: Maintain, evolve, and audit automated project infrastructure: CI/CD workflows, Docker containers, IaC manifests, and support scripts.
 - **Directives**:
   - Strict infrastructure domain: Operates exclusively in \`.github/workflows/\`, \`Dockerfile*\`, \`docker-compose*.yml\`, IaC manifests, and \`scripts/\`.
@@ -11875,7 +12674,7 @@ This file defines the operational rules and specialized role mappings for Google
 - **Conditional Activation Rule by Autonomy**:
   - \u{1F7E2} **\`AUTONOMOUS\`** (or exclusive final supervision in PR/CI): **OMITTED**. Do not request or emit interactive handoff to avoid interrupting unattended execution.
   - \u{1F7E1} **Autonomy $\\ge$ \`HUMAN_REVIEW_PLAN\`** (\`HUMAN_REVIEW_PLAN\`, \`AMBIGUOUS\`, \`HIGH_RISK_MANUAL\`): **MANDATORY**. Emit the Workflow Handoff block compliant with [\`templates/workflow/agent-handoff.template.md\`](../../templates/workflow/agent-handoff.template.md) and **STOP**.
-- **Block Contents**: Declare produced deliverables, recommend the next role in workflow (\`agent-threat-modeler\`, \`agent-system-architect\`, \`agent-qa-engineer\`, \`agent-developer\`, \`agent-expert-user\`, \`agent-code-reviewer\`, \`agent-security-auditor\`, \`agent-compliance-checker\`, \`agent-devops\`, etc.), provide suggested invocation prompt, and keep **the Human Action Window open at all times for the human user to take action** (review, edit by hand, pause/reroute, or delegate).
+- **Block Contents**: Declare produced deliverables, recommend the next role in workflow (\`agent-threat-modeler\`, \`agent-privacy-officer\`, \`agent-system-architect\`, \`agent-qa-engineer\`, \`agent-developer\`, \`agent-expert-user\`, \`agent-code-reviewer\`, \`agent-security-auditor\`, \`agent-compliance-checker\`, \`agent-devops\`, etc.), provide suggested invocation prompt, and keep **the Human Action Window open at all times for the human user to take action** (review, edit by hand, pause/reroute, or delegate).
 `;
 var STARTER_CURSOR_CORE_RULES = `---
 description: Global canonical directives, 5 unbreakable commandments, and AI-SDLC pre-flight
@@ -11892,7 +12691,7 @@ Every agent operating in this repository must strictly observe the following gua
 1. **FORBIDDEN TO AUTO-APPROVE OR AUTO-MERGE | PROHIBIDO AUTO-APROBAR O AUTO-FUSIONAR**: Do not approve PRs or execute direct merges to protected branches (\`main\`, \`release/*\`). Approval is exclusively reserved for human reviewers.
 2. **FORBIDDEN TO INVENT PRODUCT OR ARCHITECTURE DECISIONS**: When facing ambiguity, formulate open questions (\`open-questions\`). Never assume undocumented requirements.
 3. **FORBIDDEN TO INTRODUCE DEPENDENCIES WITHOUT LICENSE INSPECTION**: Always verify \`license-policy.yaml\`. Viral dependencies (GPL/AGPL) or commercial paid dependencies (BSL/SSPL) are strictly forbidden without explicit human approval.
-4. **FORBIDDEN TO IGNORE CYBERSECURITY (SECURITY-BY-DEFAULT)**: Validate inputs, apply least privilege, and accompany every change with security tests (\`SEC-TEST-*\`). Suppressing linters or tests to force a green pipeline is prohibited.
+4. **FORBIDDEN TO IGNORE CYBERSECURITY & PRIVACY (SECURITY-BY-DEFAULT & PRIVACY-BY-DEFAULT)**: Validate inputs, apply least privilege, protect PII according to \`privacy-policy.yaml\`, and accompany every change with security and privacy tests (\`SEC-TEST-*\`, \`@privacy\`). Suppressing linters or tests to force a green pipeline is prohibited.
 5. **MANDATORY CRYPTOGRAPHIC CITATION**: Link specifications using immutable identifiers and Unix LF-normalized SHA-256 hashes.
 
 ## 2. Pre-Flight Verification Commands
@@ -11912,7 +12711,8 @@ Before finalizing changes or proposing commits:
 | Role | Mission (summary) |
 | :--- | :--- |
 | \`agent-product-analyst\` | Phase 0 NAF v4 Enterprise & Capability Vision (\`ARCH-INTRO-*\`, 3\u20135 question interview) + ProductShape artifacts (\`ACT-*\`, \`UC-*\`, \`FR-*\`, \`QR-*\`, \`BR-*\`); status starts \`draft\`. |
-| \`agent-threat-modeler\` | STRIDE/OWASP threat triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`). |
+| \`agent-threat-modeler\` | STRIDE/OWASP threat triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`); hands off to \`agent-privacy-officer\`. |
+| \`agent-privacy-officer\` | LINDDUN & GDPR/LOPDGDD privacy triad (\`DATA-ASSET-*\`, \`PRIV-ROPA-*\`, \`PRIV-REQ-*\`) + Pre-Merge \`verify:privacy\`. |
 | \`agent-system-architect\` | Modular arc42 + NAF v4 architecture (\`CMP-*\`, Mermaid diagrams, \`ADR-*\`). |
 | \`agent-qa-engineer\` | FAILING BDD/Gherkin, E2E, and UI suites (using agreed project tech; Happy Path, Sad Path & Boundary Values per interactive UI element) before \`agent-developer\` writes code. |
 | \`agent-developer\` | Atomic tasks from \`tasks.md\`; respects autonomy mode; runs \`pnpm run check:fix\` + \`pnpm run verify:all\`. |
@@ -11935,8 +12735,8 @@ Before finalizing changes or proposing commits:
 - **Content**: Declare completed deliverables, recommend next role(s), provide suggested invocation prompt, and **keep the Human Action Window open for the human user to take action** (review, edit by hand, pause/reroute, or delegate).
 `;
 var STARTER_CURSOR_PRODUCT_RULES = `---
-description: Directives for SDD specifications editing, ProductShape artifacts, and Cybersecurity
-globs: specs/**, templates/**, product/**, security/**
+description: Directives for SDD specifications editing, ProductShape artifacts, Cybersecurity, and Privacy
+globs: specs/**, templates/**, product/**, security/**, privacy/**
 alwaysApply: false
 ---
 
@@ -11955,14 +12755,17 @@ Every generated or modified artifact must follow canonical naming and satisfy it
 - Threat Actors: \`ACT-THREAT-[SUFFIX]\` (\`schemas/security/threat-actor.schema.json\`)
 - Abuse Cases: \`ABUSE-[SUFFIX]\` (\`schemas/security/abuse-case.schema.json\`)
 - Security Requirements: \`SEC-REQ-[SUFFIX]\` (\`schemas/security/security-req.schema.json\`)
+- Data Assets: \`DATA-ASSET-[SUFFIX]\` (\`schemas/privacy/data-asset.schema.json\`)
+- Processing Activities (ROPA): \`PRIV-ROPA-[SUFFIX]\` (\`schemas/privacy/privacy-ropa.schema.json\`)
+- Privacy Requirements: \`PRIV-REQ-[SUFFIX]\` (\`schemas/privacy/privacy-req.schema.json\`)
 
 ## 2. "AI as Scribe" Protocol Rules
 - **Phase 0 (New Product Inception)**: When starting a new product, conduct a 3\u20135 question discovery interview, instantiate \`ARCH-INTRO-001\` (\`naf-perspective: "Enterprise & Capability"\`) in \`draft\`, and derive \`ACT-*\`, \`UC-*\`, \`BR-*\`, \`FR-*\`, and \`QR-*\`.
 - **Initial Status**: Every new artifact strictly starts with \`status: draft\`. Creating artifacts directly as \`active\` or \`approved\` is forbidden.
 - **Gherkin Acceptance Criteria**: In every \`FR-*\` requirement, include a \`\`\`gherkin block with tags \`@<ID> @automated @regression\` and at least one \`Scenario Outline\` with an \`Examples\` data table.
-- **Security Mitigations**: Every \`SEC-REQ-*\` must include negative Gherkin tests (\`@security @mitigation\`).
+- **Security & Privacy Mitigations**: Every \`SEC-REQ-*\` must include negative Gherkin tests (\`@security @mitigation\`) and every \`PRIV-REQ-*\` must include Gherkin privacy scenarios (\`@privacy @gdpr\`).
 - **Use Cases (User Story Structure)**: In every \`UC-*\`, the \`1. Intent and Outcome\` section must be written using the standard English structure: \`As a <ACT-ID>... I want <action>... To <outcome>...\`.
-- **Deterministic Validation**: Run \`pnpm run verify:schemas\` and \`pnpm run verify:duplicates\` before presenting the draft to the human reviewer.
+- **Deterministic Validation**: Run \`pnpm run verify:schemas\`, \`pnpm run verify:duplicates\`, and \`pnpm run verify:privacy\` before presenting the draft to the human reviewer.
 `;
 var STARTER_CURSOR_QUALITY_RULES = `---
 description: Directives for code quality, architecture, TDD, and complexity limits
@@ -11984,7 +12787,7 @@ Canonical Reference: [\`process/09_agent_protocols.md\`](process/09_agent_protoc
 ## 2. TDD Methodology, Clean Architecture & Unit Testing
 - **Mandatory 4-Step Implementation Order**: (1) Define/refine Clean Architecture layers & boundaries, (2) Define interfaces/ports for all inter-module interactions to avoid direct module coupling, (3) Implement components consuming/fulfilling those interfaces, (4) Write unit tests for every function covering Happy Path, Sad Path, Boundary Values, and Unexpected/Null/Empty values.
 - Apply Test-Driven Development: generate unit tests before or alongside component logic.
-- Tag tests linked to requirements with header comments citing the ID (\`FR-*\` or \`SEC-REQ-*\`) to enable reverse traceability.
+- Tag tests linked to requirements with header comments citing the ID (\`FR-*\`, \`SEC-REQ-*\`, or \`PRIV-REQ-*\`) to enable reverse traceability.
 - Suppressing types (\`any\`), linter rules (\`eslint-disable\`), or unit tests to force pipeline passage is prohibited.
 
 ## 3. Open Source License Policy (\`license-policy.yaml\`)
@@ -11999,7 +12802,7 @@ var STARTER_CLAUDE_RULES = `# Claude Code Instructions - AI-SDLC Monorepo
 
 Canonical Reference: [\`process/09_agent_protocols.md\`](process/09_agent_protocols.md) and [\`process/01_governance_and_roles.md\`](process/01_governance_and_roles.md).
 
-This repository implements the **AI-SDLC** framework (Spec-Driven Development, deterministic quality governance, and OSS license compliance for human-agent collaboration).
+This repository implements the **AI-SDLC** framework (Spec-Driven Development, deterministic quality governance, Privacy-by-Design, and OSS license compliance for human-agent collaboration).
 
 ---
 
@@ -12008,7 +12811,7 @@ This repository implements the **AI-SDLC** framework (Spec-Driven Development, d
 1. **FORBIDDEN TO AUTO-APPROVE OR AUTO-MERGE | PROHIBIDO AUTO-APROBAR O AUTO-FUSIONAR**: Never approve PRs or merge directly to \`main\` or protected branches. Approval is exclusively a human prerogative.
 2. **FORBIDDEN TO INVENT PRODUCT OR ARCHITECTURE DECISIONS**: When facing ambiguous requirements, formulate open questions (\`open-questions\`). Never assume undocumented behaviors.
 3. **FORBIDDEN TO INTRODUCE DEPENDENCIES WITHOUT LICENSE INSPECTION**: Always validate the SPDX identifier against \`license-policy.yaml\`. Viral libraries (\`GPL\`/\`AGPL\`) or paid commercial libraries (\`BSL\`/\`SSPL\`) are strictly forbidden without formal human approval.
-4. **FORBIDDEN TO IGNORE CYBERSECURITY (SECURITY-BY-DEFAULT)**: Validate inputs, sanitize data, and include mitigation tests (\`SEC-TEST-*\`). Disabling linters or suppressing typing errors (\`any\`, \`@ts-ignore\`) is prohibited.
+4. **FORBIDDEN TO IGNORE CYBERSECURITY & PRIVACY (SECURITY-BY-DEFAULT & PRIVACY-BY-DEFAULT)**: Validate inputs, sanitize data, protect PII according to \`privacy-policy.yaml\`, and include mitigation tests (\`SEC-TEST-*\`, \`@privacy\`). Disabling linters or suppressing typing errors (\`any\`, \`@ts-ignore\`) is prohibited.
 5. **MANDATORY CRYPTOGRAPHIC CITATION**: Every spec or sidecar must cite immutable identifiers and Unix LF-normalized SHA-256 digests.
 
 ---
@@ -12019,7 +12822,7 @@ This repository implements the **AI-SDLC** framework (Spec-Driven Development, d
 # 1. Pre-flight with deterministic auto-fix (Gherkin & SHA-256 digests)
 pnpm run check:fix
 
-# 2. Complete verification across all Quality Gates (Quality, RTM, Governance, Testing, Licenses, PDaC, Schemas, Duplicates, Security)
+# 2. Complete verification across all Quality Gates (Quality, RTM, Governance, Testing, Licenses, PDaC, Schemas, Duplicates, Security, Privacy)
 pnpm run verify:all
 
 # 3. Complete automated test suite (Vitest)
@@ -12047,37 +12850,41 @@ npx tsx packages/cli/src/index.ts sdd integrate --change <chg-id>
 - **Guardrails**: \`status\` always starts in \`draft\`. Mandatory Gherkin criteria with \`@<ID> @automated @regression\`.
 
 ### 2. \`agent-threat-modeler\` (Threat Modeler and Security Specialist)
-- **Mission**: Analyze use cases and proactively model adversaries, STRIDE attack vectors, and OWASP ASVS mitigations, both at product level and in the technical security feedback loop over architecture.
+- **Mission**: Analyze use cases and proactively model adversaries, STRIDE attack vectors, and OWASP ASVS mitigations, both at product level and in the technical security feedback loop over architecture, handing off to \`agent-privacy-officer\`.
 - **Output**: Cybersecurity triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`) compliant with \`schemas/security/\`.
 
-### 3. \`agent-system-architect\` (System Architect)
+### 3. \`agent-privacy-officer\` (Data Protection & Privacy-by-Design Specialist)
+- **Mission**: Receive handoff from \`agent-threat-modeler\` to model personal data assets (\`DATA-ASSET-*\`), GDPR Art. 30 records of processing (\`PRIV-ROPA-*\`), and LINDDUN / GDPR / ISO 27701 privacy requirements (\`PRIV-REQ-*\`), and audit code diffs against \`privacy-policy.yaml\`.
+- **Directives**: Run \`pnpm run verify:privacy\`, enforce PII masking in logs/LLM prompts, and trigger \`DPIA-*\` requests on Art. 9 sensitive data.
+
+### 4. \`agent-system-architect\` (System Architect)
 - **Mission**: Translate the approved product definition into a modular technical architecture based on arc42 enriched with NAF v4 (\`CMP-*\`, Mermaid diagrams, \`ADR-*\`).
-- **Guardrails**: Declare \`satisfies-requirements\` on every \`CMP-*\` and trigger the technical security feedback loop toward \`agent-threat-modeler\` when infrastructure decisions introduce new attack vectors.
+- **Guardrails**: Declare \`satisfies-requirements\` on every \`CMP-*\` (including \`PRIV-REQ-*\`) and trigger the technical security/privacy feedback loop toward \`agent-threat-modeler\` \u2794 \`agent-privacy-officer\` when infrastructure decisions introduce new attack vectors or PII flows.
 
