@enwithai/product-check 0.1.0 → 0.3.0

package/schemas/fix-packet.schema.json

@@ -0,0 +1,272 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/enwithai/product-check/schemas/fix-packet.schema.json",
+  "title": "Product Check fix packet",
+  "description": "Agent-ready proposal for one verified finding: surfaces, evidence, root cause, change, tests (commands only when declared, never invented), negative cases, acceptance, owner, scope guard and rollback.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "kind",
+    "methodology_version",
+    "fix_id",
+    "finding_ids",
+    "source_finding_ids",
+    "title",
+    "status",
+    "risk_class",
+    "severity",
+    "affected_surfaces",
+    "user_impact",
+    "evidence_refs",
+    "root_cause",
+    "constraints",
+    "proposed_change",
+    "tests_required",
+    "negative_cases",
+    "dependencies",
+    "acceptance_conditions",
+    "owner",
+    "rollback_plan",
+    "scope_guard",
+    "traceability",
+    "implementation",
+    "generated_from"
+  ],
+  "properties": {
+    "schema_version": {
+      "$ref": "assurance-common.schema.json#/$defs/schema_version"
+    },
+    "kind": {
+      "const": "fix-packet"
+    },
+    "methodology_version": {
+      "$ref": "assurance-common.schema.json#/$defs/methodology_version"
+    },
+    "fix_id": {
+      "type": "string",
+      "pattern": "^FP-F-\\d{3,}$"
+    },
+    "finding_ids": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "minItems": 1
+    },
+    "source_finding_ids": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "title": {
+      "type": "string"
+    },
+    "status": {
+      "$ref": "assurance-common.schema.json#/$defs/fix_status"
+    },
+    "risk_class": {
+      "$ref": "assurance-common.schema.json#/$defs/risk_level"
+    },
+    "severity": {
+      "$ref": "common.schema.json#/$defs/severity"
+    },
+    "affected_surfaces": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "line", "runtime"],
+        "properties": {
+          "path": {
+            "type": ["string", "null"]
+          },
+          "line": {
+            "type": ["integer", "null"]
+          },
+          "runtime": {
+            "type": ["string", "null"]
+          }
+        }
+      },
+      "minItems": 1
+    },
+    "user_impact": {
+      "type": "string"
+    },
+    "evidence_refs": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "root_cause": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["hypothesis", "certainty", "confidence"],
+      "properties": {
+        "hypothesis": {
+          "type": "string"
+        },
+        "certainty": {
+          "$ref": "common.schema.json#/$defs/epistemic"
+        },
+        "confidence": {
+          "$ref": "common.schema.json#/$defs/confidence"
+        }
+      }
+    },
+    "constraints": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "proposed_change": {
+      "type": "string"
+    },
+    "tests_required": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "kind", "description", "argv"],
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "kind": {
+            "enum": ["reproduction", "regression", "negative"]
+          },
+          "description": {
+            "type": "string"
+          },
+          "argv": {
+            "oneOf": [
+              {
+                "type": "null"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "minItems": 1
+              }
+            ]
+          }
+        }
+      },
+      "minItems": 1
+    },
+    "negative_cases": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "dependencies": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "acceptance_conditions": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "minItems": 1
+    },
+    "owner": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "accountable_human_required"],
+      "properties": {
+        "id": {
+          "type": ["string", "null"]
+        },
+        "accountable_human_required": {
+          "const": true
+        }
+      }
+    },
+    "rollback_plan": {
+      "type": "string",
+      "minLength": 1
+    },
+    "scope_guard": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["allowed_paths", "note"],
+      "properties": {
+        "allowed_paths": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "note": {
+          "type": "string"
+        }
+      }
+    },
+    "traceability": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["control_or_rule", "spec_requirement_ids", "locations"],
+      "properties": {
+        "control_or_rule": {
+          "type": "string"
+        },
+        "spec_requirement_ids": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "locations": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "implementation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["change_sha", "implemented_by"],
+      "properties": {
+        "change_sha": {
+          "type": ["string", "null"],
+          "pattern": "^[0-9a-f]{40}([0-9a-f]{24})?$"
+        },
+        "implemented_by": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "$ref": "assurance-common.schema.json#/$defs/actor"
+            }
+          ]
+        }
+      }
+    },
+    "generated_from": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["results_run_id", "review_id"],
+      "properties": {
+        "results_run_id": {
+          "type": ["string", "null"]
+        },
+        "review_id": {
+          "type": ["string", "null"]
+        }
+      }
+    }
+  }
+}

