@aqaf/cli 1.1.0 → 1.1.1

package/vendor/aqaf/data/source_registry.json

@@ -298,5 +298,517 @@
     "url": "https://developer.wordpress.org/plugins/",
     "relevant_for": "Plugin structure and hooks",
     "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S16",
+    "type": "official_docs",
+    "title": "TypeScript type assertions",
+    "authors_or_owner": "TypeScript",
+    "edition_or_date": "accessed 2026-11-10",
+    "url": "https://www.typescriptlang.org/docs/handbook/2/everyday-types.html#type-assertions",
+    "relevant_for": "Type assertions are compile-time constructs, not runtime validation.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S17",
+    "type": "official_docs",
+    "title": "Node.js file system API",
+    "authors_or_owner": "Node.js",
+    "edition_or_date": "accessed 2026-11-10",
+    "url": "https://nodejs.org/api/fs.html",
+    "relevant_for": "File write, rename and error behavior; does not establish application crash safety.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S18",
+    "type": "official_docs",
+    "title": "Web Workers messaging and termination",
+    "authors_or_owner": "MDN",
+    "edition_or_date": "accessed 2026-11-10",
+    "url": "https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers_API/Using_web_workers",
+    "relevant_for": "Worker error transport, handlers and lifecycle APIs; not proof of application coverage.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S19",
+    "type": "official_docs",
+    "title": "JavaScript async function behavior",
+    "authors_or_owner": "MDN",
+    "edition_or_date": "accessed 2026-11-10",
+    "url": "https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/async_function",
+    "relevant_for": "Await splits async execution; source order is not proof of a reproduced race.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S20",
+    "type": "official_docs",
+    "title": "OWASP Secrets Management Cheat Sheet",
+    "authors_or_owner": "OWASP",
+    "edition_or_date": "accessed 2026-11-10",
+    "url": "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html",
+    "relevant_for": "Secrets management rationale; encoded values are not validated credentials.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S21",
+    "type": "official_docs",
+    "title": "Gitignore pattern semantics",
+    "authors_or_owner": "Git",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://git-scm.com/docs/gitignore",
+    "relevant_for": "Directory pruning, nested precedence and bounded local exclusions; AQAF does not consult the Git index or global patterns.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S22",
+    "type": "official_docs",
+    "title": "Python abstract syntax trees",
+    "authors_or_owner": "Python",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://docs.python.org/3/library/ast.html",
+    "relevant_for": "Passive syntax structure only; parse success does not prove executable or correct behavior.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S23",
+    "type": "official_docs",
+    "title": "Kotlin coroutine ownership and exception handling",
+    "authors_or_owner": "JetBrains",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://kotlinlang.org/docs/exception-handling.html",
+    "relevant_for": "Structured scopes and cancellation require context; source startup spellings do not establish leaks.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S24",
+    "type": "official_docs",
+    "title": "System.Text.Json deserialization",
+    "authors_or_owner": "Microsoft",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://learn.microsoft.com/en-us/dotnet/standard/serialization/system-text-json/deserialization",
+    "relevant_for": "Deserialization and domain validation are separate review questions; framework binding is unresolved.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S25",
+    "type": "official_docs",
+    "title": "PHP JSON encoding",
+    "authors_or_owner": "PHP",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://www.php.net/manual/en/function.json-encode.php",
+    "relevant_for": "Serialization API evidence; file publication intent is not established by encoding alone.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S26",
+    "type": "official_docs",
+    "title": "Rust filesystem write",
+    "authors_or_owner": "Rust Project",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://doc.rust-lang.org/std/fs/fn.write.html",
+    "relevant_for": "Qualified filesystem write semantics; crash durability and ownership require characterization.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S27",
+    "type": "official_docs",
+    "title": "PowerShell ConvertTo-Json",
+    "authors_or_owner": "Microsoft",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/convertto-json",
+    "relevant_for": "JSON pipeline syntax; publication and cmdlet binding remain unverified.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S28",
+    "type": "official_docs",
+    "title": "SQLite transactions",
+    "authors_or_owner": "SQLite",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://www.sqlite.org/lang_transaction.html",
+    "relevant_for": "Includes implicit transactions: missing explicit BEGIN is not an unsafe-transaction detector.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S29",
+    "type": "official_docs",
+    "title": "TypeScript JSX",
+    "authors_or_owner": "Microsoft",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://www.typescriptlang.org/docs/handbook/jsx.html",
+    "relevant_for": "JSX is distinct grammar. Only bounded static markup masking is supported.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S30",
+    "type": "official_docs",
+    "title": "Python JSON file-like serialization",
+    "authors_or_owner": "Python",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://docs.python.org/3/library/json.html",