-### 4. \`agent-qa-engineer\` (QA Engineer and SDET)
-- **Mission**: Translate approved requirements (\`FR-*\`, \`SEC-REQ-*\`, \`QR-*\`) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites, before \`agent-developer\` writes production code.
+### 5. \`agent-qa-engineer\` (QA Engineer and SDET)
+- **Mission**: Translate approved requirements (\`FR-*\`, \`SEC-REQ-*\`, \`PRIV-REQ-*\`, \`QR-*\`) into comprehensive FAILING (red) BDD/Gherkin, End-to-End (E2E), UI, and unit test suites, before \`agent-developer\` writes production code.
 - **Guardrails**: Always use the agreed project technology/testing stack (if any). Never omit End-to-End (E2E) and UI tests. Create specific tests for every interactive UI element covering Happy Path, Sad Path, and Boundary Values. FORBIDDEN to include production code. Mandatory tags: \`@<FR-ID> @automated @regression\`.
 
-### 5. \`agent-developer\` (Software Developer)
+### 6. \`agent-developer\` (Software Developer)
 - **Mission**: Implement atomic tasks from SDD specifications (\`tasks.md\`) with clean, strictly typed code and thorough tests.
 - **Directives**: Execute the mandatory 4-step order: (1) Clean Architecture definition/redefinition, (2) Inter-module interfaces first, (3) Component implementation, (4) Per-function unit tests (Happy Path, Sad Path, Boundary Values, Unexpected/Null/Empty values). Respect the autonomy mode. Make tests delivered by \`agent-qa-engineer\` pass green. Run \`pnpm run check:fix\` and \`pnpm run verify:all\`.
 
-### 6. \`agent-security-auditor\` (Adversarial Code Auditor)
+### 7. \`agent-security-auditor\` (Adversarial Code Auditor)
 - **Mission**: Examine Pull Requests for business logic vulnerabilities, injection vectors, secret leaks, and authorization flaws as part of the Pre-Merge Audit Triad.
 - **Directives**: Run \`pnpm run verify:security\`, evaluate CVSS v3.1 severity, and block CRITICAL/HIGH risks.
 
-### 7. \`agent-compliance-checker\` (Open Source License Compliance Auditor)
+### 8. \`agent-compliance-checker\` (Open Source License Compliance Auditor)
 - **Mission**: Audit dependency manifests against \`license-policy.yaml\` as part of the Pre-Merge Audit Triad.
 - **Directives**: Run \`pnpm run verify:licenses\`, blocking viral (\`GPL\`, \`AGPL\`) or unapproved commercial (\`BSL\`, \`SSPL\`) packages.
 
-### 8. \`agent-expert-user\` (Expert User and Domain Evaluator)
+### 9. \`agent-expert-user\` (Expert User and Domain Evaluator)
 - **Mission**: Contrast design and specifications (design phase) and functionally validate finished software against \`UC-*\` and \`FR-*\` (post-development functional validation phase).
 
-### 9. \`agent-code-reviewer\` (Technical and Architectural Code Reviewer)
+### 10. \`agent-code-reviewer\` (Technical and Architectural Code Reviewer)
 - **Mission**: Audit Pull Requests evaluating code cleanliness, adherence to SOLID, DRY, YAGNI principles, and respect for \`quality-policy.yaml\` thresholds, forming part of the Pre-Merge Audit Triad.
 - **Findings classification**: \`[BLOCKING]\`, \`[CLEAN_CODE_SUGGESTION]\`, \`[COMPLIANT]\`.
 
-### 10. \`agent-devops\` (Automation and Infrastructure Engineer)
+### 11. \`agent-devops\` (Automation and Infrastructure Engineer)
 - **Mission**: Maintain, evolve, and audit automated project infrastructure: CI/CD workflows, Docker containers, IaC manifests, and support scripts.
 - **NON-INVASION GUARDRAIL**: STRICTLY FORBIDDEN from modifying application source code (\`src/\`, \`packages/*/src/\`).
 
@@ -12148,8 +12955,8 @@ You operate as an assistant agent in the **AI-SDLC** repository. You are not a s
    - If a requirement is ambiguous or incomplete, formulate open questions (\`open-questions\`) to the human user. Guessing undocumented intentions is forbidden.
 3. **FORBIDDEN TO INTRODUCE DEPENDENCIES WITHOUT LICENSE INSPECTION**:
    - Before suggesting or adding dependencies to manifests (\`package.json\`, etc.), validate their SPDX identifier against \`license-policy.yaml\`. Adding viral (\`GPL\`, \`AGPL\`) or commercial paid (\`BSL\`, \`SSPL\`) licenses without human authorization is prohibited.
-4. **FORBIDDEN TO IGNORE CYBERSECURITY (SECURITY-BY-DEFAULT)**:
-   - All code must enforce least privilege, sanitize external inputs, and include mitigation tests (\`SEC-TEST-*\`). Suppressing types (\`any\`), linters, or tests to force a green pipeline is prohibited.
+4. **FORBIDDEN TO IGNORE CYBERSECURITY & PRIVACY (SECURITY-BY-DEFAULT & PRIVACY-BY-DEFAULT)**:
+   - All code must enforce least privilege, sanitize external inputs, protect PII according to \`privacy-policy.yaml\`, and include mitigation tests (\`SEC-TEST-*\`, \`@privacy\`). Suppressing types (\`any\`), linters, or tests to force a green pipeline is prohibited.
 5. **MANDATORY CRYPTOGRAPHIC CITATION**:
    - Every specification, design, or sidecar must reference canonical identifiers and their Unix LF-normalized SHA-256 digests.
 
@@ -12194,7 +13001,7 @@ Non-Negotiable Quality Thresholds (\`quality-policy.yaml\`):
 - **Conditional Activation**:
   * \u{1F7E2} **\`AUTONOMOUS\` Mode** (or PR/CI final supervision): **OMITTED**. Do not interrupt unattended execution.
   * \u{1F7E1} **Autonomy $\\ge$ \`HUMAN_REVIEW_PLAN\`** (\`HUMAN_REVIEW_PLAN\`, \`AMBIGUOUS\`, \`HIGH_RISK_MANUAL\`): **MANDATORY**. Emit Workflow Handoff block compliant with [\`templates/workflow/agent-handoff.template.md\`](../templates/workflow/agent-handoff.template.md) and **STOP**.
-- **Components**: Declare completed deliverables, recommend next roles (\`agent-threat-modeler\`, \`agent-system-architect\`, \`agent-developer\`, \`agent-security-auditor\`), provide suggested invocation prompt, and **keep the Human Action Window open at all times for the user to take action** (review, edit by hand, pause/reroute, or delegate).
+- **Components**: Declare completed deliverables, recommend next roles (\`agent-threat-modeler\`, \`agent-privacy-officer\`, \`agent-system-architect\`, \`agent-developer\`, \`agent-security-auditor\`), provide suggested invocation prompt, and **keep the Human Action Window open at all times for the user to take action** (review, edit by hand, pause/reroute, or delegate).
 
