@apexops/cli 0.10.0-next.5 → 0.11.0-next.1

package/assets/customizations/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.10.0-next.5",
+  "version": "0.11.0-next.1",
   "bundle": {
     "id": "apex-managed-workspace",
     "authority": "npm:@apexops/cli",
@@ -8,14 +8,9 @@
     "generatedRoot": "customizations"
   },
   "managedFiles": [
-    ".github/agents/apex.agent.md",
-    ".github/agents/apex-requirements.agent.md",
-    ".github/agents/apex-architect.agent.md",
-    ".github/agents/apex-planner.agent.md",
-    ".github/agents/apex-operator.agent.md",
-    ".github/agents/apex-codegen.agent.md",
-    ".github/agents/apex-reviewer.agent.md",
-    ".github/agents/apex-validator.agent.md",
+    ".github/workflows/governance-policy-baseline.yml",
+    "tools/scripts/collect-governance-baseline.ps1",
+    "tools/schemas/governance-baseline.schema.json",
     ".github/instructions/apex-agent-authoring.instructions.md",
     ".github/instructions/apex-skill-authoring.instructions.md",
     ".github/instructions/apex-artifact-contracts.instructions.md",
@@ -37,236 +32,199 @@
     ".github/instructions/apex-prompt-authoring.instructions.md",
     ".github/instructions/apex-python.instructions.md",
     ".github/instructions/apex-shell.instructions.md",
-    ".github/skills/apex-workflow/SKILL.md",
-    ".github/skills/apex-requirements/SKILL.md",
-    ".github/skills/apex-architecture/SKILL.md",
-    ".github/skills/apex-planning/SKILL.md",
-    ".github/skills/apex-codegen/SKILL.md",
-    ".github/skills/apex-operations/SKILL.md",
-    ".github/skills/apex-artifacts/SKILL.md",
-    ".github/skills/apex-azure-defaults/SKILL.md",
-    ".github/skills/apex-azure-defaults/references/baseline-fallbacks.md",
-    ".github/skills/apex-azure-defaults/references/naming.md",
-    ".github/skills/apex-azure-defaults/references/tag-precedence.md",
-    ".github/skills/apex-azure-defaults/references/security-baseline.md",
-    ".github/skills/apex-azure-defaults/references/avm-binding-guidance.md",
-    ".github/skills/apex-azure-defaults/references/service-selection.md",
-    ".github/skills/apex-azure-defaults/references/governance-effects.md",
-    ".github/skills/apex-azure-defaults/references/network-planning.md",
-    ".github/skills/apex-azure-defaults/references/cost-monitoring.md",
-    ".github/skills/apex-azure-defaults/references/decision-boundaries.md",
-    ".github/skills/apex-azure-adr/SKILL.md",
-    ".github/skills/apex-azure-adr/references/decision-record-fields.md",
-    ".github/skills/apex-azure-adr/references/decision-quality.md",
-    ".github/skills/apex-azure-adr/references/decision-guardrails.md",
-    ".github/skills/apex-azure-adr/references/decision-examples.md",
-    ".github/skills/apex-azure-rbac/SKILL.md",
-    ".github/skills/apex-azure-rbac/references/least-privilege-selection.md",
-    ".github/skills/apex-azure-rbac/references/assignment-intent.md",
-    ".github/skills/apex-microsoft-docs/SKILL.md",
-    ".github/skills/apex-microsoft-docs/references/research-method.md",
-    ".github/skills/apex-azure-compute/SKILL.md",
-    ".github/skills/apex-azure-compute/references/compute-selection.md",
-    ".github/skills/apex-azure-compute/references/pricing-evidence.md",
-    ".github/skills/apex-azure-compute/references/recommendation-and-scale-rules.md",
-    ".github/skills/apex-azure-storage/SKILL.md",
-    ".github/skills/apex-azure-storage/references/storage-selection.md",
-    ".github/skills/apex-azure-storage/references/security-and-governance.md",
-    ".github/skills/apex-azure-storage/references/service-auth-and-sdk-boundary.md",
-    ".github/skills/apex-bicep-patterns/SKILL.md",
-    ".github/skills/apex-bicep-patterns/references/network-and-observability.md",
-    ".github/skills/apex-bicep-patterns/references/avm-and-codegen-acceptance.md",
