@aqaf/cli 0.0.0-stage → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +62 -2
  3. package/bin/aqaf.js +12 -0
  4. package/index.js +51 -0
  5. package/package.json +51 -4
  6. package/vendor/aqaf/__init__.py +2 -0
  7. package/vendor/aqaf/__main__.py +3 -0
  8. package/vendor/aqaf/adapters.py +583 -0
  9. package/vendor/aqaf/artifacts.py +28 -0
  10. package/vendor/aqaf/calibration.py +29 -0
  11. package/vendor/aqaf/catalogue.py +257 -0
  12. package/vendor/aqaf/cli.py +721 -0
  13. package/vendor/aqaf/cursor.py +56 -0
  14. package/vendor/aqaf/data/book_review_knowledge.json +1574 -0
  15. package/vendor/aqaf/data/catalog.json +562 -0
  16. package/vendor/aqaf/data/documentation_checks.json +52 -0
  17. package/vendor/aqaf/data/packs/automation.json +16 -0
  18. package/vendor/aqaf/data/packs/mobile.json +13 -0
  19. package/vendor/aqaf/data/packs/systems.json +17 -0
  20. package/vendor/aqaf/data/packs/web.json +16 -0
  21. package/vendor/aqaf/data/profiles/ai_pipeline.json +39 -0
  22. package/vendor/aqaf/data/profiles/android.json +34 -0
  23. package/vendor/aqaf/data/profiles/api_backend.json +44 -0
  24. package/vendor/aqaf/data/profiles/browser_extension.json +29 -0
  25. package/vendor/aqaf/data/profiles/cli_automation.json +34 -0
  26. package/vendor/aqaf/data/profiles/desktop_utility.json +39 -0
  27. package/vendor/aqaf/data/profiles/embedded_iot.json +34 -0
  28. package/vendor/aqaf/data/profiles/google_apps_script.json +34 -0
  29. package/vendor/aqaf/data/profiles/mcp_agent_server.json +34 -0
  30. package/vendor/aqaf/data/profiles/multirepo_system.json +29 -0
  31. package/vendor/aqaf/data/profiles/npm_library.json +39 -0
  32. package/vendor/aqaf/data/profiles/rust_app.json +34 -0
  33. package/vendor/aqaf/data/profiles/saas_or_web_app.json +44 -0
  34. package/vendor/aqaf/data/profiles/scraper_data_pipeline.json +39 -0
  35. package/vendor/aqaf/data/profiles/swift_app.json +34 -0
  36. package/vendor/aqaf/data/profiles/tauri_electron.json +34 -0
  37. package/vendor/aqaf/data/profiles/unknown_or_general_app.json +25 -0
  38. package/vendor/aqaf/data/profiles/windows_client_server.json +34 -0
  39. package/vendor/aqaf/data/profiles/wordpress_plugin.json +39 -0
  40. package/vendor/aqaf/data/review_checks.json +319 -0
  41. package/vendor/aqaf/data/source_registry.json +814 -0
  42. package/vendor/aqaf/discovery.py +580 -0
  43. package/vendor/aqaf/documentation.py +210 -0
  44. package/vendor/aqaf/evidence.py +132 -0
  45. package/vendor/aqaf/facets.py +63 -0
  46. package/vendor/aqaf/ignore.py +109 -0
  47. package/vendor/aqaf/knowledge.py +110 -0
  48. package/vendor/aqaf/markup.py +96 -0
  49. package/vendor/aqaf/matching.py +22 -0
  50. package/vendor/aqaf/portfolio.py +145 -0
  51. package/vendor/aqaf/project_commands.py +132 -0
  52. package/vendor/aqaf/projects.py +157 -0
  53. package/vendor/aqaf/registry.py +125 -0
  54. package/vendor/aqaf/review.py +446 -0
  55. package/vendor/aqaf/scope.py +401 -0
  56. package/vendor/aqaf/swift_review.py +99 -0
@@ -0,0 +1,814 @@
1
+ [
2
+ {
3
+ "id": "B01",
4
+ "type": "book",
5
+ "title": "Software Architecture in Practice, 4e",
6
+ "authors_or_owner": "Bass; Clements; Kazman",
7
+ "edition_or_date": "2021",
8
+ "url": "https://www.oreilly.com/library/view/software-architecture-in/9780136885979/",
9
+ "relevant_for": "Quality attributes; architecture evaluation; tactics",
10
+ "aqaf_independent_interpretation": true
11
+ },
12
+ {
13
+ "id": "B02",
14
+ "type": "book",
15
+ "title": "Fundamentals of Software Architecture",
16
+ "authors_or_owner": "Richards; Ford",
17
+ "edition_or_date": "2020",
18
+ "url": "https://www.oreilly.com/library/view/fundamentals-of-software/9781492043447/",
19
+ "relevant_for": "Style trade-offs; architectural characteristics",
20
+ "aqaf_independent_interpretation": true
21
+ },
22
+ {
23
+ "id": "B03",
24
+ "type": "book",
25
+ "title": "Building Evolutionary Architectures, 2e",
26
+ "authors_or_owner": "Ford; Parsons; Kua; Sadalage",
27
+ "edition_or_date": "2022",
28
+ "url": "https://www.oreilly.com/library/view/building-evolutionary-architectures/9781492097532/",
29
+ "relevant_for": "Fitness functions and incremental governance",
30
+ "aqaf_independent_interpretation": true
31
+ },
32
+ {
33
+ "id": "B04",
34
+ "type": "book",
35
+ "title": "Designing Data-Intensive Applications",
36
+ "authors_or_owner": "Kleppmann",
37
+ "edition_or_date": "2017",
38
+ "url": "https://www.oreilly.com/library/view/designing-data-intensive-applications/9781491903063/",
39