 ---
 
@@ -12203,7 +13010,8 @@ Non-Negotiable Quality Thresholds (\`quality-policy.yaml\`):
 | Role | Mission (summary) |
 | :--- | :--- |
 | \`agent-product-analyst\` | Phase 0 NAF v4 Enterprise & Capability Vision (\`ARCH-INTRO-*\`, 3\u20135 question interview) + ProductShape artifacts (\`ACT-*\`, \`UC-*\`, \`FR-*\`, \`QR-*\`, \`BR-*\`); \`status\` starts \`draft\`. |
-| \`agent-threat-modeler\` | STRIDE/OWASP threat triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`). |
+| \`agent-threat-modeler\` | STRIDE/OWASP threat triad (\`ACT-THREAT-*\`, \`ABUSE-*\`, \`SEC-REQ-*\`); hands off to \`agent-privacy-officer\`. |
+| \`agent-privacy-officer\` | LINDDUN & GDPR/LOPDGDD privacy triad (\`DATA-ASSET-*\`, \`PRIV-ROPA-*\`, \`PRIV-REQ-*\`) + Pre-Merge \`verify:privacy\`. |
 | \`agent-system-architect\` | Modular arc42 + NAF v4 architecture (\`CMP-*\`, Mermaid diagrams, \`ADR-*\`). |
 | \`agent-qa-engineer\` | FAILING BDD/Gherkin, E2E, and UI suites (using agreed project tech; Happy Path, Sad Path & Boundary Values per interactive UI element) before \`agent-developer\` writes production code. |
 | \`agent-developer\` | Atomic tasks from \`tasks.md\`; autonomy mode must be respected; runs \`pnpm run check:fix\` + \`pnpm run verify:all\`. |
@@ -13265,6 +14073,10 @@ var STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_SDD_INTEGRATE_ON_MERGE_YML = 'name: SD
 var STARTER_TEMPLATES_COMPLIANCE_COMMERCIAL_ACQUISITION_REQUEST_TEMPLATE_MD = '---\r\nid: REQ-LIC-ACQUISITION-001\r\ntype: license-acquisition-request\r\ntitle: Commercial License Acquisition Request for [Library]\r\nstatus: pending-approval # pending-approval, approved, rejected\r\nrequested-package: "@vendor/commercial-package"\r\nspdx-license: "BSL-1.1" # or Commercial, SSPL-1.0\r\nlicense-category: commercial_acquisition_required\r\nestimated-cost: "$1,200 / year"\r\nbusiness-justification: "Accelerates critical telemetry module development avoiding 4 months of in-house implementation."\r\n---\r\n\r\n# Commercial License Acquisition Request\r\n\r\n## 1. Package and Vendor\r\n- **Package**: `@vendor/commercial-package`\r\n- **Version**: `2.4.0`\r\n- **License Type**: BSL 1.1 / Commercial\r\n- **Official Website**: `https://vendor.example.com`\r\n\r\n## 2. Technical Justification and Evaluated Alternatives\r\n- **Why a permissive alternative (MIT/Apache 2.0) is not used**:\r\n  - Open-source alternatives lack required hardware encryption protocol support.\r\n- **Impact of not acquiring the license**:\r\n  - 4-month delay on product delivery milestone.\r\n\r\n## 3. Human Authorization Signatures\r\n- [ ] Tech Lead: Technical approval\r\n- [ ] Legal / IP Counsel: EULA clauses validation\r\n- [ ] Procurement / Budget Owner: Payment authorization\r\n';
 var STARTER_TEMPLATES_MANUALS_PRODUCTION_MANUAL_TEMPLATE_MD = '---\r\nid: MAN-PROD-001\r\ntype: production-manual\r\ntitle: "Production & Operations Manual: Application Name"\r\nstatus: draft\r\nversion: "1.0.0"\r\nschema-version: "1.0"\r\napplies-to-version: "v1.0.0"\r\ntarget-audience:\r\n  - devops-engineer\r\n  - sre-engineer\r\n  - release-manager\r\n  - secops\r\ncomponents-covered:\r\n  - CMP-NAME-001\r\nenclaves-involved:\r\n  - SEC-ENC-DMZ-001\r\nsupersedes: null\r\nsuperseded-by: null\r\n---\r\n\r\n# MAN-PROD-001: Production & Operations Manual - Application Name\r\n\r\n## 1. Deterministic Release Regeneration (Reproducible Builds)\r\n\r\nThis section contains the specifications and directives required to deterministically reproduce identical bit-by-bit application artifacts or releases from their Git tag.\r\n\r\n### 1.1 Source Code Baseline\r\n\r\n- **Canonical Repository**: `https://github.com/organization/repo-name.git`\r\n- **Immutable Git Release Tag**: `v1.0.0`\r\n- **Commit SHA-256 / SHA-1**: `[VERIFIED_HEXADECIMAL_COMMIT_SHA]`\r\n- **Clean Checkout Command**:\r\n  ```bash\r\n  git clone --recurse-submodules https://github.com/organization/repo-name.git\r\n  cd repo-name\r\n  git checkout tags/v1.0.0\r\n  git submodule update --init --recursive\r\n  ```\r\n\r\n### 1.2 Frozen Toolchains and Build Tool Matrix\r\n\r\nTo prevent discrepancies in binary or package generation, strict usage of pinned versions of the following utilities is enforced:\r\n\r\n| Tool / Runtime | Exact Version | Toolchain Checksum / Digest | Purpose |\r\n| :--- | :--- | :--- | :--- |\r\n| **Node.js LTS** | `v22.12.0` | `sha256:node-v22.12.0-linux-x64.tar.xz` | Execution and transpilation runtime |\r\n| **pnpm** | `9.15.0` | `sha256:pnpm-v9.15.0` | Deterministic monorepo package manager |\r\n| **TypeScript (tsc)** | `5.7.2` | Pinned in `devDependencies` | Strict ECMAScript compiler |\r\n| **Docker BuildKit** | `v0.18.0` | `moby/buildkit:v0.18.0` | Hermetic OCI packaging engine |\r\n\r\n### 1.3 Libraries, Dependencies, and Vertex Graph\r\n\r\n- **Immutable Lockfile**: `pnpm-lock.yaml` (or `Cargo.lock`, `go.sum`, `requirements.lock`). Installations with open resolution are forbidden (`pnpm install --frozen-lockfile` mandatory).\r\n- **SBOM (Software Bill of Materials) Inventory**:\r\n  - Format: CycloneDX JSON v1.5 / SPDX v2.3.\r\n  - Compiled SBOM path: `reports/sbom-cyclonedx.json`.\r\n- **OSS License Governance**:\r\n  - Binding policy: `license-policy.yaml`.\r\n  - Library vertex pre-verification:\r\n    ```bash\r\n    pnpm verify:licenses\r\n    ```\r\n\r\n### 1.4 Step-by-Step Deterministic Build Procedure\r\n\r\n1. **Step 1: Hermetic Dependency Installation**\r\n   ```bash\r\n   pnpm install --frozen-lockfile --ignore-scripts\r\n   ```\r\n\r\n2. **Step 2: Integrity and Strict Type Checking**\r\n   ```bash\r\n   pnpm typecheck\r\n   ```\r\n\r\n3. **Step 3: Artifact Compilation**\r\n   ```bash\r\n   export SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct)\r\n   pnpm build\r\n   ```\r\n\r\n4. **Step 4: Cryptographic Verification of Generated Artifact**\r\n   ```bash\r\n   sha256sum dist/app.bundle.js\r\n   # Compare against the canonical checksum registered in official release:\r\n   # Expected: [CANONICAL_SHA256_CHECKSUM]\r\n   ```\r\n\r\n---\r\n\r\n## 2. Version, Infrastructure, and Migration Compatibility Matrix\r\n\r\nThis section defines technical interoperability boundaries between the release version and the deployment ecosystem, ensuring safe Zero-Downtime transitions.\r\n\r\n### 2.1 Platform and Execution Runtime Compatibility\r\n\r\n| Infrastructure Component | Approved Version Range | Recommended Version | Support Status |\r\n| :--- | :--- | :--- | :---: |\r\n| **Kubernetes Cluster (K8s)** | `>= 1.28` and `<= 1.31` | `1.30.2` | \u2705 Certified |\r\n| **Container Runtime (CRI)** | containerd `>= 1.7` / CRI-O `>= 1.28` | containerd `1.7.15` | \u2705 Certified |\r\n| **Base Operating System (Host)** | Ubuntu 22.04 LTS / RHEL 9.2+ | Ubuntu 22.04 LTS (Kernel 6.x) | \u2705 Homologated |\r\n| **Language Runtime (Production)** | Node.js `>= 20.x` and `<= 22.x` | `v22.12.0 LTS` | \u2705 Hermetic |\r\n\r\n### 2.2 Data Schema and Migration Compatibility (N-1 Support)\r\n\r\nTo enable Canary or Blue-Green continuous deployments without transaction loss:\r\n\r\n| Release Version | DB Schema Version | Compatible with $N-1$ Code | Schema Migration Status |\r\n| :---: | :---: | :---: | :--- |\r\n| **`v1.0.0`** (Current) | `SCHEMA-v1.0` | \u2705 Yes (supports `v0.9.x` code) | Non-destructive additive migration (no column renaming). |\r\n| **`v0.9.x`** | `SCHEMA-v0.9` | \u2705 Previous baseline | Fully compatible during Canary drain period. |\r\n\r\n### 2.3 Interoperability Between Architecture Components (`CMP-*`)\r\n\r\n| Dependent Component | Consumed Component | Minimum Compatible Versions | Binding Protocol / Contract |\r\n| :--- | :--- | :---: | :--- |\r\n| `CMP-NAME-001` (Gateway) | `CMP-NAME-002` (Backend) | `>= v1.0.0` | gRPC / Protobuf v3 (`contract_spec.proto`) |\r\n| `CMP-NAME-001` (Gateway) | Messaging Bus / Kafka | `>= 3.5.0` | Kafka v2 Protocol with TLS mTLS |\r\n\r\n### 2.4 Homologated Upgrade & Rollback Paths\r\n\r\n| Source Version | Direct Jump to `v1.0.0` | Intermediate Migration Required | Direct Rollback Procedure |\r\n| :---: | :---: | :---: | :---: |\r\n| **`v0.9.1`** | \u2705 Allowed | \u274C Not required | `kubectl rollout undo` without data loss. |\r\n| **`v0.9.0`** | \u2705 Allowed | \u274C Not required | `kubectl rollout undo` without data loss. |\r\n| **`< v0.9.0`** | \u274C Blocked | \u2705 Must upgrade to `v0.9.1` first | Requires restore from backup snapshot. |\r\n\r\n---\r\n\r\n## 3. CI/CD Architecture and Pipelines\r\n\r\n### 3.1 Hierarchical Branching Model and Integration Triggers\r\n\r\nFollowing the AI-SDLC 4-tier standard:\r\n\r\n```text\r\nTIER 1: main (Production)\r\n  \u25B2\r\n  \u2514\u2500\u2500 PR Release Gate (Manual Tech Lead / Release Manager Approval)\r\n        \u2502\r\nTIER 2: release/v1.0.0 (Open Version Branch)\r\n  \u25B2\r\n  \u2514\u2500\u2500 PR Feature Gate (Lint + Tests + Quality Gate + SAST + SBOM)\r\n        \u2502\r\nTIER 3: feat/CHG-001-* (Feature / Bug)\r\n```\r\n\r\n- **Pull Request Trigger**: Executes linters, full test battery, and governance verifications without deployment.\r\n- **Release Tag Trigger (`v*.*.*`)**: Executes the full hermetic build pipeline, image signing, and continuous deployment.\r\n\r\n### 3.2 CI/CD Pipeline Flowchart\r\n\r\n```mermaid\r\nflowchart LR\r\n    A["Git Push / Tag v1.0.0"] --> B["Hermetic Checkout"]\r\n    B --> C["Linters & Typecheck"]\r\n    C --> D["Vitest: Unit & BDD"]\r\n    D --> E["Quality Gate: CC & MI"]\r\n    E --> F["SAST & Secret Scan"]\r\n    F --> G["SBOM & License Gate"]\r\n    G --> H["Deterministic Build"]\r\n    H --> I["Cosign / SLSA Signing"]\r\n    I --> J["Push to OCI Registry"]\r\n    J --> K["Deploy to DMZ Enclave"]\r\n```\r\n\r\n### 3.3 Release Gate Contracts and Thresholds\r\n\r\n| Quality Gate | Tool / Command | Required Threshold | Action on Non-Compliance |\r\n| :--- | :--- | :--- | :--- |\r\n| **Lint & Typecheck** | `pnpm typecheck` | Zero errors, zero `any` | **Immediate failure** |\r\n| **Automated Tests** | `pnpm test:all` | 100% passed, Coverage >= 85% | **Immediate failure** |\r\n| **Cyclomatic Complexity** | `aisdlc verify quality` | CC <= 10 per function | **Release blocked** |\r\n| **Maintainability Index** | `aisdlc verify quality` | MI >= 50.0 / 100 | **Release blocked** |\r\n| **360\xB0 Traceability** | `aisdlc verify traceability` | 100% of requirements linked | **Release blocked** |\r\n| **OSS Licenses** | `aisdlc verify licenses` | Zero forbidden/viral licenses | **Release blocked** |\r\n| **Cryptographic Signature** | `cosign verify` | Valid signature from Corporate CA | **Deployment rejected** |\r\n\r\n---\r\n\r\n## 4. Production Deployment Strategy and Procedure\r\n\r\n### 4.1 Infrastructure Prerequisites and Network Enclaves\r\n\r\n- **Target Enclave**: `SEC-ENC-DMZ-001` (Strict segmentation without direct uncontrolled outbound internet access).\r\n- **Enabled Network Ports**:\r\n  - Port `8443/TCP`: Secure WebSocket ingestion with mutual TLS (mTLS) authentication.\r\n  - Port `9090/TCP`: Prometheus metrics (internal management network only).\r\n- **Secrets and Certificate Management**:\r\n  - Server TLS and client root CA certificates mounted via immutable secret at `/etc/pki/tls/`.\r\n  - Embedding cryptographic keys in environment variables or images is strictly forbidden.\r\n\r\n### 4.2 Rollout Strategy\r\n\r\nA **Canary strategy with progressive telemetry metrics analysis** is utilized:\r\n1. 10% of traffic is routed to the new version for 15 minutes.\r\n2. If the 5xx error rate is `<= 0.01%` and p99 latency is `<= 50ms`, traffic is promoted to 100%.\r\n\r\n### 4.3 Step-by-Step Deployment Procedure\r\n\r\n1. **Step 1: Pre-deployment and State Snapshot**\r\n   ```bash\r\n   # Check cluster health and record baseline\r\n   kubectl get pods -n production -l app=system\r\n   kubectl exec -it system-db-0 -- /backup/create-snapshot.sh\r\n   ```\r\n\r\n2. **Step 2: Deployment Manifest Application**\r\n   ```bash\r\n   kubectl apply -f deploy/production/canary-deployment.yaml\r\n   kubectl rollout status deployment/system-service -n production --timeout=180s\r\n   ```\r\n\r\n3. **Step 3: Health Verification and Smoke Tests**\r\n   ```bash\r\n   curl -f --cacert /etc/pki/tls/ca.crt https://127.0.0.1:8443/healthz\r\n   curl -f --cacert /etc/pki/tls/ca.crt https://127.0.0.1:8443/readyz\r\n   pnpm test:example\r\n   ```\r\n\r\n### 4.4 Rollback Plan (Immediate Rollback)\r\n\r\n- **Objective Rollback Activation Criteria**:\r\n  - mTLS handshake failure rate `> 1.0%`.\r\n  - Ingestion p99 latency `> 100ms` for 2 continuous minutes.\r\n  - Critical `CrashLoopBackOff` alert on more than 20% of instances.\r\n- **Rollback Execution Command**:\r\n  ```bash\r\n  kubectl rollout undo deployment/system-service -n production\r\n  kubectl rollout status deployment/system-service -n production\r\n  ```\r\n\r\n---\r\n\r\n## 5. Likely Errors Resolution and Troubleshooting (Runbooks)\r\n\r\nThis section documents the most frequent runtime and deployment failures along with diagnosis and immediate mitigation procedures.\r\n\r\n### 5.1 Frequent Incidents and Solutions Matrix\r\n\r\n#### Incident 1: Dependency Vertex Inconsistency or Drift (Build Failure)\r\n- **Symptom**: `pnpm install --frozen-lockfile` command fails in CI with error `ERR_PNPM_LOCKFILE_OUTDATED`.\r\n- **Root Cause**: `package.json` was modified without updating `pnpm-lock.yaml`.\r\n- **Diagnosis**:\r\n  ```bash\r\n  git diff HEAD^ package.json pnpm-lock.yaml\r\n  ```\r\n- **Mitigation**:\r\n  1. On the feature branch, run `pnpm install` locally to regenerate the deterministic lockfile.\r\n  2. Verify no restricted-license dependencies were introduced via `pnpm verify:licenses`.\r\n  3. Commit both files together in an atomic commit.\r\n\r\n---\r\n\r\n#### Incident 2: mTLS Handshake Failure or Enclave Certificate Rejected\r\n- **Symptom**: Clients receive error `ERR_TLS_CERT_ALTNAME_INVALID` or connection closed with TLS alert `certificate_unknown (46)`.\r\n- **Root Cause**: Internal root CA mounted on server does not match the client certificate issuer CA, or certificate expired.\r\n- **Diagnosis**:\r\n  ```bash\r\n  openssl s_client -connect 127.0.0.1:8443 -CAfile /etc/pki/tls/ca.crt -cert /etc/pki/tls/client.crt -key /etc/pki/tls/client.key\r\n  openssl x509 -in /etc/pki/tls/ca.crt -noout -dates -issuer -subject\r\n  ```\r\n- **Mitigation**:\r\n  1. Verify expiration date of certificate mounted in cluster Secret.\r\n  2. If expired, rotate the certificate by injecting the new pair from HSM / Vault storage.\r\n  3. Orderly restart pods with `kubectl rollout restart deployment/system-service`.\r\n\r\n---\r\n\r\n#### Incident 3: Release Gate Rejection in CI/CD Due to Quality Metrics\r\n- **Symptom**: Pipeline aborts with verdict `Quality Gate REJECTED` (Cyclomatic Complexity > 10 or Maintainability < 50).\r\n- **Root Cause**: Introduction of complex nested logic (multiple `if/else`, extensive `switch`, or branching loops).\r\n- **Diagnosis**:\r\n  ```bash\r\n  pnpm verify:quality\r\n  ```\r\n- **Mitigation**:\r\n  1. Inspect the violation report in `reports/QUALITY_GATE_REPORT.md` to identify the offending function.\r\n  2. Decompose function into cohesive private helper methods following the rule of maximum 40 lines per function.\r\n  3. Re-run `pnpm verify:quality` until green verdict is confirmed. Adding suppression comments (`// @ts-ignore`) is forbidden.\r\n\r\n---\r\n\r\n#### Incident 4: CrashLoopBackOff Due to Memory Leak or Connection Limit\r\n- **Symptom**: Pod is terminated with exit code `ExitCode: 137` (`OOMKilled`) after a load spike.\r\n- **Root Cause**: Undrained socket buffer accumulation during high-frequency bursts.\r\n- **Diagnosis**:\r\n  ```bash\r\n  kubectl describe pod system-service-xxx -n production | grep -i oom\r\n  kubectl logs system-service-xxx -n production --previous\r\n  ```\r\n- **Mitigation**:\r\n  1. Temporarily adjust memory limits in Kubernetes manifest (`resources.limits.memory`) if the load burst is legitimate.\r\n  2. Apply backpressure or discard expired packets in accordance with business rules (`BR-*`).\r\n  3. Run local benchmark with `pnpm test:all` to audit memory consumption.\r\n\r\n---\r\n\r\n### 5.2 Escalation Protocol and Critical Incident Management\r\n\r\n| Severity Level | Impact Criterion | Maximum Response Time | Roles Involved |\r\n| :--- | :--- | :---: | :--- |\r\n| **SEV-1 (Critical)** | Complete service outage or security breach in enclave. | 15 minutes | On-call SRE + Lead Architect + SecOps |\r\n| **SEV-2 (Major)** | Severe service degradation, massive retries without outage. | 1 hour | On-call SRE + Tech Lead |\r\n| **SEV-3 (Minor)** | Isolated node incident without global SLA impact. | 4 hours | Support Engineer / DevOps |\r\n\r\n---\r\n\r\n## 6. Revision History and Version Control\r\n\r\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\r\n| :--- | :--- | :--- | :--- | :--- |\r\n| **1.0.0** | 2026-09-15 | Operations & DevOps Team | Initial Production Manual generation | CHG-009 |\r\n';