-    ".github/skills/apex-bicep-patterns/references/module-interfaces-and-parameters.md",
-    ".github/skills/apex-bicep-patterns/references/compiler-and-provider-gotchas.md",
-    ".github/skills/apex-bicep-patterns/references/codegen-acceptance-checklist.md",
-    ".github/skills/apex-azure-prepare/SKILL.md",
-    ".github/skills/apex-azure-prepare/references/preparation-lineage.md",
-    ".github/skills/apex-azure-prepare/references/functions-recipe-pack.md",
-    ".github/skills/apex-azure-validate/SKILL.md",
-    ".github/skills/apex-azure-validate/references/preflight-evidence.md",
-    ".github/skills/apex-azure-validate/references/operational-checklist.md",
-    ".github/skills/apex-azure-deploy/SKILL.md",
-    ".github/skills/apex-azure-deploy/references/preview-recovery-verification.md",
-    ".github/skills/apex-azure-deploy/references/operational-checklist.md",
-    ".github/skills/apex-azure-governance/SKILL.md",
-    ".github/skills/apex-azure-governance/references/evidence-interpretation.md",
-    ".github/skills/apex-azure-governance/references/operational-checklist.md",
-    ".github/skills/apex-azure-quotas/SKILL.md",
-    ".github/skills/apex-azure-quotas/references/capacity-decision-rules.md",
-    ".github/skills/apex-azure-quotas/references/operational-checklist.md",
-    ".github/skills/apex-azure-resources/SKILL.md",
-    ".github/skills/apex-azure-resources/references/inventory-query-patterns.md",
-    ".github/skills/apex-azure-resources/references/operational-checklist.md",
-    ".github/skills/apex-azure-cost-optimization/SKILL.md",
-    ".github/skills/apex-azure-cost-optimization/references/cost-assessment-criteria.md",
-    ".github/skills/apex-azure-cost-optimization/references/operational-checklist.md",
-    ".github/skills/apex-azure-compliance/SKILL.md",
-    ".github/skills/apex-azure-compliance/references/compliance-finding-criteria.md",
-    ".github/skills/apex-azure-compliance/references/operational-checklist.md",
-    ".github/skills/apex-azure-diagnostics/SKILL.md",
-    ".github/skills/apex-azure-diagnostics/references/diagnostic-interpretation.md",
-    ".github/skills/apex-azure-diagnostics/references/operational-checklist.md",
-    ".github/skills/apex-azure-kusto/SKILL.md",
-    ".github/skills/apex-azure-kusto/references/kql-evidence-interpretation.md",
-    ".github/skills/apex-azure-kusto/references/operational-checklist.md",
-    ".github/skills/apex-entra-app-registration/SKILL.md",
-    ".github/skills/apex-entra-app-registration/references/oauth-registration-model.md",
-    ".github/skills/apex-entra-app-registration/references/permissions-and-credentials.md",
-    ".github/skills/apex-entra-app-registration/references/capability-receipts.md",
-    ".github/skills/apex-entra-app-registration/references/design-and-diagnostics.md",
-    ".github/skills/apex-azure-cloud-migrate/SKILL.md",
-    ".github/skills/apex-azure-cloud-migrate/references/migration-readiness.md",
-    ".github/skills/apex-azure-cloud-migrate/references/workload-mapping.md",
-    ".github/skills/apex-azure-cloud-migrate/references/staged-validation-handoff.md",
-    ".github/skills/apex-azure-cloud-migrate/references/lambda-to-functions-assessment.md",
-    ".github/skills/apex-terraform-patterns/SKILL.md",
-    ".github/skills/apex-terraform-patterns/references/network-and-observability.md",
-    ".github/skills/apex-terraform-patterns/references/module-composition-and-state-boundaries.md",
-    ".github/skills/apex-terraform-patterns/references/module-locks-and-codegen-acceptance.md",
-    ".github/skills/apex-terraform-patterns/references/module-composition-and-refactor.md",
-    ".github/skills/apex-terraform-patterns/references/plan-and-change-assessment.md",
-    ".github/skills/apex-terraform-test/SKILL.md",
-    ".github/skills/apex-terraform-test/references/test-design.md",