+ "relevant_for": "Data consistency, storage, transactions, distributed systems",
40
+ "aqaf_independent_interpretation": true
41
+ },
42
+ {
43
+ "id": "B05",
44
+ "type": "book",
45
+ "title": "Domain-Driven Design",
46
+ "authors_or_owner": "Evans",
47
+ "edition_or_date": "2003",
48
+ "url": "https://www.pearson.de/domain-driven-design-tackling-complexity-in-the-heart-of-software-9780321125217",
49
+ "relevant_for": "Bounded contexts and domain language",
50
+ "aqaf_independent_interpretation": true
51
+ },
52
+ {
53
+ "id": "B06",
54
+ "type": "book",
55
+ "title": "Working Effectively with Legacy Code",
56
+ "authors_or_owner": "Feathers",
57
+ "edition_or_date": "2004",
58
+ "url": "https://www.oreilly.com/library/view/working-effectively-with/0131177052/",
59
+ "relevant_for": "Characterization tests and safe seams",
60
+ "aqaf_independent_interpretation": true
61
+ },
62
+ {
63
+ "id": "B07",
64
+ "type": "book",
65
+ "title": "Accelerate",
66
+ "authors_or_owner": "Forsgren; Humble; Kim",
67
+ "edition_or_date": "2018",
68
+ "url": "https://dl.acm.org/doi/10.5555/3235404",
69
+ "relevant_for": "Measuring delivery capabilities; not a code architecture score",
70
+ "aqaf_independent_interpretation": true
71
+ },
72
+ {
73
+ "id": "B08",
74
+ "type": "book",
75
+ "title": "Team Topologies, 2e",
76
+ "authors_or_owner": "Skelton; Pais",
77
+ "edition_or_date": "2025",
78
+ "url": "https://teamtopologies.com/books",
79
+ "relevant_for": "Architecture/team boundaries and cognitive load",
80
+ "aqaf_independent_interpretation": true
81
+ },
82
+ {
83
+ "id": "B09",
84
+ "type": "book",
85
+ "title": "Clean Architecture",
86
+ "authors_or_owner": "Robert C. Martin",
87
+ "edition_or_date": "2017",
88
+ "url": "https://www.oreilly.com/library/view/clean-architecture-a/9780134494272/",
89
+ "relevant_for": "Dependency direction; one design approach, not universal law",
90
+ "aqaf_independent_interpretation": true
91
+ },
92
+ {
93
+ "id": "B10",
94
+ "type": "book",
95
+ "title": "Monolith to Microservices",
96
+ "authors_or_owner": "Sam Newman",
97
+ "edition_or_date": "2019",
98
+ "url": "https://samnewman.io/books/monolith-to-microservices/",
99
+ "relevant_for": "Incremental extraction trade-offs",
100
+ "aqaf_independent_interpretation": true
101
+ },
102
+ {
103
+ "id": "B11",
104
+ "type": "book",
105
+ "title": "Software Architecture: The Hard Parts",
106
+ "authors_or_owner": "Ford; Richards; Sadalage; Dehghani",
107
+ "edition_or_date": "2021",
108
+ "url": "https://www.oreilly.com/library/view/software-architecture-the/9781492086888/",
109
+ "relevant_for": "Trade-off analysis and distribution costs",
110
+ "aqaf_independent_interpretation": true
111
+ },
112
+ {
113
+ "id": "B12",
114
+ "type": "book",
115
+ "title": "Release It!, 2e",
116
+ "authors_or_owner": "Michael Nygard",
117
+ "edition_or_date": "2018",
118
+ "url": "https://www.pragmatic.org/titles/mnee2/release-it-second-edition/",
119
+ "relevant_for": "Runtime resilience, stability and production operations",
120
+ "aqaf_independent_interpretation": true
121
+ },
122
+ {
123
+ "id": "B13",
124
+ "type": "book",
125
+ "title": "A Philosophy of Software Design, 2e",
126
+ "authors_or_owner": "John Ousterhout",
127
+ "edition_or_date": "2021",
128
+ "url": "https://www.web.stanford.edu/~ouster/cgi-bin/aposd.php",
129
+ "relevant_for": "Managing complexity; deep modules vs unnecessary layers",
130
+ "aqaf_independent_interpretation": true
131
+ },
132
+ {
133
+ "id": "B14",
134
+ "type": "book",
135
+ "title": "Patterns of Enterprise Application Architecture",
136
+ "authors_or_owner": "Martin Fowler",
137
+ "edition_or_date": "2002",
138
+ "url": "https://martinfowler.com/books/eaa.html",
139
+ "relevant_for": "Domain and data mapping patterns",
140
+ "aqaf_independent_interpretation": true
141
+ },
142
+ {
143
+ "id": "B15",
144
+ "type": "book",
145
+ "title": "Understanding Software Dynamics",
146
+ "authors_or_owner": "Richard L. Sites",
147
+ "edition_or_date": "2021",
148
+ "url": "https://www.oreilly.com/library/view/understanding-software-dynamics/9780137589692/",
149
+ "relevant_for": "Evidence-based performance measurement",
150
+ "aqaf_independent_interpretation": true
151
+ },
152
+ {
153
+ "id": "S01",
154
+ "type": "official",
155
+ "title": "Codex Agents and AGENTS.md",
156
+ "authors_or_owner": "OpenAI",
157
+ "edition_or_date": "accessed 2026-11-07",
158
+ "url": "https://developers.openai.com/codex/guides/agents-md",
159
+ "relevant_for": "Agent repository instructions",
160
+ "aqaf_independent_interpretation": true
161
+ },