 var STARTER_TEMPLATES_MANUALS_USER_MANUAL_TEMPLATE_MD = '---\r\nid: MAN-USER-001\r\ntype: user-manual\r\ntitle: "User Manual: Application Name"\r\nstatus: draft\r\nversion: "1.0.0"\r\nschema-version: "1.0"\r\napplies-to-version: "v1.0.0"\r\ntarget-audience:\r\n  - ACT-ROLE-USER-001\r\n  - ACT-OPERATOR-002\r\nallowed-roles:\r\n  - ACT-ROLE-USER-001\r\n  - ACT-OPERATOR-002\r\njourneys-covered:\r\n  - JRN-JOURNEY-001\r\nuse-cases-covered:\r\n  - UC-ACTION-001\r\nsupersedes: null\r\nsuperseded-by: null\r\n---\r\n\r\n# MAN-USER-001: User Manual - Application Name\r\n\r\n## 1. System Purpose and Audience\r\n\r\nConcisely describes the software\'s purpose, the operational value it delivers to end users, and the general context in which it operates.\r\n\r\n- **Application / System**: `[System Name or Bounded Context]`\r\n- **Software Version**: `v1.0.0`\r\n- **Target Audience**: `[Functional roles and user profiles addressed]`\r\n\r\n---\r\n\r\n## 2. User Role Catalog and Permissions Matrix (RBAC)\r\n\r\nThis section formally defines the roles authorized to access and operate the application, as well as the privileges assigned to each.\r\n\r\n### 2.1 Authorized Role Catalog\r\n\r\n| Role Identifier | Role Name | Associated Actor | Description & Responsibility | Enclave / Access Level |\r\n| :--- | :--- | :--- | :--- | :--- |\r\n| **`ROLE_USER`** | Standard User | `ACT-ROLE-USER-001` | Data queries and nominal business flow execution. | Corporate Network / Web UI |\r\n| **`ROLE_OPERATOR`** | System Operator | `ACT-OPERATOR-002` | Streaming supervision, alert management, and command control. | DMZ Enclave / Operational Console |\r\n\r\n### 2.2 Access and Capabilities Matrix by Role\r\n\r\n| Application Capability / Module | `ROLE_USER` | `ROLE_OPERATOR` | Authentication Mode |\r\n| :--- | :---: | :---: | :--- |\r\n| Status Query and Dashboard Visualizations | \u2705 Allowed | \u2705 Allowed | Bearer Token (OIDC/JWT) |\r\n| Business Journey Execution (`JRN-JOURNEY-001`) | \u2705 Allowed | \u2705 Allowed | Bearer Token (OIDC/JWT) |\r\n| Real-Time Streaming and Operational Control | \u274C Denied | \u2705 Allowed | mTLS + Device X.509 Certificate |\r\n| Global Parameters Configuration & Connectivity | \u274C Denied | \u2705 Allowed | Administrator Credential |\r\n\r\n---\r\n\r\n## 3. Version and User Platform Compatibility Matrix\r\n\r\nThis section specifies cross-compatibility between the current application version and user environments, clients, and formats.\r\n\r\n### 3.1 Client-Server Compatibility (APIs and SDKs)\r\n\r\n| Application Version (Backend) | Compatible CLI Version | Compatible SDK Version | Compatibility Status | Migration Notes |\r\n| :---: | :---: | :---: | :---: | :--- |\r\n| **`v1.0.0`** (Current) | `>= v1.0.0` | `>= v1.0.0` | \u2705 Fully Supported | Active canonical version. |\r\n| **`v1.0.0`** (Current) | `v0.9.x` | `v0.9.x` | \u26A0\uFE0F Degraded Mode | Requires upgrade before next minor. |\r\n| **`v1.0.0`** (Current) | `< v0.9.0` | `< v0.9.0` | \u274C Incompatible / Deprecated | Legacy endpoints decommissioned. |\r\n\r\n### 3.2 Homologated Browsers and Client Platforms\r\n\r\n| Platform / Environment | Minimum Supported Versions | Support Level | Known Constraints |\r\n| :--- | :--- | :---: | :--- |\r\n| **Google Chrome / Chromium** | Version `>= 120` | Tier 1 (Official) | Optimal WebSockets and WebGL performance. |\r\n| **Mozilla Firefox** | Version `>= 115 ESR` | Tier 1 (Official) | Full client certificate support. |\r\n| **Safari / WebKit** | Version `>= 17.0` | Tier 2 (Functional) | Requires explicit mTLS enablement in macOS Keychain. |\r\n| **Terminal / CLI (Linux / macOS / Windows)** | Node.js `>= 18` or Bash `>= 5.0` | Tier 1 (Official) | Full support on PowerShell 7+ and bash. |\r\n\r\n### 3.3 Configuration Files and Data Formats Compatibility\r\n\r\n| Format / Artifact | Source Version Supported | Automatic Conversion | User Action Required |\r\n| :--- | :---: | :---: | :--- |\r\n| **`config.yaml`** | `v0.9.x` | \u2705 Yes | None. Application migrates deprecated keys on startup. |\r\n| **Export Profiles (`.json`)** | `v0.9.x` | \u2705 Yes | 100% backward compatible. |\r\n\r\n---\r\n\r\n## 4. Application Installation, Access, and Configuration\r\n\r\n### 4.1 Access Channels and Prerequisites\r\n\r\n- **Web Portal / UI**: Access URL (e.g., `https://app.system.internal`).\r\n- **Command Line (CLI)**: Executable binary or package (e.g., `npx system-cli` or `./system-client`).\r\n- **Supported Browsers or Platforms**: Chrome >= 120, Firefox >= 120, Linux/macOS/Windows terminal.\r\n\r\n### 4.2 Client Configuration and Environment Variables\r\n\r\nThe application allows parameterizing its behavior via environment variables or local configuration files:\r\n\r\n| Parameter / Variable | Type | Default Value | Required | Description |\r\n| :--- | :--- | :--- | :---: | :--- |\r\n| `API_ENDPOINT` | URL | `https://api.system.internal/v1` | Yes | Base backend API endpoint. |\r\n| `WS_STREAM_URL` | WSS URL | `wss://stream.system.internal/telemetry` | No | Real-time telemetry or notifications socket. |\r\n| `CLIENT_TIMEOUT_MS` | Integer | `5000` | No | Network response timeout in milliseconds. |\r\n| `AUTH_PROFILE` | String | `production` | No | Active authentication profile (`development`, `staging`, `production`). |\r\n\r\n### 4.3 Local Configuration File (`config.yaml` / `.env`)\r\n\r\nExample recommended configuration for operator workstations:\r\n\r\n```yaml\r\n# Client configuration file: config.yaml\r\nprofile: production\r\nnetwork:\r\n  api_endpoint: "https://api.system.internal/v1"\r\n  stream_url: "wss://stream.system.internal/telemetry"\r\n  timeout_ms: 5000\r\n  retry_attempts: 3\r\n\r\nsecurity:\r\n  tls_verify: true\r\n  client_cert_path: "/etc/pki/client/operator.crt"\r\n  client_key_path: "/etc/pki/client/operator.key"\r\n\r\nui:\r\n  theme: "dark"\r\n  refresh_interval_sec: 1\r\n```\r\n\r\n---\r\n\r\n## 5. Step-by-Step Journey Execution Guide (`JRN-*`)\r\n\r\nEach subsection documents an end-to-end Journey, specifying authorized execution roles, starting conditions, and the step-by-step operating procedure.\r\n\r\n### 5.1 `JRN-JOURNEY-001`: User Journey Name\r\n\r\n- **Linked Use Case**: `UC-ACTION-001`\r\n- **Primary Actor**: `ACT-ROLE-USER-001`\r\n- **Authorized Roles**: `ROLE_USER`, `ROLE_OPERATOR`\r\n- **Required Execution Enclave**: Corporate Intranet or VPN access\r\n\r\n#### A. Preconditions\r\n1. User must have an active and authenticated session with their authorized role.\r\n2. The base entity or resource must be in `ACTIVE` state.\r\n\r\n#### B. Step-by-Step Procedure\r\n\r\n1. **Step 1: Operation Initiation**\r\n   - **Action**: User navigates to the execution section or invokes the corresponding command:\r\n     ```bash\r\n     system-cli execute --journey JRN-JOURNEY-001 --input payload.json\r\n     ```\r\n   - **Required Input**: Resource identifier and validated parameters.\r\n   - **Expected On-Screen Response**: System displays confirmation dialog with operation summary.\r\n\r\n2. **Step 2: Validation and Submission**\r\n   - **Action**: User reviews parameters and confirms execution.\r\n   - **System Behavior**: Client locally validates data schema and transmits signed request.\r\n\r\n3. **Step 3: Observable Outcome Verification**\r\n   - **Success Outcome**: Console / interface displays success message `MSG-SUCCESS-001` with generated unique transaction ID.\r\n   - **Final State**: Resource transitions to `PROCESSED` state.\r\n\r\n#### C. Alternative Flows and Exception Handling\r\n- **Unauthorized Access**: If an unauthorized role attempts to invoke the journey, the system blocks the action, outputs code `MSG-ERR-AUTH-403`, and records the access attempt in the audit trail.\r\n- **Connection Loss in Transit**: If connection is lost during step 2, client retries with exponential backoff up to 3 times before notifying user.\r\n\r\n---\r\n\r\n## 6. System Messages Catalog and Response Codes\r\n\r\nStructured matrix of key informational, warning, and error messages emitted by the application during its operational lifecycle:\r\n\r\n| Code | Severity | Literal Screen Message | Trigger / Context | Meaning for User | Recommended Corrective Action |\r\n| :--- | :--- | :--- | :--- | :--- | :--- |\r\n| **`MSG-SYS-100`** | `INFO` | `"Connection established successfully with server"` | Successful network handshake upon initializing session. | Application is online and ready to process commands. | None. Normal operation. |\r\n| **`MSG-SYS-200`** | `INFO` | `"Operation completed successfully. Transaction ID: [TX-ID]"` | Successful completion of a Journey or Use Case. | Transaction was persisted and acknowledged by backend. | Save `TX-ID` for tracking if required. |\r\n| **`MSG-WARN-301`** | `WARN` | `"High link latency (>500ms). Degraded mode active"` | Response metric exceeds real-time threshold. | Screen data may experience slight refresh delays. | Check network connection quality or bandwidth. |\r\n| **`MSG-WARN-302`** | `WARN` | `"Session expiring in 5 minutes"` | Authentication token approaching TTL expiry. | User will be logged out unless credential is refreshed. | Renew session by clicking alert or re-authenticating. |\r\n| **`MSG-ERR-401`** | `ERR-USER` | `"Invalid credentials or expired token. Access denied"` | Login authentication failure or expired token. | User identity could not be validated. | Re-enter credentials or request a new token. |\r\n| **`MSG-ERR-403`** | `ERR-USER` | `"Unauthorized action for assigned role [ROLE]"` | Attempted execution of Journey or command outside RBAC. | User role lacks permissions for this resource. | Contact administrator to request permission expansion. |\r\n| **`MSG-ERR-422`** | `ERR-USER` | `"Invalid payload: field [FIELD] does not match schema"` | Syntactic validation or business rule (`BR-*`) failure. | User-supplied data is invalid. | Correct indicated fields according to business rule. |\r\n| **`MSG-ERR-503`** | `ERR-SYS` | `"Service temporarily unavailable. Retrying..."` | Backend gateway unreachable or under scheduled maintenance. | Central server is not responding to requests. | Await automatic retries or check system status page. |\r\n\r\n---\r\n\r\n## 7. Frequently Asked Questions (FAQ) and Support\r\n\r\n- **What should I do if I lose connectivity while executing a Journey?**  \r\n  The application implements idempotency mechanisms. Once network connectivity is restored, verify resource status before retrying to prevent duplicate transactions.\r\n- **How do I request a user role change?**  \r\n  Contact the Security Administrator (`SecOps`) referencing your user ID and operational justification for the role change.\r\n\r\n---\r\n\r\n## 8. Revision History and Version Control\r\n\r\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\r\n| :--- | :--- | :--- | :--- | :--- |\r\n| **1.0.0** | 2026-09-15 | Documentation & Product Team | Initial User Manual generation | CHG-009 |\r\n';
+var STARTER_TEMPLATES_PRIVACY_DATA_ASSET_TEMPLATE_MD = '---\nid: DATA-ASSET-USER-PROFILE-001\ntype: data-asset\ntitle: User Profile & Identity Personal Data Asset\nstatus: draft\nversion: "1.0.0"\nschema-version: "1.0"\nclassification: confidential-pii # public, internal, confidential-pii, special-category-sensitive\npii-categories:\n  - identifiers\n  - contact\ndata-subjects:\n  - ACT-USER-001\nfields:\n  - name: email\n    sensitivity: pii\n    masking-strategy: sha256-salt\n  - name: phone_number\n    sensitivity: pii\n    masking-strategy: redact\n  - name: operator_callsign\n    sensitivity: internal\n    masking-strategy: none\nretention-period: 365d\nerasure-method: crypto-shredding\nowner-bounded-context: CMP-IDENTITY-SERVICE-001\nsupersedes: null\nsuperseded-by: null\n---\n\n# DATA-ASSET-USER-PROFILE-001: User Profile & Identity Personal Data Asset\n\n## 1. Data Asset Inventory & Purpose\nDescribes the structure, storage medium, and operational boundary of the personal data asset governed under GDPR / ISO 27701.\n\n## 2. Field-Level Sensitivity & Masking Policy\n\n| Field Name | Sensitivity | Masking / Pseudonymization Strategy | Allowed in Logs | Allowed in AI Prompts |\n| :--- | :--- | :--- | :---: | :---: |\n| `email` | `pii` | `sha256-salt` | \u274C No | \u274C No |\n| `phone_number` | `pii` | `redact` | \u274C No | \u274C No |\n| `operator_callsign` | `internal` | `none` | \u2705 Yes | \u2705 Yes |\n\n## 3. Storage Limitation & Right to Erasure (GDPR Art. 17)\n- **Maximum Retention TTL**: `365d` after account deactivation.\n- **Erasure Mechanism**: `crypto-shredding` (destruction of per-subject encryption key and PII column purge).\n\n---\n\n## 4. Revision History and Version Control\n\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\n| :--- | :--- | :--- | :--- | :--- |\n| **1.0.0** | 2026-10-17 | Privacy Officer (`agent-privacy-officer`) | Initial personal data asset inventory | CHG-PRIV-001 |\n';