-    ".github/skills/apex-terraform-test/references/plan-mode-and-mock-design.md",
-    ".github/skills/apex-terraform-test/references/evidence-acceptance.md",
-    ".github/skills/apex-terraform-test/references/plan-mode-test-design.md",
-    ".github/skills/apex-terraform-import/SKILL.md",
-    ".github/skills/apex-terraform-import/references/import-assessment.md",
-    ".github/skills/apex-terraform-import/references/mapping-and-adoption-attestation.md",
-    ".github/skills/apex-terraform-import/references/adoption-attestation.md",
-    ".github/skills/apex-terraform-import/references/import-mapping.md",
-    ".github/skills/apex-mermaid/SKILL.md",
-    ".github/skills/apex-mermaid/references/syntax.md",
-    ".github/skills/apex-mermaid/references/styling.md",
-    ".github/skills/apex-artifacts/references/presentation-conventions.md",
-    ".github/skills/apex-artifacts/references/reference-only-outlines.md",
-    ".github/skills/apex-artifacts/templates/requirements.md",
-    ".github/skills/apex-artifacts/templates/architecture-assessment.md",
-    ".github/skills/apex-artifacts/templates/cost-estimate.md",
-    ".github/skills/apex-artifacts/templates/governance-constraints.md",
-    ".github/skills/apex-artifacts/templates/implementation-plan.md",
-    ".github/skills/apex-artifacts/templates/deployment-summary.md",
-    ".github/skills/apex-artifacts/templates/operations-runbook.md",
-    ".github/skills/apex-artifacts/templates/resource-inventory.md",
     ".github/copilot-instructions.md",
-    ".github/mcp.json",
-    ".vscode/mcp.json"
+    ".github/copilot/settings.json"
   ],
   "sharedFiles": [
-    ".github/copilot-instructions.md"
+    ".github/copilot-instructions.md",
+    ".github/workflows/governance-policy-baseline.yml",
+    "tools/scripts/collect-governance-baseline.ps1",
+    "tools/schemas/governance-baseline.schema.json"
+  ],
+  "sharedDirectories": [
+    ".github/instructions"
   ],
-  "sharedDirectories": [".github/instructions", ".github/skills"],
   "clientProjections": [
-    {
-      "id": "github-copilot-vscode",
-      "generatedRoot": "client-projections/github-copilot-vscode",
-      "files": [".vscode/mcp.json"]
-    },
     {
       "id": "github-copilot-cli",
       "generatedRoot": "client-projections/github-copilot-cli",
-      "files": [".github/mcp.json"]
+      "files": [
+        ".github/copilot/settings.json"
+      ]
     }
   ],
+  "plugin": {
+    "name": "apex",
+    "marketplace": "apex-plugins",
+    "marketplaceRepository": "jonathan-vella/apex-plugins",
+    "ownedFiles": [
+      ".mcp.json"
+    ],
+    "ownedDirectories": [
+      ".github/agents",
+      ".github/skills"
+    ],
+    "files": [
+      ".github/agents/apex.agent.md",
+      ".github/agents/apex-codegen.agent.md",
+      ".github/agents/apex-validator.agent.md",
+      ".github/skills/apex-workflow/SKILL.md",
+      ".github/skills/apex-next/SKILL.md",
+      ".github/skills/apex-requirements/SKILL.md",
+      ".github/skills/apex-architecture/SKILL.md",
+      ".github/skills/apex-planning/SKILL.md",
+      ".github/skills/apex-codegen/SKILL.md",
+      ".github/skills/apex-operations/SKILL.md",
+      ".github/skills/apex-artifacts/SKILL.md",
+      ".github/skills/apex-azure-defaults/SKILL.md",
+      ".github/skills/apex-azure-defaults/references/baseline-fallbacks.md",
+      ".github/skills/apex-azure-defaults/references/naming.md",
+      ".github/skills/apex-azure-defaults/references/tag-precedence.md",
+      ".github/skills/apex-azure-defaults/references/security-baseline.md",
+      ".github/skills/apex-azure-defaults/references/avm-binding-guidance.md",
+      ".github/skills/apex-azure-defaults/references/service-selection.md",
+      ".github/skills/apex-azure-defaults/references/governance-effects.md",
+      ".github/skills/apex-azure-defaults/references/network-planning.md",