+    "relevant_for": "JSON serialization accepts file-like sinks; not every write is persistent application state.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S31",
+    "type": "official_docs",
+    "title": "Python filesystem replace",
+    "authors_or_owner": "Python",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://docs.python.org/3/library/os.html#os.replace",
+    "relevant_for": "Same-path replacement syntax is local control evidence, not a complete durability proof.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S32",
+    "type": "official_docs",
+    "title": "Java NIO filesystem operations",
+    "authors_or_owner": "Oracle",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/nio/file/Files.html",
+    "relevant_for": "Write and move API syntax, subject to filesystem and call binding context.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S33",
+    "type": "official_docs",
+    "title": "Bash shell builtins and trap declarations",
+    "authors_or_owner": "GNU",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://www.gnu.org/software/bash/manual/html_node/Bourne-Shell-Builtins.html",
+    "relevant_for": "Trap syntax is a declaration, not proof that cleanup executes on every exit.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S34",
+    "type": "official_docs",
+    "title": "HTML script element",
+    "authors_or_owner": "MDN",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/script",
+    "relevant_for": "Script elements can contain code or data; external and non-JavaScript content is not followed.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S35",
+    "type": "official_docs",
+    "title": "System.IO File.WriteAllText",
+    "authors_or_owner": "Microsoft",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://learn.microsoft.com/en-us/dotnet/api/system.io.file.writealltext",
+    "relevant_for": "Qualified write syntax does not establish application state durability requirements.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S36",
+    "type": "official_docs",
+    "title": "WordPress nonce verification",
+    "authors_or_owner": "WordPress",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://developer.wordpress.org/reference/functions/wp_verify_nonce/",
+    "relevant_for": "Nonce verification is not authorization or complete domain validation.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S37",
+    "type": "official_docs",
+    "title": "Swift lexical structure",
+    "authors_or_owner": "Swift Project",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://docs.swift.org/swift-book/ReferenceManual/LexicalStructure.html",
+    "relevant_for": "Nested comments and extended/multiline literal syntax. Masking is not compiler/type validation.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S38",
+    "type": "official_docs",
+    "title": "Foundation Process termination handlers",
+    "authors_or_owner": "Apple",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://developer.apple.com/documentation/foundation/process/terminationhandler",
+    "relevant_for": "Visible termination callbacks are local control evidence, not complete lifetime proof.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S39",
+    "type": "official_docs",
+    "title": "Foundation Data write options",
+    "authors_or_owner": "Apple",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://developer.apple.com/documentation/foundation/data/write(to:options:)",
+    "relevant_for": "File write/to options source facts; atomic option syntax is not a full durability proof.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S40",
+    "type": "official_docs",
+    "title": "Swift concurrency and cancellation",
+    "authors_or_owner": "Swift Project",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://docs.swift.org/swift-book/documentation/the-swift-programming-language/concurrency/",
+    "relevant_for": "Task syntax, actor context and cooperative cancellation require independent runtime characterization.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S41",
+    "type": "official_docs",
+    "title": "PowerShell Start-Process Wait and PassThru",
+    "authors_or_owner": "Microsoft",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/start-process",
+    "relevant_for": "Independent process launch, explicit Wait and returned Process handles differ from background jobs.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "S42",
+    "type": "official_docs",
+    "title": "Foundation JSONDecoder",
+    "authors_or_owner": "Apple",
+    "edition_or_date": "accessed 2026-11-11",
+    "url": "https://developer.apple.com/documentation/foundation/jsondecoder",
+    "relevant_for": "Typed JSON decoding is not proof of complete domain validation or a missing domain-validation defect.",
+    "aqaf_independent_interpretation": true
+  },
+  {
+    "id": "B16",
+    "type": "book",
+    "title": "Refactoring, 2nd edition",
+    "authors_or_owner": "Martin Fowler",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://refactoring.com/catalog/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B17",
+    "type": "book",
+    "title": "Writing Secure Code, 2nd edition",
+    "authors_or_owner": "Michael Howard and David LeBlanc",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.informit.com/store/writing-secure-code-9780735617223",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B18",
+    "type": "book",
+    "title": "Threat Modeling: Designing for Security",
+    "authors_or_owner": "Adam Shostack",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://github.com/adamshostack/4QuestionFrame",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B19",
+    "type": "book",
+    "title": "xUnit Test Patterns",