+var STARTER_TEMPLATES_PRIVACY_DPIA_REQUEST_TEMPLATE_MD = '---\nid: DPIA-ASSESSMENT-001\ntype: dpia-request\ntitle: Data Protection Impact Assessment (DPIA / EIPD) Request\nstatus: pending-dpo-approval # pending-dpo-approval, approved, rejected\nversion: "1.0.0"\nschema-version: "1.0"\nropa-reference: PRIV-ROPA-USER-AUTH-001\ndata-assets:\n  - DATA-ASSET-USER-PROFILE-001\nspecial-category-triggers:\n  - "GDPR Art. 9 Special Category Data or Automated Profiling"\nresidual-risk-level: MEDIUM # LOW, MEDIUM, HIGH\n---\n\n# Data Protection Impact Assessment (DPIA / EIPD \u2014 GDPR Art. 35)\n\n## 1. Trigger & Necessity Assessment\n- **Associated ROPA**: `PRIV-ROPA-USER-AUTH-001`\n- **Data Assets Affected**: `DATA-ASSET-USER-PROFILE-001`\n- **Why a DPIA is Mandatory**: Processing involves `special_category_sensitive` data (biometrics, health, precise geolocation) or systematic automated profiling under GDPR Art. 35.\n\n## 2. Necessity, Proportionality & LINDDUN Risk Matrix\n\n| LINDDUN Threat Category | Identified Privacy Risk | Intrinsic Risk | Technical Mitigation (`PRIV-REQ-*`) | Residual Risk |\n| :--- | :--- | :---: | :--- | :---: |\n| **Identifiability** | Re-identification of operator from telemetry streams | HIGH | `PRIV-REQ-MASKING-001` (SHA-256 salted pseudonymization) | LOW |\n| **Disclosure of Information** | Plaintext PII leakage in error logs | HIGH | `PRIV-REQ-MASKING-001` (Redaction middleware) | LOW |\n\n## 3. Mandatory Human Sovereign Signatures (DPO & Legal)\n- [ ] **Data Protection Officer (DPO)**: Necessity, proportionality, and GDPR Art. 35 validation\n- [ ] **Legal / Privacy Counsel**: Lawful basis and cross-border transfer clauses verified\n- [ ] **Security Officer (CISO) / System Architect**: Cryptographic and enclave controls verified\n';
+var STARTER_TEMPLATES_PRIVACY_PRIVACY_REQ_TEMPLATE_MD = '---\nid: PRIV-REQ-MASKING-001\ntype: privacy-requirement\ntitle: Mandatory Pseudonymization and Log Redaction of Operator PII\nstatus: draft\nversion: "1.0.0"\nschema-version: "1.0"\nprivacy-principle: data-minimization # data-minimization, purpose-limitation, storage-limitation, accuracy, integrity-and-confidentiality, transparency-and-consent, data-subject-rights-arco, pseudonymization-anonymization\nlinddun-category: identifiability # linkability, identifiability, non-repudiation, detectability, disclosure-of-information, unawareness, non-compliance\ngoverns-ropa:\n  - PRIV-ROPA-USER-AUTH-001\nprotects-data-assets:\n  - DATA-ASSET-USER-PROFILE-001\nenforced-in-enclave: SEC-ENC-DMZ-001\ncompliance-references:\n  - "GDPR-Art-25-Privacy-by-Design"\n  - "GDPR-Art-32-Pseudonymization"\n  - "ISO-27701-A.7.4"\nacceptance-format: gherkin\ncucumber-tags:\n  - "@PRIV-REQ-MASKING-001"\n  - "@privacy"\n  - "@linddun"\nsupersedes: null\nsuperseded-by: null\n---\n\n# PRIV-REQ-MASKING-001: Mandatory Pseudonymization and Log Redaction of Operator PII\n\n## 1. Technical Privacy Control Statement\nThe system MUST pseudonymize or redact all `confidential-pii` fields (`email`, `phone_number`) prior to emitting structured application logs, telemetry traces, or external AI prompts, and MUST enforce automated TTL purge after `365d`.\n\n---\n\n## 2. Upstream Privacy Traceability (PDaC)\n\n| Dimension | Link / Artifact | Relationship Type | Status |\n| :--- | :--- | :--- | :--- |\n| **Record of Processing (ROPA)** | `PRIV-ROPA-USER-AUTH-001` | Governs Processing Activity | Validated |\n| **Protected Data Asset** | `DATA-ASSET-USER-PROFILE-001` | Enforces Field Masking & TTL | Validated |\n\n---\n\n## 3. Privacy Verification Criteria in Gherkin Format (Cucumber Privacy Tests)\n\n```gherkin\n@PRIV-REQ-MASKING-001 @privacy @linddun\nFeature: Personal Data Pseudonymization and Zero-PII Telemetry Logging\n  As a Data Protection Officer (DPO)\n  I want all personal identifiers to be redacted or salted-hashed before logging\n  So that application logs and telemetry never expose raw personal data\n\n  Scenario: Structured logger redacts PII fields automatically (Nominal Privacy Control)\n    Given an authenticated operator session with email "operator@example.com" and phone "+34600112233"\n    When the telemetry ingestion service emits an audit log entry\n    Then the serialized log payload must not contain the literal string "operator@example.com"\n    And the serialized log payload must not contain the literal string "+34600112233"\n    And the email field must be replaced by a deterministic SHA-256 salted pseudonym\n\n  Scenario: Right to erasure purges expired or revoked subject records\n    Given a personal data record for subject "ACT-USER-001" exceeding the "365d" retention TTL\n    When the automated retention enforcement job executes\n    Then the personal data fields must be irreversibly erased via crypto-shredding\n```\n\n---\n\n## 4. Revision History and Version Control\n\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\n| :--- | :--- | :--- | :--- | :--- |\n| **1.0.0** | 2026-10-17 | Privacy Officer (`agent-privacy-officer`) | Initial privacy control specification | CHG-PRIV-001 |\n';
+var STARTER_TEMPLATES_PRIVACY_PRIVACY_ROPA_TEMPLATE_MD = '---\nid: PRIV-ROPA-USER-AUTH-001\ntype: privacy-ropa\ntitle: Record of Processing Activity for Operator Authentication and Session Audit\nstatus: draft\nversion: "1.0.0"\nschema-version: "1.0"\nlawful-basis: contract # consent, contract, legal-obligation, vital-interests, public-task, legitimate-interests\nspecial-category-condition: null\nprocessing-purpose: "Authenticate authorized operators and maintain tamper-evident operational session audit trails."\nuse-cases:\n  - UC-ACTION-001\ndata-assets:\n  - DATA-ASSET-USER-PROFILE-001\ndata-subjects:\n  - ACT-USER-001\nretention-ttl: 365d\ncross-border-transfer: false\ntransfer-safeguards: null\nsubprocessors: []\ndpia-required: false\ndpia-reference: null\nmitigated-by:\n  - PRIV-REQ-MASKING-001\nsupersedes: null\nsuperseded-by: null\n---\n\n# PRIV-ROPA-USER-AUTH-001: Record of Processing Activity (GDPR Art. 30)\n\n## 1. Processing Activity Summary & Lawful Basis\n- **Lawful Basis (GDPR Art. 6.1)**: `contract` \u2014 Necessary for the performance of the operator service agreement.\n- **Purpose of Processing**: Authenticate authorized operators and maintain tamper-evident operational session audit trails.\n\n## 2. Linked Product & Data Artifacts\n\n| Dimension | Artifact ID | Relationship |\n| :--- | :--- | :--- |\n| **Triggering Use Cases** | `UC-ACTION-001` | Initiates personal data collection/processing |\n| **Data Assets Processed** | `DATA-ASSET-USER-PROFILE-001` | Personal data fields subject to minimization |\n| **Data Subjects** | `ACT-USER-001` | Natural persons whose data is processed |\n| **Governing Privacy Controls** | `PRIV-REQ-MASKING-001` | Technical privacy-by-design controls |\n\n## 3. International Transfers & Subprocessors\n- **Cross-Border Transfer Outside EEA**: `false`\n- **Authorized Subprocessors**: None (In-house processing within `SEC-ENC-DMZ-001`).\n\n---\n\n## 4. Revision History and Version Control\n\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\n| :--- | :--- | :--- | :--- | :--- |\n| **1.0.0** | 2026-10-17 | Privacy Officer (`agent-privacy-officer`) | Initial GDPR Art. 30 ROPA entry | CHG-PRIV-001 |\n';
 var STARTER_TEMPLATES_PRODUCT_ACTOR_TEMPLATE_MD = '---\r\nid: ACT-NAME-001\r\ntype: actor\r\ntitle: Descriptive Actor Title\r\nstatus: draft\r\nversion: "1.0.0"\r\nschema-version: "1.0"\r\nrole-type: human-user # human-user, ai-agent, external-system, sensor-iot\r\ndescription: One-sentence summary of the role this actor performs in the system.\r\nsupersedes: null\r\nsuperseded-by: null\r\n---\r\n\r\n# ACT-NAME-001: Descriptive Actor Title\r\n\r\n## 1. Profile and Responsibility\r\nDescribes who this actor is, their operational context, and what goals they pursue when interacting with the product.\r\n\r\n## 2. System Touchpoints\r\n- Interaction channels (Web UI, REST API, WebSocket, Messaging).\r\n- Privilege level and latency/availability expectations.\r\n\r\n---\r\n\r\n## 3. Revision History and Version Control\r\n\r\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\r\n| :--- | :--- | :--- | :--- | :--- |\r\n| **1.0.0** | 2026-09-03 | Product Owner / Analyst | Initial actor profile creation | CHG-INIT-001 |\r\n';
 var STARTER_TEMPLATES_PRODUCT_BUSINESS_RULE_TEMPLATE_MD = '---\r\nid: BR-DOMAIN-001\r\ntype: business-rule\r\ntitle: Business Rule Name\r\nstatus: draft\r\nversion: "1.0.0"\r\nschema-version: "1.0"\r\nenforcement-level: strict-invariant # strict-invariant, override-with-approval, guideline\r\ndefined-in: BC-CONTEXT-001\r\nuses-terms:\r\n  - TERM-TERM-001\r\nsupersedes: null\r\nsuperseded-by: null\r\n---\r\n\r\n# BR-DOMAIN-001: Business Rule Name\r\n\r\n## 1. Rule Definition\r\nFormally establishes the business invariant that must not be violated under any circumstance.\r\n\r\n## 2. Business Rationale and Consequences\r\n- **Why it exists**: Economic, regulatory, or technical justification for the constraint.\r\n- **Action upon violation**: Immediate transaction rejection with a formal error code.\r\n\r\n---\r\n\r\n## 3. Revision History and Version Control\r\n\r\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\r\n| :--- | :--- | :--- | :--- | :--- |\r\n| **1.0.0** | 2026-09-03 | Product Owner / Analyst | Initial business rule definition | CHG-INIT-001 |\r\n';
 var STARTER_TEMPLATES_PRODUCT_JOURNEY_TEMPLATE_MD = '---\r\nid: JRN-NAME-001\r\ntype: journey\r\ntitle: Descriptive User or Operator Journey Title\r\nstatus: draft\r\nversion: "1.0.0"\r\nschema-version: "1.0"\r\npersona: ACT-OPERATOR-001\r\nstages:\r\n  - "Discovery and Planning"\r\n  - "Configuration and Pre-flight"\r\n  - "Mission Execution"\r\n  - "Post-Analysis and Wrap-up"\r\ntouchpoints:\r\n  - "Mission planning web portal"\r\n  - "Ground control station (GCS)"\r\n  - "Real-time telemetry dashboard"\r\n  - "Flight report exporter"\r\nrelated-use-cases:\r\n  - UC-PLAN-MISSION-001\r\n  - UC-MONITOR-FLIGHT-001\r\npain-points:\r\n  - "Latency when loading offline navigation maps"\r\n  - "Complexity in manual flight plan reconciliation"\r\nsupersedes: null\r\nsuperseded-by: null\r\n---\r\n\r\n# JRN-NAME-001: Descriptive User or Operator Journey Title\r\n\r\n## 1. Actor / Primary Persona Profile\r\n- **Protagonist Actor**: `ACT-OPERATOR-001`\r\n- **Main Goal**: Complete operational workflow with high efficiency, safety, and real-time visibility.\r\n\r\n---\r\n\r\n## 2. Journey Stages Map\r\n\r\n| Stage | User Goal | Touchpoints | Frictions / Pain Points |\r\n| :--- | :--- | :--- | :--- |\r\n| **1. Discovery and Planning** | Design route and validate operational constraints | Mission planning web portal | Complexity in manual flight plan reconciliation |\r\n| **2. Configuration and Pre-flight** | Verify subsystem health and link integrity | Ground control station (GCS) | Latency when loading offline navigation maps |\r\n| **3. Mission Execution** | Supervise telemetry and respond to alerts | Real-time telemetry dashboard | None detected in nominal flow |\r\n| **4. Post-Analysis and Wrap-up** | Export mission logs and performance metrics | Flight report exporter | Telemetry consolidation latency |\r\n\r\n---\r\n\r\n## 3. Traceability to Use Cases and Product\r\n\r\n- `UC-PLAN-MISSION-001`: Planning and validation of safe corridors.\r\n- `UC-MONITOR-FLIGHT-001`: Ingestion and visualization of real-time telemetry.\r\n\r\n---\r\n\r\n## 4. Revision History\r\n\r\n| Version | Date | Author / Agent | Change Description | Change Reference (Change/PR) |\r\n| :--- | :--- | :--- | :--- | :--- |\r\n| **1.0.0** | 2026-09-23 | Product Manager / UX Lead | Initial operator journey definition | CHG-INIT-001 |\r\n';
@@ -13316,10 +14128,10 @@ Describes the adversary's profile, technical skill level, available resources, a
 | :--- | :--- | :--- | :--- | :--- |\r
 | **1.0.0** | 2026-09-03 | Security Officer / Threat Modeler | Initial threat profile characterization | CHG-SEC-001 |\r
 `;
-var STARTER_TEMPLATES_WORKFLOW_AGENT_HANDOFF_TEMPLATE_MD = '# Workflow Handoff Template\r\n\r\n> **Canonical reference:** [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md) and [`process/01_governance_and_roles.md`](../../process/01_governance_and_roles.md).\r\n>\r\n> **Activation Criterion by Autonomy Mode:**\r\n> - \u{1F7E2} **`AUTONOMOUS` (or exclusive supervision at the end in PR/CI):** OMITTED. The agent executes and delivers without interrupting the user with this handoff block.\r\n> - \u{1F7E1} **`HUMAN_REVIEW_PLAN` | \u{1F7E0} `AMBIGUOUS` | \u{1F534} `HIGH_RISK_MANUAL`:** MANDATORY. Upon completing the phase or proposal, the agent emits this block and **halts**, granting visibility to the user and relinquishing control.\r\n\r\n---\r\n\r\n### \u{1F504} Workflow Handoff\r\n\r\n- **Completed Phase / Activity**: `[Current phase, e.g. Product Definition / Threat Modeling / Architecture / SDD Implementation]`\r\n- **Acting Role**: `[agent-product-analyst | agent-threat-modeler | agent-system-architect | agent-developer | agent-expert-user | agent-security-auditor | agent-compliance-checker]`\r\n- **Task Autonomy Mode**: `[HUMAN_REVIEW_PLAN | AMBIGUOUS | HIGH_RISK_MANUAL]`\r\n- **Produced Deliverables**:\r\n  - [x] `[Path or ID of generated artifact, e.g. specs/product/uc-mission.md]`\r\n  - [x] `[Path or ID of generated artifact, e.g. quality-report.md]`\r\n\r\n- **Recommended Next Role(s) in Workflow**:\r\n  - `[Suggested role name, e.g. agent-threat-modeler]`: `[Technical rationale, e.g. Model STRIDE adversaries and mitigate abuse cases]`\r\n  - *(Optional)* `[Alternative role, e.g. agent-expert-user]`: `[Technical rationale, e.g. Evaluate UX and MVP boundary]`\r\n\r\n- **Suggested Invocation Prompt**:\r\n  > "Act as `[next-role]` and proceed with the `[next phase]` phase on the generated deliverables: `[key artifacts]`."\r\n\r\n- **Human Action Window (User Sovereignty and Priority)**:\r\n  - \u270B **Review and Validate**: Inspect generated artifacts and validate alignment with project vision before proceeding.\r\n  - \u270F\uFE0F **Edit Directly**: Modify requirements, code, or acceptance criteria directly at any time.\r\n  - \u{1F6D1} **Pause, Divert, or Discard**: Freeze workflow, redirect toward another goal, or discard proposal.\r\n  - \u25B6\uFE0F **Delegate to Next Agent**: If satisfied with output, execute suggested prompt to continue the chain.\r\n\r\n---\r\n';
+var STARTER_TEMPLATES_WORKFLOW_AGENT_HANDOFF_TEMPLATE_MD = '# Workflow Handoff Template\r\n\r\n> **Canonical reference:** [`process/09_agent_protocols.md`](../../process/09_agent_protocols.md) and [`process/01_governance_and_roles.md`](../../process/01_governance_and_roles.md).\r\n>\r\n> **Activation Criterion by Autonomy Mode:**\r\n> - \u{1F7E2} **`AUTONOMOUS` (or exclusive supervision at the end in PR/CI):** OMITTED. The agent executes and delivers without interrupting the user with this handoff block.\r\n> - \u{1F7E1} **`HUMAN_REVIEW_PLAN` | \u{1F7E0} `AMBIGUOUS` | \u{1F534} `HIGH_RISK_MANUAL`:** MANDATORY. Upon completing the phase or proposal, the agent emits this block and **halts**, granting visibility to the user and relinquishing control.\r\n\r\n---\r\n\r\n### \u{1F504} Workflow Handoff\r\n\r\n- **Completed Phase / Activity**: `[Current phase, e.g. Product Definition / Threat Modeling / Privacy Modeling / Architecture / SDD Implementation]`\r\n- **Acting Role**: `[agent-product-analyst | agent-threat-modeler | agent-privacy-officer | agent-system-architect | agent-developer | agent-expert-user | agent-security-auditor | agent-compliance-checker]`\r\n- **Task Autonomy Mode**: `[HUMAN_REVIEW_PLAN | AMBIGUOUS | HIGH_RISK_MANUAL]`\r\n- **Produced Deliverables**:\r\n  - [x] `[Path or ID of generated artifact, e.g. specs/product/uc-mission.md]`\r\n  - [x] `[Path or ID of generated artifact, e.g. quality-report.md]`\r\n\r\n- **Recommended Next Role(s) in Workflow**:\r\n  - `[Suggested role name, e.g. agent-threat-modeler]`: `[Technical rationale, e.g. Model STRIDE adversaries and mitigate abuse cases]`\r\n  - *(Optional)* `[Alternative role, e.g. agent-expert-user]`: `[Technical rationale, e.g. Evaluate UX and MVP boundary]`\r\n\r\n- **Suggested Invocation Prompt**:\r\n  > "Act as `[next-role]` and proceed with the `[next phase]` phase on the generated deliverables: `[key artifacts]`."\r\n\r\n- **Human Action Window (User Sovereignty and Priority)**:\r\n  - \u270B **Review and Validate**: Inspect generated artifacts and validate alignment with project vision before proceeding.\r\n  - \u270F\uFE0F **Edit Directly**: Modify requirements, code, or acceptance criteria directly at any time.\r\n  - \u{1F6D1} **Pause, Divert, or Discard**: Freeze workflow, redirect toward another goal, or discard proposal.\r\n  - \u25B6\uFE0F **Delegate to Next Agent**: If satisfied with output, execute suggested prompt to continue the chain.\r\n\r\n---\r\n';