+      ".github/skills/apex-azure-defaults/references/cost-monitoring.md",
+      ".github/skills/apex-azure-defaults/references/decision-boundaries.md",
+      ".github/skills/apex-azure-adr/SKILL.md",
+      ".github/skills/apex-azure-adr/references/decision-record-fields.md",
+      ".github/skills/apex-azure-adr/references/decision-quality.md",
+      ".github/skills/apex-azure-adr/references/decision-guardrails.md",
+      ".github/skills/apex-azure-adr/references/decision-examples.md",
+      ".github/skills/apex-azure-rbac/SKILL.md",
+      ".github/skills/apex-azure-rbac/references/least-privilege-selection.md",
+      ".github/skills/apex-azure-rbac/references/assignment-intent.md",
+      ".github/skills/apex-microsoft-docs/SKILL.md",
+      ".github/skills/apex-microsoft-docs/references/research-method.md",
+      ".github/skills/apex-azure-compute/SKILL.md",
+      ".github/skills/apex-azure-compute/references/compute-selection.md",
+      ".github/skills/apex-azure-compute/references/pricing-evidence.md",
+      ".github/skills/apex-azure-compute/references/recommendation-and-scale-rules.md",
+      ".github/skills/apex-azure-storage/SKILL.md",
+      ".github/skills/apex-azure-storage/references/storage-selection.md",
+      ".github/skills/apex-azure-storage/references/security-and-governance.md",
+      ".github/skills/apex-azure-storage/references/service-auth-and-sdk-boundary.md",
+      ".github/skills/apex-bicep-patterns/SKILL.md",
+      ".github/skills/apex-bicep-patterns/references/network-and-observability.md",
+      ".github/skills/apex-bicep-patterns/references/avm-and-codegen-acceptance.md",
+      ".github/skills/apex-bicep-patterns/references/module-interfaces-and-parameters.md",
+      ".github/skills/apex-bicep-patterns/references/compiler-and-provider-gotchas.md",
+      ".github/skills/apex-bicep-patterns/references/codegen-acceptance-checklist.md",
+      ".github/skills/apex-azure-prepare/SKILL.md",
+      ".github/skills/apex-azure-prepare/references/preparation-lineage.md",
+      ".github/skills/apex-azure-validate/SKILL.md",
+      ".github/skills/apex-azure-validate/references/preflight-evidence.md",
+      ".github/skills/apex-azure-validate/references/operational-checklist.md",
+      ".github/skills/apex-azure-deploy/SKILL.md",
+      ".github/skills/apex-azure-deploy/references/preview-recovery-verification.md",
+      ".github/skills/apex-azure-deploy/references/operational-checklist.md",
+      ".github/skills/apex-azure-governance/SKILL.md",
+      ".github/skills/apex-azure-governance/references/evidence-interpretation.md",
+      ".github/skills/apex-azure-governance/references/operational-checklist.md",
+      ".github/skills/apex-azure-quotas/SKILL.md",
+      ".github/skills/apex-azure-quotas/references/capacity-decision-rules.md",
+      ".github/skills/apex-azure-quotas/references/operational-checklist.md",
+      ".github/skills/apex-azure-resources/SKILL.md",
+      ".github/skills/apex-azure-resources/references/inventory-query-patterns.md",
+      ".github/skills/apex-azure-resources/references/operational-checklist.md",
+      ".github/skills/apex-azure-cost-optimization/SKILL.md",
+      ".github/skills/apex-azure-cost-optimization/references/cost-assessment-criteria.md",
+      ".github/skills/apex-azure-cost-optimization/references/operational-checklist.md",
+      ".github/skills/apex-azure-compliance/SKILL.md",
+      ".github/skills/apex-azure-compliance/references/compliance-finding-criteria.md",
+      ".github/skills/apex-azure-compliance/references/operational-checklist.md",
+      ".github/skills/apex-azure-diagnostics/SKILL.md",
+      ".github/skills/apex-azure-diagnostics/references/diagnostic-interpretation.md",
+      ".github/skills/apex-azure-diagnostics/references/operational-checklist.md",
+      ".github/skills/apex-azure-kusto/SKILL.md",