162
+ {
163
+ "id": "S02",
164
+ "type": "official",
165
+ "title": "OpenAI Agent Skills",
166
+ "authors_or_owner": "OpenAI",
167
+ "edition_or_date": "accessed 2026-11-07",
168
+ "url": "https://developers.openai.com/api/docs/guides/tools-skills",
169
+ "relevant_for": "Skill structure and versioning",
170
+ "aqaf_independent_interpretation": true
171
+ },
172
+ {
173
+ "id": "S03",
174
+ "type": "official",
175
+ "title": "Codex skills and prompt guidance update",
176
+ "authors_or_owner": "OpenAI",
177
+ "edition_or_date": "2026",
178
+ "url": "https://developers.openai.com/blog/rethinking-skills-and-prompts-for-gpt-6-astra",
179
+ "relevant_for": "Keep instructions concise, contextual",
180
+ "aqaf_independent_interpretation": true
181
+ },
182
+ {
183
+ "id": "S04",
184
+ "type": "official",
185
+ "title": "GitHub Actions Marketplace publishing",
186
+ "authors_or_owner": "GitHub",
187
+ "edition_or_date": "accessed 2026-11-07",
188
+ "url": "https://docs.github.com/en/actions/how-tos/create-and-publish-actions/publish-in-github-marketplace",
189
+ "relevant_for": "Separate action repository and root metadata",
190
+ "aqaf_independent_interpretation": true
191
+ },
192
+ {
193
+ "id": "S05",
194
+ "type": "official",
195
+ "title": "GitHub SARIF 2.1.0 support",
196
+ "authors_or_owner": "GitHub",
197
+ "edition_or_date": "accessed 2026-11-07",
198
+ "url": "https://docs.github.com/en/code-security/concepts/code-scanning/sarif-files",
199
+ "relevant_for": "Static analysis interchange format",
200
+ "aqaf_independent_interpretation": true
201
+ },
202
+ {
203
+ "id": "S06",
204
+ "type": "standard",
205
+ "title": "OWASP ASVS 5.0.0",
206
+ "authors_or_owner": "OWASP",
207
+ "edition_or_date": "2025",
208
+ "url": "https://asvs.owasp.org/",
209
+ "relevant_for": "Security requirements for web apps, separate from architecture fitness",
210
+ "aqaf_independent_interpretation": true
211
+ },
212
+ {
213
+ "id": "S07",
214
+ "type": "standard",
215
+ "title": "OpenSSF Scorecard",
216
+ "authors_or_owner": "OpenSSF",
217
+ "edition_or_date": "accessed 2026-11-07",
218
+ "url": "https://openssf.org/projects/scorecard/",
219
+ "relevant_for": "Open-source supply-chain hygiene",
220
+ "aqaf_independent_interpretation": true
221
+ },
222
+ {
223
+ "id": "S08",
224
+ "type": "official",
225
+ "title": "Swift Package Manager",
226
+ "authors_or_owner": "Swift project",
227
+ "edition_or_date": "accessed 2026-11-07",
228
+ "url": "https://docs.swift.org/swiftpm/documentation/packagemanagerdocs/",
229
+ "relevant_for": "Swift modularity and packages",
230
+ "aqaf_independent_interpretation": true
231
+ },
232
+ {
233
+ "id": "S09",
234
+ "type": "official",
235
+ "title": "Swift API Design Guidelines",
236
+ "authors_or_owner": "Swift project",
237
+ "edition_or_date": "accessed 2026-11-07",
238
+ "url": "https://www.swift.org/documentation/api-design-guidelines/",
239
+ "relevant_for": "Swift API consistency",
240
+ "aqaf_independent_interpretation": true
241
+ },
242
+ {
243
+ "id": "S10",
244
+ "type": "official",
245
+ "title": "The Cargo Book: workspaces",
246
+ "authors_or_owner": "Rust project",
247
+ "edition_or_date": "accessed 2026-11-07",
248
+ "url": "https://doc.rust-lang.org/cargo/reference/workspaces.html",
249
+ "relevant_for": "Rust crate/workspace separation",
250
+ "aqaf_independent_interpretation": true
251
+ },
252
+ {
253
+ "id": "S11",
254
+ "type": "official",
255
+ "title": "Rust Clippy",
256
+ "authors_or_owner": "Rust project",
257
+ "edition_or_date": "accessed 2026-11-07",
258
+ "url": "https://doc.rust-lang.org/clippy/",
259
+ "relevant_for": "Rust lint rules",
260
+ "aqaf_independent_interpretation": true
261
+ },
262
+ {
263
+ "id": "S12",
264
+ "type": "community",
265
+ "title": "ArchUnit",
266
+ "authors_or_owner": "ArchUnit",
267
+ "edition_or_date": "accessed 2026-11-07",
268
+ "url": "https://www.archunit.org/",
269
+ "relevant_for": "JVM architecture rule testing",
270
+ "aqaf_independent_interpretation": true
271
+ },
272
+ {
273
+ "id": "S13",
274
+ "type": "community",
275
+ "title": "dependency-cruiser",
276
+ "authors_or_owner": "dependency-cruiser",
277
+ "edition_or_date": "accessed 2026-11-07",
278
+ "url": "https://github.com/sverweij/dependency-cruiser",
279
+ "relevant_for": "JS/TS module dependencies",
280
+ "aqaf_independent_interpretation": true
281
+ },
282
+ {
283
+ "id": "S14",
284
+ "type": "official",
285
+ "title": "Android modularization guidance",
286
+ "authors_or_owner": "Android Developers",
287
+ "edition_or_date": "accessed 2026-11-07",