 var STARTER__GITHUB_PULL_REQUEST_TEMPLATE_MD = "## 1. SDD Identification and Traceability\r\n\r\n- **SDD Change Specification**: `specs/changes/active/<change-id>/` <!-- Link to active change directory -->\r\n- **PDaC Handoff Sidecar**: `specs/changes/active/<change-id>/handoff.yaml` <!-- ID: HOF-* -->\r\n- **Git Hierarchy Tier (4 Tiers)**:\r\n  - [ ] Tier 4: `task/<PARENT-ID>/<TSK-ID>-<slug>` \u2794 `feat/<PARENT-ID>-<slug>`\r\n  - [ ] Tier 3: `feat/<FEAT-ID>-<slug>` \u2794 `release/vX.Y.Z`\r\n  - [ ] Tier 2: `release/vX.Y.Z` \u2794 `main`\r\n- **Linked Issues**: Closes #... / Refs #...\r\n\r\n---\r\n\r\n## 2. \u{1F4CB} Plan Execution Matrix and Testing Status (`X` vs `O`)\r\n\r\n> [!IMPORTANT]\r\n> **Non-Negotiable Total Exhaustiveness Rule**:\r\n> This table must include **each and every item identified for implementation** in the delivery plan (originating from `tasks.md`, the SDD specification, or issue criteria), without omitting any or creating abstract groupings.\r\n>\r\n> **Mandatory Marking Convention**:\r\n> - **`[X]` (Completed and Tested)**: Item is 100% implemented and has verifiable automated tests on disk (`tests/` or `.feature`) passing green.\r\n> - **`[O]` (Problem / Blocked)**: If there was any issue, technical limitation, failing test, or deferred scope, it must be marked with `[O]` and **full mandatory justification is required**:\r\n>   1. **Technical root cause** or encountered limitation.\r\n>   2. **Impact** on increment or system.\r\n>   3. **Mitigation** or rationale for deferral.\r\n>   4. **Formal reference** to tracking issue (GitHub Issue or `ADR-TECH-DEBT-*`).\r\n>\r\n> *Any PR with omitted planned items or unjustified `[O]` will be immediately blocked and rejected by the Tech Lead.*\r\n\r\n| Task / Item ID | Planned Description | Status (`[X]` / `[O]`) | Test Evidence on Disk or Mandatory Justification of `[O]` |\r\n| :--- | :--- | :---: | :--- |\r\n| `TSK-001` | <!-- e.g. Contract DTOs and Interfaces Definition --> | **[X]** | Covered in `tests/unit/dto.spec.ts` (100% pass) |\r\n| `TSK-002` | <!-- e.g. Network disconnection resilience --> | **[O]** | **Root cause:** TCP socket mock exhibits race conditions in CI.<br>**Impact:** Low in prod, flaky test.<br>**Mitigation:** Temporary extended timeout; tracked in issue #... |\r\n\r\n---\r\n\r\n## 3. \u{1F5FA}\uFE0F Weak Points Map and Risk Hotspots (Weak Points Hotspots)\r\n\r\n### A. Complexity Hotspots\r\n<!-- Record functions nearing quality-policy.yaml thresholds: CC > 7 (max 10), Cognitive > 10 (max 15), LOC > 30 (max 40), MI < 70 (min 50/65) -->\r\n| File | Function / Module | Metrics (CC / Cognitive / LOC / MI) | Technical Maintainability Justification |\r\n| :--- | :--- | :---: | :--- |\r\n| <!-- e.g. src/engine.ts --> | <!-- parsePayload() --> | CC: 8, Cog: 11, LOC: 32, MI: 72 | Deterministic parser without recursion; exhaustively tested. |\r\n\r\n### B. Edge Cases and Blind Spots\r\n<!-- Scenarios not covered by automated unit tests (concurrency, network timeouts, memory, jitter) -->\r\n- [ ] **Edge Case 1**: <!-- Scenario description, estimated risk, and operational mitigation -->\r\n- [ ] **Edge Case 2**: <!-- Scenario description, estimated risk, and operational mitigation -->\r\n\r\n### C. AI Assumptions\r\n<!-- Behaviors or heuristics assumed by the agent during implementation that require critical human review -->\r\n- [ ] **Assumption 1**: <!-- e.g. Assumed payload always arrives pre-parsed in UTF-8 -->\r\n- [ ] **Assumption 2**: <!-- e.g. Default timeout set to 5000ms as not stipulated in spec -->\r\n\r\n---\r\n\r\n## 4. \u{1F6E1}\uFE0F Attack Surface and Cybersecurity (STRIDE / Zero Trust)\r\n\r\n- [ ] **New External Channels**: Does it introduce HTTP endpoints, sockets, IPC channels, or brokers?\r\n- [ ] **Sanitization and Inputs**: Are all external inputs validated with strict typing schemas (Zod/JSON Schema)?\r\n- [ ] **Insecure Serialization**: Is polymorphic deserialization or dynamic code evaluation avoided?\r\n- [ ] **Secrets and Enclaves**: Are cryptographic keys, credentials, sensitive env vars, or enclaves (`SEC-ENC-*`) handled?\r\n- [ ] **Mitigated Security Requirements**: Implemented IDs (e.g. `SEC-REQ-*`) and associated tests (`SEC-TEST-*` or `.feature`).\r\n\r\n---\r\n\r\n## 5. \u{1F4E6} Dependencies and Licenses Inspection\r\n\r\n- **New Dependencies Added**:\r\n  | Package | Version | License Type | `license-policy.yaml` Verification |\r\n  | :--- | :---: | :---: | :---: |\r\n  | <!-- e.g. zod --> | <!-- ^3.22.4 --> | <!-- MIT --> | <!-- \u2714 Compliant (Permissive) --> |\r\n- [ ] Zero dependencies with prohibited licenses (GPLv3/AGPL/unapproved commercial).\r\n- [ ] Verification executed successfully (`pnpm run verify:licenses`).\r\n\r\n---\r\n\r\n## 6. \u2705 Deterministic Pre-Flight Checklist (Release Gates)\r\n\r\n- [ ] **Strict Typing and Linter**: `pnpm run typecheck` (zero errors, zero unjustified suppressions).\r\n- [ ] **Quality Gate**: `pnpm run verify:quality` (CC $\\le 10$, Cognitive $\\le 15$, MI $\\ge 50$, LOC $\\le 40$).\r\n- [ ] **BDD / Unit Tests**: `pnpm run verify:testing` (Gherkin scenarios synchronized and 100% passing).\r\n- [ ] **360\xB0 Traceability**: `pnpm run verify:traceability` (no orphan requirements).\r\n- [ ] **Open Source Licenses**: `pnpm run verify:licenses` (strict policy compliance).\r\n- [ ] **Schema Compliance**: `pnpm run verify:schemas` (100% of artifacts conform to JSON Schema).\r\n- [ ] **Full Test Suite**: `pnpm run test:all` / `pnpm run verify:all` (general green CI approval).\r\n\r\n---\r\n\r\n## 7. \u{1F6A8} Contingency Plan, Observability, and Rollback\r\n\r\n- **Observability Metrics and Alarms**: <!-- What metrics (p99 latency, 5xx error rate, memory) or logs should be monitored post-deployment? -->\r\n- **Rollback Procedure**: <!-- Exact command or procedure to revert change without collateral impact (e.g. git revert -m 1 <sha>) -->\r\n\r\n---\r\n\r\n## 8. \u{1F4CA} AI-SDLC: Aggregated KPIs Summary\r\n\r\n<!-- AI-SDLC-KPI-SUMMARY-START -->\r\n| Metric | Human | Total PR |\r\n| :--- | :---: | :---: |\r\n| **Commits Made** | - | **-** |\r\n| **Lines Added / Modif.** | - | **-** |\r\n| **Active Development Time** | - | **-** |\r\n| **Consumed Tokens (In+Out)** | - | **-** |\r\n| **Estimated Cost (\u20AC/$)** | \u2014 (Labor) | **-** |\r\n\r\n> *This block is updated automatically via `aisdlc kpi pr` or the CI workflow.*\r\n<!-- AI-SDLC-KPI-SUMMARY-END -->\r\n";
 var STARTER_COMPLIANCE_LICENSE_MANIFEST_YAML = '# ==============================================================================\r\n# AI-SDLC: Manifiesto de Cumplimiento de Licencias Evaluadas\r\n# ==============================================================================\r\n# Verificado contra: /license-policy.yaml\r\n# ==============================================================================\r\n\r\nevaluated_dependencies:\r\n  - package: "@modelcontextprotocol/sdk"\r\n    version: "1.0.4"\r\n    spdx_license: "MIT"\r\n    category: "permissive_free"\r\n    status: "APPROVED"\r\n    usage: "SDK oficial para servidor Model Context Protocol."\r\n    commercial_payment_required: false\r\n\r\n  - package: "commander"\r\n    version: "12.1.0"\r\n    spdx_license: "MIT"\r\n    category: "permissive_free"\r\n    status: "APPROVED"\r\n    usage: "Parser de l\xEDnea de comandos para @ai-sdlc/cli."\r\n    commercial_payment_required: false\r\n\r\n  - package: "zod"\r\n    version: "3.23.8"\r\n    spdx_license: "MIT"\r\n    category: "permissive_free"\r\n    status: "APPROVED"\r\n    usage: "Validaci\xF3n de esquemas y tipos en runtime."\r\n    commercial_payment_required: false\r\n\r\n  - package: "js-yaml"\r\n    version: "4.1.0"\r\n    spdx_license: "MIT"\r\n    category: "permissive_free"\r\n    status: "APPROVED"\r\n    usage: "Parser y serializador YAML para especificaciones y frontmatter."\r\n    commercial_payment_required: false\r\n\r\n  - package: "chalk"\r\n    version: "5.3.0"\r\n    spdx_license: "MIT"\r\n    category: "permissive_free"\r\n    status: "APPROVED"\r\n    usage: "Estilizado de salida en terminal para comandos CLI."\r\n    commercial_payment_required: false\r\n\r\n  - package: "ajv"\r\n    version: "8.17.1"\r\n    spdx_license: "MIT"\r\n    category: "permissive_free"\r\n    status: "APPROVED"\r\n    usage: "Validador JSON Schema para ProductShape, arc42 y SDD."\r\n    commercial_payment_required: false\r\n';
-var STARTER_PROCESS_README = "# AI-SDLC: Process & Governance Framework\n\nThis directory hosts the deterministic governance, verification gates, and lifecycle protocols for AI-assisted software development.\n\n## Core Protocols & Lifecycle\n- **Phase 0 (Product Definition)**: `specs/product/` (Requirements `FR-*`, Use Cases `UC-*`, Actors `ACT-*`, Rules `BR-*`).\n- **Phase 1 (System Architecture)**: `templates/architecture/` (arc42 + NAF v4, `CMP-*`, Decisions `ADR-*`).\n- **Phase 2 (Cybersecurity Triad)**: `templates/security/` (Threat Actors `ACT-THREAT-*`, Abuse Cases `ABUSE-*`, Security Reqs `SEC-REQ-*`).\n- **Phase 3 (Spec-Driven Delivery - SDD)**: `specs/changes/active/<change-id>/` (`proposal.md`, `spec.md`, `design.md`, `tasks.md`, `handoff.yaml`).\n- **Phase 4 (Continuous Quality Gates & Verification)**:\n  - Quality Gate: `npx aisdlc verify quality` (CC $\\le 10$, MI $\\ge 50$, LOC $\\le 40$)\n  - BDD Testing: `npx aisdlc verify testing`\n  - Traceability: `npx aisdlc verify traceability`\n  - Licenses: `npx aisdlc verify licenses`\n  - Schemas: `npx aisdlc verify schemas`\n  - Release Gates: `npx aisdlc check` / `npx aisdlc verify all`\n";
+var STARTER_PROCESS_README = "# AI-SDLC: Process & Governance Framework\n\nThis directory hosts the deterministic governance, verification gates, and lifecycle protocols for AI-assisted software development.\n\n## Core Protocols & Lifecycle\n- **Phase 0 (Product Definition)**: `specs/product/` (Requirements `FR-*`, Use Cases `UC-*`, Actors `ACT-*`, Rules `BR-*`).\n- **Phase 1 (System Architecture)**: `templates/architecture/` (arc42 + NAF v4, `CMP-*`, Decisions `ADR-*`).\n- **Phase 2 (Cybersecurity Triad)**: `templates/security/` (Threat Actors `ACT-THREAT-*`, Abuse Cases `ABUSE-*`, Security Reqs `SEC-REQ-*`).\n- **Phase 2b (Privacy-by-Design as Code)**: `templates/privacy/` (Data Assets `DATA-ASSET-*`, ROPA `PRIV-ROPA-*`, Privacy Reqs `PRIV-REQ-*`).\n- **Phase 3 (Spec-Driven Delivery - SDD)**: `specs/changes/active/<change-id>/` (`proposal.md`, `spec.md`, `design.md`, `tasks.md`, `handoff.yaml`).\n- **Phase 4 (Continuous Quality Gates & Verification)**:\n  - Quality Gate: `npx aisdlc verify quality` (CC $\\le 10$, MI $\\ge 50$, LOC $\\le 40$)\n  - BDD Testing: `npx aisdlc verify testing`\n  - Traceability: `npx aisdlc verify traceability`\n  - Licenses: `npx aisdlc verify licenses`\n  - Privacy & Data Protection: `npx aisdlc verify privacy`\n  - Schemas: `npx aisdlc verify schemas`\n  - Release Gates: `npx aisdlc check` / `npx aisdlc verify all`\n";
 var STARTER_BASE_TEMPLATES = [
   { relPath: "templates/ci/.gitlab-ci.yml", content: STARTER_TEMPLATES_CI__GITLAB_CI_YML },
   { relPath: "templates/ci/azure-pipelines.yml", content: STARTER_TEMPLATES_CI_AZURE_PIPELINES_YML },
@@ -13331,6 +14143,10 @@ var STARTER_BASE_TEMPLATES = [
   { relPath: "templates/compliance/commercial-acquisition-request.template.md", content: STARTER_TEMPLATES_COMPLIANCE_COMMERCIAL_ACQUISITION_REQUEST_TEMPLATE_MD },
   { relPath: "templates/manuals/production-manual.template.md", content: STARTER_TEMPLATES_MANUALS_PRODUCTION_MANUAL_TEMPLATE_MD },
   { relPath: "templates/manuals/user-manual.template.md", content: STARTER_TEMPLATES_MANUALS_USER_MANUAL_TEMPLATE_MD },
+  { relPath: "templates/privacy/data-asset.template.md", content: STARTER_TEMPLATES_PRIVACY_DATA_ASSET_TEMPLATE_MD },
+  { relPath: "templates/privacy/dpia-request.template.md", content: STARTER_TEMPLATES_PRIVACY_DPIA_REQUEST_TEMPLATE_MD },
+  { relPath: "templates/privacy/privacy-req.template.md", content: STARTER_TEMPLATES_PRIVACY_PRIVACY_REQ_TEMPLATE_MD },
+  { relPath: "templates/privacy/privacy-ropa.template.md", content: STARTER_TEMPLATES_PRIVACY_PRIVACY_ROPA_TEMPLATE_MD },
   { relPath: "templates/product/actor.template.md", content: STARTER_TEMPLATES_PRODUCT_ACTOR_TEMPLATE_MD },
   { relPath: "templates/product/business-rule.template.md", content: STARTER_TEMPLATES_PRODUCT_BUSINESS_RULE_TEMPLATE_MD },
   { relPath: "templates/product/journey.template.md", content: STARTER_TEMPLATES_PRODUCT_JOURNEY_TEMPLATE_MD },
@@ -13448,6 +14264,52 @@ categories:
       - "SSPL-1.0"
       - "BSL-1.1"
 `;
+var STARTER_PRIVACY_POLICY = `# ==============================================================================
+# AI-SDLC: Data Protection & Privacy-by-Design Governance Policy (PDaC)
+# ==============================================================================
+version: "1.0"
+project: "Standard AI-SDLC Project"
+regulatory_frameworks:
+  - "GDPR"
+  - "LOPDGDD"
+  - "ISO-27701"
+default_pii_action: "DENY_UNCLASSIFIED"
+
+classification_levels:
+  PUBLIC:
+    encryption_at_rest: false
+    encryption_in_transit: true
+    allow_in_logs: true
+    allow_in_llm_prompts: true
+  INTERNAL:
+    encryption_at_rest: true
+    encryption_in_transit: true
+    allow_in_logs: true
+    allow_in_llm_prompts: true
+  CONFIDENTIAL_PII:
+    encryption_at_rest: true
+    encryption_in_transit: true
+    allow_in_logs: false
+    masking_in_logs: "HASH_OR_REDACT"
+    allow_in_llm_prompts: false
+    require_retention_policy: true
+    require_erasure_mechanism: true
+  RESTRICTED_SENSITIVE_PII:
+    encryption_at_rest: true
+    field_level_encryption: true
+    encryption_in_transit: true
+    allow_in_logs: false
+    allow_in_llm_prompts: false
+    require_dpia_approval: true
+    require_explicit_consent_or_art9_basis: true
+
+cross_border_transfers:
+  allowed_regions:
+    - "EU"
+    - "EEA"
+  require_scc_for_external: true
+  approved_subprocessors: []
+`;
 var STARTER_TASK_TEMPLATE = `---
 tasks:
   - id: "TSK-001-setup"
@@ -13501,8 +14363,8 @@ var STARTER_WORKFLOW_HANDOFF_TEMPLATE = `# Workflow Handoff Template
 