+      ".github/skills/apex-azure-kusto/references/kql-evidence-interpretation.md",
+      ".github/skills/apex-azure-kusto/references/operational-checklist.md",
+      ".github/skills/apex-entra-app-registration/SKILL.md",
+      ".github/skills/apex-entra-app-registration/references/oauth-registration-model.md",
+      ".github/skills/apex-entra-app-registration/references/permissions-and-credentials.md",
+      ".github/skills/apex-entra-app-registration/references/capability-receipts.md",
+      ".github/skills/apex-entra-app-registration/references/design-and-diagnostics.md",
+      ".github/skills/apex-azure-cloud-migrate/SKILL.md",
+      ".github/skills/apex-azure-cloud-migrate/references/migration-readiness.md",
+      ".github/skills/apex-azure-cloud-migrate/references/workload-mapping.md",
+      ".github/skills/apex-azure-cloud-migrate/references/staged-validation-handoff.md",
+      ".github/skills/apex-azure-cloud-migrate/references/lambda-to-functions-assessment.md",
+      ".github/skills/apex-terraform-patterns/SKILL.md",
+      ".github/skills/apex-terraform-patterns/references/network-and-observability.md",
+      ".github/skills/apex-terraform-patterns/references/module-composition-and-state-boundaries.md",
+      ".github/skills/apex-terraform-patterns/references/module-locks-and-codegen-acceptance.md",
+      ".github/skills/apex-terraform-patterns/references/module-composition-and-refactor.md",
+      ".github/skills/apex-terraform-patterns/references/plan-and-change-assessment.md",
+      ".github/skills/apex-terraform-test/SKILL.md",
+      ".github/skills/apex-terraform-test/references/test-design.md",
+      ".github/skills/apex-terraform-test/references/plan-mode-and-mock-design.md",
+      ".github/skills/apex-terraform-test/references/evidence-acceptance.md",
+      ".github/skills/apex-terraform-test/references/plan-mode-test-design.md",
+      ".github/skills/apex-terraform-import/SKILL.md",
+      ".github/skills/apex-terraform-import/references/import-assessment.md",
+      ".github/skills/apex-terraform-import/references/mapping-and-adoption-attestation.md",
+      ".github/skills/apex-terraform-import/references/adoption-attestation.md",
+      ".github/skills/apex-terraform-import/references/import-mapping.md",
+      ".github/skills/apex-mermaid/SKILL.md",
+      ".github/skills/apex-mermaid/references/syntax.md",
+      ".github/skills/apex-mermaid/references/styling.md",
+      ".github/skills/apex-unslop/SKILL.md",
+      ".github/skills/apex-unslop/LICENSE.txt",
+      ".github/skills/apex-artifacts/references/presentation-conventions.md",
+      ".github/skills/apex-artifacts/references/reference-only-outlines.md",
+      ".github/skills/apex-artifacts/templates/requirements.md",
+      ".github/skills/apex-artifacts/templates/architecture-assessment.md",
+      ".github/skills/apex-artifacts/templates/cost-estimate.md",
+      ".github/skills/apex-artifacts/templates/governance-constraints.md",
+      ".github/skills/apex-artifacts/templates/implementation-plan.md",
+      ".github/skills/apex-artifacts/templates/deployment-summary.md",
+      ".github/skills/apex-artifacts/templates/operations-runbook.md",
+      ".github/skills/apex-artifacts/templates/resource-inventory.md"
+    ]
+  },
   "roles": [
     {
       "id": "coordinator",
       "source": ".github/agents/apex.agent.md",
       "agent": "APEX",
       "role": "coordinator",
-      "supportedTargets": ["vscode", "github-copilot"],
-      "interactionType": "interactive-handoff",
-      "model": "MAI-Code-1.1-Flash",
-      "costTier": "fast"
-    },
-    {
-      "id": "requirements",
-      "source": ".github/agents/apex-requirements.agent.md",
-      "agent": "APEX Requirements",
-      "role": "requirements",
-      "supportedTargets": ["vscode", "github-copilot"],
-      "interactionType": "interactive-handoff",