288
+ "url": "https://developer.android.com/topic/modularization",
289
+ "relevant_for": "Android module design",
290
+ "aqaf_independent_interpretation": true
291
+ },
292
+ {
293
+ "id": "S15",
294
+ "type": "official",
295
+ "title": "WordPress Plugin Handbook",
296
+ "authors_or_owner": "WordPress",
297
+ "edition_or_date": "accessed 2026-11-07",
298
+ "url": "https://developer.wordpress.org/plugins/",
299
+ "relevant_for": "Plugin structure and hooks",
300
+ "aqaf_independent_interpretation": true
301
+ },
302
+ {
303
+ "id": "S16",
304
+ "type": "official_docs",
305
+ "title": "TypeScript type assertions",
306
+ "authors_or_owner": "TypeScript",
307
+ "edition_or_date": "accessed 2026-11-10",
308
+ "url": "https://www.typescriptlang.org/docs/handbook/2/everyday-types.html#type-assertions",
309
+ "relevant_for": "Type assertions are compile-time constructs, not runtime validation.",
310
+ "aqaf_independent_interpretation": true
311
+ },
312
+ {
313
+ "id": "S17",
314
+ "type": "official_docs",
315
+ "title": "Node.js file system API",
316
+ "authors_or_owner": "Node.js",
317
+ "edition_or_date": "accessed 2026-11-10",
318
+ "url": "https://nodejs.org/api/fs.html",
319
+ "relevant_for": "File write, rename and error behavior; does not establish application crash safety.",
320
+ "aqaf_independent_interpretation": true
321
+ },
322
+ {
323
+ "id": "S18",
324
+ "type": "official_docs",
325
+ "title": "Web Workers messaging and termination",
326
+ "authors_or_owner": "MDN",
327
+ "edition_or_date": "accessed 2026-11-10",
328
+ "url": "https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers_API/Using_web_workers",
329
+ "relevant_for": "Worker error transport, handlers and lifecycle APIs; not proof of application coverage.",
330
+ "aqaf_independent_interpretation": true
331
+ },
332
+ {
333
+ "id": "S19",
334
+ "type": "official_docs",
335
+ "title": "JavaScript async function behavior",
336
+ "authors_or_owner": "MDN",
337
+ "edition_or_date": "accessed 2026-11-10",
338
+ "url": "https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/async_function",
339
+ "relevant_for": "Await splits async execution; source order is not proof of a reproduced race.",
340
+ "aqaf_independent_interpretation": true
341
+ },
342
+ {
343
+ "id": "S20",
344
+ "type": "official_docs",
345
+ "title": "OWASP Secrets Management Cheat Sheet",
346
+ "authors_or_owner": "OWASP",
347
+ "edition_or_date": "accessed 2026-11-10",
348
+ "url": "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html",
349
+ "relevant_for": "Secrets management rationale; encoded values are not validated credentials.",
350
+ "aqaf_independent_interpretation": true
351
+ },
352
+ {
353
+ "id": "S21",
354
+ "type": "official_docs",
355
+ "title": "Gitignore pattern semantics",
356
+ "authors_or_owner": "Git",
357
+ "edition_or_date": "accessed 2026-11-11",
358
+ "url": "https://git-scm.com/docs/gitignore",
359
+ "relevant_for": "Directory pruning, nested precedence and bounded local exclusions; AQAF does not consult the Git index or global patterns.",
360
+ "aqaf_independent_interpretation": true
361
+ },
362
+ {
363
+ "id": "S22",
364
+ "type": "official_docs",
365
+ "title": "Python abstract syntax trees",
366
+ "authors_or_owner": "Python",
367
+ "edition_or_date": "accessed 2026-11-11",
368
+ "url": "https://docs.python.org/3/library/ast.html",
369
+ "relevant_for": "Passive syntax structure only; parse success does not prove executable or correct behavior.",
370
+ "aqaf_independent_interpretation": true
371
+ },
372
+ {
373
+ "id": "S23",
374
+ "type": "official_docs",
375
+ "title": "Kotlin coroutine ownership and exception handling",
376
+ "authors_or_owner": "JetBrains",
377
+ "edition_or_date": "accessed 2026-11-11",
378
+ "url": "https://kotlinlang.org/docs/exception-handling.html",
379
+ "relevant_for": "Structured scopes and cancellation require context; source startup spellings do not establish leaks.",
380
+ "aqaf_independent_interpretation": true
381
+ },
382
+ {
383
+ "id": "S24",
384
+ "type": "official_docs",
385
+ "title": "System.Text.Json deserialization",
386
+ "authors_or_owner": "Microsoft",
387
+ "edition_or_date": "accessed 2026-11-11",
388
+ "url": "https://learn.microsoft.com/en-us/dotnet/standard/serialization/system-text-json/deserialization",
389
+ "relevant_for": "Deserialization and domain validation are separate review questions; framework binding is unresolved.",
390
+ "aqaf_independent_interpretation": true
391
+ },
392
+ {
393
+ "id": "S25",
394
+ "type": "official_docs",
395