 ### \u{1F504} Workflow Handoff
 
-- **Completed Phase / Activity**: \`[Current phase, e.g. Product Definition / Threat Modeling / Architecture / SDD Implementation]\`
-- **Acting Role**: \`[agent-product-analyst | agent-threat-modeler | agent-system-architect | agent-developer | agent-expert-user | agent-security-auditor | agent-compliance-checker]\`
+- **Completed Phase / Activity**: \`[Current phase, e.g. Product Definition / Threat Modeling / Privacy Modeling / Architecture / SDD Implementation]\`
+- **Acting Role**: \`[agent-product-analyst | agent-threat-modeler | agent-privacy-officer | agent-system-architect | agent-developer | agent-expert-user | agent-security-auditor | agent-compliance-checker]\`
 - **Task Autonomy Mode**: \`[HUMAN_REVIEW_PLAN | AMBIGUOUS | HIGH_RISK_MANUAL]\`
 - **Produced Deliverables**:
   - [x] \`[Path or ID of generated artifact, e.g. specs/product/uc-mission.md]\`
@@ -14089,6 +14951,7 @@ var BASE_DIRECTORIES = [
   "compliance",
   "schemas/product",
   "schemas/security",
+  "schemas/privacy",
   "schemas/compliance",
   "schemas/architecture",
   "schemas/safety",
@@ -14098,6 +14961,7 @@ var BASE_DIRECTORIES = [
   "schemas/ide",
   "templates/product",
   "templates/security",
+  "templates/privacy",
   "templates/compliance",
   "templates/architecture",
   "templates/safety",
@@ -14142,6 +15006,7 @@ function collectStarterFiles(ciProvider, agentFiles = [], archGranularity = "min
   const files = [
     { relPath: "quality-policy.yaml", content: STARTER_QUALITY_POLICY },
     { relPath: "license-policy.yaml", content: STARTER_LICENSE_POLICY },
+    { relPath: "privacy-policy.yaml", content: STARTER_PRIVACY_POLICY },
     ...STARTER_BASE_TEMPLATES,
     ...STARTER_SCHEMAS.map((s) => ({ relPath: s.relPath, content: s.content })),
     ...getCiWorkflowFiles(ciProvider),
@@ -14163,6 +15028,7 @@ var STANDARD_AISDLC_SCRIPTS = {
   check: "aisdlc check",
   "check:fix": "aisdlc check --fix",
   "verify:quality": "aisdlc verify quality",
+  "verify:privacy": "aisdlc verify privacy",
   "verify:all": "aisdlc verify all",
   "change:new": "aisdlc change new"
 };
@@ -14265,6 +15131,6 @@ function initProject(options = {}) {
   );
 }
 