-      "model": "GPT-5.6 Sol",
-      "costTier": "standard"
-    },
-    {
-      "id": "architecture",
-      "source": ".github/agents/apex-architect.agent.md",
-      "agent": "APEX Architect",
-      "role": "architecture",
-      "supportedTargets": ["vscode", "github-copilot"],
-      "interactionType": "interactive-handoff",
-      "model": "GPT-5.6 Sol",
-      "costTier": "premium"
-    },
-    {
-      "id": "planning",
-      "source": ".github/agents/apex-planner.agent.md",
-      "agent": "APEX Planner",
-      "role": "planning",
-      "supportedTargets": ["vscode", "github-copilot"],
-      "interactionType": "interactive-handoff",
-      "model": "GPT-5.6 Sol",
-      "costTier": "premium"
-    },
-    {
-      "id": "operations",
-      "source": ".github/agents/apex-operator.agent.md",
-      "agent": "APEX Operator",
-      "role": "operations",
-      "supportedTargets": ["vscode", "github-copilot"],
-      "interactionType": "interactive-handoff",
-      "model": "GPT-5.6 Terra",
-      "costTier": "premium"
+      "supportedTargets": [
+        "github-copilot"
+      ],
+      "interactionType": "interactive-handoff"
     },
     {
       "id": "code-generation",
       "source": ".github/agents/apex-codegen.agent.md",
       "agent": "APEX CodeGen",
       "role": "code-generation",
-      "supportedTargets": ["vscode"],
-      "interactionType": "autonomous-subagent",
-      "model": "GPT-5.6 Terra",
-      "costTier": "standard"
-    },
-    {
-      "id": "review",
-      "source": ".github/agents/apex-reviewer.agent.md",
-      "agent": "APEX Reviewer",
-      "role": "review",
-      "supportedTargets": ["vscode"],
-      "interactionType": "autonomous-subagent",
-      "model": "GPT-5.6 Terra",
-      "costTier": "standard"
+      "supportedTargets": [
+        "github-copilot"
+      ],
+      "interactionType": "autonomous-subagent"
     },
     {
       "id": "validation",
       "source": ".github/agents/apex-validator.agent.md",
       "agent": "APEX Validator",
       "role": "validation",
-      "supportedTargets": ["vscode"],
-      "interactionType": "autonomous-subagent",
-      "model": "GPT-5.6 Terra",
-      "costTier": "standard"
+      "supportedTargets": [
+        "github-copilot"
+      ],
+      "interactionType": "autonomous-subagent"
     }
   ],
   "invocationEdges": [
-    { "from": "APEX", "to": "APEX Requirements", "type": "handoff" },
-    { "from": "APEX", "to": "APEX Architect", "type": "handoff" },
-    { "from": "APEX", "to": "APEX Planner", "type": "handoff" },
-    { "from": "APEX", "to": "APEX Operator", "type": "handoff" },
-    { "from": "APEX Requirements", "to": "APEX Architect", "type": "handoff" },
-    { "from": "APEX Architect", "to": "APEX Planner", "type": "handoff" },
-    { "from": "APEX Planner", "to": "APEX Operator", "type": "handoff" },
-    { "from": "APEX Requirements", "to": "APEX Reviewer", "type": "subagent" },
-    { "from": "APEX Requirements", "to": "APEX Validator", "type": "subagent" },
-    { "from": "APEX Architect", "to": "APEX Reviewer", "type": "subagent" },
-    { "from": "APEX Architect", "to": "APEX Validator", "type": "subagent" },
-    { "from": "APEX Planner", "to": "APEX CodeGen", "type": "subagent" },
-    { "from": "APEX Planner", "to": "APEX Reviewer", "type": "subagent" },
-    { "from": "APEX Planner", "to": "APEX Validator", "type": "subagent" },
-    { "from": "APEX Operator", "to": "APEX Reviewer", "type": "subagent" },
-    { "from": "APEX Operator", "to": "APEX Validator", "type": "subagent" },
-    { "from": "APEX CodeGen", "to": "APEX Validator", "type": "subagent" }
+    {
+      "from": "APEX",
+      "to": "APEX CodeGen",
+      "type": "subagent"
+    },
+    {
+      "from": "APEX",
+      "to": "APEX Validator",
+      "type": "subagent"
+    }
   ]
 }