+ "title": "PHP JSON encoding",
396
+ "authors_or_owner": "PHP",
397
+ "edition_or_date": "accessed 2026-11-11",
398
+ "url": "https://www.php.net/manual/en/function.json-encode.php",
399
+ "relevant_for": "Serialization API evidence; file publication intent is not established by encoding alone.",
400
+ "aqaf_independent_interpretation": true
401
+ },
402
+ {
403
+ "id": "S26",
404
+ "type": "official_docs",
405
+ "title": "Rust filesystem write",
406
+ "authors_or_owner": "Rust Project",
407
+ "edition_or_date": "accessed 2026-11-11",
408
+ "url": "https://doc.rust-lang.org/std/fs/fn.write.html",
409
+ "relevant_for": "Qualified filesystem write semantics; crash durability and ownership require characterization.",
410
+ "aqaf_independent_interpretation": true
411
+ },
412
+ {
413
+ "id": "S27",
414
+ "type": "official_docs",
415
+ "title": "PowerShell ConvertTo-Json",
416
+ "authors_or_owner": "Microsoft",
417
+ "edition_or_date": "accessed 2026-11-11",
418
+ "url": "https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/convertto-json",
419
+ "relevant_for": "JSON pipeline syntax; publication and cmdlet binding remain unverified.",
420
+ "aqaf_independent_interpretation": true
421
+ },
422
+ {
423
+ "id": "S28",
424
+ "type": "official_docs",
425
+ "title": "SQLite transactions",
426
+ "authors_or_owner": "SQLite",
427
+ "edition_or_date": "accessed 2026-11-11",
428
+ "url": "https://www.sqlite.org/lang_transaction.html",
429
+ "relevant_for": "Includes implicit transactions: missing explicit BEGIN is not an unsafe-transaction detector.",
430
+ "aqaf_independent_interpretation": true
431
+ },
432
+ {
433
+ "id": "S29",
434
+ "type": "official_docs",
435
+ "title": "TypeScript JSX",
436
+ "authors_or_owner": "Microsoft",
437
+ "edition_or_date": "accessed 2026-11-11",
438
+ "url": "https://www.typescriptlang.org/docs/handbook/jsx.html",
439
+ "relevant_for": "JSX is distinct grammar. Only bounded static markup masking is supported.",
440
+ "aqaf_independent_interpretation": true
441
+ },
442
+ {
443
+ "id": "S30",
444
+ "type": "official_docs",
445
+ "title": "Python JSON file-like serialization",
446
+ "authors_or_owner": "Python",
447
+ "edition_or_date": "accessed 2026-11-11",
448
+ "url": "https://docs.python.org/3/library/json.html",
449
+ "relevant_for": "JSON serialization accepts file-like sinks; not every write is persistent application state.",
450
+ "aqaf_independent_interpretation": true
451
+ },
452
+ {
453
+ "id": "S31",
454
+ "type": "official_docs",
455
+ "title": "Python filesystem replace",
456
+ "authors_or_owner": "Python",
457
+ "edition_or_date": "accessed 2026-11-11",
458
+ "url": "https://docs.python.org/3/library/os.html#os.replace",
459
+ "relevant_for": "Same-path replacement syntax is local control evidence, not a complete durability proof.",
460
+ "aqaf_independent_interpretation": true
461
+ },
462
+ {
463
+ "id": "S32",
464
+ "type": "official_docs",
465
+ "title": "Java NIO filesystem operations",
466
+ "authors_or_owner": "Oracle",
467
+ "edition_or_date": "accessed 2026-11-11",
468
+ "url": "https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/nio/file/Files.html",
469
+ "relevant_for": "Write and move API syntax, subject to filesystem and call binding context.",
470
+ "aqaf_independent_interpretation": true
471
+ },
472
+ {
473
+ "id": "S33",
474
+ "type": "official_docs",
475
+ "title": "Bash shell builtins and trap declarations",
476
+ "authors_or_owner": "GNU",
477
+ "edition_or_date": "accessed 2026-11-11",
478
+ "url": "https://www.gnu.org/software/bash/manual/html_node/Bourne-Shell-Builtins.html",
479
+ "relevant_for": "Trap syntax is a declaration, not proof that cleanup executes on every exit.",
480
+ "aqaf_independent_interpretation": true
481
+ },
482
+ {
483
+ "id": "S34",
484
+ "type": "official_docs",
485
+ "title": "HTML script element",
486
+ "authors_or_owner": "MDN",
487
+ "edition_or_date": "accessed 2026-11-11",
488
+ "url": "https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/script",
489
+ "relevant_for": "Script elements can contain code or data; external and non-JavaScript content is not followed.",
490
+ "aqaf_independent_interpretation": true
491
+ },
492
+ {
493
+ "id": "S35",
494
+ "type": "official_docs",
495
+ "title": "System.IO File.WriteAllText",
496
+ "authors_or_owner": "Microsoft",
497
+ "edition_or_date": "accessed 2026-11-11",
498
+ "url": "https://learn.microsoft.com/en-us/dotnet/api/system.io.file.writealltext",
499
+ "relevant_for": "Qualified write syntax does not establish application state durability requirements.",