-export { ALL_ARCHITECTURE_TEMPLATES, BRANCH_PATTERNS, DEFAULT_EXCLUDED_PATTERNS, DEFAULT_EXCLUDES, DEFAULT_EXTENSIONS, DEFAULT_SAST_EXCLUDES, GENERAL_SOURCE_EXTENSIONS, KPI_SUMMARY_END_TAG, KPI_SUMMARY_START_TAG, LIFECYCLE_SKILL_TEMPLATES, OpenSpecAdapter, PREPARE_COMMIT_MSG_SCRIPT, PROMPT_INJECTION_SIGNATURES, PROTECTED_BYPASS_PATTERNS, SAST_RULES, SCHEMA_SCHEMAS_ARCHITECTURE_ADR_SCHEMA_JSON, SCHEMA_SCHEMAS_ARCHITECTURE_COMPONENT_SCHEMA_JSON, SCHEMA_SCHEMAS_ARCHITECTURE_INTRODUCTION_AND_GOALS_SCHEMA_JSON, SCHEMA_SCHEMAS_COMPLIANCE_LICENSE_MANIFEST_SCHEMA_JSON, SCHEMA_SCHEMAS_COMPLIANCE_LICENSE_POLICY_SCHEMA_JSON, SCHEMA_SCHEMAS_COMPLIANCE_QUALITY_POLICY_SCHEMA_JSON, SCHEMA_SCHEMAS_IDE_MCP_CONFIG_SCHEMA_JSON, SCHEMA_SCHEMAS_MANUALS_PRODUCTION_MANUAL_SCHEMA_JSON, SCHEMA_SCHEMAS_MANUALS_USER_MANUAL_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_ACTOR_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_BUSINESS_RULE_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_JOURNEY_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_REQUIREMENT_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_TERM_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_USE_CASE_SCHEMA_JSON, SCHEMA_SCHEMAS_SAFETY_HAZARD_SCHEMA_JSON, SCHEMA_SCHEMAS_SAFETY_SAFETY_REQ_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_DESIGN_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_HANDOFF_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_PROPOSAL_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_RELEASE_KPIS_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_SESSION_TELEMETRY_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_SPEC_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_TASKS_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_ABUSE_CASE_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_ENCLAVE_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_SECURITY_REQ_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_THREAT_ACTOR_SCHEMA_JSON, SCHEMA_SCHEMAS_WORKFLOW_AGENT_HANDOFF_SCHEMA_JSON, SECRET_RULES, SPECIALIZED_AGENT_TEMPLATES, STARTER_ANTIGRAVITY_MCP, STARTER_ANTIGRAVITY_RULES, STARTER_ARCH_ADR, STARTER_ARCH_ARCHITECTURE_CONSTRAINTS, STARTER_ARCH_COMPONENT, STARTER_ARCH_CONTEXT_AND_SCOPE, STARTER_ARCH_CROSS_CUTTING_CONCEPTS, STARTER_ARCH_DEPLOYMENT_VIEW, STARTER_ARCH_GLOSSARY, STARTER_ARCH_INTRODUCTION_AND_GOALS, STARTER_ARCH_LEVEL_1_WHITEBOX, STARTER_ARCH_QUALITY_REQUIREMENTS, STARTER_ARCH_RISKS_AND_TECHNICAL_DEBT, STARTER_ARCH_RUNTIME_VIEW, STARTER_ARCH_SOLUTION_STRATEGY, STARTER_AZURE_PIPELINES, STARTER_BASE_TEMPLATES, STARTER_BITBUCKET_PIPELINES, STARTER_CLAUDE_RULES, STARTER_COMPLIANCE_LICENSE_MANIFEST_YAML, STARTER_COPILOT_RULES, STARTER_CURSOR_CORE_RULES, STARTER_CURSOR_MCP, STARTER_CURSOR_PRODUCT_RULES, STARTER_CURSOR_QUALITY_RULES, STARTER_GITHUB_CI, STARTER_GITHUB_DEPLOY_DASHBOARD, STARTER_GITHUB_PR_KPI, STARTER_GITHUB_PULL_REQUEST_TEMPLATE, STARTER_GITHUB_SDD_INTEGRATE, STARTER_GITLAB_CI, STARTER_LICENSE_POLICY, STARTER_PROCESS_README, STARTER_PULL_REQUEST_TEMPLATE, STARTER_QUALITY_POLICY, STARTER_REQUIREMENT_TEMPLATE, STARTER_SCHEMAS, STARTER_SCHEMAS_MAP, STARTER_TASK_TEMPLATE, STARTER_TEMPLATES_CI_AZURE_PIPELINES_YML, STARTER_TEMPLATES_CI_BITBUCKET_PIPELINES_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_CI_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_DEPLOY_DASHBOARD_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_PR_KPI_SUMMARY_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_SDD_INTEGRATE_ON_MERGE_YML, STARTER_TEMPLATES_CI__GITLAB_CI_YML, STARTER_TEMPLATES_COMPLIANCE_COMMERCIAL_ACQUISITION_REQUEST_TEMPLATE_MD, STARTER_TEMPLATES_MANUALS_PRODUCTION_MANUAL_TEMPLATE_MD, STARTER_TEMPLATES_MANUALS_USER_MANUAL_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_ACTOR_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_BUSINESS_RULE_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_JOURNEY_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_REQUIREMENT_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_TERM_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_USER_DESIGN_FEEDBACK_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_USE_CASE_TEMPLATE_MD, STARTER_TEMPLATES_SAFETY_HAZARD_TEMPLATE_MD, STARTER_TEMPLATES_SAFETY_SAFETY_REQ_TEMPLATE_MD, STARTER_TEMPLATES_SDD_DESIGN_TEMPLATE_MD, STARTER_TEMPLATES_SDD_HANDOFF_TEMPLATE_YAML, STARTER_TEMPLATES_SDD_PROPOSAL_TEMPLATE_MD, STARTER_TEMPLATES_SDD_PULL_REQUEST_TEMPLATE_MD, STARTER_TEMPLATES_SDD_SPEC_TEMPLATE_MD, STARTER_TEMPLATES_SDD_TASKS_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_ABUSE_CASE_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_ENCLAVE_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_SECURITY_REQ_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_THREAT_ACTOR_TEMPLATE_MD, STARTER_TEMPLATES_WORKFLOW_AGENT_HANDOFF_TEMPLATE_MD, STARTER_VSCODE_MCP, STARTER_WORKFLOW_HANDOFF_TEMPLATE, STARTER__GITHUB_PULL_REQUEST_TEMPLATE_MD, SpecKitAdapter, TYPE_TO_SCHEMA_MAP, VALID_AGENT_TARGETS, VALID_ARCHITECTURE_GRANULARITIES, VALID_AUTONOMY_MODES, VALID_CHANGE_PROFILES, VALID_CI_PROVIDERS, aggregateCommitKpiRecords, aggregatePrKpis, aggregateReleaseKpis, analyzeBddVariantsForRequirement, appendRevisionHistoryRow, buildCycloneDxComponent, buildFeatureFileContent, buildGraphElements, calculateJaccardSimilarity, calculateMetrics, calculateRating, calculateShannonEntropy, checkGherkinInSync, checkoutTaskBranch, classifyBranch, collectAgentFiles, collectDashboardMetrics, collectHistoricalKpis, computeCanonicalSha256, computeSha256, createDefaultQualityPolicy, depositProductHandoffSidecar, detectActiveChangeForIntegration, detectAuthorIdentity, detectLanguage, detectProfileFromChange, detectPromptInjection, emitCiOutput, evaluateCompoundLicense, evaluateSingleDependency, extractCitations, extractCommitKpisFromRange, extractDirectDepNames, extractFeatureTags, extractFrontmatter, extractFunctions, extractFunctionsBraceLanguages, extractFunctionsPolyglot, extractFunctionsPython, extractFunctionsTypeScriptAst, extractGherkinBlock, extractGherkinFeatures, extractNormativeText, findChangeWorkspaceDir, findLicenseFile, formatCommitTrailers, formatPrKpiMarkdown, formatReleaseKpiMarkdown, generateBranchHierarchyPlan, generateCycloneDxSbom, generateDashboardReport, generateDuplicatesReportMarkdown, generateGovernanceReportMarkdown, generateLicenseReportMarkdown, generatePdacReportMarkdown, generateQualityReport, generateSastReportMarkdown, generateSecretsReportMarkdown, generateTestingCoverageReportMarkdown, generateThirdPartyNotices, generateTraceabilityReportMarkdown, getArchitectureTemplates, getCytoscapeScript, getGitDiffLines, getNextCorrelativeNumber, getSddAdapter, inferArtifactTypeFromId, inferMissingTrailers, initProject, injectKpisIntoPrBody, installGitHooks, integrateSddChange, isGitleaksInstalled, isPathProtectedFromPatch, isPlaceholderOrIgnored, isRequirementArtifact2 as isRequirementArtifact, isSemgrepInstalled, isToolAvailable, loadProductHandoffSidecar, locateTaskInActiveChanges, maskSecret, normalizeSpdxLicense, parseCommitTrailers, parseFrontmatter, parseFrontmatterId, parseGenericDoc, parseLicensePolicy, parseMarkdownFrontmatter, parseQualityPolicy, parseRequirementFile, parseSpecCatalogScope, parseTasksDoc, parseTasksFromContent, processPackageDir, readCodeCoverageSummary, readPackageJson, renderAntigravityAgentFile, renderAntigravitySkillFile, renderAutonomyModeSection, renderClaudeAgentFile, renderCopilotAgentFile, renderCursorAgentFile, renderDashboardHtml, renderManualsTab, resolveAgentTargets, resolveBranchHierarchy, resolveCiEnvironment, resolveCytoscapePath, resolveFeatureFilePath, resolveGitRef, resolveLicenseFromFile, resolveSchemaForArtifact, resolveTargetFiles, runGitleaksCli, runSemgrepCli, scaffoldSddChange, scanAllProductHandoffs, scanAllTestArtifacts, scanContentForSecrets, scanFileForSast, scanInstalledLicenses, scanManualsInWorkspace, scanPnpmStore, scanSubdirectories, scanWithNativeFs, scanWithSyft, scanWithTrivy, slugify, syncPdacDigests, tokenizeTitle, updateCitationsInContent, validateAgainstSchema, validateArtifactSchema, verifyArtifactDuplicates, verifyArtifactsSchemas, verifyLicenses, verifyManuals, verifyPdacGraph, verifyProgressiveFriction, verifyQualityGate, verifySast, verifySddIntegration, verifySecrets, verifyTasksGovernance, verifyTestingCoverage, verifyTraceability, walkDir, walkMdFiles, walkProjectFiles, walkSourceFiles, walkTaskFiles, writeCycloneDxSbom, writeReleaseKpiReport, writeThirdPartyNotices };
+export { ALL_ARCHITECTURE_TEMPLATES, BRANCH_PATTERNS, DEFAULT_EXCLUDED_PATTERNS, DEFAULT_EXCLUDES, DEFAULT_EXTENSIONS, DEFAULT_PRIVACY_POLICY, DEFAULT_SAST_EXCLUDES, GENERAL_SOURCE_EXTENSIONS, KPI_SUMMARY_END_TAG, KPI_SUMMARY_START_TAG, LIFECYCLE_SKILL_TEMPLATES, OpenSpecAdapter, PII_SAST_RULES, PREPARE_COMMIT_MSG_SCRIPT, PROMPT_INJECTION_SIGNATURES, PROTECTED_BYPASS_PATTERNS, SAST_RULES, SCHEMA_SCHEMAS_ARCHITECTURE_ADR_SCHEMA_JSON, SCHEMA_SCHEMAS_ARCHITECTURE_COMPONENT_SCHEMA_JSON, SCHEMA_SCHEMAS_ARCHITECTURE_INTRODUCTION_AND_GOALS_SCHEMA_JSON, SCHEMA_SCHEMAS_COMPLIANCE_LICENSE_MANIFEST_SCHEMA_JSON, SCHEMA_SCHEMAS_COMPLIANCE_LICENSE_POLICY_SCHEMA_JSON, SCHEMA_SCHEMAS_COMPLIANCE_QUALITY_POLICY_SCHEMA_JSON, SCHEMA_SCHEMAS_IDE_MCP_CONFIG_SCHEMA_JSON, SCHEMA_SCHEMAS_MANUALS_PRODUCTION_MANUAL_SCHEMA_JSON, SCHEMA_SCHEMAS_MANUALS_USER_MANUAL_SCHEMA_JSON, SCHEMA_SCHEMAS_PRIVACY_DATA_ASSET_SCHEMA_JSON, SCHEMA_SCHEMAS_PRIVACY_PRIVACY_POLICY_SCHEMA_JSON, SCHEMA_SCHEMAS_PRIVACY_PRIVACY_REQ_SCHEMA_JSON, SCHEMA_SCHEMAS_PRIVACY_PRIVACY_ROPA_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_ACTOR_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_BUSINESS_RULE_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_JOURNEY_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_REQUIREMENT_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_TERM_SCHEMA_JSON, SCHEMA_SCHEMAS_PRODUCT_USE_CASE_SCHEMA_JSON, SCHEMA_SCHEMAS_SAFETY_HAZARD_SCHEMA_JSON, SCHEMA_SCHEMAS_SAFETY_SAFETY_REQ_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_DESIGN_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_HANDOFF_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_PROPOSAL_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_RELEASE_KPIS_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_SESSION_TELEMETRY_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_SPEC_SCHEMA_JSON, SCHEMA_SCHEMAS_SDD_TASKS_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_ABUSE_CASE_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_ENCLAVE_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_SECURITY_REQ_SCHEMA_JSON, SCHEMA_SCHEMAS_SECURITY_THREAT_ACTOR_SCHEMA_JSON, SCHEMA_SCHEMAS_WORKFLOW_AGENT_HANDOFF_SCHEMA_JSON, SECRET_RULES, SPECIALIZED_AGENT_TEMPLATES, STARTER_ANTIGRAVITY_MCP, STARTER_ANTIGRAVITY_RULES, STARTER_ARCH_ADR, STARTER_ARCH_ARCHITECTURE_CONSTRAINTS, STARTER_ARCH_COMPONENT, STARTER_ARCH_CONTEXT_AND_SCOPE, STARTER_ARCH_CROSS_CUTTING_CONCEPTS, STARTER_ARCH_DEPLOYMENT_VIEW, STARTER_ARCH_GLOSSARY, STARTER_ARCH_INTRODUCTION_AND_GOALS, STARTER_ARCH_LEVEL_1_WHITEBOX, STARTER_ARCH_QUALITY_REQUIREMENTS, STARTER_ARCH_RISKS_AND_TECHNICAL_DEBT, STARTER_ARCH_RUNTIME_VIEW, STARTER_ARCH_SOLUTION_STRATEGY, STARTER_AZURE_PIPELINES, STARTER_BASE_TEMPLATES, STARTER_BITBUCKET_PIPELINES, STARTER_CLAUDE_RULES, STARTER_COMPLIANCE_LICENSE_MANIFEST_YAML, STARTER_COPILOT_RULES, STARTER_CURSOR_CORE_RULES, STARTER_CURSOR_MCP, STARTER_CURSOR_PRODUCT_RULES, STARTER_CURSOR_QUALITY_RULES, STARTER_GITHUB_CI, STARTER_GITHUB_DEPLOY_DASHBOARD, STARTER_GITHUB_PR_KPI, STARTER_GITHUB_PULL_REQUEST_TEMPLATE, STARTER_GITHUB_SDD_INTEGRATE, STARTER_GITLAB_CI, STARTER_LICENSE_POLICY, STARTER_PRIVACY_POLICY, STARTER_PROCESS_README, STARTER_PULL_REQUEST_TEMPLATE, STARTER_QUALITY_POLICY, STARTER_REQUIREMENT_TEMPLATE, STARTER_SCHEMAS, STARTER_SCHEMAS_MAP, STARTER_TASK_TEMPLATE, STARTER_TEMPLATES_CI_AZURE_PIPELINES_YML, STARTER_TEMPLATES_CI_BITBUCKET_PIPELINES_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_CI_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_DEPLOY_DASHBOARD_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_PR_KPI_SUMMARY_YML, STARTER_TEMPLATES_CI_GITHUB_WORKFLOWS_SDD_INTEGRATE_ON_MERGE_YML, STARTER_TEMPLATES_CI__GITLAB_CI_YML, STARTER_TEMPLATES_COMPLIANCE_COMMERCIAL_ACQUISITION_REQUEST_TEMPLATE_MD, STARTER_TEMPLATES_MANUALS_PRODUCTION_MANUAL_TEMPLATE_MD, STARTER_TEMPLATES_MANUALS_USER_MANUAL_TEMPLATE_MD, STARTER_TEMPLATES_PRIVACY_DATA_ASSET_TEMPLATE_MD, STARTER_TEMPLATES_PRIVACY_DPIA_REQUEST_TEMPLATE_MD, STARTER_TEMPLATES_PRIVACY_PRIVACY_REQ_TEMPLATE_MD, STARTER_TEMPLATES_PRIVACY_PRIVACY_ROPA_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_ACTOR_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_BUSINESS_RULE_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_JOURNEY_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_REQUIREMENT_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_TERM_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_USER_DESIGN_FEEDBACK_TEMPLATE_MD, STARTER_TEMPLATES_PRODUCT_USE_CASE_TEMPLATE_MD, STARTER_TEMPLATES_SAFETY_HAZARD_TEMPLATE_MD, STARTER_TEMPLATES_SAFETY_SAFETY_REQ_TEMPLATE_MD, STARTER_TEMPLATES_SDD_DESIGN_TEMPLATE_MD, STARTER_TEMPLATES_SDD_HANDOFF_TEMPLATE_YAML, STARTER_TEMPLATES_SDD_PROPOSAL_TEMPLATE_MD, STARTER_TEMPLATES_SDD_PULL_REQUEST_TEMPLATE_MD, STARTER_TEMPLATES_SDD_SPEC_TEMPLATE_MD, STARTER_TEMPLATES_SDD_TASKS_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_ABUSE_CASE_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_ENCLAVE_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_SECURITY_REQ_TEMPLATE_MD, STARTER_TEMPLATES_SECURITY_THREAT_ACTOR_TEMPLATE_MD, STARTER_TEMPLATES_WORKFLOW_AGENT_HANDOFF_TEMPLATE_MD, STARTER_VSCODE_MCP, STARTER_WORKFLOW_HANDOFF_TEMPLATE, STARTER__GITHUB_PULL_REQUEST_TEMPLATE_MD, SpecKitAdapter, TYPE_TO_SCHEMA_MAP, VALID_AGENT_TARGETS, VALID_ARCHITECTURE_GRANULARITIES, VALID_AUTONOMY_MODES, VALID_CHANGE_PROFILES, VALID_CI_PROVIDERS, aggregateCommitKpiRecords, aggregatePrKpis, aggregateReleaseKpis, analyzeBddVariantsForRequirement, appendRevisionHistoryRow, buildCycloneDxComponent, buildFeatureFileContent, buildGraphElements, calculateJaccardSimilarity, calculateMetrics, calculateRating, calculateShannonEntropy, checkGherkinInSync, checkoutTaskBranch, classifyBranch, collectAgentFiles, collectDashboardMetrics, collectHistoricalKpis, computeCanonicalSha256, computeSha256, createDefaultQualityPolicy, depositProductHandoffSidecar, detectActiveChangeForIntegration, detectAuthorIdentity, detectLanguage, detectProfileFromChange, detectPromptInjection, emitCiOutput, evaluateCompoundLicense, evaluateSingleDependency, extractCitations, extractCommitKpisFromRange, extractDirectDepNames, extractFeatureTags, extractFrontmatter, extractFunctions, extractFunctionsBraceLanguages, extractFunctionsPolyglot, extractFunctionsPython, extractFunctionsTypeScriptAst, extractGherkinBlock, extractGherkinFeatures, extractNormativeText, findChangeWorkspaceDir, findLicenseFile, formatCommitTrailers, formatPrKpiMarkdown, formatReleaseKpiMarkdown, generateBranchHierarchyPlan, generateCycloneDxSbom, generateDashboardReport, generateDuplicatesReportMarkdown, generateGovernanceReportMarkdown, generateLicenseReportMarkdown, generatePdacReportMarkdown, generatePrivacyReportMarkdown, generateQualityReport, generateRopaInventoryMarkdown, generateSastReportMarkdown, generateSecretsReportMarkdown, generateTestingCoverageReportMarkdown, generateThirdPartyNotices, generateTraceabilityReportMarkdown, getArchitectureTemplates, getCytoscapeScript, getGitDiffLines, getNextCorrelativeNumber, getSddAdapter, inferArtifactTypeFromId, inferMissingTrailers, initProject, injectKpisIntoPrBody, installGitHooks, integrateSddChange, isGitleaksInstalled, isPathProtectedFromPatch, isPlaceholderOrIgnored, isRequirementArtifact2 as isRequirementArtifact, isSemgrepInstalled, isToolAvailable, loadPrivacyPolicy, loadProductHandoffSidecar, locateTaskInActiveChanges, maskSecret, normalizeSpdxLicense, parseCommitTrailers, parseFrontmatter, parseFrontmatterId, parseGenericDoc, parseLicensePolicy, parseMarkdownFrontmatter, parseQualityPolicy, parseRequirementFile, parseSpecCatalogScope, parseTasksDoc, parseTasksFromContent, processPackageDir, readCodeCoverageSummary, readPackageJson, renderAntigravityAgentFile, renderAntigravitySkillFile, renderAutonomyModeSection, renderClaudeAgentFile, renderCopilotAgentFile, renderCursorAgentFile, renderDashboardHtml, renderManualsTab, resolveAgentTargets, resolveBranchHierarchy, resolveCiEnvironment, resolveCytoscapePath, resolveFeatureFilePath, resolveGitRef, resolveLicenseFromFile, resolveSchemaForArtifact, resolveTargetFiles, runGitleaksCli, runSemgrepCli, scaffoldSddChange, scanAllProductHandoffs, scanAllTestArtifacts, scanContentForSecrets, scanFileForPrivacyViolations, scanFileForSast, scanInstalledLicenses, scanManualsInWorkspace, scanPnpmStore, scanSubdirectories, scanWithNativeFs, scanWithSyft, scanWithTrivy, slugify, syncPdacDigests, tokenizeTitle, updateCitationsInContent, validateAgainstSchema, validateArtifactSchema, verifyArtifactDuplicates, verifyArtifactsSchemas, verifyLicenses, verifyManuals, verifyPdacGraph, verifyPrivacy, verifyProgressiveFriction, verifyQualityGate, verifySast, verifySddIntegration, verifySecrets, verifyTasksGovernance, verifyTestingCoverage, verifyTraceability, walkDir, walkMdFiles, walkProjectFiles, walkSourceFiles, walkTaskFiles, writeCycloneDxSbom, writeReleaseKpiReport, writeThirdPartyNotices };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map