+    "authors_or_owner": "Gerard Meszaros",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.informit.com/store/xunit-test-patterns-refactoring-test-code-9780321504807",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B20",
+    "type": "book",
+    "title": "Growing Object-Oriented Software, Guided by Tests",
+    "authors_or_owner": "Steve Freeman and Nat Pryce",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.pearson.com/en-us/subject-catalog/p/growing-object-oriented-software-guided-by-tests/P200000009298/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B21",
+    "type": "book",
+    "title": "Unit Testing Principles, Practices, and Patterns",
+    "authors_or_owner": "Vladimir Khorikov",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.simonandschuster.ca/books/Unit-Testing-Principles-Practices-and-Patterns/Vladimir-Khorikov/9781617296277",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B22",
+    "type": "book",
+    "title": "Test-Driven Development: By Example",
+    "authors_or_owner": "Kent Beck",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://oreilly.com/library/view/test-driven-development/0321146530",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B23",
+    "type": "book",
+    "title": "Agile Testing",
+    "authors_or_owner": "Lisa Crispin and Janet Gregory",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.informit.com/store/agile-testing-a-practical-guide-for-testers-and-agile-9780321606778",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B24",
+    "type": "book",
+    "title": "Windows Security Internals",
+    "authors_or_owner": "James Forshaw",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://nostarch.com/windows-security-internals",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B25",
+    "type": "book",
+    "title": "Bulletproof TLS and PKI, 2nd edition",
+    "authors_or_owner": "Ivan Ristić",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.feistyduck.com/books/bulletproof-tls-and-pki/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B26",
+    "type": "book",
+    "title": "Serious Cryptography, 2nd edition",
+    "authors_or_owner": "Jean-Philippe Aumasson",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://nostarch.com/seriouscrypto",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B27",
+    "type": "book",
+    "title": "Security Engineering, 3rd edition",
+    "authors_or_owner": "Ross Anderson",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.cl.cam.ac.uk/~rja14/book.html",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B28",
+    "type": "book",
+    "title": "Continuous Delivery",
+    "authors_or_owner": "Jez Humble and David Farley",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.pearson.com/en-us/subject-catalog/p/continuous-delivery-reliable-software-releases-through-build-test-and-deployment-automation/P200000009113/9780321601919",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B29",
+    "type": "book",
+    "title": "Concurrency in C# Cookbook, 2nd edition",
+    "authors_or_owner": "Stephen Cleary",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://stephencleary.com/book/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B30",
+    "type": "book",
+    "title": "Enterprise Integration Patterns",
+    "authors_or_owner": "Gregor Hohpe and Bobby Woolf",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.enterpriseintegrationpatterns.com/toc.html",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B31",
+    "type": "book",
+    "title": "Site Reliability Engineering",
+    "authors_or_owner": "edited by Betsy Beyer, Chris Jones, Jennifer Petoff and Niall Richard Murphy",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://sre.google/books/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B32",
+    "type": "book",
+    "title": "The Design of Everyday Things, revised and expanded",
+    "authors_or_owner": "Don Norman",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://jnd.org/the-design-of-everyday-things-revised-and-expanded/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B33",
+    "type": "book",
+    "title": "Windows Internals, Part 1 and Part 2, 7th edition",
+    "authors_or_owner": "Pavel Yosifovich, Alex Ionescu, Mark Russinovich, David Solomon; part 2 with Andrea Allievi",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://learn.microsoft.com/en-us/sysinternals/resources/windows-internals",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B34",
+    "type": "book",
+    "title": "C# in Depth, 4th edition",
+    "authors_or_owner": "Jon Skeet",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://csharpindepth.com/contents",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B35",
+    "type": "book",
+    "title": "Code Complete, 2nd edition",
+    "authors_or_owner": "Steve McConnell",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://blogs.msdn.microsoft.com/microsoft_press/2011/09/12/best-practices-code-complete-second-edition/",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B36",
+    "type": "book",
+    "title": "The Pragmatic Programmer, 20th anniversary edition",
+    "authors_or_owner": "David Thomas and Andrew Hunt",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://www.pearson.com/en-gb/subject-catalog/p/pragmatic-programmer-the-your-journey-to-mastery-20th-anniversary-edition/P200000000337/9780135956915",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
+  },
+  {
+    "id": "B37",
+    "type": "book",
+    "title": "Your Code as a Crime Scene, 2nd edition",
+    "authors_or_owner": "Adam Tornhill",
+    "edition_or_date": "Edition described in imported notes; full text not reviewed",
+    "url": "https://adamtornhill.com",
+    "relevant_for": "Human review guidance; see book_review_knowledge.json",
+    "aqaf_independent_interpretation": true,
+    "verification_basis": "User-provided secondary notes; linked primary page not a full-text review"
   }
-]
+]