500
+ "aqaf_independent_interpretation": true
501
+ },
502
+ {
503
+ "id": "S36",
504
+ "type": "official_docs",
505
+ "title": "WordPress nonce verification",
506
+ "authors_or_owner": "WordPress",
507
+ "edition_or_date": "accessed 2026-11-11",
508
+ "url": "https://developer.wordpress.org/reference/functions/wp_verify_nonce/",
509
+ "relevant_for": "Nonce verification is not authorization or complete domain validation.",
510
+ "aqaf_independent_interpretation": true
511
+ },
512
+ {
513
+ "id": "S37",
514
+ "type": "official_docs",
515
+ "title": "Swift lexical structure",
516
+ "authors_or_owner": "Swift Project",
517
+ "edition_or_date": "accessed 2026-11-11",
518
+ "url": "https://docs.swift.org/swift-book/ReferenceManual/LexicalStructure.html",
519
+ "relevant_for": "Nested comments and extended/multiline literal syntax. Masking is not compiler/type validation.",
520
+ "aqaf_independent_interpretation": true
521
+ },
522
+ {
523
+ "id": "S38",
524
+ "type": "official_docs",
525
+ "title": "Foundation Process termination handlers",
526
+ "authors_or_owner": "Apple",
527
+ "edition_or_date": "accessed 2026-11-11",
528
+ "url": "https://developer.apple.com/documentation/foundation/process/terminationhandler",
529
+ "relevant_for": "Visible termination callbacks are local control evidence, not complete lifetime proof.",
530
+ "aqaf_independent_interpretation": true
531
+ },
532
+ {
533
+ "id": "S39",
534
+ "type": "official_docs",
535
+ "title": "Foundation Data write options",
536
+ "authors_or_owner": "Apple",
537
+ "edition_or_date": "accessed 2026-11-11",
538
+ "url": "https://developer.apple.com/documentation/foundation/data/write(to:options:)",
539
+ "relevant_for": "File write/to options source facts; atomic option syntax is not a full durability proof.",
540
+ "aqaf_independent_interpretation": true
541
+ },
542
+ {
543
+ "id": "S40",
544
+ "type": "official_docs",
545
+ "title": "Swift concurrency and cancellation",
546
+ "authors_or_owner": "Swift Project",
547
+ "edition_or_date": "accessed 2026-11-11",
548
+ "url": "https://docs.swift.org/swift-book/documentation/the-swift-programming-language/concurrency/",
549
+ "relevant_for": "Task syntax, actor context and cooperative cancellation require independent runtime characterization.",
550
+ "aqaf_independent_interpretation": true
551
+ },
552
+ {
553
+ "id": "S41",
554
+ "type": "official_docs",
555
+ "title": "PowerShell Start-Process Wait and PassThru",
556
+ "authors_or_owner": "Microsoft",
557
+ "edition_or_date": "accessed 2026-11-11",
558
+ "url": "https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/start-process",
559
+ "relevant_for": "Independent process launch, explicit Wait and returned Process handles differ from background jobs.",
560
+ "aqaf_independent_interpretation": true
561
+ },
562
+ {
563
+ "id": "S42",
564
+ "type": "official_docs",
565
+ "title": "Foundation JSONDecoder",
566
+ "authors_or_owner": "Apple",
567
+ "edition_or_date": "accessed 2026-11-11",
568
+ "url": "https://developer.apple.com/documentation/foundation/jsondecoder",
569
+ "relevant_for": "Typed JSON decoding is not proof of complete domain validation or a missing domain-validation defect.",
570
+ "aqaf_independent_interpretation": true
571
+ },
572
+ {
573
+ "id": "B16",
574
+ "type": "book",
575
+ "title": "Refactoring, 2nd edition",
576
+ "authors_or_owner": "Martin Fowler",
577
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
578
+ "url": "https://refactoring.com/catalog/",
579
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
580
+ "aqaf_independent_interpretation": true,
581
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
582
+ },
583
+ {
584
+ "id": "B17",
585
+ "type": "book",
586
+ "title": "Writing Secure Code, 2nd edition",
587
+ "authors_or_owner": "Michael Howard and David LeBlanc",
588
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
589
+ "url": "https://www.informit.com/store/writing-secure-code-9780735617223",
590
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
591
+ "aqaf_independent_interpretation": true,
592
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
593
+ },
594
+ {
595
+ "id": "B18",
596
+ "type": "book",
597
+ "title": "Threat Modeling: Designing for Security",
598
+ "authors_or_owner": "Adam Shostack",
599
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
600
+ "url": "https://github.com/adamshostack/4QuestionFrame",
601
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
602
+ "aqaf_independent_interpretation": true,
603
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