package/schemas/release-gate.schema.json

@@ -0,0 +1,308 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/enwithai/product-check/schemas/release-gate.schema.json",
+  "title": "Product Check release gate",
+  "description": "Explicit GO / CONDITIONAL_GO / NO_GO / UNKNOWN decision with release conditions, open blockers, accepted-risk expiry, approvals for the head commit, executed checks, disclosed coverage gaps and VC-P0…P7 phase progress.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "kind",
+    "methodology_version",
+    "gate_id",
+    "evaluated_at",
+    "target",
+    "head_sha",
+    "decision",
+    "product_verdict",
+    "change_gate",
+    "conditions",
+    "blocking_reasons",
+    "open",
+    "open_blocking_ids",
+    "accepted_risks",
+    "approvals",
+    "executed_checks",
+    "coverage",
+    "rollback",
+    "phases",
+    "inputs"
+  ],
+  "properties": {
+    "schema_version": {
+      "$ref": "assurance-common.schema.json#/$defs/schema_version"
+    },
+    "kind": {
+      "const": "release-gate"
+    },
+    "methodology_version": {
+      "$ref": "assurance-common.schema.json#/$defs/methodology_version"
+    },
+    "gate_id": {
+      "type": "string",
+      "pattern": "^RG-[0-9A-F]{10}$"
+    },
+    "evaluated_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "repository"],
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "repository": {
+          "type": ["string", "null"]
+        }
+      }
+    },
+    "head_sha": {
+      "type": ["string", "null"],
+      "pattern": "^[0-9a-f]{40}([0-9a-f]{24})?$"
+    },
+    "decision": {
+      "$ref": "assurance-common.schema.json#/$defs/release_decision"
+    },
+    "product_verdict": {
+      "$ref": "common.schema.json#/$defs/verdict"
+    },
+    "change_gate": {
+      "oneOf": [
+        {
+          "type": "null"
+        },
+        {
+          "$ref": "assurance-common.schema.json#/$defs/gate_status"
+        }
+      ]
+    },
+    "conditions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "title", "status", "detail", "refs"],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^RC-\\d+$"
+          },
+          "title": {
+            "type": "string"
+          },
+          "status": {
+            "enum": ["PASS", "FAIL", "NOT_EVALUATED"]
+          },
+          "detail": {
+            "type": "string"
+          },
+          "refs": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
+      "minItems": 1
+    },
+    "blocking_reasons": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "minItems": 1
+    },
+    "open": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["P0", "P1", "P2", "P3"],
+      "properties": {
+        "P0": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "P1": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "P2": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "P3": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "open_blocking_ids": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "accepted_risks": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["acceptance_id", "finding_id", "expires", "status"],
+        "properties": {
+          "acceptance_id": {
+            "type": "string"
+          },
+          "finding_id": {
+            "type": "string"
+          },
+          "expires": {
+            "type": "string",
+            "format": "date"
+          },
+          "status": {
+            "enum": ["ACTIVE", "REVIEW_DUE", "EXPIRED"]
+          }
+        }
+      }
+    },
+    "approvals": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["required", "valid", "stale"],
+      "properties": {
+        "required": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "valid": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "stale": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "executed_checks": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["count", "passed", "failed", "not_run"],
+      "properties": {
+        "count": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "passed": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "failed": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "not_run": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "coverage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["customer", "technology", "trust", "overall", "gaps"],
+      "properties": {
+        "customer": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1
+        },
+        "technology": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1
+        },
+        "trust": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1
+        },
+        "overall": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1
+        },
+        "gaps": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "rollback": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["declared", "ref"],
+      "properties": {
+        "declared": {
+          "type": "boolean"
+        },
+        "ref": {
+          "type": ["string", "null"]
+        }
+      }
+    },
+    "phases": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["phase", "name", "status", "evidence"],
+        "properties": {
+          "phase": {
+            "$ref": "assurance-common.schema.json#/$defs/phase"
+          },
+          "name": {
+            "type": "string"
+          },
+          "status": {
+            "enum": ["COMPLETED", "PARTIAL", "NOT_STARTED", "NOT_SUPPORTED"]
+          },
+          "evidence": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
+      "minItems": 8,
+      "maxItems": 8
+    },
+    "inputs": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["results_sha256", "register_digest", "review_id", "proof_run_id"],
+      "properties": {
+        "results_sha256": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "register_digest": {
+          "type": ["string", "null"],
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "review_id": {
+          "type": ["string", "null"]
+        },
+        "proof_run_id": {
+          "type": ["string", "null"]
+        }
+      }
+    }
+  }
+}

package/schemas/reviewer-findings.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/enwithai/product-check/schemas/reviewer-findings.schema.json",
+  "title": "External reviewer findings (input)",
+  "description": "Claims from an external reviewer (for example an AI code reviewer). They are proposals: Product Check verifies each against the code and never treats one as a human approval or a proven defect.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["kind", "reviewer", "type", "findings"],
+  "properties": {
+    "kind": {
+      "const": "reviewer-findings"
+    },
+    "reviewer": {
+      "type": "string",
+      "minLength": 1
+    },
+    "type": {
+      "enum": ["ai", "human", "imported"]
+    },
+    "findings": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "line", "title", "severity", "body"],
+        "properties": {
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "line": {
+            "type": ["integer", "null"],
+            "minimum": 1
+          },
+          "title": {
+            "type": "string",
+            "minLength": 1
+          },
+          "severity": {
+            "$ref": "common.schema.json#/$defs/severity"
+          },
+          "body": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/scan-contract.schema.json

@@ -282,6 +282,26 @@
         },
         "outcome_check": {
           "type": ["string", "null"]
+        },
+        "architecture_check": {
+          "type": ["string", "null"],
+          "description": "Architecture Check report (schema 1.0 or 1.1). Optional, so contracts from 0.1.0 stay valid."
+        },
+        "openslo": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 },
+          "maxItems": 50,
+          "description": "OpenSLO v1 files. Optional, so contracts from 0.1.0 stay valid."
+        },
+        "alert_rules": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 },
+          "maxItems": 50,
+          "description": "Prometheus/Mimir rule files, PrometheusRule resources or /api/v1/rules exports. Optional."
+        },
+        "service_graph": {
+          "type": ["string", "null"],
+          "description": "Jaeger /api/dependencies or service-graph metrics query result. Optional."
         }
       }
     },

package/schemas/scorecard.schema.json

@@ -26,7 +26,7 @@
       "const": "scorecard"
     },
     "rubric_version": {
-      "const": "pc-rubric-0.1"
+      "enum": ["pc-rubric-0.1", "pc-rubric-0.2"]
     },
     "pillars": {
       "type": "object",