package/assets/customizations/tools/schemas/governance-baseline.schema.json

@@ -0,0 +1,118 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/jonathan-vella/apex-vnext/schemas/governance-baseline.schema.json",
+  "title": "APEX Governance Baseline",
+  "description": "Shape of .github/data/governance-policy-baseline.json produced by the governance-policy-baseline workflow. Wraps per-subscription governance-constraints-v1 envelopes.",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "coverage_status",
+    "subscriptions_discovered",
+    "subscriptions_processed",
+    "subscriptions_skipped",
+    "subscriptions_excluded",
+    "summary",
+    "subscriptions"
+  ],
+  "additionalProperties": false,
+  "oneOf": [
+    {
+      "required": ["management_group_id"],
+      "not": { "required": ["subscription_id"] }
+    },
+    {
+      "required": ["subscription_id"],
+      "not": { "required": ["management_group_id"] }
+    }
+  ],
+  "properties": {
+    "schema_version": {
+      "type": "string",
+      "const": "governance-baseline-v2"
+    },
+    "management_group_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "subscription_id": {
+      "description": "Standalone collection root; mutually exclusive with management_group_id.",
+      "type": "string",
+      "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$"
+    },
+    "coverage_status": {
+      "type": "string",
+      "enum": ["COMPLETE", "PARTIAL"]
+    },
+    "subscriptions_discovered": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "subscriptions_processed": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "subscriptions_skipped": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "subscriptions_excluded": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["subscription_id", "reason"],
+        "additionalProperties": true,
+        "properties": {
+          "subscription_id": { "type": "string" },
+          "reason": {
+            "type": "string",
+            "enum": ["disabled", "AAD_quota", "unreadable", "processing_error"]
+          },
+          "detail": { "type": "string" },
+          "quota_id": { "type": "string" }
+        }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "required": ["total_findings", "total_blockers", "total_auto_remediate", "subscriptions_complete"],
+      "additionalProperties": true,
+      "properties": {
+        "total_findings": { "type": "integer", "minimum": 0 },
+        "total_blockers": { "type": "integer", "minimum": 0 },
+        "total_auto_remediate": { "type": "integer", "minimum": 0 },
+        "subscriptions_complete": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "subscriptions": {
+      "type": "object",
+      "description": "Map of subscription ID to governance-constraints-v1 envelope. Each value must be a valid governance-constraints-v1 envelope.",
+      "additionalProperties": {
+        "type": "object",
+        "required": ["schema_version", "subscription_id", "discovered_at", "findings"],
+        "additionalProperties": true,
+        "properties": {
+          "schema_version": { "type": "string", "const": "governance-constraints-v1" },
+          "subscription_id": { "type": "string" },
+          "discovered_at": { "type": "string" },
+          "source": { "type": "string" },
+          "discovery_status": { "type": "string" },
+          "discovery_metadata": {
+            "type": "object",
+            "properties": {
+              "scope": {
+                "type": "object",
+                "properties": {
+                  "coverage": { "const": "subscription-and-descendants-v1" }
+                }
+              }
+            }
+          },
+          "findings": { "type": "array" },
+          "policies": false,
+          "tags_required": { "type": "array" },
+          "allowed_locations": { "type": "array" }
+        }
+      }
+    }
+  }
+}