604
+ },
605
+ {
606
+ "id": "B19",
607
+ "type": "book",
608
+ "title": "xUnit Test Patterns",
609
+ "authors_or_owner": "Gerard Meszaros",
610
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
611
+ "url": "https://www.informit.com/store/xunit-test-patterns-refactoring-test-code-9780321504807",
612
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
613
+ "aqaf_independent_interpretation": true,
614
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
615
+ },
616
+ {
617
+ "id": "B20",
618
+ "type": "book",
619
+ "title": "Growing Object-Oriented Software, Guided by Tests",
620
+ "authors_or_owner": "Steve Freeman and Nat Pryce",
621
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
622
+ "url": "https://www.pearson.com/en-us/subject-catalog/p/growing-object-oriented-software-guided-by-tests/P200000009298/",
623
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
624
+ "aqaf_independent_interpretation": true,
625
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
626
+ },
627
+ {
628
+ "id": "B21",
629
+ "type": "book",
630
+ "title": "Unit Testing Principles, Practices, and Patterns",
631
+ "authors_or_owner": "Vladimir Khorikov",
632
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
633
+ "url": "https://www.simonandschuster.ca/books/Unit-Testing-Principles-Practices-and-Patterns/Vladimir-Khorikov/9781617296277",
634
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
635
+ "aqaf_independent_interpretation": true,
636
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
637
+ },
638
+ {
639
+ "id": "B22",
640
+ "type": "book",
641
+ "title": "Test-Driven Development: By Example",
642
+ "authors_or_owner": "Kent Beck",
643
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
644
+ "url": "https://oreilly.com/library/view/test-driven-development/0321146530",
645
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
646
+ "aqaf_independent_interpretation": true,
647
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
648
+ },
649
+ {
650
+ "id": "B23",
651
+ "type": "book",
652
+ "title": "Agile Testing",
653
+ "authors_or_owner": "Lisa Crispin and Janet Gregory",
654
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
655
+ "url": "https://www.informit.com/store/agile-testing-a-practical-guide-for-testers-and-agile-9780321606778",
656
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
657
+ "aqaf_independent_interpretation": true,
658
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
659
+ },
660
+ {
661
+ "id": "B24",
662
+ "type": "book",
663
+ "title": "Windows Security Internals",
664
+ "authors_or_owner": "James Forshaw",
665
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
666
+ "url": "https://nostarch.com/windows-security-internals",
667
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
668
+ "aqaf_independent_interpretation": true,
669
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
670
+ },
671
+ {
672
+ "id": "B25",
673
+ "type": "book",
674
+ "title": "Bulletproof TLS and PKI, 2nd edition",
675
+ "authors_or_owner": "Ivan Ristić",
676
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
677
+ "url": "https://www.feistyduck.com/books/bulletproof-tls-and-pki/",
678
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
679
+ "aqaf_independent_interpretation": true,
680
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
681
+ },
682
+ {
683
+ "id": "B26",
684
+ "type": "book",
685
+ "title": "Serious Cryptography, 2nd edition",
686
+ "authors_or_owner": "Jean-Philippe Aumasson",
687
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
688
+ "url": "https://nostarch.com/seriouscrypto",
689
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
690
+ "aqaf_independent_interpretation": true,
691
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
692
+ },
693
+ {
694
+ "id": "B27",
695
+ "type": "book",
696
+ "title": "Security Engineering, 3rd edition",
697
+ "authors_or_owner": "Ross Anderson",
698
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
699
+ "url": "https://www.cl.cam.ac.uk/~rja14/book.html",
700
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
701
+ "aqaf_independent_interpretation": true,
702
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
703
+ },
704
+ {
705
+ "id": "B28",
706
+ "type": "book",
707
+ "title": "Continuous Delivery",
708
+ "authors_or_owner": "Jez Humble and David Farley",
709
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
710
+ "url": "https://www.pearson.com/en-us/subject-catalog/p/continuous-delivery-reliable-software-releases-through-build-test-and-deployment-automation/P200000009113/9780321601919",
711
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
712
+ "aqaf_independent_interpretation": true,
713
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
714
+ },
715
+ {
716
+ "id": "B29",
717
+ "type": "book",
718
+ "title": "Concurrency in C# Cookbook, 2nd edition",
719
+ "authors_or_owner": "Stephen Cleary",
720
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
721
+ "url": "https://stephencleary.com/book/",
722
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
723
+ "aqaf_independent_interpretation": true,
724
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
725
+ },
726
+ {
727
+ "id": "B30",
728
+ "type": "book",
729
+ "title": "Enterprise Integration Patterns",
730
+ "authors_or_owner": "Gregor Hohpe and Bobby Woolf",
731
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
732
+ "url": "https://www.enterpriseintegrationpatterns.com/toc.html",
733
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
734
+ "aqaf_independent_interpretation": true,
735
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
736
+ },
737
+ {
738
+ "id": "B31",
739
+ "type": "book",
740
+ "title": "Site Reliability Engineering",
741
+ "authors_or_owner": "edited by Betsy Beyer, Chris Jones, Jennifer Petoff and Niall Richard Murphy",
742
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
743
+ "url": "https://sre.google/books/",
744
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
745
+ "aqaf_independent_interpretation": true,
746
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
747
+ },
748
+ {
749
+ "id": "B32",
750
+ "type": "book",
751
+ "title": "The Design of Everyday Things, revised and expanded",
752
+ "authors_or_owner": "Don Norman",
753
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
754
+ "url": "https://jnd.org/the-design-of-everyday-things-revised-and-expanded/",
755
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
756
+ "aqaf_independent_interpretation": true,
757
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
758
+ },
759
+ {
760
+ "id": "B33",
761
+ "type": "book",
762
+ "title": "Windows Internals, Part 1 and Part 2, 7th edition",
763
+ "authors_or_owner": "Pavel Yosifovich, Alex Ionescu, Mark Russinovich, David Solomon; part 2 with Andrea Allievi",
764
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
765
+ "url": "https://learn.microsoft.com/en-us/sysinternals/resources/windows-internals",
766
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
767
+ "aqaf_independent_interpretation": true,
768
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
769
+ },
770
+ {
771
+ "id": "B34",
772
+ "type": "book",
773
+ "title": "C# in Depth, 4th edition",
774
+ "authors_or_owner": "Jon Skeet",
775
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
776
+ "url": "https://csharpindepth.com/contents",
777
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
778
+ "aqaf_independent_interpretation": true,
779
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
780
+ },
781
+ {
782
+ "id": "B35",
783
+ "type": "book",
784
+ "title": "Code Complete, 2nd edition",
785
+ "authors_or_owner": "Steve McConnell",
786
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
787
+ "url": "https://blogs.msdn.microsoft.com/microsoft_press/2011/09/12/best-practices-code-complete-second-edition/",
788
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
789
+ "aqaf_independent_interpretation": true,
790
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
791
+ },
792
+ {
793
+ "id": "B36",
794
+ "type": "book",
795
+ "title": "The Pragmatic Programmer, 20th anniversary edition",
796
+ "authors_or_owner": "David Thomas and Andrew Hunt",
797
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
798
+ "url": "https://www.pearson.com/en-gb/subject-catalog/p/pragmatic-programmer-the-your-journey-to-mastery-20th-anniversary-edition/P200000000337/9780135956915",
799
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
800
+ "aqaf_independent_interpretation": true,
801
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
802
+ },
803
+ {
804
+ "id": "B37",
805
+ "type": "book",
806
+ "title": "Your Code as a Crime Scene, 2nd edition",
807
+ "authors_or_owner": "Adam Tornhill",
808
+ "edition_or_date": "Edition described in imported notes; full text not reviewed",
809
+ "url": "https://adamtornhill.com",
810
+ "relevant_for": "Human review guidance; see book_review_knowledge.json",
811
+ "aqaf_independent_interpretation": true,
812
+ "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
813
+ }
814
+ ]